Win32/Nugel.E has blocked me from internet... can't download. How to remove?

View previous topic View next topic Go down

Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Wed Mar 03, 2010 4:29 am

OK... so this really stinks. Not only have I been infected with this nasty malware, along with Banker-something-or-other, but the darn thing (or maybe something else) keeps redirecting me every time I try to browse to a website to download the malware removal apps. It even opens my browser and sends me off to viagra ads and such. I'm currently on my hubby's computer... which at this point, isn't infected.

I read on one site that Spyware Doctor would be a good starting point, so attempted to download it to my hubby's computer, copy it to a thumb drive and transfer it to my desktop. It appears on my desktop, and I attempted an installation, but after doing that, it doesn't seem to run. Perhaps I don't know enough to save it properly when I'm attempting to download to the thumb drive.

Any suggestions? I'm pretty clueless, but willing to be educated.

Thanks for any help you can offer.
-Terry

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by Dr Jay on Wed Mar 03, 2010 5:35 am

Hello. We need to do some diagnostics to get started.

1. Please download [You must be registered and logged in to see this link.] and Save it to your desktop
  • Double click it to start the tool.
  • Click Scan.
  • Eventually, a Notepad file containing the report will open, also found at C:\Rooter.txt. Post that log in your next reply.

2. Download [You must be registered and logged in to see this link.] to your desktop
  • A window will pop up, Press 2 and then Enter. A scan will start, let it run uninterrupted. It should only take a few minutes.
  • A log will appear when it is finished, it will also be saved in the same location as LockSearch, which should be on your desktop. Post the contents of the log in your reply

3. Please download CKScanner by askey127 from [You must be registered and logged in to see this link.]
Save it to your desktop.
  • Doubleclick CKScanner.exe and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify that the file is saved.
  • Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

4. Please download [You must be registered and logged in to see this link.], and save to your Desktop.
  • Double-click on Cheetah-Anti-Rogue.zip, and extract the file to your Desktop.
  • Double-click on Cheetah-Anti-Rogue.cmd to start.
  • It will finish quickly and launch a log.
  • Post the contents of it in your next reply.

5. I request the following logs to be posted in your next reply, please:
-Rooter
-LockSearch
-CKScanner
-Cheetah

Thanks. Smile


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 13717
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Protection Protection : Bitdefender Total Security
Points Points : 302127
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 3:40 am

OK.. as I can't navigate my browser with all the malware issues, I downloaded Rooter to a thumb drive on my hubby's laptop and then dragged the file to my infected desktop. Have tried to run it, but it starts and then disappears. Seems to be stopped at about the same time I start getting all the false security alerts.... 40 or so at a time. Any suggestions?

Will Rooter run if I'm in Safe Mode? Will the malware issues be less prevalent in Safe Mode? Am I likely to be able to do this if I can't run the anti-malware apps?

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by Dr Jay on Thu Mar 04, 2010 6:12 am

Please download ComboFix from [You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

Rename ComboFix.exe to commy.exe before you save it to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found [You must be registered and logged in to see this link.]
  • Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.bat" /stepdel
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console


Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


  • Click on Yes, to continue scanning for malware.
  • When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 13717
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Protection Protection : Bitdefender Total Security
Points Points : 302127
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 2:33 pm

OK.. since my last post, I've been operating in Safe Mode, and have now gathered 3/4 logs you requested in your first reply to me. Will these still be useful if run in Safe Mode? Can I continue operating in Safe Mode to run/install ComboFix?

Outside of SafeMode, it is nearly impossible to navigate my system. The constant processing of security alerts seems to block all my attempts to run any programs successfully.

While I await a reply, I'll go ahead and pull the fourth scan log and try to get you the info. Just wondering if any of it's useful coming through SafeMode and if I'll be able to run ComboFix while in Safe Mode. Thanks so much for your help.... and patience.

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 3:08 pm

The Cheetah .zip file keeps downloading as an "empty" file that can't be unzipped.... at least I can't unzip it. So that log is not included here. But here's what Rooter and CKfiles report. (The LockSearch scan is so big that it's maxing out what I'm allowed to put here. I'll try to break it up and send it in pieces. It is an enormously long list of info.)

