Spyware / Malware / Virus Removal

[Resolved] Auto Updates Disabled

11 min read

Looking for the outcome? Ask AI

golfball1 Topic Starter

Post #1April 6, 2009, 9:42 PM UTC

Hello,

When I go into services the auto updates are disabled. I am able to enable them, but after a minute or so they are turned off again. Any ideas?

Thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:49:16 AM, on 4/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dldocoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: 82.98.231.89 browser-security.microsoft.com
O1 - Hosts: 82.98.231.89 best-click-scanner.info
O1 - Hosts: 82.98.231.89 antivirus-xp-pro-2009.com
O1 - Hosts: 82.98.231.89 microsoft.infosecuritycenter.com
O1 - Hosts: 82.98.231.89 microsoft.softwaresecurityhelp.com
O1 - Hosts: 82.98.231.89 onlinenotifyq.net
O1 - Hosts: 82.98.231.89 antivirusxp-pro-2009.com
O1 - Hosts: 82.98.231.89 microsoft.browser-security-center.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: (no name) - {d00ba341-8a6d-460d-aecd-eb6093e185a2} - C:\WINDOWS\system32\yumifesu.dll (file missing)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [wiyobebaja] Rundll32.exe "C:\WINDOWS\system32\gijimedo.dll",s
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [CPM2fbafc54] Rundll32.exe "c:\windows\system32\bujumuto.dll",a
O4 - HKLM\..\Run: [2c89cfc8] rundll32.exe "C:\WINDOWS\system32\fivipute.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/…trolLite_EN.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} (BCFileControlX Control) - http://aon.bluecurrent.com/utils/BCFileCon…FileControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9}
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://www.viidoo.tv/TVUAx.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1238630328391
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://pki.honeywell.com/pki/VSApps/vspta3.cab
O16 - DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} (BCMigrateX Control) - http://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {8FD68625-2346-418A-8899-67CB36B1917F} - http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} (BCCopyX Control) - http://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\makotumi.dll c:\windows\system32\bujumuto.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\bujumuto.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\bujumuto.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: dldo_device - - C:\WINDOWS\system32\dldocoms.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 14499 bytes

Noviciate

Post #2April 6, 2009, 10:18 PM UTC

Due to the large numbers of HJT logs being posted, there are four things that you need to be aware of.

1) If you have already posted this log at another forum, you need to post here that you have done so and this topic will be closed.
Multiple posting not only ties up valuable resources, but could also result is some unpleasant side-effects for your system if you follow two sets of instructions at the same time.
If, during research, an identical log is identified at another forum, this thread will be closed.

2) If you don't post a meaningful reply to any of my posts within five days, this thread will be closed. Due to limited free time, I can only have so many open threads at any one time and if yours isn't active, somebody else's will be.
If, by omission, the thread hasn't be closed after five days and you post, it will just serve as a reminder to me to close it.
Please note that "I just dropped in to say Hi!" isn't a meaningful reply!

3) Malware removal is a tricky business, and malware writers don't tend to worry about the damage their creations do, so it is advisable to back-up all important files BEFORE we start. Although most cases have a successful conclusion, on occasion things don't go according to plan and it is better to be prepared for the worst.

4) Back-ups can get lost or damaged, so make two if the files are that important to you!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Your log shows signs of multiple infections. Whether they are existing or not, I can't say.

Take a trip to this webpage for download links and instructions for running Combofix by sUBs: http://www.bleepingcomputer.com/combofix/how-to-use-combofix *

Please be aware that this tool may require the PC to be rebooted so close any programs you have open before you start.
When CF has finished, it will produce a log - C:\ComboFix.txt - copy and paste it into your next reply.
Post a fresh HJT log as well.
Let me know how the PC is behaving.

* There are two points to note from the instructions page:

1) The Recovery Console.

It is recommended that you install this as, in certain circumstances, it may be the difference between a successful repair and a reformat. If you are uncertain as to whether or not you already have the Recovery Console installed, simply run CF and it will prompt you if it does not detect it.
CF will complete it's removal tasks without the installation of the Console, so you are free to choose whether you want to complete this step, but it is in your interests to do so.

2) Disabling your Anti-Virus.

CF has been the victim of false-positive detections on occasion and a resident AV may incorrectly identify and delete part of the tool which won't do it much good. If you don't disable your AV, you may not get the results you hoped for!

Finally, run HJT and click on Open the Misc Tools section.

Click Open Uninstall Manager…
Click Save list… and save it to your Desktop.
Copy and paste the file uninstall_list.txt into your next reply.

golfball1

Post #3April 7, 2009, 12:29 AM UTC

Thanks for your help. Here is everything you asked for

ComboFix 09-04-04.01 - Matt 2009-04-06 20:08:32.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1279.684 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\IE4 Error Log.txt
c:\windows\system32\asolarit.ini
c:\windows\system32\bszip.dll
c:\windows\system32\etupivif.ini
c:\windows\system32\jesisega.dll.tmp
c:\windows\system32\kajazevi.dll.tmp
c:\windows\system32\kubivite.dll.tmp
c:\windows\system32\oletihop.ini
c:\windows\system32\uwuroguw.ini
c:\windows\system32\wugoruwu.dll

.
((((((((((((((((((((((((( Files Created from 2009-03-07 to 2009-04-07 )))))))))))))))))))))))))))))))
.

2009-04-06 19:54 . 2006-03-03 00:42 73,728 –a—— C:\pv.exe
2009-04-06 08:48 . 2009-04-06 08:48 d——– c:\program files\Trend Micro
2009-04-04 10:34 . 2009-04-04 10:34 d——– c:\documents and settings\Matt\Application Data\Symantec
2009-04-04 09:38 . 2009-04-06 07:25 d——– c:\program files\Common Files\Symantec Shared
2009-04-01 20:11 . 2009-04-02 07:40 d——– c:\program files\Windows Live Safety Center
2009-04-01 17:56 . 2009-04-06 19:45 d–h—– C:\$AVG8.VAULT$
2009-04-01 17:33 . 2009-04-01 17:33 d——– c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-04-01 17:33 . 2009-04-01 17:33 d——– c:\program files\SDHelper (Spybot - Search & Destroy)
2009-04-01 17:33 . 2009-04-01 17:33 d——– c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-04-01 17:32 . 2009-04-01 17:32 d——– c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-04-01 17:25 . 2009-04-01 17:25 108,552 –a—— c:\windows\system32\drivers\avgtdix.sys
2009-04-01 17:25 . 2009-04-01 17:25 10,520 –a—— c:\windows\system32\avgrsstx.dll
2009-04-01 17:24 . 2009-04-06 17:32 d——– c:\windows\system32\drivers\Avg
2009-04-01 17:24 . 2009-04-01 17:24 d——– c:\program files\AVG
2009-04-01 17:24 . 2009-04-01 17:24 325,640 –a—— c:\windows\system32\drivers\avgldx86.sys
2009-04-01 16:10 . 2009-04-01 17:24 d——– c:\documents and settings\All Users\Application Data\avg8
2009-04-01 14:40 . 2009-04-01 14:40 26,624 –a—— c:\windows\system32\drivers\fsbts.sys
2009-04-01 13:47 . 2009-04-04 15:47 d——– c:\windows\system32\CatRoot_bak
2009-03-29 19:03 . 2009-03-09 15:06 15,688 –a—— c:\windows\system32\lsdelete.exe
2009-03-29 16:12 . 2009-03-09 15:06 64,160 –a—— c:\windows\system32\drivers\Lbd.sys
2009-03-29 15:46 . 2009-03-29 15:46 d–h-c— c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-03-29 15:45 . 2009-03-29 16:12 d——– c:\documents and settings\All Users\Application Data\Lavasoft
2009-03-27 09:22 . 2009-03-27 09:22 d——– c:\program files\iPod
2009-03-27 09:21 . 2009-03-27 09:22 d——– c:\documents and settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
2009-03-27 09:19 . 2009-03-27 09:19 d——– c:\program files\Bonjour
2009-03-27 09:18 . 2009-03-05 23:59 1,900,544 –a—— c:\windows\system32\usbaaplrc.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-07 00:13 ——— d—–w c:\program files\Microsoft AntiSpyware
2009-04-06 11:25 ——— d—–w c:\documents and settings\All Users\Application Data\Google Updater
2009-04-01 21:57 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-04-01 21:42 ——— d—–w c:\program files\Spybot - Search & Destroy
2009-03-29 20:15 ——— d—–w c:\program files\iTunes
2009-03-29 19:45 ——— d—–w c:\program files\Lavasoft
2009-03-27 13:22 ——— d—–w c:\program files\Common Files\Apple
2009-03-21 15:59 ——— d—–w c:\documents and settings\Matt\Application Data\ContentGuard
2009-03-06 03:59 36,864 —-a-w c:\windows\system32\drivers\usbaapl.sys
2009-03-03 14:01 ——— d—–w c:\program files\Usability Sciences
2009-03-01 00:51 ——— d—–w c:\documents and settings\Matt\Application Data\Apple Computer
2009-02-28 22:24 ——— d—–w c:\documents and settings\All Users\Application Data\Apple Computer
2009-02-28 22:23 ——— d—–w c:\program files\QuickTime Alternative
2009-02-28 22:19 ——— d—–w c:\program files\Apple Software Update
2009-02-28 22:18 ——— d—–w c:\documents and settings\All Users\Application Data\Apple
2007-12-24 03:25 11,114 —-a-w c:\documents and settings\All Users\Application Data\MainApp.dll
2007-12-24 03:21 81,920 —-a-w c:\documents and settings\Matt\Application Data\ezpinst.exe
2007-12-24 03:21 47,360 —-a-w c:\documents and settings\Matt\Application Data\pcouffin.sys
2007-07-11 02:48 56,912 —-a-w c:\documents and settings\Matt\g2mdlhlpx.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-04 68856]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-04-03 165784]
"Zinio DLM"="c:\program files\Zinio\ZinioReader.exe" [2008-10-29 2699334]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2005-01-31 155648]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-31 339968]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-12-06 127035]
"gcasServ"="c:\program files\Microsoft AntiSpyware\gcasServ.exe" [2005-11-15 473928]
"DLBXCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll" [2004-12-07 69632]
"dlbxmon.exe"="c:\program files\Dell Photo AIO Printer 962\dlbxmon.exe" [2005-01-18 425984]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 63712]
"googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2009-01-05 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-12 342312]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-09 515416]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-04-01 1932568]
"CPM2fbafc54"="c:\windows\system32\bujumuto.dll" [2009-04-05 87552]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.exe.lnk - c:\windows\Installer\{A4E760F4-17A0-4DFE-B636-511806093892}\IconA4E760F4.exe [2006-08-17 51712]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2005-03-29 24576]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}"= "c:\windows\system32\bujumuto.dll" [2009-04-05 87552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"SSODL"= {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\bujumuto.dll [2009-04-05 87552]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
2004-09-07 18:08 110592 c:\program files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-04-01 17:25 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\bujumuto.dll
"LoadAppInit_DLLs"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.avis"= ff_acm.acm

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Matt^Start Menu^Programs^Startup^V CAST Music Monitor.lnk]
path=c:\documents and settings\Matt\Start Menu\Programs\Startup\V CAST Music Monitor.lnk
backup=c:\windows\pss\V CAST Music Monitor.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]
–a—— 2005-01-27 03:02 86016 c:\program files\Dell\Media Experience\DMXLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
——— 2004-10-12 18:54 57344 c:\program files\CyberLink\PowerDVD\DVDLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
–a—— 2004-09-14 10:50 53248 c:\program files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray]
–a—— 2004-09-14 10:50 131072 c:\program files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QBReminderFlash]
–a—— 2004-11-11 12:26 26112 c:\program files\Intuit\QuickBooks 2005\Atom\QBReminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
–a—— 2005-04-10 21:10 204845 c:\program files\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]
–a—— 2004-01-07 03:01 110592 c:\program files\Common Files\Sonic\Update Manager\sgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
–a—— 2005-08-19 19:34 3084288 c:\program files\Yahoo!\Messenger\YPager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\SmartFTP\\SmartFTP.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\TVersity\\Media Server\\MediaServer.exe"=
"c:\\WINDOWS\\system32\\dldocoms.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\dldopswx.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\dldojswx.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Intel\\Wireless\\Bin\\WLKEEPER.exe"=

R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [2009-04-01 26624]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-29 64160]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-04-01 325640]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-04-01 108552]
R1 vcdrom;Virtual CD-ROM Device Driver;c:\program files\VCD\VCdRom.sys [2001-12-19 8576]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-04-01 298264]
R2 dldo_device;dldo_device;c:\windows\system32\dldocoms.exe -service –> c:\windows\system32\dldocoms.exe -service [?]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-03-09 951632]
R3 Eacfilt;Eacfilt Miniport;c:\windows\system32\drivers\eacfilt.sys [2006-08-30 9433]
S0 black;black;c:\windows\system32\drivers\BlackDrv.sys –> c:\windows\system32\drivers\BlackDrv.sys [?]
S2 IPSECEXT;Nortel Extranet Access Protocol;c:\windows\system32\drivers\ipsecw2k.sys [2006-08-30 115680]
S3 RapFile;RapFile;c:\windows\system32\drivers\RapFile.sys [2006-08-30 36676]
S3 RapNet;RapNet;c:\windows\system32\drivers\RapNet.sys [2006-08-30 24344]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37c78ef0-211d-11de-8b58-444553544200}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J:\m.exe /s

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A4E760F4-17A0-4DFE-B636-511806093892}]
msiexec.exe /fup /quiet
.
Contents of the 'Scheduled Tasks' folder

2009-04-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 15:06]

2009-03-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 13:34]

2009-04-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 15:07]

2009-04-07 c:\windows\Tasks\User_Feed_Synchronization-{D9572040-587F-48C4-B2DF-5DF4973341D5}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 12:58]
.
- - - - ORPHANS REMOVED - - - -

BHO-{d00ba341-8a6d-460d-aecd-eb6093e185a2} - c:\windows\system32\yumifesu.dll
HKLM-Run-wiyobebaja - c:\windows\system32\gijimedo.dll
MSConfigStartUp-QuickTime Task - c:\program files\QuickTime\qttask.exe

.
——- Supplementary Scan ——-
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - hxxp://download.ewido.net/ewidoOnlineScan.cab
DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} - hxxp://aon.bluecurrent.com/utils/BCFileControl/BCFileControl.cab
DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} - hxxp://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} - hxxp://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-06 20:12:28
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLBXCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1872)
c:\windows\system32\Ati2evxx.dll
c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\ati2evxx.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Intel\Wireless\Bin\WLKEEPER.exe
c:\windows\system32\scardsvr.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\dldocoms.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\TVersity\Media Server\MediaServer.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\ati2evxx.exe
c:\progra~1\Intel\Wireless\Bin\1XConfig.exe
c:\program files\Apoint\ApntEx.exe
c:\windows\system32\dlbxcoms.exe
c:\program files\Microsoft AntiSpyware\gcasDtServ.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\SoftwareDistribution\Download\2bc0b3c55e0c166e04844934d1c7c342\update\update.exe
c:\program files\MSN Messenger\usnsvc.exe
c:\program files\Java\jre1.6.0_05\bin\jucheck.exe
c:\windows\system32\notepad.exe
.
**************************************************************************
.
Completion time: 2009-04-06 20:20:38 - machine was rebooted
ComboFix-quarantined-files.txt 2009-04-07 00:19:19

Pre-Run: 11,900,420,096 bytes free
Post-Run: 11,883,036,672 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

267 — E O F — 2008-06-29 15:08:20

_____________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:23:08 PM, on 4/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dldocoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\SoftwareDistribution\Download\2bc0b3c55e0c166e04844934d1c7c342\update\update.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [CPM2fbafc54] Rundll32.exe "c:\windows\system32\bujumuto.dll",a
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/…trolLite_EN.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} (BCFileControlX Control) - http://aon.bluecurrent.com/utils/BCFileCon…FileControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9}
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://www.viidoo.tv/TVUAx.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1238630328391
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://pki.honeywell.com/pki/VSApps/vspta3.cab
O16 - DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} (BCMigrateX Control) - http://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {8FD68625-2346-418A-8899-67CB36B1917F} - http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} (BCCopyX Control) - http://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: c:\windows\system32\bujumuto.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\bujumuto.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\bujumuto.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: dldo_device - - C:\WINDOWS\system32\dldocoms.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 13382 bytes

_____________________________________________________________________

ABBYY FineReader 6.0 Sprint Plus
Ad-Aware
Ad-Aware
Ad-Aware SE Personal
Adobe Flash Player ActiveX
Adobe Photoshop
Adobe Reader 8.1.2
Adobe SVG Viewer 3.0
Adobe® Photoshop® Album Starter Edition 3.2
ALPS Touch Pad Driver
AOL Instant Messenger
Apple Mobile Device Support
Apple Software Update
ATI Control Panel
ATI Display Driver
Audacity 1.2.4
AVG 8.5
BitPim 0.9.05
BitTorrent 5.0.4
Bonjour
Broadcom Management Programs 2
CCleaner (remove only)
CloneDVD [removed]
Comcast High-Speed Internet Install Wizard
Conexant D480 MDC V.9x Modem
Coupon Printer for Windows
Dell Driver Reset Tool
Dell Media Experience
Dell Photo AIO Printer 962
Dell Picture Studio v3.0
Dell Support 5.0.0 (630)
Digital Line Detect
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
ffdshow [rev 1324] [2007-07-01]
FreeRIP v2.951
GCFScape 1.3.1
Google Earth
Google Talk (remove only)
Google Toolbar for Internet Explorer
Google Updater
HijackThis 2.0.2
Honeywell Global Remote
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Intel® PROSet/Wireless Software
Internet Explorer Default Page
IsoBuster 1.8
iTunes
J2SE Runtime Environment 5.0 Update 11
Java™ 6 Update 5
Java™ SE Runtime Environment 6 Update 1
LG USB Drivers
LimeWire 4.16.6
Macromedia Flash Player
Macromedia Shockwave Player
mCore
mDrWiFi
mHlpDell
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft AntiSpyware
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Live Meeting 2005
Microsoft Office Professional Edition 2003
Microsoft Office Visio Professional 2003
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Streets & Trips 2006
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual Basic 6.0 Professional Edition
Microsoft Visual C++ 2005 Redistributable
Microsoft Web Publishing Wizard 1.53
mIWA
mIWCA
mLogView
mMHouse
Modem Helper
mPfMgr
mPfWiz
mProSafe
mSSO
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
mToolkit
Musicmatch® Jukebox
mWlsSafe
mXML
mZConfig
Netflix Movie Viewer
NetWaiting
Pdf995
Photo Click
Photodex Presenter
PowerDVD 5.3
Print to Fax
Qualxserve Service Agreement
QuickBooks Simple Start Special Edition
QuickSet
QuickTime
QuickTime Alternative 1.76
RealPlayer
Riva FLV Player
SAMSUNG CDMA Modem Driver Set
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB958644)
SmartFTP Client
SmartFTP Client 2.0 Setup Files (remove only)
Sonic DLA
Sonic MyDVD
Sonic RecordNow!
Sonic Update Manager
SopCast 1.0.1
SpeedFan (remove only)
Spybot - Search & Destroy
Spybot - Search & Destroy 1.4
TVersity Codec Pack 1.1
TVersity Media Server 0.9.11.4 beta
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
V CAST Music
Viewpoint Media Player
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebIQ Technology Engine
Winamp (Remove Only)
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 10
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
WinRAR archiver
Wisdom-soft ScreenHunter 4.0 Free
WordPerfect Office 12
Yahoo! Messenger
Zinio Reader

The system is running OK, but I just can't get any new updates from Microsoft.