ROOTER:

Rooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully ...
.
Windows XP . (5.1.2600) Service Pack 3
[32_bits] - x86 Family 15 Model 2 Stepping 7, GenuineIntel
.
[wscsvc] STOPPED (state:1) : Security Center -> Disabled !
[SharedAccess] STOPPED (state:1) : Windows Firewall -> Disabled !
.
Internet Explorer 8.0.6001.18702
.
A:\ [Removable]
C:\ [Fixed-NTFS] .. ( Total:74 Go - Free:38 Go )
D:\ [Removable]
E:\ [CD_Rom]
F:\ [CD_Rom]
I:\ [Removable]
.
Scan : 22:45.50
Path : C:\Documents and Settings\Terry's email\Desktop\Rooter.exe
User : Terry's email ( Administrator -> YES )
.
----------------------\\ Processes
.
Locked [System Process] (0)
______ System (4)
______ \SystemRoot\System32\smss.exe (164)
______ \??\C:\WINDOWS\system32\csrss.exe (228)
______ \??\C:\WINDOWS\system32\winlogon.exe (252)
______ C:\WINDOWS\system32\services.exe (312)
______ C:\WINDOWS\system32\lsass.exe (324)
______ C:\WINDOWS\system32\svchost.exe (476)
______ C:\WINDOWS\system32\svchost.exe (540)
______ C:\Program Files\Windows Defender\MsMpEng.exe (588)
______ C:\WINDOWS\system32\svchost.exe (656)
______ C:\WINDOWS\Explorer.EXE (924)
______ C:\WINDOWS\system32\wbem\wmiprvse.exe (1004)
______ C:\Documents and Settings\Terry's email\Desktop\Rooter.exe (1332)
.
----------------------\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 --[ MBR ]-- (Start_Offset:41126400 | Length:79949721600)
.
----------------------\\ Scheduled Tasks
.
C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
C:\WINDOWS\Tasks\desktop.ini
C:\WINDOWS\Tasks\Google Software Updater.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\MP Scheduled Scan.job
C:\WINDOWS\Tasks\Norton Security Scan for Terry's email.job
C:\WINDOWS\Tasks\SA.DAT
.
----------------------\\ Registry
.
.
----------------------\\ Files & Folders
.
----------------------\\ Scan completed at 22:48.10
.
C:\Rooter$\Rooter_2.txt - (03/03/2010 | 22:48.10)


CKFILES:

CKScanner - Additional Security Risks - These are not necessarily bad
c:\documents and settings\ben's\my documents\other\matanui\matanui\sfx_lavacrackle1.swf
c:\documents and settings\ben's\my documents\other\matanui\matanui\sfx_lavacrackle2.swf
c:\documents and settings\ben's\my documents\other\matanui\matanui\sfx_lavacrackle3.swf
c:\documents and settings\ben's\my documents\other\matanui\matanui\sfx_lavacrackle4.swf
c:\documents and settings\ben's\my documents\other\matanui\matanui\sound_lavacrackles.swf
c:\documents and settings\ben's\my documents\other\matanui\matanui\sound_lavacrackles2.swf
scanner sequence 3.BD.11
----- EOF -----


LOCKSEARCH:

LockSearch by jpshortstuff (05.11.09.1)
Log created at 22:59 on 03/03/2010 (Terry's email)
Scanning C:\


C:\pagefile.sys
-------------------------


C:\cab199423321446c9d633b\legitcheckcontrol.dll
-------------------------
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\legitcheckcontrol.dll [593F9787C3161CC77FA9B4BEBE823582 : 555824 bytes]
C:\WINDOWS\system32\LegitCheckControl.dll [CC26451A90025F6C55F64146C333DEA5 : 1482112 bytes]