Thanks.

Noviciate

Post #4April 7, 2009, 7:06 PM UTC

Copy and paste the following into Notepad (Start > All Programs > Accessories > Notepad):

File::
c:\windows\system32\bujumuto.dll

Registry::
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"SSODL"=-

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=""

Save it to your Desktop with the following filename: CFScript
Drag and drop CFScript.txt onto your copy of Combofix and let it do it's thing.
Let me have the log produced, as before, as well as a fresh HJT log and a description of how the PC is behaving.

Have you tried accessing Windows Updates via the All Programs Menu?

golfball1

Post #5April 7, 2009, 8:02 PM UTC

I was able to get the updates to work last night so I should be good as far as that is concerned now. I still get a popup every now and then, but it is all white. It doesn't have an add for anything. Also when I reboot the following DLL errors pop up. gijimedo, bujumuto and wugoruwu

Thanks for your help!

ComboFix 09-04-04.01 - Matt 2009-04-07 15:40:26.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1279.632 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Matt\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated)
* Created a new restore point

FILE ::
c:\windows\system32\bujumuto.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\bujumuto.dll

.
((((((((((((((((((((((((( Files Created from 2009-03-07 to 2009-04-07 )))))))))))))))))))))))))))))))
.

2009-04-06 21:53 . 2009-04-06 21:53 d——– c:\windows\system32\scripting
2009-04-06 21:53 . 2009-04-06 21:53 d——– c:\windows\system32\en
2009-04-06 21:53 . 2009-04-06 21:53 d——– c:\windows\system32\bits
2009-04-06 21:53 . 2009-04-06 21:53 d——– c:\windows\l2schemas
2009-04-06 21:48 . 2009-04-06 21:53 d——– c:\windows\ServicePackFiles
2009-04-06 21:09 . 2008-04-13 20:12 1,737,856 ——— c:\windows\system32\mtxparhd.dll
2009-04-06 21:08 . 2008-04-13 20:11 397,312 ——— c:\windows\system32\mmcex.dll
2009-04-06 21:08 . 2008-04-13 20:11 184,320 ——— c:\windows\system32\microsoft.managementconsole.dll
2009-04-06 21:08 . 2008-04-13 20:11 106,496 ——— c:\windows\system32\mmcfxcommon.dll
2009-04-06 21:08 . 2008-04-13 20:11 61,440 ——— c:\windows\system32\kmsvc.dll
2009-04-06 21:08 . 2008-04-13 20:11 37,376 ——— c:\windows\system32\l2gpstore.dll
2009-04-06 21:08 . 2008-04-13 20:12 33,792 ——— c:\windows\system32\mmcperf.exe
2009-04-06 21:08 . 2008-04-13 20:09 6,144 ——— c:\windows\system32\kbdpash.dll
2009-04-06 21:08 . 2008-04-13 20:09 6,144 ——— c:\windows\system32\kbdnepr.dll
2009-04-06 21:08 . 2008-04-13 20:09 6,144 ——— c:\windows\system32\kbdiultn.dll
2009-04-06 21:08 . 2008-04-13 20:09 6,144 ——— c:\windows\system32\kbdbhc.dll
2009-04-06 21:06 . 2008-04-13 20:11 870,784 ——— c:\windows\system32\ati3d1ag.dll
2009-04-06 20:29 . 2008-10-16 14:06 268,648 –a—— c:\windows\system32\mucltui.dll
2009-04-06 20:29 . 2008-10-16 14:06 27,496 –a—— c:\windows\system32\mucltui.dll.mui
2009-04-06 08:48 . 2009-04-06 08:48 d——– c:\program files\Trend Micro
2009-04-04 10:34 . 2009-04-04 10:34 d——– c:\documents and settings\Matt\Application Data\Symantec
2009-04-04 09:38 . 2009-04-06 07:25 d——– c:\program files\Common Files\Symantec Shared
2009-04-01 20:11 . 2009-04-02 07:40 d——– c:\program files\Windows Live Safety Center
2009-04-01 17:56 . 2009-04-07 05:54 d–h—– C:\$AVG8.VAULT$
2009-04-01 17:33 . 2009-04-01 17:33 d——– c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-04-01 17:33 . 2009-04-01 17:33 d——– c:\program files\SDHelper (Spybot - Search & Destroy)
2009-04-01 17:33 . 2009-04-01 17:33 d——– c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-04-01 17:32 . 2009-04-01 17:32 d——– c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-04-01 17:25 . 2009-04-01 17:25 108,552 –a—— c:\windows\system32\drivers\avgtdix.sys
2009-04-01 17:25 . 2009-04-01 17:25 10,520 –a—— c:\windows\system32\avgrsstx.dll
2009-04-01 17:24 . 2009-04-07 10:00 d——– c:\windows\system32\drivers\Avg
2009-04-01 17:24 . 2009-04-01 17:24 d——– c:\program files\AVG
2009-04-01 17:24 . 2009-04-01 17:24 325,640 –a—— c:\windows\system32\drivers\avgldx86.sys
2009-04-01 16:47 . 2008-10-15 12:34 337,408 ——— c:\windows\system32\dllcache\netapi32.dll
2009-04-01 16:10 . 2009-04-01 17:24 d——– c:\documents and settings\All Users\Application Data\avg8
2009-04-01 14:40 . 2009-04-01 14:40 26,624 –a—— c:\windows\system32\drivers\fsbts.sys
2009-04-01 13:44 . 2008-08-14 06:11 2,189,184 ——— c:\windows\system32\dllcache\ntoskrnl.exe
2009-04-01 13:44 . 2008-08-14 06:09 2,145,280 ——— c:\windows\system32\dllcache\ntkrnlmp.exe
2009-04-01 13:44 . 2008-08-14 05:33 2,066,048 ——— c:\windows\system32\dllcache\ntkrnlpa.exe
2009-04-01 13:44 . 2008-08-14 05:33 2,023,936 ——— c:\windows\system32\dllcache\ntkrpamp.exe
2009-04-01 13:43 . 2008-10-24 07:21 455,296 ——— c:\windows\system32\dllcache\mrxsmb.sys
2009-04-01 13:43 . 2008-12-11 06:57 333,952 ——— c:\windows\system32\dllcache\srv.sys
2009-04-01 13:42 . 2008-04-11 15:04 691,712 ——— c:\windows\system32\dllcache\inetcomm.dll
2009-04-01 13:42 . 2008-05-01 10:33 331,776 ——— c:\windows\system32\dllcache\msadce.dll
2009-04-01 13:40 . 2008-09-04 13:15 1,106,944 ——— c:\windows\system32\dllcache\msxml3.dll
2009-03-29 19:03 . 2009-03-09 15:06 15,688 –a—— c:\windows\system32\lsdelete.exe
2009-03-29 16:12 . 2009-03-09 15:06 64,160 –a—— c:\windows\system32\drivers\Lbd.sys
2009-03-29 15:46 . 2009-03-29 15:46 d–h-c— c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-03-29 15:45 . 2009-03-29 16:12 d——– c:\documents and settings\All Users\Application Data\Lavasoft
2009-03-27 09:22 . 2009-03-27 09:22 d——– c:\program files\iPod
2009-03-27 09:21 . 2009-03-27 09:22 d——– c:\documents and settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
2009-03-27 09:19 . 2009-03-27 09:19 d——– c:\program files\Bonjour
2009-03-27 09:18 . 2009-03-05 23:59 1,900,544 –a—— c:\windows\system32\usbaaplrc.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-07 19:46 ——— d—–w c:\program files\Microsoft AntiSpyware
2009-04-07 12:26 ——— d—–w c:\documents and settings\All Users\Application Data\Google Updater
2009-04-07 11:28 ——— d—–w c:\program files\MSN Messenger
2009-04-01 21:57 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-04-01 21:42 ——— d—–w c:\program files\Spybot - Search & Destroy
2009-03-29 20:15 ——— d—–w c:\program files\iTunes
2009-03-29 19:45 ——— d—–w c:\program files\Lavasoft
2009-03-27 13:22 ——— d—–w c:\program files\Common Files\Apple
2009-03-21 15:59 ——— d—–w c:\documents and settings\Matt\Application Data\ContentGuard
2009-03-06 03:59 36,864 —-a-w c:\windows\system32\drivers\usbaapl.sys
2009-03-03 14:01 ——— d—–w c:\program files\Usability Sciences
2009-03-01 00:51 ——— d—–w c:\documents and settings\Matt\Application Data\Apple Computer
2009-02-28 22:24 ——— d—–w c:\documents and settings\All Users\Application Data\Apple Computer
2009-02-28 22:23 ——— d—–w c:\program files\QuickTime Alternative
2009-02-28 22:19 ——— d—–w c:\program files\Apple Software Update
2009-02-28 22:18 ——— d—–w c:\documents and settings\All Users\Application Data\Apple
2007-12-24 03:25 11,114 —-a-w c:\documents and settings\All Users\Application Data\MainApp.dll
2007-12-24 03:21 81,920 —-a-w c:\documents and settings\Matt\Application Data\ezpinst.exe
2007-12-24 03:21 47,360 —-a-w c:\documents and settings\Matt\Application Data\pcouffin.sys
2007-07-11 02:48 56,912 —-a-w c:\documents and settings\Matt\g2mdlhlpx.exe
.

((((((((((((((((((((((((((((( SnapShot@2009-04-06_20.18.07.41 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-07-07 20:23:18 253,952 —-a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
+ 2007-11-30 12:39:22 17,272 —-a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 —-a-w c:\windows\$hf_mig$\KB950974\update\update.exe
+ 2007-11-30 12:39:19 382,840 —-a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
+ 2008-06-20 11:48:03 138,496 —-a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:43:05 147,968 —-a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:43:05 245,248 —-a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 —-a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 —-a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:39:22 17,272 —-a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 —-a-w c:\windows\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:39:19 382,840 —-a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
+ 2008-06-24 16:53:10 74,240 —-a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
+ 2007-11-30 12:39:22 17,272 —-a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w c:\windows\$hf_mig$\KB952954\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
+ 2008-10-23 10:17:49 62,976 —-a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
+ 2007-11-30 12:39:22 17,272 —-a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w c:\windows\$hf_mig$\KB955839\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
+ 2008-10-23 12:43:42 286,720 —-a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
+ 2008-07-08 13:02:01 17,272 —-a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
+ 2008-07-08 13:02:02 231,288 —-a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
+ 2008-07-08 13:02:01 26,488 —-a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
+ 2008-07-09 07:38:29 755,576 —-a-w c:\windows\$hf_mig$\KB956802\update\update.exe
+ 2008-07-09 07:38:37 382,840 —-a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
+ 2009-02-09 11:08:53 1,847,552 —-a-w c:\windows\$hf_mig$\KB958690\SP3QFE\win32k.sys
+ 2008-07-09 07:38:24 17,272 —-a-w c:\windows\$hf_mig$\KB958690\spmsg.dll
+ 2008-07-09 07:38:25 231,288 —-a-w c:\windows\$hf_mig$\KB958690\spuninst.exe
+ 2008-07-09 07:38:24 26,488 —-a-w c:\windows\$hf_mig$\KB958690\update\spcustom.dll
+ 2008-07-09 07:38:29 755,576 —-a-w c:\windows\$hf_mig$\KB958690\update\update.exe
+ 2008-07-09 07:38:37 382,840 —-a-w c:\windows\$hf_mig$\KB958690\update\updspapi.dll
+ 2008-12-05 06:58:08 144,896 —-a-w c:\windows\$hf_mig$\KB960225\SP3QFE\schannel.dll
+ 2007-11-30 11:18:51 17,272 —-a-w c:\windows\$hf_mig$\KB960225\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w c:\windows\$hf_mig$\KB960225\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w c:\windows\$hf_mig$\KB960225\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w c:\windows\$hf_mig$\KB960225\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w c:\windows\$hf_mig$\KB960225\update\updspapi.dll
+ 2008-06-17 19:04:34 8,461,824 —-a-w c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
+ 2008-07-09 07:38:24 17,272 —-a-w c:\windows\$hf_mig$\KB967715\spmsg.dll
+ 2008-07-09 07:38:25 231,288 —-a-w c:\windows\$hf_mig$\KB967715\spuninst.exe
+ 2008-07-09 07:38:24 26,488 —-a-w c:\windows\$hf_mig$\KB967715\update\spcustom.dll
+ 2008-07-09 07:38:29 755,576 —-a-w c:\windows\$hf_mig$\KB967715\update\update.exe
+ 2008-07-09 07:38:37 382,840 —-a-w c:\windows\$hf_mig$\KB967715\update\updspapi.dll
- 2006-07-13 08:48:58 202,240 -c—-w c:\windows\$NtUninstallKB950762$\rmcast.sys
+ 2006-07-13 08:48:58 202,240 -c—-w c:\windows\$NtUninstallKB950762_0$\rmcast.sys
+ 2007-11-30 12:39:22 231,288 -c—-w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll
+ 2007-11-30 11:18:51 231,288 -c—-w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
- 2007-10-29 22:43:03 1,287,680 -c—-w c:\windows\$NtUninstallKB951698$\quartz.dll
+ 2007-10-29 22:43:03 1,287,680 -c—-w c:\windows\$NtUninstallKB951698_0$\quartz.dll
+ 2007-11-30 11:18:51 231,288 -c—-w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll
- 2006-08-17 12:28:27 332,288 -c—-w c:\windows\$NtUninstallKB958644$\netapi32.dll
- 2006-10-04 14:05:26 39,424 ——w c:\windows\AppPatch\acadproc.dll
+ 2008-04-14 00:11:48 39,424 —-a-w c:\windows\AppPatch\acadproc.dll
- 2004-08-04 11:00:00 1,852,416 —-a-w c:\windows\AppPatch\AcGenral.dll
+ 2008-04-14 00:11:48 1,852,928 —-a-w c:\windows\AppPatch\acgenral.dll
- 2004-08-04 11:00:00 450,048 —-a-w c:\windows\AppPatch\AcLayers.dll
+ 2008-04-14 00:11:48 451,072 —-a-w c:\windows\AppPatch\aclayers.dll
- 2004-08-04 11:00:00 137,728 —-a-w c:\windows\AppPatch\AcLua.dll
+ 2008-04-14 00:11:48 141,312 —-a-w c:\windows\AppPatch\aclua.dll
- 2004-08-04 11:00:00 244,736 —-a-w c:\windows\AppPatch\AcSpecfc.dll
+ 2008-04-14 00:11:48 245,248 —-a-w c:\windows\AppPatch\acspecfc.dll
- 2004-08-04 11:00:00 116,224 —-a-w c:\windows\AppPatch\AcXtrnal.dll
+ 2008-04-14 00:11:48 116,224 —-a-w c:\windows\AppPatch\acxtrnal.dll
- 2005-04-06 01:01:12 997,992 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Access\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2009-04-07 11:35:54 1,000,848 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Access\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
- 2005-04-06 01:07:55 1,100,392 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2009-04-07 11:40:49 1,103,248 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
- 2005-04-06 01:07:55 141,928 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2009-04-07 11:40:11 144,784 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
- 2005-04-06 01:08:34 88,776 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2009-04-07 11:41:38 91,488 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
- 2005-04-06 01:08:34 101,064 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2009-04-07 11:41:37 103,776 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
- 2005-04-06 01:07:55 408,176 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
+ 2009-04-07 11:41:08 411,024 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
- 2005-04-06 01:07:55 35,448 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2009-04-07 11:41:02 38,304 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
- 2005-04-06 01:07:55 461,416 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
+ 2009-04-07 11:40:39 464,272 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
- 2005-04-06 01:07:55 223,856 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2009-04-07 11:41:28 226,712 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
- 2005-04-06 01:07:55 211,568 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Publisher\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
+ 2009-04-07 11:41:33 214,424 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Publisher\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
- 2005-04-06 01:07:55 20,080 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2009-04-07 11:40:32 22,928 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
- 2005-04-06 01:07:56 662,120 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2009-04-07 11:41:19 664,968 —-a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
- 2005-04-06 01:07:55 371,296 —-a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2009-04-07 11:40:07 374,152 —-a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
- 2005-04-05 01:31:07 64,088 —-a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2009-04-07 11:39:34 66,936 —-a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
- 2005-04-05 01:31:06 223,800 —-a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2009-04-07 11:38:58 226,656 —-a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
- 2008-06-13 13:10:50 272,128 ——w c:\windows\Driver Cache\i386\bthport.sys
+ 2008-06-13 11:05:51 272,128 ——w c:\windows\Driver Cache\i386\bthport.sys
- 2006-05-05 09:41:45 453,120 ——w c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2008-10-24 11:21:09 455,296 ——w c:\windows\Driver Cache\i386\mrxsmb.sys
- 2007-02-28 09:08:48 2,136,064 ——w c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2008-08-14 10:09:26 2,145,280 ——w c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2007-02-28 08:38:55 2,057,600 ——w c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-08-14 09:33:16 2,066,048 ——w c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2007-02-28 08:38:57 2,015,744 ——w c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-08-14 09:33:16 2,023,936 ——w c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2007-02-28 09:10:57 2,180,352 ——w c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-08-14 10:11:02 2,189,184 ——w c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2007-06-13 10:23:07 1,033,216 —-a-w c:\windows\explorer.exe
+ 2008-04-14 00:12:19 1,033,728 —-a-w c:\windows\explorer.exe
- 2004-08-04 11:00:00 34,816 —-a-w c:\windows\Help\sniffpol.dll
+ 2008-04-14 00:12:06 34,816 —-a-w c:\windows\Help\sniffpol.dll
- 2004-08-04 11:00:00 33,280 —-a-w c:\windows\Help\sstub.dll
+ 2008-04-14 00:12:07 33,280 —-a-w c:\windows\Help\sstub.dll
- 2004-08-04 11:00:00 279,040 —-a-w c:\windows\Help\tshoot.dll
+ 2008-04-14 00:12:07 279,040 —-a-w c:\windows\Help\tshoot.dll
- 2005-05-26 23:22:01 10,752 —-a-w c:\windows\hh.exe
+ 2008-04-14 00:12:21 10,752 —-a-w c:\windows\hh.exe
+ 2008-04-23 04:16:28 124,928 -c—-w c:\windows\ie7updates\KB961260-IE7\advpack.dll
+ 2008-04-23 04:16:28 347,136 -c—-w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
+ 2008-04-23 04:16:28 214,528 -c—-w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
+ 2008-04-23 04:16:28 133,120 -c—-w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
+ 2008-04-23 04:16:28 63,488 -c—-w c:\windows\ie7updates\KB961260-IE7\icardie.dll
+ 2008-04-22 07:39:58 70,656 -c—-w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
+ 2008-04-23 04:16:28 153,088 -c—-w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
+ 2008-04-23 04:16:28 230,400 -c—-w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
+ 2008-04-20 05:07:51 161,792 -c—-w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
+ 2008-04-23 04:16:28 383,488 -c—-w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
+ 2008-04-23 04:16:28 384,512 -c—-w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
+ 2008-04-23 04:16:28 6,066,176 -c—-w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
+ 2008-04-23 04:16:28 44,544 -c—-w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
+ 2008-04-23 04:16:28 267,776 -c—-w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
+ 2008-04-22 07:39:58 13,824 -c—-w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
+ 2008-04-22 07:40:18 625,664 -c—-w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
+ 2008-04-23 04:16:28 27,648 -c—-w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
+ 2008-04-23 04:16:28 459,264 -c—-w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
+ 2008-04-23 04:16:28 52,224 -c—-w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
+ 2008-04-24 02:16:30 3,591,680 -c—-w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
+ 2008-04-23 04:16:28 478,208 -c—-w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
+ 2008-04-23 04:16:28 193,024 -c—-w c:\windows\ie7updates\KB961260-IE7\msrating.dll
+ 2008-04-23 04:16:28 671,232 -c—-w c:\windows\ie7updates\KB961260-IE7\mstime.dll
+ 2008-04-23 04:16:28 102,912 -c—-w c:\windows\ie7updates\KB961260-IE7\occache.dll
+ 2008-04-23 04:16:28 44,544 -c—-w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
+ 2007-03-06 01:22:41 213,216 -c—-w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
+ 2008-04-23 04:16:28 105,984 -c—-w c:\windows\ie7updates\KB961260-IE7\url.dll
+ 2008-04-23 04:16:29 1,159,680 -c—-w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
+ 2008-04-23 04:16:29 233,472 -c—-w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
+ 2008-04-23 04:16:29 826,368 -c—-w c:\windows\ie7updates\KB961260-IE7\wininet.dll
- 2004-08-04 11:00:00 220,160 —-a-w c:\windows\ime\mscandui.dll
+ 2008-04-14 00:11:58 220,160 —-a-w c:\windows\ime\mscandui.dll
- 2004-08-04 11:00:00 130,048 —-a-w c:\windows\ime\SOFTKBD.DLL
+ 2008-04-14 00:12:06 130,048 —-a-w c:\windows\ime\softkbd.dll
- 2004-08-04 11:00:00 62,976 —-a-w c:\windows\ime\SPGRMR.dll
+ 2008-04-13 16:43:18 62,976 —-a-w c:\windows\ime\spgrmr.dll
- 2004-08-04 11:00:00 250,880 —-a-w c:\windows\ime\SPTIP.dll
+ 2008-04-14 00:12:06 250,368 —-a-w c:\windows\ime\sptip.dll
+ 2005-04-06 01:01:12 997,992 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\ACCESS.DLL
+ 2003-07-15 02:43:20 87,616 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\ADDRPARS.DLL
+ 2003-07-15 02:57:34 38,968 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
+ 2003-07-15 02:53:06 94,768 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\AW.DLL
+ 2003-07-15 02:53:24 60,984 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\BLNMGR.DLL
+ 2003-07-15 02:53:22 46,144 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\BLNMGRPS.DLL
+ 2003-07-15 07:18:12 47,160 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DFUICOM.EXE
+ 2003-07-25 22:57:20 75,832 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DLGSETP.DLL
+ 2003-07-15 02:56:54 14,904 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
+ 2003-07-15 02:57:14 98,360 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
+ 2005-04-06 01:07:55 1,100,392 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\EXCELPIA.DLL
+ 2003-07-15 02:41:44 13,368 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FINDER.EXE
+ 2002-10-07 13:49:36 192,573 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FORM.DLL
+ 2005-04-06 01:07:55 371,296 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FORMSPIA.DLL
+ 2003-07-15 02:40:12 179,768 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
+ 2003-07-15 02:40:12 165,944 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FPLACE.DLL
+ 2005-04-06 01:07:55 141,928 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\GRAPHPIA.DLL
+ 2003-07-24 02:32:32 121,400 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\IMPMAIL.DLL
+ 2003-07-15 02:45:14 58,944 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\INLAUNCH.DLL
+ 2003-06-18 21:31:10 252,928 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
+ 2003-06-18 21:31:34 443,904 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIVWCTL.DLL
+ 2003-07-15 02:46:08 176,696 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MIMEDIR.DLL
+ 2003-07-15 07:13:58 130,112 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSAEXP30.DLL
+ 2003-07-15 02:57:14 124,480 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSB1CORE.DLL
+ 2003-07-15 03:12:22 47,872 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSB1XTOR.DLL
+ 2003-07-15 02:58:04 230,968 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSCDM.DLL
+ 2002-12-17 23:08:50 359,600 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSDMENG.DLL
+ 2002-12-17 23:08:54 1,383,592 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSDMINE.DLL
+ 2003-07-15 02:56:14 40,504 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSE7.EXE
+ 2003-07-15 02:51:44 87,104 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
+ 2003-07-15 07:14:00 139,328 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSJSPP40.DLL
+ 2002-04-10 00:14:36 187,560 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSMDUN80.DLL
+ 2003-07-15 02:52:52 17,464 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
+ 2003-07-15 02:57:16 120,888 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
+ 2003-07-15 02:52:52 27,704 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
+ 2003-07-15 02:44:06 25,144 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOEURO.DLL
+ 2003-07-15 02:52:56 55,360 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
+ 2002-12-17 23:09:24 2,071,752 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOLAP80.DLL
+ 2003-07-15 02:56:16 54,328 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOMSE.DLL
+ 2003-07-11 06:15:48 1,292,872 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
+ 2003-07-15 07:18:52 376,888 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
+ 2003-07-15 02:52:54 28,224 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
+ 2003-07-15 02:52:52 35,896 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
+ 2003-07-15 02:53:00 55,872 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSVABW.DLL
+ 2003-07-15 02:53:20 39,488 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSVFBR.DLL
+ 2003-07-15 02:46:16 42,040 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
+ 2003-07-15 02:45:12 55,360 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
+ 2003-07-15 02:45:12 39,488 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
+ 2003-06-18 21:31:24 1,033,216 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPCORE.DLL