C:\cab199423321446c9d633b\spmsg.dll
-------------------------
C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB885250\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB887742\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB888113\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll [015D670AD6A9D9ABA135057E7013FE28 : 7168 bytes]
C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB896422\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB899589\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB901190\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll [785604E88914546EB79C9AD6C6528143 : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB905915\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB911567\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB912812\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB912919\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB913446\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB916281\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB917159\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB918899\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB920214\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB921398\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB921883\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB922582\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB922616\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB922760\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB922819\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB923561\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB923694\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB923980\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB924191\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB924270\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB924496\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB925454\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB925486\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB925902\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB926255\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB926436\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB927779\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB927802\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB928255\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB928843\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB929123\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB929338\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB929969\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB930178\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB931261\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB931768-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB931784\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB931836\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB932823-v3\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB933360\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB933566-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB935839\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB935840\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB936021\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB936357\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB937143-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB937894\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB938127-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB938464\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB938828\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB938829\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB939653-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB942615-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB944533-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB946648\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB947864-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB950759-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951066\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB951978\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB952004\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB952287\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB953838-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB953839\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB954211\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB954459\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB954600\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB955069\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB955759\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB955839\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956390-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB956391\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956572\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956744\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956802\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956803\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956841\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB956844\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB957095\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB957097\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB958215-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB958644\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB958687\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB958690\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB959426\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB960225\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB960714-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB960715\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB960803\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB960859\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB961260-IE7\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\$hf_mig$\KB961371\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB961373\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB961501\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB963027-IE7\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB967715\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB968389\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB968537\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB969059\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB969897-IE7\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB969898\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB969947\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB970238\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB970430\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971468\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971486\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971557\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971633\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971657\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971737\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB971961-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB972260-IE7\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB972260-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB972270\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB972636-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973346\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973354\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973507\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973525\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973687\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973815\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973869\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973874-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB973904\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB974112\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB974318\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB974392\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB974455-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB974571\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB975025\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB975467\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB975560\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB975713\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB976325-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB976662-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB976749-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB977165-v2\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB977914\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB978037\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB978207-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB978251\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB978262\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\$hf_mig$\KB978706\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]


more to follow on next reply...

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 3:22 pm

CONTINUATION OF LOCKSEARCH SCAN RESULTS:


C:\WINDOWS\ie8updates\KB972260-IE8\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\035cdeeef9eaa07de20138b420444b17\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\SoftwareDistribution\Download\1e737459aaabc35cf71b0434922b4d59\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\248802b74506342031e926839639c729\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\spmsg.dll [37044DA1F53A8A6E5C54FCA4C974511A : 14048 bytes]
C:\WINDOWS\SoftwareDistribution\Download\3724a78548e17e8215a17353ec597ae3\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\3aaae38d3fc3ac97f34ad4b0d335b406\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\638d2a273cb5d34a9f7e327666b9e38c\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\6a410a1bd174bc123056d235ac4829af\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\spmsg.dll [98C312F7C1D57CA6D1BCB2318CBD8369 : 8632 bytes]
C:\WINDOWS\SoftwareDistribution\Download\7dc77bad5469553a68ef5efe55070b06\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\ab0676fe50d78a2ee35a6cca883a9b02\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\c0c52c03306062533f7dcb087bfcfa6b\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\ca9dce055d1f0f23d2b57daec177104f\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\SoftwareDistribution\Download\e740a72458caa5dc68334c7afa82ebf3\spmsg.dll [96C9A439DCDA7643DCB20D88F6DB66F3 : 17272 bytes]
C:\WINDOWS\system32\spmsg.dll [87BBF015ADDE24DBAFF1FE5A114EDB9C : 16928 bytes]


C:\cab199423321446c9d633b\spuninst.exe
-------------------------
C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB885250\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB887742\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB888113\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB896422\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB899589\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB901190\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$hf_mig$\KB905915\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB911567\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB912812\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB912919\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB913446\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB916281\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB917159\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB918899\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB920214\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB921398\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB921883\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB922582\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB922616\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB922760\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB922819\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB923561\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB923694\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB923980\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB924191\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB924270\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB924496\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB925454\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB925486\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB925902\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB926255\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB926436\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB927779\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB927802\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB927891\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB928255\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB928843\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB929123\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB929338\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB929969\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB930178\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB930916\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB931261\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB931768-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB931784\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB931836\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB932823-v3\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB933360\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB933566-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB935839\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB935840\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB936021\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB936357\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB937143-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB937894\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB938127-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB938464\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB938828\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB938829\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB939653-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB941644\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB942615-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB944533-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB946648\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB947864-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB950759-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951066\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB951978\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB952004\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB952287\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB953838-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB953839\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB954211\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB954459\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB954600\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB955069\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB955759\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB955839\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956390-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB956391\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956572\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956744\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956802\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956803\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956841\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB956844\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB957095\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB957097\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB958215-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB958644\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB958687\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB958690\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB959426\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB960225\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB960714-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB960715\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB960803\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB960859\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB961260-IE7\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$hf_mig$\KB961371\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB961373\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB961501\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB963027-IE7\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB967715\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB968389\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB968537\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB969059\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB969897-IE7\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB969898\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB969947\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB970238\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB970430\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971468\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971486\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971557\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971633\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971657\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971737\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB971961-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB972260-IE7\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB972260-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB972270\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB972636-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973346\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973354\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973507\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973525\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973687\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973815\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973869\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973874-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB973904\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB974112\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB974318\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB974392\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB974455-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB974571\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB975025\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB975467\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB975560\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB975713\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB976325-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB976662-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB976749-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB977165-v2\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB977914\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB978037\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB978207-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB978251\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB978262\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$hf_mig$\KB978706\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 3:24 pm