+ 2003-06-18 21:31:54 788,480 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPFILT.DLL
+ 2003-06-18 21:31:50 16,384 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
+ 2003-06-19 20:05:52 128,104 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPSCAN.EXE
+ 2003-06-19 20:05:50 364,648 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
+ 2003-07-15 03:02:42 637,496 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSQRY32.EXE
+ 2003-07-15 02:52:58 41,528 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
+ 2005-04-06 01:07:55 20,080 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSTAGPIA.DLL
+ 2003-07-15 03:00:54 145,984 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
+ 2003-07-15 02:57:10 56,888 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\NAME.DLL
+ 2003-07-15 02:56:52 13,888 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
+ 2003-06-18 21:31:58 6,144 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OCRPS.DLL
+ 2005-04-05 01:31:06 223,800 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OFFICE.DLL
+ 2003-07-15 07:14:26 283,696 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OIS.EXE
+ 2003-07-15 07:14:26 27,192 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OISCTRL.DLL
+ 2003-07-15 07:14:26 242,240 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
+ 2005-04-06 01:07:55 35,448 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OLCTLPIA.DLL
+ 2003-07-15 03:05:24 1,054,264 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
+ 2003-07-15 03:05:24 1,054,264 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL_0002
+ 2003-07-15 02:44:34 102,968 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLCTL.DLL
+ 2003-07-15 02:44:32 88,128 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLMIME.DLL
+ 2005-04-06 01:07:55 408,176 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLPIA.DLL
+ 2003-07-15 02:43:18 64,056 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLRPC.DLL
+ 2003-07-15 02:43:16 49,208 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLWAB.DLL
+ 2005-04-06 01:07:55 461,416 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OWC11PIA.DLL
+ 2003-07-15 07:18:54 430,136 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PP4X322.DLL
+ 2003-07-15 07:18:44 93,752 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
+ 2005-04-06 01:07:55 223,856 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PPTPIA.DLL
+ 2002-10-07 14:11:00 167,997 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PSOM.DLL
+ 2005-04-06 01:07:55 211,568 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PUBPIA.DLL
+ 2003-07-15 02:40:16 51,256 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
+ 2003-07-15 02:42:26 37,432 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\RECALL.DLL
+ 2003-05-09 01:54:00 77,824 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
+ 2003-07-15 02:57:08 40,512 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
+ 2002-10-07 13:49:42 81,984 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\REVERSE.DLL
+ 2003-07-21 15:46:38 390,712 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\RTFHTML.DLL
+ 2003-07-15 02:57:18 349,248 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SELFCERT.EXE
+ 2003-07-15 02:44:16 66,616 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SENDTO.DLL
+ 2003-07-15 02:57:08 58,944 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
+ 2003-07-15 02:53:14 11,848 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
+ 2003-08-03 14:52:32 2,808,376 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\STSLIST.DLL
+ 2002-10-07 13:53:04 106,561 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\THOCRAPI.DLL
+ 2003-07-15 03:00:22 99,904 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TRANSMGR.DLL
+ 2002-10-07 13:50:44 241,729 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWCUTCHR.DLL
+ 2002-10-07 13:51:04 180,289 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWCUTLIN.DLL
+ 2002-10-07 13:51:14 147,520 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWLAY32.DLL
+ 2002-10-07 13:51:20 102,467 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWORIENT.DLL
+ 2002-10-07 13:50:04 118,847 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWRECE.DLL
+ 2002-10-07 13:49:56 81,983 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWRECS.DLL
+ 2002-10-07 13:51:44 221,252 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWSTRUCT.DLL
+ 2003-07-15 02:57:40 59,960 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\UNBIND.EXE
+ 2005-04-05 01:31:07 64,088 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\VBIDEPIA.DLL
+ 2005-04-06 01:07:56 662,120 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\WORDPIA.DLL
+ 2002-10-07 14:03:34 1,794,113 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\XIMAGE3B.DLL
+ 2003-04-30 15:52:32 1,581,120 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\XPAGE3C.DLL
+ 2003-01-17 18:03:34 59,466 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\XSCAN32.DAT
+ 2001-06-05 12:13:22 289,926 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\ENGDIC.DAT
+ 2001-06-05 12:13:22 34,168 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\ENGIDX.DAT
+ 2001-06-05 12:13:24 18,844 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\JFONT.DAT
+ 2001-06-05 12:13:26 65,536 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\LOOKUP.DAT
+ 2001-10-23 04:13:42 53,260 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\OCRHC.DAT
+ 2001-06-05 12:13:26 40,972 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\OCRVC.DAT
+ 2003-08-16 10:29:36 846,440 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\AEC.DLL
+ 2003-08-16 10:28:34 434,752 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\AECUTILS.DLL
+ 2003-08-16 10:26:42 132,216 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\BRTVIEW.DLL
+ 2003-08-16 10:29:04 567,928 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\BSTORM.DLL
+ 2003-08-16 10:27:06 173,688 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\CMAX20.DLL
+ 2003-08-16 10:26:32 65,600 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\CODEEDIT.DLL
+ 2003-08-16 10:27:38 309,888 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\DATAGATH.DLL
+ 2003-08-16 10:30:04 916,088 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\DBENGR.DLL
+ 2003-08-16 10:26:32 83,064 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\DBSHARE.DLL
+ 2003-08-16 10:29:12 668,216 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\DBWIZ.DLL
+ 2003-08-16 10:26:52 150,648 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\DWGCNV.DLL
+ 2003-08-16 10:31:04 2,089,592 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\DWGDP.DLL
+ 2003-08-16 10:26:20 49,720 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\EDITOR.EXE
+ 2003-08-16 10:26:46 148,600 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\EDITORS.DLL
+ 2003-08-16 10:27:08 178,304 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\ELEMENTS.DLL
+ 2003-08-16 10:26:46 110,208 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\ELEMUTIL.DLL
+ 2003-08-16 10:27:34 258,168 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\EXTRACT.DLL
+ 2003-08-16 10:30:34 1,106,560 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\FACILITY.DLL
+ 2003-08-16 10:30:34 1,142,840 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\GANTT.DLL
+ 2003-08-16 10:27:36 307,768 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\HVAC.DLL
+ 2003-08-16 10:28:38 533,632 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\IMCOMMON.DLL
+ 2003-08-16 10:26:58 143,480 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\IMUTIL.DLL
+ 2003-08-16 10:27:04 175,736 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\IMWDD.DLL
+ 2003-08-16 10:26:08 21,624 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\IMWIZ.DLL
+ 2003-08-16 10:27:14 208,504 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\IXUTIL.DLL
+ 2003-08-16 10:28:06 339,000 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\LGND.DLL
+ 2003-08-16 10:29:06 740,992 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\LOGELEMS.DLL
+ 2003-08-16 10:28:04 348,792 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\LOGVIEW.DLL
+ 2003-08-16 10:28:36 477,312 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\MODELENG.DLL
+ 2003-08-16 10:26:54 159,288 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\MPXINT.DLL
+ 2003-08-16 10:26:36 93,304 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\MSOUTLS.DLL
+ 2003-08-16 10:30:04 923,776 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\ORGCHART.DLL
+ 2003-08-16 10:28:34 461,952 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\ORGCHWIZ.DLL
+ 2003-08-16 10:26:18 48,184 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\ORGWIZ.EXE
+ 2003-08-16 10:27:40 333,952 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\ORMELEMS.DLL
+ 2003-08-16 10:27:38 326,776 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\PDSBASE.DLL
+ 2003-08-16 10:29:36 850,024 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\PE.DLL
+ 2003-08-16 10:26:24 56,896 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\PROJIMPT.EXE
+ 2003-08-16 10:27:02 156,224 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\PROJMODL.DLL
+ 2003-08-16 10:26:24 56,440 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\PROPMGR.DLL
+ 2003-08-16 10:29:06 754,232 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\PROPRPT.DLL
+ 2003-08-16 10:27:04 163,960 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\REPORT.DLL
+ 2003-08-16 10:28:34 434,304 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SAVASWEB.DLL
+ 2003-08-16 10:27:38 313,912 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SAVWBHF.DLL
+ 2003-08-16 10:27:34 266,816 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SAVWBRAS.DLL
+ 2003-08-16 10:27:34 263,744 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SAVWBVML.DLL
+ 2003-08-16 10:31:34 2,641,456 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SG.DLL
+ 2003-08-16 10:27:10 191,032 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SHAPNUM.DLL
+ 2003-08-16 10:27:04 162,432 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SMIGRATE.DLL
+ 2003-08-16 10:27:16 240,192 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SOLUTILS.DLL
+ 2003-08-16 10:27:06 181,376 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SQLSHARE.DLL
+ 2003-08-16 10:26:40 92,800 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\STYLEMGR.DLL
+ 2003-08-16 10:26:26 61,560 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\SUMINFO.DLL
+ 2003-08-16 10:29:36 873,088 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\TIMESOLN.DLL
+ 2003-08-16 10:26:20 47,160 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\TLIMPT.EXE
+ 2003-08-16 10:31:04 1,497,136 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\UML.DLL
+ 2003-08-16 10:29:10 550,456 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\UMLSYS.DLL
+ 2003-08-16 10:28:08 373,304 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\UMLVB.DLL
+ 2003-08-16 10:28:04 341,560 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\UMLVC60.DLL
+ 2003-08-16 10:28:06 394,296 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\UMLVS.DLL
+ 2003-08-16 10:26:36 93,752 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VAOSOLX.DLL
+ 2003-08-16 10:26:54 126,592 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VERBWIND.DLL
+ 2003-08-16 10:26:38 86,080 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VIEWMODL.DLL
+ 2003-08-16 10:31:34 7,799,864 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISBRGR.DLL
+ 2003-08-16 10:27:14 242,816 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISCOLOR.DLL
+ 2003-08-16 10:26:50 148,088 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISDLGU.DLL
+ 2003-08-16 10:31:34 2,271,800 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISFILT.DLL
+ 2003-08-16 10:27:36 308,856 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISGRF.DLL
+ 2003-08-16 10:27:12 186,936 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISIO.EXE
+ 2003-08-16 10:32:04 8,304,248 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISLIB.DLL
+ 2003-08-16 10:26:36 99,384 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISOCX.DLL
+ 2003-08-16 10:26:34 91,200 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISPRX32.DLL
+ 2003-08-16 10:29:34 785,464 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISSHE.DLL
+ 2003-08-16 10:29:04 583,224 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISSUPP.DLL
+ 2003-08-16 10:28:10 413,248 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISUTILS.DLL
+ 2003-08-16 10:30:04 998,520 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISWEB.DLL
+ 2003-08-16 10:26:22 53,888 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\VISXDATA.DLL
+ 2003-08-16 10:28:36 524,344 —-a-r c:\windows\Installer\$PatchCache$\Managed\9040150900063D11C8EF10054038389C\11.0.3216\XFUNC.DLL
- 2007-09-16 15:12:26 29,926 —-a-r c:\windows\Installer\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}\MsblIco.Exe
+ 2009-04-07 11:29:31 29,926 —-a-r c:\windows\Installer\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}\MsblIco.Exe
+ 2009-04-07 11:30:35 32,768 —-a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
- 2005-04-05 01:36:22 593,920 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-04-07 11:52:17 593,920 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2005-04-05 01:36:22 12,288 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-04-07 11:52:17 12,288 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2005-04-05 01:36:22 86,016 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-04-07 11:52:17 86,016 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2005-04-05 01:36:22 135,168 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-04-07 11:52:17 135,168 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2005-04-05 01:36:22 11,264 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-04-07 11:52:17 11,264 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2005-04-05 01:36:22 27,136 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-04-07 11:52:17 27,136 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2005-04-05 01:36:22 4,096 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-04-07 11:52:17 4,096 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2005-04-05 01:36:22 794,624 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-04-07 11:52:17 794,624 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2005-04-05 01:36:22 249,856 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-04-07 11:52:17 249,856 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2005-04-05 01:36:22 61,440 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-04-07 11:52:17 61,440 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2005-04-05 01:36:22 23,040 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-04-07 11:52:17 23,040 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2005-04-05 01:36:22 286,720 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-04-07 11:52:17 286,720 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2005-04-05 01:36:22 409,600 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-04-07 11:52:17 409,600 —-a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2005-06-16 00:04:55 12,288 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-04-07 11:46:57 12,288 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2005-06-16 00:04:55 135,168 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-04-07 11:46:57 135,168 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2005-06-16 00:04:55 4,096 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-04-07 11:46:57 4,096 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2005-06-16 00:04:55 176,128 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\visicon.exe
+ 2009-04-07 11:46:57 176,128 —-a-r c:\windows\Installer\{90510409-6000-11D3-8CFE-0150048383C9}\visicon.exe
+ 2008-01-18 15:13:09 2,247 ——w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
+ 2007-12-12 10:33:51 18,917 ——w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
+ 2007-10-30 10:06:46 13,801 ——w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
+ 2008-04-14 00:11:31 25,600 ——w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
- 2004-08-04 11:00:00 24,064 —-a-w c:\windows\msagent\agentanm.dll
+ 2008-04-14 00:11:48 24,064 —-a-w c:\windows\msagent\agentanm.dll
- 2004-08-04 11:00:00 214,016 —-a-w c:\windows\msagent\agentctl.dll
+ 2008-04-14 00:11:48 214,016 —-a-w c:\windows\msagent\agentctl.dll
- 2006-10-12 13:54:18 42,496 —-a-w c:\windows\msagent\agentdp2.dll
+ 2008-04-14 00:11:48 42,496 —-a-w c:\windows\msagent\agentdp2.dll
- 2007-03-09 13:58:57 57,344 —-a-w c:\windows\msagent\agentdpv.dll
+ 2008-04-14 00:11:48 57,344 —-a-w c:\windows\msagent\agentdpv.dll