AND YET MORE SEARCHLOCK SCAN RESULTS:

C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925454_0$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB938464_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB946648_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950974_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951066_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951748_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952287_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952954_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954211_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954600_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955069_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956802_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956803_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956841_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957095_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957097_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958644_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958687_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB977165-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe [A9882FE31BA3BBB3557BBB2FF429A46E : 221488 bytes]
C:\WINDOWS\$NtUninstallWdf01001$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe [A9882FE31BA3BBB3557BBB2FF429A46E : 221488 bytes]


MORE TO FOLLOW.....

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 3:26 pm

LAST FROM LOCKSEARCH SCAN RESULTS... I think:

C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie8\spuninst\spuninst.exe [AD8EF61AF3B6654899BEA533AC7F6D9E : 231456 bytes]
C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB972260-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB973874-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\035cdeeef9eaa07de20138b420444b17\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\SoftwareDistribution\Download\1e737459aaabc35cf71b0434922b4d59\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\248802b74506342031e926839639c729\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\SoftwareDistribution\Download\3724a78548e17e8215a17353ec597ae3\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\3aaae38d3fc3ac97f34ad4b0d335b406\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\638d2a273cb5d34a9f7e327666b9e38c\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\6a410a1bd174bc123056d235ac4829af\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\spuninst.exe [C4DE9AD064D61434026D7723B550190D : 207800 bytes]
C:\WINDOWS\SoftwareDistribution\Download\7dc77bad5469553a68ef5efe55070b06\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\ab0676fe50d78a2ee35a6cca883a9b02\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\c0c52c03306062533f7dcb087bfcfa6b\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\ca9dce055d1f0f23d2b57daec177104f\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\e740a72458caa5dc68334c7afa82ebf3\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]


C:\cab199423321446c9d633b\wgalogon.dll
-------------------------
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\wgalogon.dll [CCF5CBA19A08B147679C240E56084E7B : 144688 bytes]
C:\WINDOWS\system32\WgaLogon.dll [02CF580510234E519736559A7F19EA20 : 239496 bytes]
C:\WINDOWS\system32\dllcache\wgaLogon.dll [02CF580510234E519736559A7F19EA20 : 239496 bytes]


C:\cab199423321446c9d633b\wgatray.exe
-------------------------
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\wgatray.exe [D8E0DE520F3823FF8B1819B4302AF288 : 186672 bytes]
C:\WINDOWS\system32\WgaTray.exe [B1296D52B0D2096EC4759EEEB806D759 : 934792 bytes]
C:\WINDOWS\system32\dllcache\WgaTray.exe [B1296D52B0D2096EC4759EEEB806D759 : 934792 bytes]