- 2004-08-04 11:00:00 49,152 —-a-w c:\windows\msagent\agentmpx.dll
+ 2008-04-14 00:11:48 49,152 —-a-w c:\windows\msagent\agentmpx.dll
- 2004-08-04 11:00:00 24,064 —-a-w c:\windows\msagent\agentpsh.dll
+ 2008-04-14 00:11:48 24,064 —-a-w c:\windows\msagent\agentpsh.dll
- 2004-08-04 11:00:00 44,032 —-a-w c:\windows\msagent\agentsr.dll
+ 2008-04-14 00:11:48 44,032 —-a-w c:\windows\msagent\agentsr.dll
- 2006-10-12 11:54:07 256,512 —-a-w c:\windows\msagent\agentsvr.exe
+ 2008-04-14 00:12:12 256,512 —-a-w c:\windows\msagent\agentsvr.exe
- 2004-08-04 11:00:00 24,064 —-a-w c:\windows\msagent\agtintl.dll
+ 2008-04-14 00:11:49 24,064 —-a-w c:\windows\msagent\agtintl.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt0405.dll
+ 2007-04-02 18:25:59 19,456 —-a-w c:\windows\msagent\intl\agt0405.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt0406.dll
+ 2007-04-02 18:25:59 19,456 —-a-w c:\windows\msagent\intl\agt0406.dll
- 2004-08-04 11:00:00 21,504 —-a-w c:\windows\msagent\intl\agt0407.dll
+ 2007-04-02 18:26:00 21,504 —-a-w c:\windows\msagent\intl\agt0407.dll
- 2004-08-04 11:00:00 22,016 —-a-w c:\windows\msagent\intl\agt0408.dll
+ 2007-04-02 18:26:00 22,016 —-a-w c:\windows\msagent\intl\agt0408.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt0409.dll
+ 2008-04-13 17:32:28 19,968 —-a-w c:\windows\msagent\intl\agt0409.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt040b.dll
+ 2007-04-02 18:26:00 19,456 —-a-w c:\windows\msagent\intl\agt040b.dll
- 2004-08-04 11:00:00 21,504 —-a-w c:\windows\msagent\intl\agt040c.dll
+ 2007-04-02 18:26:00 21,504 —-a-w c:\windows\msagent\intl\agt040c.dll
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\msagent\intl\agt040e.dll
+ 2007-04-02 18:26:00 19,968 —-a-w c:\windows\msagent\intl\agt040e.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\msagent\intl\agt0410.dll
+ 2007-04-02 18:26:00 20,992 —-a-w c:\windows\msagent\intl\agt0410.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\msagent\intl\agt0413.dll
+ 2007-04-02 18:26:01 20,992 —-a-w c:\windows\msagent\intl\agt0413.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt0414.dll
+ 2007-04-02 18:26:01 19,456 —-a-w c:\windows\msagent\intl\agt0414.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt0415.dll
+ 2007-04-02 18:26:01 19,456 —-a-w c:\windows\msagent\intl\agt0415.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\msagent\intl\agt0416.dll
+ 2007-04-02 18:26:01 20,480 —-a-w c:\windows\msagent\intl\agt0416.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt0419.dll
+ 2007-04-02 18:26:01 19,456 —-a-w c:\windows\msagent\intl\agt0419.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt041d.dll
+ 2007-04-02 18:26:01 19,456 —-a-w c:\windows\msagent\intl\agt041d.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\msagent\intl\agt041f.dll
+ 2007-04-02 18:26:01 19,456 —-a-w c:\windows\msagent\intl\agt041f.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\msagent\intl\agt0816.dll
+ 2007-04-02 18:26:02 20,992 —-a-w c:\windows\msagent\intl\agt0816.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\msagent\intl\agt0c0a.dll
+ 2007-04-02 18:26:02 20,480 —-a-w c:\windows\msagent\intl\agt0c0a.dll
- 2004-08-04 11:00:00 39,936 —-a-w c:\windows\msagent\mslwvtts.dll
+ 2008-04-14 00:12:00 39,936 —-a-w c:\windows\msagent\mslwvtts.dll
- 2004-08-04 11:00:00 90,624 —-a-w c:\windows\mui\muisetup.exe
+ 2008-04-14 00:12:29 90,624 —-a-w c:\windows\mui\muisetup.exe
- 2006-06-03 11:40:49 33,792 ——w c:\windows\network diagnostic\custsat.dll
+ 2008-04-14 00:11:51 33,792 ——w c:\windows\network diagnostic\custsat.dll
- 2006-10-10 12:44:50 557,568 ——w c:\windows\network diagnostic\xpnetdiag.exe
+ 2008-04-13 18:53:32 558,080 ——w c:\windows\network diagnostic\xpnetdiag.exe
- 2004-08-04 11:00:00 69,120 —-a-w c:\windows\NOTEPAD.EXE
+ 2008-04-14 00:12:29 69,120 —-a-w c:\windows\notepad.exe
- 2004-08-04 11:00:00 768,512 —-a-w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe
+ 2008-04-14 00:12:21 769,024 —-a-w c:\windows\pchealth\helpctr\binaries\helpctr.exe
- 2004-08-04 11:00:00 743,936 —-a-w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
+ 2008-04-14 00:12:21 744,448 —-a-w c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\pchealth\helpctr\binaries\HscUpd.exe
+ 2008-04-14 00:12:21 18,432 —-a-w c:\windows\pchealth\helpctr\binaries\hscupd.exe
- 2004-08-04 11:00:00 158,208 —-a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
+ 2008-04-14 00:12:27 169,984 —-a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
- 2004-08-04 11:00:00 376,320 —-a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
+ 2008-04-14 00:11:59 376,832 —-a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
- 2004-08-04 11:00:00 102,400 —-a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
+ 2008-04-14 00:12:02 102,912 —-a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
- 2004-08-04 11:00:00 38,912 —-a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
+ 2008-04-14 00:12:02 38,400 —-a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
- 2005-03-29 23:52:57 88,415 —-a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
+ 2009-04-07 01:57:22 88,415 —-a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
- 2005-03-29 23:52:57 5,258 —-a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
+ 2009-04-07 01:57:22 5,996 —-a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
- 2004-08-04 11:00:00 150,528 —-a-w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe
+ 2008-04-14 00:12:38 150,528 —-a-w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe
- 2004-08-04 11:00:00 151,552 —-a-w c:\windows\PeerNet\sqldb20.dll
+ 2008-04-14 00:12:06 151,552 —-a-w c:\windows\PeerNet\sqldb20.dll
- 2004-08-04 11:00:00 462,848 —-a-w c:\windows\PeerNet\sqlqp20.dll
+ 2008-04-14 00:12:06 462,848 —-a-w c:\windows\PeerNet\sqlqp20.dll
- 2004-08-04 11:00:00 110,592 —-a-w c:\windows\PeerNet\sqlse20.dll
+ 2008-04-14 00:12:06 110,592 —-a-w c:\windows\PeerNet\sqlse20.dll
- 2004-08-04 11:00:00 146,432 —-a-w c:\windows\regedit.exe
+ 2008-04-14 00:12:32 146,432 —-a-w c:\windows\regedit.exe
+ 2008-04-13 18:46:18 53,376 ——w c:\windows\ServicePackFiles\i386\1394bus.sys
+ 2008-04-13 18:40:50 12,288 ——w c:\windows\ServicePackFiles\i386\4mmdat.sys
+ 2008-04-13 18:46:20 48,128 ——w c:\windows\ServicePackFiles\i386\61883.sys
+ 2008-04-14 00:11:48 100,352 ——w c:\windows\ServicePackFiles\i386\6to4svc.dll
+ 2008-04-14 00:11:48 136,192 ——w c:\windows\ServicePackFiles\i386\aaclient.dll
+ 2004-08-04 02:32:22 231,552 ——w c:\windows\ServicePackFiles\i386\ac97ali.sys
+ 2004-08-04 02:32:32 84,480 ——w c:\windows\ServicePackFiles\i386\ac97via.sys
+ 2008-04-14 00:11:48 39,424 ——w c:\windows\ServicePackFiles\i386\acadproc.dll
+ 2008-04-14 00:12:11 184,320 ——w c:\windows\ServicePackFiles\i386\accwiz.exe
+ 2008-04-14 00:11:48 1,852,928 ——w c:\windows\ServicePackFiles\i386\acgenral.dll
+ 2008-04-14 00:11:48 451,072 ——w c:\windows\ServicePackFiles\i386\aclayers.dll
+ 2008-04-14 00:11:48 141,312 ——w c:\windows\ServicePackFiles\i386\aclua.dll
+ 2008-04-14 00:11:48 115,712 ——w c:\windows\ServicePackFiles\i386\aclui.dll
+ 2008-04-13 18:36:35 187,776 ——w c:\windows\ServicePackFiles\i386\acpi.sys
+ 2008-04-14 00:11:48 245,248 ——w c:\windows\ServicePackFiles\i386\acspecfc.dll
+ 2008-04-14 00:11:48 193,536 ——w c:\windows\ServicePackFiles\i386\activeds.dll
+ 2008-04-14 00:12:12 4,096 ——w c:\windows\ServicePackFiles\i386\actmovie.exe
+ 2008-04-14 00:11:48 98,304 ——w c:\windows\ServicePackFiles\i386\actxprxy.dll
+ 2008-04-14 00:11:48 116,224 ——w c:\windows\ServicePackFiles\i386\acxtrnal.dll
+ 2008-04-14 00:11:48 29,696 ——w c:\windows\ServicePackFiles\i386\admexs.dll
+ 2008-04-14 00:11:48 20,540 ——w c:\windows\ServicePackFiles\i386\admin.dll
+ 2008-04-14 00:12:12 16,439 ——w c:\windows\ServicePackFiles\i386\admin.exe
+ 2004-08-04 02:32:24 10,880 ——w c:\windows\ServicePackFiles\i386\admjoy.sys
+ 2008-04-14 00:11:48 61,440 ——w c:\windows\ServicePackFiles\i386\admparse.dll
+ 2008-04-14 00:11:48 43,520 ——w c:\windows\ServicePackFiles\i386\admwprox.dll
+ 2008-04-14 00:11:48 290,816 ——w c:\windows\ServicePackFiles\i386\adsiis51.dll
+ 2008-04-14 00:11:48 175,616 ——w c:\windows\ServicePackFiles\i386\adsldp.dll
+ 2008-04-14 00:11:48 143,360 ——w c:\windows\ServicePackFiles\i386\adsldpc.dll
+ 2008-04-14 00:11:48 68,096 ——w c:\windows\ServicePackFiles\i386\adsmsext.dll
+ 2008-04-14 00:11:48 263,680 ——w c:\windows\ServicePackFiles\i386\adsnt.dll
+ 2008-04-14 00:11:48 123,392 ——w c:\windows\ServicePackFiles\i386\adsnw.dll
+ 2004-07-17 15:35:20 85,813 ——w c:\windows\ServicePackFiles\i386\adsutil.vbs
+ 2008-04-14 00:11:48 4,255 ——w c:\windows\ServicePackFiles\i386\adv01nt5.dll
+ 2008-04-14 00:11:48 3,967 ——w c:\windows\ServicePackFiles\i386\adv02nt5.dll
+ 2008-04-14 00:11:48 3,615 ——w c:\windows\ServicePackFiles\i386\adv05nt5.dll
+ 2008-04-14 00:11:48 3,647 ——w c:\windows\ServicePackFiles\i386\adv07nt5.dll
+ 2008-04-14 00:11:48 3,135 ——w c:\windows\ServicePackFiles\i386\adv08nt5.dll
+ 2008-04-14 00:11:48 3,711 ——w c:\windows\ServicePackFiles\i386\adv09nt5.dll
+ 2008-04-14 00:11:48 3,775 ——w c:\windows\ServicePackFiles\i386\adv11nt5.dll
+ 2008-04-14 00:11:48 617,472 ——w c:\windows\ServicePackFiles\i386\advapi32.dll
+ 2008-04-14 00:11:48 99,840 ——w c:\windows\ServicePackFiles\i386\advpack.dll
+ 2008-04-13 16:39:23 142,592 ——w c:\windows\ServicePackFiles\i386\aec.sys
+ 2008-04-13 19:19:23 138,112 ——w c:\windows\ServicePackFiles\i386\afd.sys
+ 2008-04-14 00:11:48 24,064 ——w c:\windows\ServicePackFiles\i386\agentanm.dll
+ 2008-04-14 00:11:48 214,016 ——w c:\windows\ServicePackFiles\i386\agentctl.dll
+ 2008-04-14 00:11:48 42,496 ——w c:\windows\ServicePackFiles\i386\agentdp2.dll
+ 2008-04-14 00:11:48 57,344 ——w c:\windows\ServicePackFiles\i386\agentdpv.dll
+ 2008-04-14 00:11:48 49,152 ——w c:\windows\ServicePackFiles\i386\agentmpx.dll
+ 2008-04-14 00:11:48 24,064 ——w c:\windows\ServicePackFiles\i386\agentpsh.dll
+ 2008-04-14 00:11:48 44,032 ——w c:\windows\ServicePackFiles\i386\agentsr.dll
+ 2008-04-14 00:12:12 256,512 ——w c:\windows\ServicePackFiles\i386\agentsvr.exe
+ 2008-04-13 18:36:38 42,368 ——w c:\windows\ServicePackFiles\i386\agp440.sys
+ 2008-04-13 18:36:39 44,928 ——w c:\windows\ServicePackFiles\i386\agpcpq.sys
+ 2007-04-02 18:25:59 19,456 ——w c:\windows\ServicePackFiles\i386\agt0401.dll
+ 2007-04-02 18:25:59 19,456 ——w c:\windows\ServicePackFiles\i386\agt0404.dll
+ 2007-04-02 18:25:59 19,456 ——w c:\windows\ServicePackFiles\i386\agt0405.dll
+ 2007-04-02 18:25:59 19,456 ——w c:\windows\ServicePackFiles\i386\agt0406.dll
+ 2007-04-02 18:26:00 21,504 ——w c:\windows\ServicePackFiles\i386\agt0407.dll
+ 2007-04-02 18:26:00 22,016 ——w c:\windows\ServicePackFiles\i386\agt0408.dll
+ 2008-04-13 17:32:28 19,968 ——w c:\windows\ServicePackFiles\i386\agt0409.dll
+ 2007-04-02 18:26:00 19,456 ——w c:\windows\ServicePackFiles\i386\agt040b.dll
+ 2007-04-02 18:26:00 21,504 ——w c:\windows\ServicePackFiles\i386\agt040c.dll
+ 2007-04-02 18:26:00 19,456 ——w c:\windows\ServicePackFiles\i386\agt040d.dll
+ 2007-04-02 18:26:00 19,968 ——w c:\windows\ServicePackFiles\i386\agt040e.dll
+ 2007-04-02 18:26:00 20,992 ——w c:\windows\ServicePackFiles\i386\agt0410.dll
+ 2007-04-02 18:26:00 19,456 ——w c:\windows\ServicePackFiles\i386\agt0411.dll
+ 2007-04-02 18:26:00 19,456 ——w c:\windows\ServicePackFiles\i386\agt0412.dll
+ 2007-04-02 18:26:01 20,992 ——w c:\windows\ServicePackFiles\i386\agt0413.dll
+ 2007-04-02 18:26:01 19,456 ——w c:\windows\ServicePackFiles\i386\agt0414.dll
+ 2007-04-02 18:26:01 19,456 ——w c:\windows\ServicePackFiles\i386\agt0415.dll
+ 2007-04-02 18:26:01 20,480 ——w c:\windows\ServicePackFiles\i386\agt0416.dll
+ 2007-04-02 18:26:01 19,456 ——w c:\windows\ServicePackFiles\i386\agt0419.dll
+ 2007-04-02 18:26:01 19,456 ——w c:\windows\ServicePackFiles\i386\agt041d.dll
+ 2007-04-02 18:26:01 19,456 ——w c:\windows\ServicePackFiles\i386\agt041f.dll
+ 2007-04-02 18:26:02 19,456 ——w c:\windows\ServicePackFiles\i386\agt0804.dll
+ 2007-04-02 18:26:02 20,992 ——w c:\windows\ServicePackFiles\i386\agt0816.dll
+ 2007-04-02 18:26:02 20,480 ——w c:\windows\ServicePackFiles\i386\agt0c0a.dll
+ 2008-04-14 00:11:49 24,064 ——w c:\windows\ServicePackFiles\i386\agtintl.dll
+ 2008-04-14 00:12:12 98,304 ——w c:\windows\ServicePackFiles\i386\ahui.exe
+ 2008-04-14 00:12:12 44,544 ——w c:\windows\ServicePackFiles\i386\alg.exe
+ 2008-04-13 18:36:38 42,752 ——w c:\windows\ServicePackFiles\i386\alim1541.sys
+ 2008-04-14 00:11:49 17,408 ——w c:\windows\ServicePackFiles\i386\alrsvc.dll
+ 2008-04-13 18:36:39 43,008 ——w c:\windows\ServicePackFiles\i386\amdagp.sys
+ 2008-04-13 18:31:32 37,376 ——w c:\windows\ServicePackFiles\i386\amdk6.sys
+ 2008-04-13 18:31:33 37,760 ——w c:\windows\ServicePackFiles\i386\amdk7.sys
+ 2008-04-14 00:11:49 70,656 ——w c:\windows\ServicePackFiles\i386\amstream.dll
+ 2004-08-04 02:31:20 36,224 ——w c:\windows\ServicePackFiles\i386\an983.sys
+ 2008-04-14 00:11:49 108,544 ——w c:\windows\ServicePackFiles\i386\appconf.dll
+ 2008-04-14 00:11:49 125,952 ——w c:\windows\ServicePackFiles\i386\apphelp.dll
+ 2008-04-14 00:11:49 167,936 ——w c:\windows\ServicePackFiles\i386\appmgmts.dll
+ 2008-04-14 00:11:49 295,936 ——w c:\windows\ServicePackFiles\i386\appmgr.dll
+ 2008-04-14 00:11:49 331,264 ——w c:\windows\ServicePackFiles\i386\aqueue.dll
+ 2008-04-13 18:51:25 60,800 ——w c:\windows\ServicePackFiles\i386\arp1394.sys
+ 2008-04-14 00:11:49 369,664 ——w c:\windows\ServicePackFiles\i386\asp51.dll
+ 2008-04-13 16:09:58 20,480 ——w c:\windows\ServicePackFiles\i386\aspnet_filter.dll
+ 2008-04-13 16:09:59 200,704 ——w c:\windows\ServicePackFiles\i386\aspnet_isapi.dll
+ 2008-04-13 16:10:01 24,576 ——w c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
+ 2008-04-13 16:10:01 32,768 ——w c:\windows\ServicePackFiles\i386\aspnet_state.exe
+ 2008-04-13 16:10:01 32,768 ——w c:\windows\ServicePackFiles\i386\aspnet_wp.exe
+ 2008-04-14 00:12:12 30,208 ——w c:\windows\ServicePackFiles\i386\asr_fmt.exe
+ 2008-04-14 00:12:12 32,768 ——w c:\windows\ServicePackFiles\i386\asr_pfu.exe
+ 2008-04-14 00:11:49 65,024 ——w c:\windows\ServicePackFiles\i386\asycfilt.dll
+ 2008-04-13 18:57:27 14,336 ——w c:\windows\ServicePackFiles\i386\asyncmac.sys
+ 2008-04-14 00:12:12 25,088 ——w c:\windows\ServicePackFiles\i386\at.exe
+ 2008-04-13 18:40:30 96,512 ——w c:\windows\ServicePackFiles\i386\atapi.sys
+ 2004-08-04 02:29:30 56,623 ——w c:\windows\ServicePackFiles\i386\ati1btxx.sys
+ 2004-08-04 02:29:30 11,615 ——w c:\windows\ServicePackFiles\i386\ati1mdxx.sys
+ 2004-08-04 02:29:30 12,047 ——w c:\windows\ServicePackFiles\i386\ati1pdxx.sys
+ 2004-08-04 02:29:32 30,671 ——w c:\windows\ServicePackFiles\i386\ati1raxx.sys
+ 2004-08-04 02:29:32 63,663 ——w c:\windows\ServicePackFiles\i386\ati1rvxx.sys
+ 2004-08-04 02:29:32 26,367 ——w c:\windows\ServicePackFiles\i386\ati1snxx.sys
+ 2004-08-04 02:29:32 21,343 ——w c:\windows\ServicePackFiles\i386\ati1ttxx.sys
+ 2004-08-04 02:29:32 36,463 ——w c:\windows\ServicePackFiles\i386\ati1tuxx.sys
+ 2004-08-04 02:29:32 29,455 ——w c:\windows\ServicePackFiles\i386\ati1xbxx.sys
+ 2004-08-04 02:29:32 34,735 ——w c:\windows\ServicePackFiles\i386\ati1xsxx.sys
+ 2008-04-14 00:11:49 229,376 ——w c:\windows\ServicePackFiles\i386\ati2cqag.dll
+ 2008-04-14 00:11:49 377,984 ——w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
+ 2008-04-14 00:11:49 201,728 ——w c:\windows\ServicePackFiles\i386\ati2dvag.dll
+ 2004-08-04 02:29:28 327,040 ——w c:\windows\ServicePackFiles\i386\ati2mtaa.sys
+ 2004-08-04 02:29:28 701,440 ——w c:\windows\ServicePackFiles\i386\ati2mtag.sys
+ 2008-04-14 00:11:49 870,784 ——w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
+ 2008-04-14 00:11:49 1,057,760 ——w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
+ 2008-04-14 00:11:50 1,888,992 ——w c:\windows\ServicePackFiles\i386\ati3duag.dll
+ 2004-08-04 02:29:28 57,856 ——w c:\windows\ServicePackFiles\i386\atinbtxx.sys
+ 2004-08-04 02:29:30 13,824 ——w c:\windows\ServicePackFiles\i386\atinmdxx.sys
+ 2004-08-04 02:29:30 14,336 ——w c:\windows\ServicePackFiles\i386\atinpdxx.sys
+ 2004-08-04 02:29:30 52,224 ——w c:\windows\ServicePackFiles\i386\atinraxx.sys
+ 2004-08-04 02:29:32 104,960 ——w c:\windows\ServicePackFiles\i386\atinrvxx.sys
+ 2004-08-04 02:29:32 28,672 ——w c:\windows\ServicePackFiles\i386\atinsnxx.sys
+ 2004-08-04 02:29:32 13,824 ——w c:\windows\ServicePackFiles\i386\atinttxx.sys
+ 2004-08-04 02:29:32 73,216 ——w c:\windows\ServicePackFiles\i386\atintuxx.sys
+ 2004-08-04 02:29:32 31,744 ——w c:\windows\ServicePackFiles\i386\atinxbxx.sys
+ 2004-08-04 02:29:32 63,488 ——w c:\windows\ServicePackFiles\i386\atinxsxx.sys
+ 2008-04-14 00:11:50 32,768 ——w c:\windows\ServicePackFiles\i386\ativtmxx.dll
+ 2008-04-14 00:11:50 516,768 ——w c:\windows\ServicePackFiles\i386\ativvaxx.dll
+ 2008-04-14 00:11:50 58,880 ——w c:\windows\ServicePackFiles\i386\atl.dll
+ 2008-04-14 00:12:12 11,264 ——w c:\windows\ServicePackFiles\i386\atmadm.exe
+ 2008-04-13 18:51:25 59,904 ——w c:\windows\ServicePackFiles\i386\atmarpc.sys
+ 2008-04-14 00:09:01 285,696 ——w c:\windows\ServicePackFiles\i386\atmfd.dll
+ 2008-04-13 18:51:30 55,808 ——w c:\windows\ServicePackFiles\i386\atmlane.sys
+ 2008-04-14 00:11:50 30,208 ——w c:\windows\ServicePackFiles\i386\atmlib.dll
+ 2008-04-14 00:12:12 12,288 ——w c:\windows\ServicePackFiles\i386\attrib.exe
+ 2008-04-14 00:11:50 21,183 ——w c:\windows\ServicePackFiles\i386\atv01nt5.dll
+ 2008-04-14 00:11:50 11,359 ——w c:\windows\ServicePackFiles\i386\atv02nt5.dll
+ 2008-04-14 00:11:50 25,471 ——w c:\windows\ServicePackFiles\i386\atv04nt5.dll
+ 2008-04-14 00:11:50 14,143 ——w c:\windows\ServicePackFiles\i386\atv06nt5.dll
+ 2008-04-14 00:11:50 17,279 ——w c:\windows\ServicePackFiles\i386\atv10nt5.dll
+ 2008-04-14 00:11:50 42,496 ——w c:\windows\ServicePackFiles\i386\audiosrv.dll
+ 2008-04-14 00:12:12 14,336 ——w c:\windows\ServicePackFiles\i386\auditusr.exe
+ 2008-04-14 00:11:50 20,540 ——w c:\windows\ServicePackFiles\i386\author.dll
+ 2008-04-14 00:12:12 16,439 ——w c:\windows\ServicePackFiles\i386\author.exe
+ 2008-04-14 00:11:50 62,464 ——w c:\windows\ServicePackFiles\i386\authz.dll
+ 2008-04-14 00:12:12 588,800 ——w c:\windows\ServicePackFiles\i386\autochk.exe
+ 2008-04-14 00:12:12 602,624 ——w c:\windows\ServicePackFiles\i386\autoconv.exe
+ 2008-04-14 00:12:13 580,608 ——w c:\windows\ServicePackFiles\i386\autofmt.exe
+ 2008-04-14 00:12:13 11,264 ——w c:\windows\ServicePackFiles\i386\autolfn.exe
+ 2008-04-13 18:46:20 38,912 ——w c:\windows\ServicePackFiles\i386\avc.sys
+ 2008-04-13 18:46:07 13,696 ——w c:\windows\ServicePackFiles\i386\avcstrm.sys
+ 2008-04-14 00:11:50 84,992 ——w c:\windows\ServicePackFiles\i386\avifil32.dll
+ 2008-04-14 00:11:50 233,472 ——w c:\windows\ServicePackFiles\i386\azroles.dll
+ 2008-04-14 00:11:50 52,736 ——w c:\windows\ServicePackFiles\i386\basesrv.dll
+ 2008-04-14 00:11:50 29,184 ——w c:\windows\ServicePackFiles\i386\batmeter.dll
+ 2008-04-14 00:11:50 8,704 ——w c:\windows\ServicePackFiles\i386\batt.dll
+ 2008-04-13 18:36:32 14,208 ——w c:\windows\ServicePackFiles\i386\battc.sys
+ 2008-04-13 18:46:21 11,776 ——w c:\windows\ServicePackFiles\i386\bdasup.sys
+ 2008-04-14 00:11:50 17,408 ——w c:\windows\ServicePackFiles\i386\bidispl.dll
+ 2008-04-14 00:11:50 8,192 ——w c:\windows\ServicePackFiles\i386\bitsprx2.dll
+ 2008-04-14 00:11:50 7,168 ——w c:\windows\ServicePackFiles\i386\bitsprx3.dll
+ 2008-04-14 00:11:50 7,168 ——w c:\windows\ServicePackFiles\i386\bitsprx4.dll
+ 2008-04-14 00:12:13 71,680 ——w c:\windows\ServicePackFiles\i386\blastcln.exe
+ 2008-04-14 00:12:13 142,848 ——w c:\windows\ServicePackFiles\i386\bootcfg.exe
+ 2008-04-13 18:53:23 71,552 ——w c:\windows\ServicePackFiles\i386\bridge.sys
+ 2008-04-13 17:03:24 63,488 ——w c:\windows\ServicePackFiles\i386\browselc.dll
+ 2008-04-14 00:11:50 77,824 ——w c:\windows\ServicePackFiles\i386\browser.dll
+ 2008-04-14 00:11:50 1,025,024 ——w c:\windows\ServicePackFiles\i386\browseui.dll
+ 2008-04-14 00:11:50 78,336 ——w c:\windows\ServicePackFiles\i386\browsewm.dll
+ 2008-04-14 00:11:50 20,992 ——w c:\windows\ServicePackFiles\i386\bthci.dll
+ 2008-04-13 18:46:33 17,024 ——w c:\windows\ServicePackFiles\i386\bthenum.sys
+ 2008-04-13 18:46:33 37,888 ——w c:\windows\ServicePackFiles\i386\bthmodem.sys
+ 2008-04-13 18:51:34 101,120 ——w c:\windows\ServicePackFiles\i386\bthpan.sys
+ 2008-04-13 18:46:32 273,024 ——w c:\windows\ServicePackFiles\i386\bthport.sys
+ 2008-04-13 18:46:31 36,480 ——w c:\windows\ServicePackFiles\i386\bthprint.sys
+ 2008-04-14 00:11:50 30,208 ——w c:\windows\ServicePackFiles\i386\bthserv.dll
+ 2008-04-13 18:46:29 18,944 ——w c:\windows\ServicePackFiles\i386\bthusb.sys
+ 2008-04-14 00:11:50 50,688 ——w c:\windows\ServicePackFiles\i386\btpanui.dll
+ 2008-04-14 00:11:50 218,112 ——w c:\windows\ServicePackFiles\i386\c_g18030.dll
+ 2008-04-14 00:11:50 60,416 ——w c:\windows\ServicePackFiles\i386\cabinet.dll
+ 2008-04-14 00:11:50 84,480 ——w c:\windows\ServicePackFiles\i386\cabview.dll
+ 2008-04-14 00:12:13 19,968 ——w c:\windows\ServicePackFiles\i386\cacls.exe
+ 2008-04-14 00:11:50 385,024 ——w c:\windows\ServicePackFiles\i386\callcont.dll
+ 2008-04-14 00:11:50 121,856 ——w c:\windows\ServicePackFiles\i386\camext30.dll
+ 2008-04-14 00:11:50 50,688 ——w c:\windows\ServicePackFiles\i386\camocx.dll
+ 2008-04-14 00:11:50 150,016 ——w c:\windows\ServicePackFiles\i386\capesnpn.dll
+ 2007-06-27 12:53:18 94,208 ——w c:\windows\ServicePackFiles\i386\caspol.exe
+ 2008-04-14 00:11:50 226,304 ——w c:\windows\ServicePackFiles\i386\catsrv.dll
+ 2008-04-14 00:11:50 85,504 ——w c:\windows\ServicePackFiles\i386\catsrvps.dll
+ 2008-04-14 00:11:50 625,664 ——w c:\windows\ServicePackFiles\i386\catsrvut.dll
+ 2008-04-13 18:46:23 17,024 ——w c:\windows\ServicePackFiles\i386\ccdecode.sys
+ 2008-04-13 19:14:21 63,744 ——w c:\windows\ServicePackFiles\i386\cdfs.sys
+ 2008-04-14 00:11:50 151,040 ——w c:\windows\ServicePackFiles\i386\cdfview.dll
+ 2008-04-14 00:11:50 66,560 ——w c:\windows\ServicePackFiles\i386\cdm.dll
+ 2008-04-14 00:11:50 2,091,520 ——w c:\windows\ServicePackFiles\i386\cdosys.dll
+ 2008-04-13 18:40:46 62,976 ——w c:\windows\ServicePackFiles\i386\cdrom.sys
+ 2008-04-14 00:11:50 194,560 ——w c:\windows\ServicePackFiles\i386\certcli.dll
+ 2008-04-14 00:11:50 457,728 ——w c:\windows\ServicePackFiles\i386\certmgr.dll
+ 2008-04-14 00:11:50 38,912 ——w c:\windows\ServicePackFiles\i386\cfgbkend.dll
+ 2008-04-14 00:09:05 16,896 ——w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
+ 2008-04-14 00:12:14 188,480 ——w c:\windows\ServicePackFiles\i386\cfgwiz.exe
+ 2008-04-14 00:11:50 15,423 ——w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
+ 2008-04-13 18:40:58 8,192 ——w c:\windows\ServicePackFiles\i386\changer.sys
+ 2008-04-14 00:11:50 148,480 ——w c:\windows\ServicePackFiles\i386\cic.dll
+ 2008-04-14 00:11:50 1,358,848 ——w c:\windows\ServicePackFiles\i386\cimwin32.dll
+ 2008-04-14 00:11:50 69,120 ——w c:\windows\ServicePackFiles\i386\ciodm.dll
+ 2008-04-14 00:12:14 56,832 ——w c:\windows\ServicePackFiles\i386\cipher.exe
+ 2008-04-14 00:12:14 5,632 ——w c:\windows\ServicePackFiles\i386\cisvc.exe
+ 2008-04-13 19:16:22 49,536 ——w c:\windows\ServicePackFiles\i386\classpnp.sys
+ 2008-04-14 00:11:50 110,592 ——w c:\windows\ServicePackFiles\i386\clbcatex.dll
+ 2008-04-14 00:11:50 498,688 ——w c:\windows\ServicePackFiles\i386\clbcatq.dll
+ 2008-04-14 00:12:14 64,000 ——w c:\windows\ServicePackFiles\i386\cleanmgr.exe
+ 2008-04-14 00:11:50 77,824 ——w c:\windows\ServicePackFiles\i386\cliconfg.dll
+ 2008-04-14 00:12:14 20,480 ——w c:\windows\ServicePackFiles\i386\cliconfg.exe
+ 2008-04-14 00:12:14 102,912 ——w c:\windows\ServicePackFiles\i386\clipbrd.exe
+ 2008-04-14 00:12:14 33,280 ——w c:\windows\ServicePackFiles\i386\clipsrv.exe
+ 2008-04-14 00:11:50 58,368 ——w c:\windows\ServicePackFiles\i386\clusapi.dll
+ 2008-04-13 18:36:37 13,952 ——w c:\windows\ServicePackFiles\i386\cmbatt.sys
+ 2008-04-14 00:11:50 15,872 ——w c:\windows\ServicePackFiles\i386\cmcfg32.dll
+ 2008-04-14 00:12:14 389,120 ——w c:\windows\ServicePackFiles\i386\cmd.exe
+ 2008-04-14 00:11:50 344,064 ——w c:\windows\ServicePackFiles\i386\cmdial32.dll
+ 2008-04-14 00:12:14 25,600 ——w c:\windows\ServicePackFiles\i386\cmdl32.exe
+ 2008-04-14 00:12:15 39,936 ——w c:\windows\ServicePackFiles\i386\cmmon32.exe
+ 2008-04-14 00:11:50 185,344 ——w c:\windows\ServicePackFiles\i386\cmprops.dll
+ 2008-04-14 00:11:50 13,312 ——w c:\windows\ServicePackFiles\i386\cmsetacl.dll
+ 2008-04-14 00:12:15 63,488 ——w c:\windows\ServicePackFiles\i386\cmstp.exe
+ 2008-04-14 00:11:50 39,424 ——w c:\windows\ServicePackFiles\i386\cmutil.dll
+ 2008-04-14 00:11:50 47,104 ——w c:\windows\ServicePackFiles\i386\cnbjmon.dll
+ 2008-04-14 00:11:50 79,360 ——w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
+ 2008-04-14 00:11:51 46,592 ——w c:\windows\ServicePackFiles\i386\coadmin.dll
+ 2008-04-13 16:44:16 17,920 ——w c:\windows\ServicePackFiles\i386\cobramsg.dll
+ 2008-04-14 00:11:51 60,416 ——w c:\windows\ServicePackFiles\i386\colbact.dll
+ 2008-04-14 00:11:51 28,160 ——w c:\windows\ServicePackFiles\i386\comaddin.dll
+ 2008-04-14 00:11:51 195,072 ——w c:\windows\ServicePackFiles\i386\comadmin.dll
+ 2008-04-14 00:11:51 617,472 ——w c:\windows\ServicePackFiles\i386\comctl32.dll
+ 2008-04-14 00:11:51 276,992 ——w c:\windows\ServicePackFiles\i386\comdlg32.dll
+ 2008-04-14 00:11:51 252,928 ——w c:\windows\ServicePackFiles\i386\compatui.dll
+ 2008-04-13 18:36:37 10,240 ——w c:\windows\ServicePackFiles\i386\compbatt.sys
+ 2008-04-14 00:11:51 24,064 ——w c:\windows\ServicePackFiles\i386\compfilt.dll
+ 2008-04-14 00:11:51 229,376 ——w c:\windows\ServicePackFiles\i386\compstui.dll
+ 2008-04-14 00:11:51 97,792 ——w c:\windows\ServicePackFiles\i386\comrepl.dll
+ 2008-04-14 00:12:15 9,728 ——w c:\windows\ServicePackFiles\i386\comrepl.exe
+ 2008-04-14 00:12:15 6,144 ——w c:\windows\ServicePackFiles\i386\comrereg.exe
+ 2008-04-14 00:11:51 792,064 ——w c:\windows\ServicePackFiles\i386\comres.dll
+ 2008-04-13 18:43:32 9,728 ——w c:\windows\ServicePackFiles\i386\comsdupd.exe
+ 2008-04-14 00:11:51 274,944 ——w c:\windows\ServicePackFiles\i386\comsetup.dll
+ 2008-04-14 00:11:51 167,424 ——w c:\windows\ServicePackFiles\i386\comsnap.dll
+ 2008-04-14 00:11:51 1,267,200 ——w c:\windows\ServicePackFiles\i386\comsvcs.dll
+ 2008-04-14 00:11:51 539,648 ——w c:\windows\ServicePackFiles\i386\comuid.dll
+ 2008-04-14 00:12:15 1,032,192 ——w c:\windows\ServicePackFiles\i386\conf.exe
+ 2008-04-14 00:11:51 45,056 ——w c:\windows\ServicePackFiles\i386\confmrsl.dll
+ 2008-04-14 00:11:51 357,888 ——w c:\windows\ServicePackFiles\i386\confmsp.dll
+ 2008-04-14 00:12:15 27,648 ——w c:\windows\ServicePackFiles\i386\conime.exe
+ 2008-04-13 16:10:05 69,632 ——w c:\windows\ServicePackFiles\i386\corperfmonext.dll
+ 2008-04-14 00:11:51 35,328 ——w c:\windows\ServicePackFiles\i386\corpol.dll
+ 2008-04-14 00:11:51 12,800 ——w c:\windows\ServicePackFiles\i386\credssp.dll
+ 2008-04-14 00:11:51 163,840 ——w c:\windows\ServicePackFiles\i386\credui.dll
+ 2008-04-13 18:31:32 36,736 ——w c:\windows\ServicePackFiles\i386\crusoe.sys
+ 2008-04-14 00:11:51 599,040 ——w c:\windows\ServicePackFiles\i386\crypt32.dll
+ 2008-04-14 00:11:51 74,752 ——w c:\windows\ServicePackFiles\i386\cryptdlg.dll
+ 2008-04-14 00:11:51 33,280 ——w c:\windows\ServicePackFiles\i386\cryptdll.dll
+ 2008-04-14 00:11:51 53,760 ——w c:\windows\ServicePackFiles\i386\cryptext.dll
+ 2008-04-14 00:11:51 64,512 ——w c:\windows\ServicePackFiles\i386\cryptnet.dll
+ 2008-04-14 00:11:51 62,464 ——w c:\windows\ServicePackFiles\i386\cryptsvc.dll
+ 2008-04-14 00:11:51 512,512 ——w c:\windows\ServicePackFiles\i386\cryptui.dll
+ 2008-04-13 16:10:13 49,152 ——w c:\windows\ServicePackFiles\i386\csc.exe
+ 2008-04-14 00:11:51 101,888 ——w c:\windows\ServicePackFiles\i386\cscdll.dll
+ 2007-06-27 12:53:47 589,824 ——w c:\windows\ServicePackFiles\i386\cscomp.dll
+ 2008-04-14 00:12:15 139,264 ——w c:\windows\ServicePackFiles\i386\cscript.exe
+ 2008-04-14 00:11:51 326,656 ——w c:\windows\ServicePackFiles\i386\cscui.dll
+ 2008-04-14 00:11:51 32,256 ——w c:\windows\ServicePackFiles\i386\csrsrv.dll
+ 2008-04-14 00:12:15 6,144 ——w c:\windows\ServicePackFiles\i386\csrss.exe
+ 2008-04-14 00:12:16 15,360 ——w c:\windows\ServicePackFiles\i386\ctfmon.exe
+ 2008-04-14 00:11:51 249,856 ——w c:\windows\ServicePackFiles\i386\ctmasetp.dll
+ 2008-04-14 00:11:51 33,792 ——w c:\windows\ServicePackFiles\i386\custsat.dll
+ 2004-08-04 02:32:26 48,640 ——w c:\windows\ServicePackFiles\i386\cwrwdm.sys
+ 2008-04-14 00:11:51 1,179,648 ——w c:\windows\ServicePackFiles\i386\d3d8.dll
+ 2008-04-14 00:11:51 8,192 ——w c:\windows\ServicePackFiles\i386\d3d8thk.dll
+ 2008-04-14 00:11:51 1,689,088 ——w c:\windows\ServicePackFiles\i386\d3d9.dll
+ 2008-04-14 00:11:51 824,320 ——w c:\windows\ServicePackFiles\i386\d3dim700.dll
+ 2008-04-14 00:11:51 1,054,208 ——w c:\windows\ServicePackFiles\i386\danim.dll
+ 2008-03-25 04:50:25 554,008 ——w c:\windows\ServicePackFiles\i386\dao360.dll
+ 2008-04-14 00:11:51 54,272 ——w c:\windows\ServicePackFiles\i386\dataclen.dll
+ 2008-04-14 00:11:51 165,376 ——w c:\windows\ServicePackFiles\i386\datime.dll
+ 2008-04-14 00:12:16 42,496 ——w c:\windows\ServicePackFiles\i386\davcdata.exe
+ 2008-04-14 00:11:51 25,088 ——w c:\windows\ServicePackFiles\i386\davclnt.dll
+ 2008-04-14 00:11:51 640,000 ——w c:\windows\ServicePackFiles\i386\dbghelp.dll
+ 2008-04-14 00:11:51 24,576 ——w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
+ 2008-04-14 00:11:51 110,592 ——w c:\windows\ServicePackFiles\i386\dbnetlib.dll
+ 2008-04-14 00:11:51 28,672 ——w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
+ 2008-04-14 00:25:26 1,804 ——w c:\windows\ServicePackFiles\i386\dcache.bin
+ 2008-04-14 00:11:51 40,960 ——w c:\windows\ServicePackFiles\i386\dcap32.dll
+ 2008-04-14 00:11:51 8,704 ——w c:\windows\ServicePackFiles\i386\dciman32.dll
+ 2008-04-14 00:12:16 6,144 ——w c:\windows\ServicePackFiles\i386\dcomcnfg.exe
+ 2008-04-14 00:12:16 30,208 ——w c:\windows\ServicePackFiles\i386\ddeshare.exe
+ 2008-04-14 00:11:51 279,552 ——w c:\windows\ServicePackFiles\i386\ddraw.dll
+ 2008-04-14 00:11:51 27,136 ——w c:\windows\ServicePackFiles\i386\ddrawex.dll
+ 2008-04-14 00:12:16 25,088 ——w c:\windows\ServicePackFiles\i386\defrag.exe
+ 2008-04-14 00:11:51 59,904 ——w c:\windows\ServicePackFiles\i386\devenum.dll
+ 2008-04-14 00:11:51 282,624 ——w c:\windows\ServicePackFiles\i386\devmgr.dll
+ 2008-04-14 00:12:16 82,944 ——w c:\windows\ServicePackFiles\i386\dfrgfat.exe
+ 2008-04-14 00:12:16 105,472 ——w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
+ 2008-04-14 00:11:51 39,424 ——w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
+ 2008-04-14 00:11:51 124,416 ——w c:\windows\ServicePackFiles\i386\dfrgui.dll
+ 2008-04-14 00:11:51 28,672 ——w c:\windows\ServicePackFiles\i386\dfsshlex.dll
+ 2008-04-14 00:11:51 111,104 ——w c:\windows\ServicePackFiles\i386\dgnet.dll
+ 2008-04-14 00:11:51 126,976 ——w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
+ 2008-04-14 00:11:52 379,904 ——w c:\windows\ServicePackFiles\i386\dhcpmon.dll
+ 2008-04-14 00:11:52 48,640 ——w c:\windows\ServicePackFiles\i386\dhcpqec.dll
+ 2008-04-14 00:12:17 539,136 ——w c:\windows\ServicePackFiles\i386\dialer.exe
+ 2008-04-14 00:12:17 87,040 ——w c:\windows\ServicePackFiles\i386\diantz.exe
+ 2004-07-17 15:41:44 884,712 ——w c:\windows\ServicePackFiles\i386\digcore.exe
+ 2008-04-14 00:11:52 68,608 ——w c:\windows\ServicePackFiles\i386\digest.dll
+ 2008-04-14 00:11:52 19,456 ——w c:\windows\ServicePackFiles\i386\dimsntfy.dll
+ 2008-04-14 00:11:52 39,936 ——w c:\windows\ServicePackFiles\i386\dimsroam.dll
+ 2008-04-14 00:11:52 158,720 ——w c:\windows\ServicePackFiles\i386\dinput.dll
+ 2008-04-14 00:11:52 181,760 ——w c:\windows\ServicePackFiles\i386\dinput8.dll
+ 2008-04-14 00:11:52 86,528 ——w c:\windows\ServicePackFiles\i386\directdb.dll
+ 2008-04-13 18:40:47 36,352 ——w c:\windows\ServicePackFiles\i386\disk.sys
+ 2008-04-14 00:11:52 1,504,256 ——w c:\windows\ServicePackFiles\i386\diskcopy.dll
+ 2008-04-13 18:40:44 14,208 ——w c:\windows\ServicePackFiles\i386\diskdump.sys
+ 2008-04-14 00:12:17 163,840 ——w c:\windows\ServicePackFiles\i386\diskpart.exe
+ 2008-04-14 00:11:52 32,768 ——w c:\windows\ServicePackFiles\i386\dispex.dll
+ 2008-04-14 00:12:17 5,120 ——w c:\windows\ServicePackFiles\i386\dllhost.exe
+ 2008-04-13 18:40:51 8,320 ——w c:\windows\ServicePackFiles\i386\dlttape.sys
+ 2008-04-14 00:12:17 224,768 ——w c:\windows\ServicePackFiles\i386\dmadmin.exe
+ 2008-04-14 00:11:52 28,672 ——w c:\windows\ServicePackFiles\i386\dmband.dll
+ 2008-04-13 18:44:48 799,744 ——w c:\windows\ServicePackFiles\i386\dmboot.sys
+ 2008-04-14 00:11:52 61,440 ——w c:\windows\ServicePackFiles\i386\dmcompos.dll
+ 2008-04-14 00:11:52 285,184 ——w c:\windows\ServicePackFiles\i386\dmdlgs.dll
+ 2008-04-14 00:11:52 200,704 ——w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
+ 2008-04-14 00:11:52 181,248 ——w c:\windows\ServicePackFiles\i386\dmime.dll
+ 2008-04-13 18:44:46 153,344 ——w c:\windows\ServicePackFiles\i386\dmio.sys
+ 2008-04-14 00:11:52 35,840 ——w c:\windows\ServicePackFiles\i386\dmloader.dll
+ 2008-04-14 00:12:17 15,872 ——w c:\windows\ServicePackFiles\i386\dmremote.exe
+ 2008-04-14 00:11:52 82,432 ——w c:\windows\ServicePackFiles\i386\dmscript.dll
+ 2008-04-14 00:11:52 23,552 ——w c:\windows\ServicePackFiles\i386\dmserver.dll
+ 2008-04-14 00:11:52 105,984 ——w c:\windows\ServicePackFiles\i386\dmstyle.dll
+ 2008-04-14 00:11:52 103,424 ——w c:\windows\ServicePackFiles\i386\dmsynth.dll
+ 2008-04-14 00:11:52 104,448 ——w c:\windows\ServicePackFiles\i386\dmusic.dll
+ 2008-04-13 18:45:01 52,864 ——w c:\windows\ServicePackFiles\i386\dmusic.sys
+ 2008-04-14 00:11:52 52,224 ——w c:\windows\ServicePackFiles\i386\dmutil.dll
+ 2008-04-14 00:11:52 147,968 ——w c:\windows\ServicePackFiles\i386\dnsapi.dll
+ 2008-04-14 00:11:52 45,568 ——w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
+ 2008-04-14 00:11:52 48,128 ——w c:\windows\ServicePackFiles\i386\docprop2.dll
+ 2004-08-04 11:00:00 53,840 ——w c:\windows\ServicePackFiles\i386\dosx.exe
+ 2008-04-14 00:11:52 26,112 ——w c:\windows\ServicePackFiles\i386\dot3api.dll