-=E.O.F=-
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe [93B4D52EA19AF742995E10718CB8C4CC : 169984 bytes]
C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe [944DA33BB28BE33FACD815D4592E8911 : 209632 bytes]
C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925454_0$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB938464_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB946648_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB950974_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951066_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951748_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952287_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB952954_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954211_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB954600_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955069_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956802_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956803_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956841_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957095_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB957097_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958644_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958687_0$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB977165-v2$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe [A9882FE31BA3BBB3557BBB2FF429A46E : 221488 bytes]
C:\WINDOWS\$NtUninstallWdf01001$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe [A9882FE31BA3BBB3557BBB2FF429A46E : 221488 bytes]
C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\ie8\spuninst\spuninst.exe [AD8EF61AF3B6654899BEA533AC7F6D9E : 231456 bytes]
C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB972260-IE8\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB973874-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\035cdeeef9eaa07de20138b420444b17\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\SoftwareDistribution\Download\1e737459aaabc35cf71b0434922b4d59\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\248802b74506342031e926839639c729\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\spuninst.exe [B5FF6305E3B6FDFC91057D2FAC100E4C : 213216 bytes]
C:\WINDOWS\SoftwareDistribution\Download\3724a78548e17e8215a17353ec597ae3\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\3aaae38d3fc3ac97f34ad4b0d335b406\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\638d2a273cb5d34a9f7e327666b9e38c\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\6a410a1bd174bc123056d235ac4829af\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\spuninst.exe [C4DE9AD064D61434026D7723B550190D : 207800 bytes]
C:\WINDOWS\SoftwareDistribution\Download\7dc77bad5469553a68ef5efe55070b06\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\ab0676fe50d78a2ee35a6cca883a9b02\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\c0c52c03306062533f7dcb087bfcfa6b\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\ca9dce055d1f0f23d2b57daec177104f\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]
C:\WINDOWS\SoftwareDistribution\Download\e740a72458caa5dc68334c7afa82ebf3\spuninst.exe [78141AD888BA82E3ABC854D229A59F07 : 231288 bytes]


C:\cab199423321446c9d633b\wgalogon.dll
-------------------------
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\wgalogon.dll [CCF5CBA19A08B147679C240E56084E7B : 144688 bytes]
C:\WINDOWS\system32\WgaLogon.dll [02CF580510234E519736559A7F19EA20 : 239496 bytes]
C:\WINDOWS\system32\dllcache\wgaLogon.dll [02CF580510234E519736559A7F19EA20 : 239496 bytes]


C:\cab199423321446c9d633b\wgatray.exe
-------------------------
C:\WINDOWS\SoftwareDistribution\Download\6c4788c9549d437e76e1773a7639582a\wgatray.exe [D8E0DE520F3823FF8B1819B4302AF288 : 186672 bytes]
C:\WINDOWS\system32\WgaTray.exe [B1296D52B0D2096EC4759EEEB806D759 : 934792 bytes]
C:\WINDOWS\system32\dllcache\WgaTray.exe [B1296D52B0D2096EC4759EEEB806D759 : 934792 bytes]

-=E.O.F=-

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 3:30 pm

An update:

I've not been able to download the Cheetah program linked in your last post, so have not added any of that to my infected computer.

Also, I am not able to "disable" my anti-virus software. It disables for a few seconds and then restarts itself. Assume that's part of the effect of the infection. Aargh!

Please advise as to how to continue now that you've seen the diagnostic logs... or at least 3/4 requested.

-Grateful, but nervous Terry

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by Beware_of_Dawg on Thu Mar 04, 2010 3:33 pm

Moderated Message: Hello, your comment has been removed. Please do not post in another member's topic. If you need help, please read [You must be registered and logged in to see this link.] over and [You must be registered and logged in to see this link.] to open a new topic. ~DragonMaster Jay

Beware_of_Dawg
Novice
Novice

Posts Posts : 7
Joined Joined : 2010-03-04
OS OS : XP
Points Points : 24783
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 4:01 pm

Another update...

Got ComboFix downloaded successfully from the second link provided. Tried to run it (in SafeMode, because now Windows dumps me when not in SafeMode), but don't have the Microsoft Windows Recovery Console. It's running on the infected computer, but won't do all it can if I can manage to get the Recovery Console installed somehow. Not sure if I can do it via thumbdrive, but will sure give it a try.

I'll just keep plugging away at this until the system crashes beyond my ability to install/run anything further, or I find success.

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 4:41 pm

More news... (Have you given up on me?)