+ 2008-04-14 00:11:52 57,856 ——w c:\windows\ServicePackFiles\i386\dot3cfg.dll
+ 2008-04-14 00:11:52 39,936 ——w c:\windows\ServicePackFiles\i386\dot3clnt.dll
+ 2008-04-14 00:11:52 9,216 ——w c:\windows\ServicePackFiles\i386\dot3dlg.dll
+ 2008-04-14 00:11:52 56,320 ——w c:\windows\ServicePackFiles\i386\dot3msm.dll
+ 2008-04-14 00:11:52 132,096 ——w c:\windows\ServicePackFiles\i386\dot3svc.dll
+ 2008-04-14 00:11:52 650,752 ——w c:\windows\ServicePackFiles\i386\dot3ui.dll
+ 2008-04-13 18:39:46 206,976 ——w c:\windows\ServicePackFiles\i386\dot4.sys
+ 2008-04-14 00:11:52 102,912 ——w c:\windows\ServicePackFiles\i386\dpcdll.dll
+ 2008-04-14 00:12:17 29,696 ——w c:\windows\ServicePackFiles\i386\dplaysvr.exe
+ 2008-04-14 00:11:52 229,888 ——w c:\windows\ServicePackFiles\i386\dplayx.dll
+ 2008-04-14 00:11:52 23,552 ——w c:\windows\ServicePackFiles\i386\dpmodemx.dll
+ 2008-04-14 00:09:19 3,072 ——w c:\windows\ServicePackFiles\i386\dpnaddr.dll
+ 2008-04-14 00:11:52 375,296 ——w c:\windows\ServicePackFiles\i386\dpnet.dll
+ 2008-04-14 00:11:52 35,328 ——w c:\windows\ServicePackFiles\i386\dpnhpast.dll
+ 2008-04-14 00:11:52 60,928 ——w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
+ 2008-04-14 00:09:20 3,072 ——w c:\windows\ServicePackFiles\i386\dpnlobby.dll
+ 2008-04-14 00:12:17 17,920 ——w c:\windows\ServicePackFiles\i386\dpnsvr.exe
+ 2008-04-14 00:11:52 21,504 ——w c:\windows\ServicePackFiles\i386\dpvacm.dll
+ 2008-04-14 00:11:52 212,480 ——w c:\windows\ServicePackFiles\i386\dpvoice.dll
+ 2008-04-14 00:12:18 83,456 ——w c:\windows\ServicePackFiles\i386\dpvsetup.exe
+ 2008-04-14 00:11:52 116,736 ——w c:\windows\ServicePackFiles\i386\dpvvox.dll
+ 2008-04-14 00:11:52 57,344 ——w c:\windows\ServicePackFiles\i386\dpwsockx.dll
+ 2008-04-13 18:45:14 60,160 ——w c:\windows\ServicePackFiles\i386\drmk.sys
+ 2008-04-13 18:45:13 2,944 ——w c:\windows\ServicePackFiles\i386\drmkaud.sys
+ 2008-04-14 00:11:52 14,336 ——w c:\windows\ServicePackFiles\i386\drprov.dll
+ 2008-04-14 00:12:18 62,976 ——w c:\windows\ServicePackFiles\i386\drvqry.exe
+ 2004-08-04 11:00:00 4,656 ——w c:\windows\ServicePackFiles\i386\ds16gt.dll
+ 2008-04-14 00:11:52 16,384 ——w c:\windows\ServicePackFiles\i386\ds32gt.dll
+ 2008-04-14 00:11:52 181,248 ——w c:\windows\ServicePackFiles\i386\dsdmo.dll
+ 2008-04-14 00:11:52 71,680 ——w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
+ 2008-04-14 00:11:52 92,672 ——w c:\windows\ServicePackFiles\i386\dskquota.dll
+ 2008-04-14 00:11:52 155,648 ——w c:\windows\ServicePackFiles\i386\dskquoui.dll
+ 2008-04-14 00:11:52 367,616 ——w c:\windows\ServicePackFiles\i386\dsound.dll
+ 2008-04-14 00:11:52 1,293,824 ——w c:\windows\ServicePackFiles\i386\dsound3d.dll
+ 2008-04-14 00:11:52 142,848 ——w c:\windows\ServicePackFiles\i386\dsprop.dll
+ 2008-04-13 17:09:30 4,096 ——w c:\windows\ServicePackFiles\i386\dsprpres.dll
+ 2008-04-14 00:11:52 239,104 ——w c:\windows\ServicePackFiles\i386\dsquery.dll
+ 2008-04-14 00:11:52 51,200 ——w c:\windows\ServicePackFiles\i386\dssec.dll
+ 2008-04-13 17:37:57 138,752 ——w c:\windows\ServicePackFiles\i386\dssenh.dll
+ 2008-04-14 00:11:52 113,152 ——w c:\windows\ServicePackFiles\i386\dsuiext.dll
+ 2008-04-14 00:11:52 19,456 ——w c:\windows\ServicePackFiles\i386\dswave.dll
+ 2008-04-14 00:12:18 10,752 ——w c:\windows\ServicePackFiles\i386\dumprep.exe
+ 2008-04-14 00:11:52 304,128 ——w c:\windows\ServicePackFiles\i386\duser.dll
+ 2008-04-14 00:12:18 17,920 ——w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
+ 2008-04-14 00:12:18 180,224 ——w c:\windows\ServicePackFiles\i386\dwwin.exe
+ 2008-04-14 00:11:52 619,008 ——w c:\windows\ServicePackFiles\i386\dx7vb.dll
+ 2008-04-14 00:11:52 1,227,264 ——w c:\windows\ServicePackFiles\i386\dx8vb.dll
+ 2008-04-14 00:12:18 1,298,432 ——w c:\windows\ServicePackFiles\i386\dxdiag.exe
+ 2008-04-14 00:11:52 2,113,536 ——w c:\windows\ServicePackFiles\i386\dxdiagn.dll
+ 2008-04-13 18:38:29 71,168 ——w c:\windows\ServicePackFiles\i386\dxg.sys
+ 2008-04-14 00:11:52 357,888 ——w c:\windows\ServicePackFiles\i386\dxtmsft.dll
+ 2008-04-14 00:11:52 205,312 ——w c:\windows\ServicePackFiles\i386\dxtrans.dll
+ 2008-04-14 00:11:52 30,720 ——w c:\windows\ServicePackFiles\i386\eapolqec.dll
+ 2008-04-14 00:11:52 184,832 ——w c:\windows\ServicePackFiles\i386\eapp3hst.dll
+ 2008-04-14 00:11:52 126,976 ——w c:\windows\ServicePackFiles\i386\eappcfg.dll
+ 2008-04-14 00:11:52 94,208 ——w c:\windows\ServicePackFiles\i386\eappgnui.dll
+ 2008-04-14 00:11:52 180,224 ——w c:\windows\ServicePackFiles\i386\eapphost.dll
+ 2008-04-14 00:11:52 40,960 ——w c:\windows\ServicePackFiles\i386\eappprxy.dll
+ 2008-04-14 00:11:52 59,392 ——w c:\windows\ServicePackFiles\i386\eapqec.dll
+ 2008-04-14 00:11:52 33,792 ——w c:\windows\ServicePackFiles\i386\eapsvc.dll
+ 2008-04-14 00:11:52 26,624 ——w c:\windows\ServicePackFiles\i386\efsadu.dll
+ 2008-04-14 00:11:53 183,296 ——w c:\windows\ServicePackFiles\i386\els.dll
+ 2008-04-14 00:11:53 20,480 ——w c:\windows\ServicePackFiles\i386\encapi.dll
+ 2008-04-14 00:11:53 186,880 ——w c:\windows\ServicePackFiles\i386\encdec.dll
+ 2008-04-13 16:26:02 40,960 ——w c:\windows\ServicePackFiles\i386\ep9res.dll
+ 2004-07-17 15:39:36 120,320 ——w c:\windows\ServicePackFiles\i386\epcl5res.dll
+ 2008-04-14 00:11:53 23,040 ——w c:\windows\ServicePackFiles\i386\ersvc.dll
+ 2008-04-14 00:11:53 246,272 ——w c:\windows\ServicePackFiles\i386\es.dll
+ 2008-04-14 00:11:53 1,082,368 ——w c:\windows\ServicePackFiles\i386\esent.dll
+ 2008-04-14 00:11:53 247,808 ——w c:\windows\ServicePackFiles\i386\esscli.dll
+ 2004-08-04 02:32:28 137,088 ——w c:\windows\ServicePackFiles\i386\essm2e.sys
+ 2008-04-14 00:12:19 193,024 ——w c:\windows\ServicePackFiles\i386\eudcedit.exe
+ 2008-04-14 00:12:19 50,688 ——w c:\windows\ServicePackFiles\i386\evcreate.exe
+ 2008-04-14 00:11:53 56,320 ——w c:\windows\ServicePackFiles\i386\eventlog.dll
+ 2007-06-27 12:54:17 798,720 ——w c:\windows\ServicePackFiles\i386\eventlogmessages.dll
+ 2008-04-14 00:11:53 101,888 ——w c:\windows\ServicePackFiles\i386\evntagnt.dll
+ 2008-04-14 00:12:19 24,064 ——w c:\windows\ServicePackFiles\i386\evntcmd.exe
+ 2008-04-14 00:11:53 21,504 ——w c:\windows\ServicePackFiles\i386\evntrprv.dll
+ 2008-04-14 00:12:19 92,160 ——w c:\windows\ServicePackFiles\i386\evntwin.exe
+ 2008-04-14 00:11:53 45,056 ——w c:\windows\ServicePackFiles\i386\evtgprov.dll
+ 2008-04-14 00:12:19 82,944 ——w c:\windows\ServicePackFiles\i386\evtrig.exe
+ 2008-04-14 00:12:19 1,033,728 ——w c:\windows\ServicePackFiles\i386\explorer.exe
+ 2008-04-14 00:11:53 380,445 ——w c:\windows\ServicePackFiles\i386\expsrv.dll
+ 2008-04-14 00:11:53 14,336 ——w c:\windows\ServicePackFiles\i386\exstrace.dll
+ 2008-04-14 00:11:53 55,808 ——w c:\windows\ServicePackFiles\i386\extmgr.dll
+ 2008-04-14 00:12:19 24,064 ——w c:\windows\ServicePackFiles\i386\extrac32.exe
+ 2008-04-14 00:11:53 125,952 ——w c:\windows\ServicePackFiles\i386\exts.dll
+ 2008-04-14 00:09:30 7,168 ——w c:\windows\ServicePackFiles\i386\f3ahvoas.dll
+ 2008-04-13 19:14:29 143,744 ——w c:\windows\ServicePackFiles\i386\fastfat.sys
+ 2008-04-14 00:11:53 472,064 ——w c:\windows\ServicePackFiles\i386\fastprox.dll
+ 2008-04-14 00:11:53 80,384 ——w c:\windows\ServicePackFiles\i386\faultrep.dll
+ 2008-04-14 00:12:20 20,992 ——w c:\windows\ServicePackFiles\i386\faxpatch.exe
+ 2008-04-13 18:40:25 27,392 ——w c:\windows\ServicePackFiles\i386\fdc.sys
+ 2008-04-14 00:11:53 124,928 ——w c:\windows\ServicePackFiles\i386\fde.dll
+ 2008-04-14 00:11:53 73,728 ——w c:\windows\ServicePackFiles\i386\fdeploy.dll
+ 2008-04-14 00:11:53 21,504 ——w c:\windows\ServicePackFiles\i386\feclient.dll
+ 2008-04-14 00:11:53 337,920 ——w c:\windows\ServicePackFiles\i386\filemgmt.dll
+ 2008-04-14 00:12:20 27,136 ——w c:\windows\ServicePackFiles\i386\findstr.exe
+ 2008-04-13 18:33:28 44,544 ——w c:\windows\ServicePackFiles\i386\fips.sys
+ 2008-04-14 00:11:53 87,552 ——w c:\windows\ServicePackFiles\i386\fldrclnr.dll
+ 2008-04-13 18:40:25 20,480 ——w c:\windows\ServicePackFiles\i386\flpydisk.sys
+ 2008-04-14 00:11:53 16,896 ——w c:\windows\ServicePackFiles\i386\fltlib.dll
+ 2008-04-14 00:12:20 23,040 ——w c:\windows\ServicePackFiles\i386\fltmc.exe
+ 2008-04-13 18:32:59 129,792 ——w c:\windows\ServicePackFiles\i386\fltmgr.sys
+ 2008-04-14 00:11:53 382,976 ——w c:\windows\ServicePackFiles\i386\fontext.dll
+ 2008-04-14 00:11:53 80,896 ——w c:\windows\ServicePackFiles\i386\fontsub.dll
+ 2008-04-14 00:12:20 20,992 ——w c:\windows\ServicePackFiles\i386\fontview.exe
+ 2008-04-14 00:12:20 7,680 ——w c:\windows\ServicePackFiles\i386\forcedos.exe
+ 2004-08-04 02:31:24 34,173 ——w c:\windows\ServicePackFiles\i386\forehe.sys
+ 2008-04-14 00:12:42 29,696 ——w c:\windows\ServicePackFiles\i386\format.com
+ 2008-04-14 00:11:53 32,828 ——w c:\windows\ServicePackFiles\i386\fp40ext.dll
+ 2008-04-14 00:11:53 184,435 ——w c:\windows\ServicePackFiles\i386\fp4amsft.dll
+ 2008-04-14 00:11:53 82,035 ——w c:\windows\ServicePackFiles\i386\fp4anscp.dll
+ 2008-04-14 00:11:53 147,513 ——w c:\windows\ServicePackFiles\i386\fp4apws.dll
+ 2008-04-14 00:11:53 49,210 ——w c:\windows\ServicePackFiles\i386\fp4areg.dll
+ 2008-04-14 00:11:53 102,509 ——w c:\windows\ServicePackFiles\i386\fp4atxt.dll
+ 2008-04-14 00:11:53 618,605 ——w c:\windows\ServicePackFiles\i386\fp4autl.dll
+ 2008-04-14 00:11:53 41,020 ——w c:\windows\ServicePackFiles\i386\fp4avnb.dll
+ 2008-04-14 00:11:53 32,826 ——w c:\windows\ServicePackFiles\i386\fp4avss.dll
+ 2008-04-14 00:11:53 49,212 ——w c:\windows\ServicePackFiles\i386\fp4awebs.dll
+ 2008-04-14 00:11:53 876,653 ——w c:\windows\ServicePackFiles\i386\fp4awel.dll
+ 2008-04-14 00:12:20 15,120 ——w c:\windows\ServicePackFiles\i386\fp98sadm.exe
+ 2008-04-14 00:12:20 109,840 ——w c:\windows\ServicePackFiles\i386\fp98swin.exe
+ 2008-04-14 00:12:20 24,632 ——w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
+ 2008-04-14 00:11:53 20,541 ——w c:\windows\ServicePackFiles\i386\fpadmdll.dll
+ 2008-04-14 00:12:20 188,494 ——w c:\windows\ServicePackFiles\i386\fpcount.exe
+ 2008-04-14 00:11:53 94,208 ——w c:\windows\ServicePackFiles\i386\fpencode.dll
+ 2008-04-14 00:11:53 20,541 ——w c:\windows\ServicePackFiles\i386\fpexedll.dll
+ 2008-04-14 00:11:53 598,071 ——w c:\windows\ServicePackFiles\i386\fpmmc.dll
+ 2007-04-02 16:36:04 208,896 ——w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
+ 2008-04-14 00:12:20 20,538 ——w c:\windows\ServicePackFiles\i386\fpremadm.exe
+ 2008-04-14 00:12:20 28,728 ——w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
+ 2008-04-14 00:09:33 9,344 ——w c:\windows\ServicePackFiles\i386\framebuf.dll
+ 2008-04-14 00:11:53 185,344 ——w c:\windows\ServicePackFiles\i386\framedyn.dll
+ 2008-04-14 00:12:20 193,024 ——w c:\windows\ServicePackFiles\i386\fsquirt.exe
+ 2008-04-14 00:12:20 42,496 ——w c:\windows\ServicePackFiles\i386\ftp.exe
+ 2008-04-14 00:11:53 6,144 ——w c:\windows\ServicePackFiles\i386\ftpmib.dll
+ 2008-04-14 00:11:53 125,952 ——w c:\windows\ServicePackFiles\i386\ftpsv251.dll
+ 2007-06-27 12:54:17 233,472 ——w c:\windows\ServicePackFiles\i386\fusion.dll
+ 2008-04-14 00:11:53 60,416 ——w c:\windows\ServicePackFiles\i386\fwcfg.dll
+ 2008-04-14 00:11:53 451,584 ——w c:\windows\ServicePackFiles\i386\fxsapi.dll
+ 2008-04-14 00:12:21 142,848 ——w c:\windows\ServicePackFiles\i386\fxsclnt.exe
+ 2008-04-14 00:11:54 72,192 ——w c:\windows\ServicePackFiles\i386\fxscom.dll
+ 2008-04-14 00:11:54 285,184 ——w c:\windows\ServicePackFiles\i386\fxscomex.dll
+ 2008-04-14 00:12:21 229,376 ——w c:\windows\ServicePackFiles\i386\fxscover.exe
+ 2008-04-14 00:11:54 26,624 ——w c:\windows\ServicePackFiles\i386\fxsdrv.dll
+ 2008-04-14 00:11:54 55,296 ——w c:\windows\ServicePackFiles\i386\fxsevent.dll
+ 2008-04-14 00:11:54 23,552 ——w c:\windows\ServicePackFiles\i386\fxsext32.dll
+ 2008-04-14 00:11:54 23,552 ——w c:\windows\ServicePackFiles\i386\fxsmon.dll
+ 2008-04-14 00:11:54 132,608 ——w c:\windows\ServicePackFiles\i386\fxsocm.dll
+ 2008-04-14 00:11:54 8,704 ——w c:\windows\ServicePackFiles\i386\fxsperf.dll
+ 2008-04-14 00:09:33 6,656 ——w c:\windows\ServicePackFiles\i386\fxsres.dll
+ 2008-04-14 00:11:54 562,176 ——w c:\windows\ServicePackFiles\i386\fxsst.dll
+ 2008-04-14 00:12:21 267,776 ——w c:\windows\ServicePackFiles\i386\fxssvc.exe
+ 2008-04-14 00:11:54 246,272 ——w c:\windows\ServicePackFiles\i386\fxst30.dll
+ 2008-04-14 00:11:54 397,312 ——w c:\windows\ServicePackFiles\i386\fxstiff.dll
+ 2008-04-14 00:11:54 154,112 ——w c:\windows\ServicePackFiles\i386\fxsui.dll
+ 2008-04-14 00:11:54 192,512 ——w c:\windows\ServicePackFiles\i386\fxswzrd.dll
+ 2008-04-14 00:11:54 400,384 ——w c:\windows\ServicePackFiles\i386\fxsxp32.dll
+ 2008-04-13 18:36:40 46,464 ——w c:\windows\ServicePackFiles\i386\gagp30kx.sys
+ 2008-04-13 18:45:29 10,624 ——w c:\windows\ServicePackFiles\i386\gameenum.sys
+ 2008-04-13 18:45:32 59,136 ——w c:\windows\ServicePackFiles\i386\gckernel.sys
+ 2008-04-14 00:11:54 285,184 ——w c:\windows\ServicePackFiles\i386\gdi32.dll
+ 2008-04-14 00:12:21 59,904 ——w c:\windows\ServicePackFiles\i386\getmac.exe
+ 2008-04-14 00:11:54 122,880 ——w c:\windows\ServicePackFiles\i386\glu32.dll
+ 2008-04-14 00:09:35 566,784 ——w c:\windows\ServicePackFiles\i386\gpedit.dll
+ 2004-08-04 11:00:00 101,888 ——w c:\windows\ServicePackFiles\i386\gpkcsp.dll
+ 2006-12-31 01:26:44 9,728 ——w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
+ 2008-04-14 00:12:21 120,832 ——w c:\windows\ServicePackFiles\i386\gprslt.exe
+ 2008-04-14 00:11:54 199,680 ——w c:\windows\ServicePackFiles\i386\gptext.dll
+ 2008-04-14 00:12:21 39,424 ——w c:\windows\ServicePackFiles\i386\grpconv.exe
+ 2008-04-13 18:40:21 28,288 ——w c:\windows\ServicePackFiles\i386\grserial.sys
+ 2008-04-14 00:11:54 133,120 ——w c:\windows\ServicePackFiles\i386\guitrn.dll
+ 2008-04-14 00:11:54 115,200 ——w c:\windows\ServicePackFiles\i386\guitrna.dll
+ 2008-04-14 00:11:54 32,256 ——w c:\windows\ServicePackFiles\i386\gzip.dll
+ 2008-04-14 00:11:54 57,344 ——w c:\windows\ServicePackFiles\i386\h323cc.dll
+ 2008-04-14 00:11:54 614,912 ——w c:\windows\ServicePackFiles\i386\h323msp.dll
+ 2008-04-13 18:31:32 105,344 ——w c:\windows\ServicePackFiles\i386\hal.dll
+ 2008-04-13 18:31:28 131,840 ——w c:\windows\ServicePackFiles\i386\halaacpi.dll
+ 2008-04-13 18:31:27 81,152 ——w c:\windows\ServicePackFiles\i386\halacpi.dll
+ 2008-04-13 18:31:28 150,528 ——w c:\windows\ServicePackFiles\i386\halapic.dll
+ 2008-04-13 18:31:28 134,400 ——w c:\windows\ServicePackFiles\i386\halmacpi.dll
+ 2008-04-13 18:31:32 152,576 ——w c:\windows\ServicePackFiles\i386\halmps.dll
+ 2008-04-13 18:31:31 77,696 ——w c:\windows\ServicePackFiles\i386\halsp.dll
+ 2008-04-14 00:11:54 7,168 ——w c:\windows\ServicePackFiles\i386\hccoin.dll
+ 2008-04-13 16:36:05 144,384 ——w c:\windows\ServicePackFiles\i386\hdaudbus.sys
+ 2008-04-14 00:12:21 15,872 ——w c:\windows\ServicePackFiles\i386\help.exe
+ 2008-04-14 00:12:21 769,024 ——w c:\windows\ServicePackFiles\i386\helpctr.exe
+ 2008-04-14 00:12:21 744,448 ——w c:\windows\ServicePackFiles\i386\helpsvc.exe
+ 2008-04-14 00:12:21 10,752 ——w c:\windows\ServicePackFiles\i386\hh.exe
+ 2008-04-14 00:11:54 41,472 ——w c:\windows\ServicePackFiles\i386\hhsetup.dll
+ 2008-04-14 00:11:54 20,992 ——w c:\windows\ServicePackFiles\i386\hid.dll
+ 2008-04-13 18:36:38 20,352 ——w c:\windows\ServicePackFiles\i386\hidbatt.sys
+ 2008-04-13 18:46:30 25,600 ——w c:\windows\ServicePackFiles\i386\hidbth.sys
+ 2008-04-13 18:45:26 36,864 ——w c:\windows\ServicePackFiles\i386\hidclass.sys
+ 2008-04-13 18:45:26 19,200 ——w c:\windows\ServicePackFiles\i386\hidir.sys
+ 2008-04-13 18:45:22 24,960 ——w c:\windows\ServicePackFiles\i386\hidparse.sys
+ 2008-04-14 00:11:54 21,504 ——w c:\windows\ServicePackFiles\i386\hidserv.dll
+ 2008-04-13 18:45:27 10,368 ——w c:\windows\ServicePackFiles\i386\hidusb.sys
+ 2008-04-14 00:11:54 72,704 ——w c:\windows\ServicePackFiles\i386\hlink.dll
+ 2008-04-14 00:11:54 38,912 ——w c:\windows\ServicePackFiles\i386\hmmapi.dll
+ 2008-04-14 00:11:54 344,064 ——w c:\windows\ServicePackFiles\i386\hnetcfg.dll
+ 2008-04-14 00:11:54 330,752 ——w c:\windows\ServicePackFiles\i386\hnetwiz.dll
+ 2008-04-14 00:11:54 39,936 ——w c:\windows\ServicePackFiles\i386\hostmib.dll
+ 2008-04-14 00:11:54 144,896 ——w c:\windows\ServicePackFiles\i386\hotplug.dll
+ 2008-04-14 00:11:54 10,752 ——w c:\windows\ServicePackFiles\i386\hpcjrr.dll
+ 2008-04-14 00:11:54 10,240 ——w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
+ 2008-04-14 00:11:54 87,552 ——w c:\windows\ServicePackFiles\i386\hpfud50.dll
+ 2008-04-14 00:12:21 18,432 ——w c:\windows\ServicePackFiles\i386\hscupd.exe
+ 2004-08-04 02:41:48 220,032 ——w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys
+ 2008-04-14 00:11:54 32,285 ——w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
+ 2004-08-04 02:41:50 685,056 ——w c:\windows\ServicePackFiles\i386\hsfcxts2.sys
+ 2004-08-04 02:41:56 1,041,536 ——w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys
+ 2008-04-13 18:53:53 264,832 ——w c:\windows\ServicePackFiles\i386\http.sys
+ 2008-04-14 00:11:54 24,576 ——w c:\windows\ServicePackFiles\i386\httpapi.dll
+ 2008-04-14 00:11:54 268,288 ——w c:\windows\ServicePackFiles\i386\httpext.dll