ComboFix did what it could without Windows Recovery Console.... Here's the log:

ComboFix 10-03-03.09 - Terry's email 03/04/2010 10:58:14.1.1 - x86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.802 [GMT -5:00]
Running from: c:\documents and settings\Terry's email\Desktop\Commy.exe.exe
AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Terry's email\Local Settings\Application Data\vdukqa
c:\documents and settings\Terry's email\Local Settings\Application Data\vdukqa\qejasftav.exe
C:\LOG15.tmp
C:\LOG1CB.tmp
C:\LOG2B.tmp
C:\LOG3B.tmp
C:\LOG3E.tmp
C:\LOG3F2E.tmp
C:\LOG4B64.tmp
C:\LOG96.tmp
C:\LOGA0.tmp
C:\LOGDB4.tmp
C:\LOGDEF.tmp
C:\LOGEE.tmp
C:\LOGF2.tmp
c:\program files\FunWebProducts
c:\program files\FunWebProducts\Shared\1104BBAB.dat
c:\program files\FunWebProducts\Shared\17CF0DCD.dat
c:\program files\FunWebProducts\Shared\17D638A3.dat
c:\windows\Downloaded Program Files\f3initialsetup1.0.1.0.inf
c:\windows\Downloaded Program Files\poPCaploader.dll
c:\windows\Downloaded Program Files\popcaploader.inf
c:\windows\EventSystem.log

.
((((((((((((((((((((((((( Files Created from 2010-02-04 to 2010-03-04 )))))))))))))))))))))))))))))))
.

2010-03-04 03:35 . 2010-03-04 03:48 -------- d-----w- C:\Rooter$
2010-03-03 03:47 . 2010-02-05 14:17 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-03-03 03:47 . 2009-10-06 21:31 87784 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-03-03 03:47 . 2009-09-23 21:10 207280 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-03-03 03:45 . 2010-02-05 14:25 70408 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-03-03 03:44 . 2010-03-03 03:44 -------- d-----w- c:\program files\Common Files\PC Tools
2010-03-03 03:44 . 2010-03-03 03:47 -------- d-----w- c:\program files\Spyware Doctor
2010-03-03 03:44 . 2010-03-03 03:44 -------- d-----w- c:\documents and settings\Terry's email\Application Data\PC Tools
2010-03-03 03:44 . 2010-03-03 03:44 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2010-02-24 23:24 . 2010-02-24 23:24 -------- d-----w- c:\windows\system32\wbem\Repository
2010-02-15 06:58 . 2010-02-15 06:58 -------- d-----w- c:\documents and settings\Terry's email\Local Settings\Application Data\PCHealth

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-04 14:46 . 2006-02-27 16:12 -------- d-----w- c:\program files\Symantec AntiVirus
2010-03-04 03:28 . 2008-03-26 01:14 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2010-03-03 04:05 . 2008-09-11 11:51 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-02-28 23:00 . 2007-12-12 12:20 -------- d-----w- c:\program files\Norton Security Scan
2010-02-28 12:13 . 2009-09-03 18:16 69 ----a-w- c:\documents and settings\Terry's email\jagex_runescape_preferences2.dat
2010-02-28 12:13 . 2008-07-05 10:47 41 ----a-w- c:\documents and settings\Terry's email\jagex_runescape_preferences.dat
2010-02-24 14:16 . 2009-10-03 02:24 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-22 12:05 . 2009-11-11 12:19 79488 ----a-w- c:\documents and settings\Terry's email\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-02-05 06:08 . 2008-04-03 23:33 -------- d-----w- c:\documents and settings\Terry's email\Application Data\U3
2010-02-04 04:34 . 2007-09-18 21:08 -------- d-----w- c:\program files\Google
2010-01-12 01:41 . 2010-01-12 01:41 -------- d-----w- c:\program files\Lame for Audacity
2010-01-12 01:08 . 2010-01-12 01:08 -------- d-----w- c:\program files\Audacity
2009-12-31 16:50 . 2002-08-29 12:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:14 . 2002-08-29 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-16 18:43 . 2006-02-27 12:49 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2002-08-29 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-08 19:27 . 2002-08-29 12:00 2189184 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-08 18:43 . 2002-08-29 01:04 2066048 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-04 18:22 . 2002-08-29 12:00 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-10-19 126976]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2005-04-08 48752]
"vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2005-04-17 85184]
"hcsystray"="c:\program files\Kuma Games\hcsystray\hc_tray.exe" [2007-04-26 31944]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-04 866584]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-11 342312]
"nmapp"="c:\program files\Pure Networks\Network Magic\nmapp.exe" [2008-12-14 467240]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-26 734264]
"nmctxth"="c:\program files\Common Files\Pure Networks Shared\Platform\nmctxth.exe" [2009-07-07 647216]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264]

c:\documents and settings\Ben's\Start Menu\Programs\Startup\
hc_tray.lnk - c:\program files\Kuma Games\hcsystray\hc_tray.exe [2007-4-26 31944]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [2003-5-15 217193]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-4 258048]
NETGEAR WG111T Smart Wizard.lnk - c:\program files\NETGEAR\WG111T Configuration Utility\wlan111t.exe [2007-9-14 483412]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\patriots.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Global Star Software\\Jetfighter V\\Game.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\thrones.exe"=
"c:\\Program Files\\GameSpy Arcade\\Aphex.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"67:UDP"= 67:UDP:DHCP Discovery Service

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [3/2/2010 10:47 PM 207280]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 7:19 PM 13592]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/22/2009 11:23 PM 135664]
S3 ATHFMWDL;NETGEAR WG111T bootloader driver;c:\windows\system32\drivers\Athfmwdl.sys [9/14/2007 5:56 PM 43392]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;c:\windows\system32\DNINDIS5.sys [9/14/2007 5:56 PM 17149]
S3 EraserUtilDrvI9;EraserUtilDrvI9;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilDrvI9.sys [2/26/2010 8:07 PM 102448]
S3 f89fc6bd-0091-4d01-948f-8933bd9e30a2;f89fc6bd-0091-4d01-948f-8933bd9e30a2;\??\f:\cds300\cds300.dll --> f:\cds300\cds300.dll [?]
S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [4/17/2005 12:30 PM 124608]
.
Contents of the 'Scheduled Tasks' folder

2010-02-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2010-03-04 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-03-26 05:52]

2010-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-23 04:23]

2010-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-23 04:23]

2010-03-04 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-04 00:20]

2010-02-28 c:\windows\Tasks\Norton Security Scan for Terry's email.job
- c:\program files\Norton Security Scan\Nss.exe [2008-09-19 08:18]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
uSearchMigratedDefaultURL = [You must be registered and logged in to see this link.]
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride =
uSearchURL,(Default) = [You must be registered and logged in to see this link.]
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: plaxo.com\www
Handler: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} -
DPF: DirectAnimation Java Classes - [You must be registered and logged in to see this link.]
DPF: Microsoft XML Parser for Java - [You must be registered and logged in to see this link.]
DPF: {75A6AEA3-F26E-4608-AE9B-8DA78C87576E} - [You must be registered and logged in to see this link.]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-xlcanaou - c:\documents and settings\Terry's email\Local Settings\Application Data\vdukqa\qejasftav.exe
HKLM-Run-xlcanaou - c:\documents and settings\Terry's email\Local Settings\Application Data\vdukqa\qejasftav.exe
AddRemove-Feudalism 2_is1 - g:\feudalism 2\Feudalism2_at\unins000.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2010-03-04 11:24
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2010-03-04 11:29:08
ComboFix-quarantined-files.txt 2010-03-04 16:28

Pre-Run: 43,136,094,208 bytes free
Post-Run: 44,541,526,016 bytes free

- - End Of File - - A7834A5B6DCACFA7D73C3D460908979C

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 6:31 pm

I've been trying for the last two hours to find a way to get Windows Recovery Console installed on the infected computer. Can't seem to find a way. I can't download the SP2 because the laptop - only machine with internet at the moment - is on Vista.

Now giving a last ditch effort at running ComboFix out of safe mode... hoping that maybe it removed enough problems that I can get my internet connection going again. Will check in soon... I hope!

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by rappleman on Thu Mar 04, 2010 7:01 pm

Not sure anyone is still tracking all this, but here's one more update -

I gave up on trying to get the MS Windows Recovery Console installed at present. Impossible with hubby's laptop using Vista and my deskstop (with no internet capability) using XP.

Started my computer out of safe mode, hoping that ComboFix had done enough to keep it from shutting down. It appears that it has. No more security alerts blazing across and all over my screen. Nice change.

I was able to get an internet connection going - incredibly slow, but arrived after a few minutes at my home page. An encouraging sign.

I'm now running, albeit V..E...R...Y S...L...O....W...L..Y, ComboFix again out of safe mode. Assume it will try to install the Recovery Console. With any luck, it will clean things up even further after that and get me back on track.

This looks as though it may take a good long time to run, so will check in later and let you know. Again... if you're still reading, thanks for pointing me in the right direction.

rappleman
Novice
Novice

Posts Posts : 19
Joined Joined : 2010-03-03
OS OS : Windows XP
Points Points : 24961
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

Post by Dr Jay on Thu Mar 04, 2010 8:34 pm


  1. Download Win32kDiag from any of the following locations and save it to your Desktop.

  • Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
  • When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
  • Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.


  • Dr. Jay (DJ)


    [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

    Dr Jay
    Head Administrator
    Head Administrator

    Posts Posts : 13717
    Joined Joined : 2009-09-06
    Gender Gender : Male
    OS OS : Windows 10 Home & Pro
    Protection Protection : Bitdefender Total Security
    Points Points : 302127
    # Likes # Likes : 10

    View user profile

    Back to top Go down

    Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

    Post by rappleman on Thu Mar 04, 2010 8:54 pm

    Not very promising, but here it is.....


    Running from: C:\Documents and Settings\Terry's email\Desktop\Win32kDiag.exe

    Log file at : C:\Documents and Settings\Terry's email\Desktop\Win32kDiag.txt

    WARNING: Could not get backup privileges!

    Searching 'C:\WINDOWS'...





    Finished!

    rappleman
    Novice
    Novice

    Posts Posts : 19
    Joined Joined : 2010-03-03
    OS OS : Windows XP
    Points Points : 24961
    # Likes # Likes : 0

    View user profile

    Back to top Go down

    Re: Win32/Nugel.E has blocked me from internet... can't download. How to remove?

    Post by Dr Jay on Thu Mar 04, 2010 10:27 pm

    Hi again. Please do these steps in order.

    1. Please download [You must be registered and logged in to see this link.] to your desktop
    • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
    • It will close all programs when run, so make sure you have saved all your work before you begin.
    • Click the Start
      button to begin the process. Depending on how often you clean temp
      files, execution time should be anywhere from a few seconds to a minute
      or two. Let it run uninterrupted to completion.
    • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.


    2. Please download Malwarebytes Anti-Malware from [You must be registered and logged in to see this link.].
    Alternate link: [You must be registered and logged in to see this link.].
    (Note: if you already have the program installed, just follow the directions. No need to re-download or re-install!)

    Double Click mbam-setup.exe to install the application.

    (Note: if you already have the program installed, open Malwarebytes from the Start Menu or Desktop shortcut, click the Update tab, and click Check for Updates, before doing the scan as instructed below!)

    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select "Perform Full Scan", then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
    • Please save the log to a location you will remember.
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy and paste the entire report in your next reply.

    Extra Note:

    If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

    3. Please visit this webpage for instructions for downloading and running SUPERAntiSpyware (SAS) to scan and remove malware from your computer:

    [You must be registered and logged in to see this link.]

    Post the log from SUPERAntiSpyware when you've accomplished that.

    4. Please run a free online scan with the [You must be registered and logged in to see this link.]
    • Tick the box next to YES, I accept the Terms of Use
    • Click Start
    • When asked, allow the ActiveX control to install
    • Click Start
    • Make sure that the options Remove found threats and the option Scan unwanted applications is checked
    • Click Scan (This scan can take several hours, so please be patient)
    • Once the scan is completed, you may close the window
    • Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
    • Copy and paste that log as a reply to this topic


    5. Post the following in your next reply:
    • MBAM log
    • SAS log
    • ESET log

    And, please tell me how your computer is doing.


    Dr. Jay (DJ)


    [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

    Dr Jay
    Head Administrator
    Head Administrator

    Posts Posts : 13717
    Joined Joined : 2009-09-06
    Gender Gender : Male
    OS OS : Windows 10 Home & Pro
    Protection Protection : Bitdefender Total Security
    Points Points : 302127
    # Likes # Likes : 10

    View user profile

    Back to top Go down

    View previous topic View next topic Back to top

    - Similar topics

     
    Permissions in this forum:
    You cannot reply to topics in this forum