+ 2008-04-14 00:11:54 8,192 ——w c:\windows\ServicePackFiles\i386\httpmb51.dll
+ 2008-04-14 00:11:54 61,440 ——w c:\windows\ServicePackFiles\i386\httpod51.dll
+ 2008-04-14 00:11:54 41,984 ——w c:\windows\ServicePackFiles\i386\htui.dll
+ 2008-04-14 00:11:54 347,136 ——w c:\windows\ServicePackFiles\i386\hypertrm.dll
+ 2008-04-13 18:41:22 8,576 ——w c:\windows\ServicePackFiles\i386\i2omgmt.sys
+ 2008-04-13 18:41:22 18,560 ——w c:\windows\ServicePackFiles\i386\i2omp.sys
+ 2008-04-13 19:18:00 52,480 ——w c:\windows\ServicePackFiles\i386\i8042prt.sys
+ 2008-04-14 00:11:54 702,845 ——w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
+ 2004-08-04 02:29:38 161,020 ——w c:\windows\ServicePackFiles\i386\i81xnt5.sys
+ 2008-04-14 00:11:54 119,808 ——w c:\windows\ServicePackFiles\i386\iasrad.dll
+ 2008-04-14 00:11:54 11,264 ——w c:\windows\ServicePackFiles\i386\icaapi.dll
+ 2008-04-14 00:11:54 80,384 ——w c:\windows\ServicePackFiles\i386\iccvid.dll
+ 2008-04-14 00:11:54 254,976 ——w c:\windows\ServicePackFiles\i386\icm32.dll
+ 2008-04-14 00:09:40 3,584 ——w c:\windows\ServicePackFiles\i386\icmp.dll
+ 2008-04-13 16:44:29 2,560 ——w c:\windows\ServicePackFiles\i386\iconlib.dll
+ 2008-04-14 00:11:54 61,440 ——w c:\windows\ServicePackFiles\i386\icwconn.dll
+ 2008-04-14 00:12:22 214,528 ——w c:\windows\ServicePackFiles\i386\icwconn1.exe
+ 2008-04-14 00:12:22 86,016 ——w c:\windows\ServicePackFiles\i386\icwconn2.exe
+ 2008-04-14 00:11:54 73,728 ——w c:\windows\ServicePackFiles\i386\icwdial.dll
+ 2008-04-14 00:11:54 32,768 ——w c:\windows\ServicePackFiles\i386\icwdl.dll
+ 2008-04-14 00:11:54 172,032 ——w c:\windows\ServicePackFiles\i386\icwhelp.dll
+ 2008-04-14 00:11:54 65,536 ——w c:\windows\ServicePackFiles\i386\icwphbk.dll
+ 2008-04-14 00:12:22 24,576 ——w c:\windows\ServicePackFiles\i386\icwrmind.exe
+ 2008-04-14 00:11:54 49,152 ——w c:\windows\ServicePackFiles\i386\icwutil.dll
+ 2008-04-14 00:11:54 120,832 ——w c:\windows\ServicePackFiles\i386\idq.dll
+ 2008-04-14 00:12:22 34,304 ——w c:\windows\ServicePackFiles\i386\ie4uinit.exe
+ 2008-04-14 00:11:54 143,360 ——w c:\windows\ServicePackFiles\i386\ieakeng.dll
+ 2008-04-14 00:11:54 216,576 ——w c:\windows\ServicePackFiles\i386\ieaksie.dll
+ 2008-04-14 00:11:54 323,584 ——w c:\windows\ServicePackFiles\i386\iedkcs32.dll
+ 2008-04-14 00:12:22 18,432 ——w c:\windows\ServicePackFiles\i386\iedw.exe
+ 2008-04-14 00:11:54 81,920 ——w c:\windows\ServicePackFiles\i386\ieencode.dll
+ 2007-12-17 11:58:35 8,192 ——w c:\windows\ServicePackFiles\i386\ieexec.exe
+ 2007-06-27 12:54:23 7,168 ——w c:\windows\ServicePackFiles\i386\ieexecremote.dll
+ 2007-06-27 12:54:23 32,768 ——w c:\windows\ServicePackFiles\i386\iehost.dll
+ 2008-04-14 00:11:54 251,904 ——w c:\windows\ServicePackFiles\i386\iepeers.dll
+ 2008-04-14 00:11:54 48,640 ——w c:\windows\ServicePackFiles\i386\iernonce.dll
+ 2008-04-14 00:11:54 62,976 ——w c:\windows\ServicePackFiles\i386\iesetup.dll
+ 2008-04-14 00:12:22 93,184 ——w c:\windows\ServicePackFiles\i386\iexplore.exe
+ 2008-04-14 00:12:22 114,688 ——w c:\windows\ServicePackFiles\i386\iexpress.exe
+ 2008-04-14 00:11:54 135,680 ——w c:\windows\ServicePackFiles\i386\ifmon.dll
+ 2008-04-14 00:11:54 8,192 ——w c:\windows\ServicePackFiles\i386\igmpagnt.dll
+ 2008-04-14 00:11:54 505,344 ——w c:\windows\ServicePackFiles\i386\iis.dll
+ 2008-04-14 00:11:54 25,088 ——w c:\windows\ServicePackFiles\i386\iisadmin.dll
+ 2008-04-14 00:11:54 145,408 ——w c:\windows\ServicePackFiles\i386\iische51.dll
+ 2008-04-14 00:11:54 68,608 ——w c:\windows\ServicePackFiles\i386\iisext51.dll
+ 2008-04-14 00:11:54 7,168 ——w c:\windows\ServicePackFiles\i386\iisfecnv.dll
+ 2008-04-14 00:11:54 79,872 ——w c:\windows\ServicePackFiles\i386\iislog51.dll
+ 2008-04-14 00:11:54 64,512 ——w c:\windows\ServicePackFiles\i386\iismap.dll
+ 2008-04-14 00:12:22 30,720 ——w c:\windows\ServicePackFiles\i386\iisrstas.exe
+ 2008-04-14 00:11:54 133,632 ——w c:\windows\ServicePackFiles\i386\iisrtl.dll
+ 2008-04-13 16:10:32 184,320 ——w c:\windows\ServicePackFiles\i386\ilasm.exe
+ 2008-04-14 00:11:54 81,920 ——w c:\windows\ServicePackFiles\i386\ils.dll
+ 2008-04-14 00:11:54 144,384 ——w c:\windows\ServicePackFiles\i386\imagehlp.dll
+ 2008-04-14 00:12:22 150,528 ——w c:\windows\ServicePackFiles\i386\imapi.exe
+ 2008-04-13 18:40:58 42,112 ——w c:\windows\ServicePackFiles\i386\imapi.sys
+ 2008-04-14 00:11:54 36,921 ——w c:\windows\ServicePackFiles\i386\imeshare.dll
+ 2008-04-14 00:11:54 35,840 ——w c:\windows\ServicePackFiles\i386\imgutil.dll
+ 2008-04-14 00:11:54 110,080 ——w c:\windows\ServicePackFiles\i386\imm32.dll
+ 2008-04-14 00:11:54 123,392 ——w c:\windows\ServicePackFiles\i386\imsinsnt.dll
+ 2008-04-14 00:11:54 274,432 ——w c:\windows\ServicePackFiles\i386\inetcfg.dll
+ 2008-04-14 00:11:54 691,712 ——w c:\windows\ServicePackFiles\i386\inetcomm.dll
+ 2008-04-14 00:12:22 15,360 ——w c:\windows\ServicePackFiles\i386\inetin51.exe
+ 2008-04-14 00:11:55 829,440 ——w c:\windows\ServicePackFiles\i386\inetmgr.dll
+ 2008-04-14 00:11:55 32,768 ——w c:\windows\ServicePackFiles\i386\inetmib1.dll
+ 2008-04-14 00:11:55 75,264 ——w c:\windows\ServicePackFiles\i386\inetpp.dll
+ 2008-04-14 00:11:55 15,872 ——w c:\windows\ServicePackFiles\i386\inetppui.dll
+ 2008-04-13 16:22:12 48,128 ——w c:\windows\ServicePackFiles\i386\inetres.dll
+ 2008-04-14 00:12:22 20,480 ——w c:\windows\ServicePackFiles\i386\inetwiz.exe
+ 2008-04-14 00:11:55 13,312 ——w c:\windows\ServicePackFiles\i386\infoadmn.dll
+ 2008-04-14 00:11:55 257,024 ——w c:\windows\ServicePackFiles\i386\infocomm.dll
+ 2008-04-14 00:11:55 147,456 ——w c:\windows\ServicePackFiles\i386\initpki.dll
+ 2008-04-14 00:11:55 123,392 ——w c:\windows\ServicePackFiles\i386\input.dll
+ 2008-04-14 00:11:55 96,256 ——w c:\windows\ServicePackFiles\i386\inseng.dll
+ 2007-06-27 12:54:28 24,576 ——w c:\windows\ServicePackFiles\i386\installutil.exe
+ 2008-04-13 18:40:29 5,504 ——w c:\windows\ServicePackFiles\i386\intelide.sys
+ 2008-04-13 18:31:32 36,352 ——w c:\windows\ServicePackFiles\i386\intelppm.sys
+ 2008-04-13 18:53:34 36,608 ——w c:\windows\ServicePackFiles\i386\ip6fw.sys
+ 2008-04-14 00:12:22 55,808 ——w c:\windows\ServicePackFiles\i386\ipconfig.exe
+ 2008-04-14 00:09:30 103,424 ——w c:\windows\ServicePackFiles\i386\ipevldpc.dll
+ 2008-04-14 00:09:23 24,064 ——w c:\windows\ServicePackFiles\i386\ipevlpid.dll
+ 2008-04-14 00:11:55 94,720 ——w c:\windows\ServicePackFiles\i386\iphlpapi.dll
+ 2008-04-13 18:57:07 20,864 ——w c:\windows\ServicePackFiles\i386\ipinip.sys
+ 2008-04-14 00:11:55 161,280 ——w c:\windows\ServicePackFiles\i386\ipmontr.dll
+ 2008-04-13 18:57:15 152,832 ——w c:\windows\ServicePackFiles\i386\ipnat.sys
+ 2008-04-14 00:11:55 331,264 ——w c:\windows\ServicePackFiles\i386\ipnathlp.dll
+ 2008-04-14 00:11:55 330,752 ——w c:\windows\ServicePackFiles\i386\ippromon.dll
+ 2008-04-14 00:11:55 35,328 ——w c:\windows\ServicePackFiles\i386\iprip.dll
+ 2008-04-14 00:11:55 177,152 ——w c:\windows\ServicePackFiles\i386\iprtrmgr.dll
+ 2008-04-13 19:19:42 75,264 ——w c:\windows\ServicePackFiles\i386\ipsec.sys
+ 2008-04-14 00:11:55 349,696 ——w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
+ 2008-04-14 00:11:55 183,808 ——w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
+ 2008-04-14 00:10:45 102,912 ——w c:\windows\ServicePackFiles\i386\ipseldpc.dll
+ 2008-04-14 00:09:24 24,064 ——w c:\windows\ServicePackFiles\i386\ipselpid.dll
+ 2008-04-14 00:11:55 384,000 ——w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
+ 2008-04-14 00:12:23 53,248 ——w c:\windows\ServicePackFiles\i386\ipv6.exe
+ 2008-04-14 00:11:55 59,904 ——w c:\windows\ServicePackFiles\i386\ipv6mon.dll
+ 2008-04-14 00:12:23 23,552 ——w c:\windows\ServicePackFiles\i386\ipxroute.exe
+ 2008-04-14 00:11:55 22,016 ——w c:\windows\ServicePackFiles\i386\ipxwan.dll
+ 2008-04-14 00:11:55 120,320 ——w c:\windows\ServicePackFiles\i386\ir41_qc.dll
+ 2008-04-14 00:11:55 338,432 ——w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
+ 2008-04-14 00:11:55 755,200 ——w c:\windows\ServicePackFiles\i386\ir50_32.dll
+ 2008-04-14 00:11:55 200,192 ——w c:\windows\ServicePackFiles\i386\ir50_qc.dll
+ 2008-04-14 00:11:55 183,808 ——w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
+ 2008-04-13 18:45:34 46,592 ——w c:\windows\ServicePackFiles\i386\irbus.sys
+ 2008-04-13 18:54:36 88,192 ——w c:\windows\ServicePackFiles\i386\irda.sys
+ 2008-04-13 18:54:28 11,264 ——w c:\windows\ServicePackFiles\i386\irenum.sys
+ 2008-04-14 00:12:23 151,552 ——w c:\windows\ServicePackFiles\i386\irftp.exe
+ 2008-04-14 00:11:55 28,160 ——w c:\windows\ServicePackFiles\i386\irmon.dll
+ 2008-04-13 18:36:41 37,248 ——w c:\windows\ServicePackFiles\i386\isapnp.sys
+ 2008-04-14 00:11:55 68,608 ——w c:\windows\ServicePackFiles\i386\isatq.dll
+ 2008-04-14 00:11:55 26,624 ——w c:\windows\ServicePackFiles\i386\iscomlog.dll
+ 2008-04-14 00:10:32 105,984 ——w c:\windows\ServicePackFiles\i386\isdpc.dll
+ 2008-04-14 00:10:55 105,984 ——w c:\windows\ServicePackFiles\i386\isendpc.dll
+ 2008-04-14 00:10:55 24,064 ——w c:\windows\ServicePackFiles\i386\isenpid.dll
+ 2008-04-14 00:11:55 81,920 ——w c:\windows\ServicePackFiles\i386\isign32.dll
+ 2008-04-14 00:10:32 24,064 ——w c:\windows\ServicePackFiles\i386\ispid.dll
+ 2008-04-14 00:11:55 32,768 ——w c:\windows\ServicePackFiles\i386\isrdbg32.dll
+ 2008-04-14 00:11:55 155,136 ——w c:\windows\ServicePackFiles\i386\itircl.dll
+ 2008-04-14 00:11:55 138,240 ——w c:\windows\ServicePackFiles\i386\itss.dll
+ 2008-04-14 00:11:55 191,488 ——w c:\windows\ServicePackFiles\i386\iuengine.dll
+ 2008-04-14 00:11:55 54,272 ——w c:\windows\ServicePackFiles\i386\ixsso.dll
+ 2008-04-14 00:11:55 47,616 ——w c:\windows\ServicePackFiles\i386\iyuv_32.dll
+ 2008-04-14 00:11:55 163,840 ——w c:\windows\ServicePackFiles\i386\jgdw400.dll
+ 2008-04-14 00:11:55 27,648 ——w c:\windows\ServicePackFiles\i386\jgpl400.dll
+ 2007-06-27 12:54:35 40,960 ——w c:\windows\ServicePackFiles\i386\jsc.exe
+ 2008-04-14 00:11:56 512,000 ——w c:\windows\ServicePackFiles\i386\jscript.dll
+ 2008-04-14 00:11:56 15,872 ——w c:\windows\ServicePackFiles\i386\jsproxy.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbd101.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbd106.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbd106n.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdax2.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdbhc.dll
+ 2008-04-13 18:39:47 24,576 ——w c:\windows\ServicePackFiles\i386\kbdclass.sys
+ 2008-04-14 00:09:55 7,168 ——w c:\windows\ServicePackFiles\i386\kbdfi1.dll
+ 2008-04-13 18:39:48 14,592 ——w c:\windows\ServicePackFiles\i386\kbdhid.sys
+ 2008-04-14 00:09:55 7,168 ——w c:\windows\ServicePackFiles\i386\kbdibm02.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdinben.dll
+ 2008-04-14 00:09:55 6,656 ——w c:\windows\ServicePackFiles\i386\kbdinmal.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdiultn.dll
+ 2008-04-14 00:09:55 6,656 ——w c:\windows\ServicePackFiles\i386\kbdlk41a.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdlk41j.dll
+ 2008-04-14 00:09:55 5,632 ——w c:\windows\ServicePackFiles\i386\kbdmaori.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
+ 2008-04-14 00:09:55 7,168 ——w c:\windows\ServicePackFiles\i386\kbdnec.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdnepr.dll
+ 2008-04-14 00:09:55 7,168 ——w c:\windows\ServicePackFiles\i386\kbdno1.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\ServicePackFiles\i386\kbdpash.dll
+ 2008-04-14 00:09:55 7,680 ——w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
+ 2008-04-14 00:09:55 7,680 ——w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
+ 2008-04-14 00:09:55 7,168 ——w c:\windows\ServicePackFiles\i386\kbdukx.dll
+ 2008-04-13 18:31:35 7,424 ——w c:\windows\ServicePackFiles\i386\kd1394.dll
+ 2008-04-14 00:11:56 184,832 ——w c:\windows\ServicePackFiles\i386\kdcsvc.dll
+ 2008-04-14 00:11:56 48,640 ——w c:\windows\ServicePackFiles\i386\kdsui.dll
+ 2008-04-14 00:11:56 253,952 ——w c:\windows\ServicePackFiles\i386\kdsusd.dll
+ 2008-04-14 00:11:56 299,520 ——w c:\windows\ServicePackFiles\i386\kerberos.dll
+ 2008-04-14 00:11:56 989,696 ——w c:\windows\ServicePackFiles\i386\kernel32.dll
+ 2004-08-04 11:00:00 42,537 ——w c:\windows\ServicePackFiles\i386\keyboard.sys
+ 2008-04-14 00:11:56 150,528 ——w c:\windows\ServicePackFiles\i386\keymgr.dll
+ 2008-04-13 18:45:09 172,416 ——w c:\windows\ServicePackFiles\i386\kmixer.sys
+ 2008-04-14 00:11:56 61,440 ——w c:\windows\ServicePackFiles\i386\kmsvc.dll
+ 2008-04-14 00:09:56 102,912 ——w c:\windows\ServicePackFiles\i386\knperdpc.dll
+ 2008-04-14 00:09:56 24,064 ——w c:\windows\ServicePackFiles\i386\knperpid.dll
+ 2008-04-14 00:09:56 102,912 ——w c:\windows\ServicePackFiles\i386\knprodpc.dll
+ 2008-04-14 00:09:56 24,576 ——w c:\windows\ServicePackFiles\i386\knpropid.dll
+ 2008-04-14 00:11:56 8,192 ——w c:\windows\ServicePackFiles\i386\koc.dll
+ 2008-04-14 00:09:56 102,912 ——w c:\windows\ServicePackFiles\i386\kperdpc.dll
+ 2008-04-14 00:09:56 24,064 ——w c:\windows\ServicePackFiles\i386\kperpid.dll
+ 2008-04-14 00:09:56 102,912 ——w c:\windows\ServicePackFiles\i386\kprodpc.dll
+ 2008-04-14 00:09:56 24,576 ——w c:\windows\ServicePackFiles\i386\kpropid.dll
+ 2004-08-04 11:00:00 92,224 ——w c:\windows\ServicePackFiles\i386\krnl386.exe
+ 2008-04-14 00:11:56 24,576 ——w c:\windows\ServicePackFiles\i386\krnlprov.dll
+ 2008-04-13 19:16:36 141,056 ——w c:\windows\ServicePackFiles\i386\ks.sys
+ 2008-04-13 18:31:43 92,288 ——w c:\windows\ServicePackFiles\i386\ksecdd.sys
+ 2008-04-14 00:11:56 4,096 ——w c:\windows\ServicePackFiles\i386\ksuser.dll
+ 2008-04-14 00:11:56 37,376 ——w c:\windows\ServicePackFiles\i386\l2store.dll
+ 2008-04-14 00:09:05 97,792 ——w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
+ 2008-04-14 00:09:05 56,320 ——w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
+ 2008-04-14 00:09:05 173,568 ——w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
+ 2008-04-14 00:09:06 198,656 ——w c:\windows\ServicePackFiles\i386\lang\cintime.dll
+ 2004-08-04 02:31:56 480,256 ——w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
+ 2004-08-04 02:31:40 57,399 ——w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
+ 2008-04-14 00:09:39 13,463,552 ——w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
+ 2008-04-14 00:09:43 106,496 ——w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
+ 2008-04-14 00:09:43 86,016 ——w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
+ 2008-04-14 00:09:44 811,064 ——w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
+ 2008-04-14 00:09:45 368,696 ——w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
+ 2008-04-14 00:09:45 716,856 ——w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
+ 2008-04-14 00:09:45 81,976 ——w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
+ 2004-08-04 02:31:54 307,257 ——w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
+ 2004-08-04 02:31:56 155,705 ——w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
+ 2004-08-04 02:31:58 196,665 ——w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
+ 2004-08-04 02:32:00 208,952 ——w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
+ 2004-08-04 02:32:12 233,527 ——w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
+ 2004-08-04 02:32:16 262,200 ——w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
+ 2008-04-14 00:09:46 274,489 ——w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
+ 2008-04-14 00:09:46 102,456 ——w c:\windows\ServicePackFiles\i386\lang\imlang.dll
+ 2004-08-04 02:31:50 59,392 ——w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
+ 2008-04-14 00:09:47 315,455 ——w c:\windows\ServicePackFiles\i386\lang\imskf.dll
+ 2008-04-14 00:10:33 15,872 ——w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
+ 2008-04-14 00:10:33 15,360 ——w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
+ 2008-04-14 00:10:34 175,104 ——w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
+ 2008-04-14 00:10:34 53,760 ——w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
+ 2008-04-13 16:43:36 70,144 ——w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
+ 2008-04-14 00:10:34 67,584 ——w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
+ 2004-08-04 02:32:16 44,032 ——w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
+ 2004-08-04 02:32:16 455,168 ——w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
+ 2008-04-14 00:10:59 10,240 ——w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
+ 2008-04-14 00:11:01 76,288 ——w c:\windows\ServicePackFiles\i386\lang\uniime.dll
+ 2008-04-14 00:11:04 426,041 ——w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
+ 2008-04-14 00:11:04 86,073 ——w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
+ 2008-04-13 18:40:26 34,688 ——w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
+ 2008-04-14 00:12:23 677,888 ——w c:\windows\ServicePackFiles\i386\lhmstsc.exe
+ 2008-04-14 00:11:56 2,061,824 ——w c:\windows\ServicePackFiles\i386\lhmstscx.dll
+ 2008-04-14 09:41:58 423,936 ——w c:\windows\ServicePackFiles\i386\licdll.dll
+ 2008-04-14 00:11:56 22,016 ——w c:\windows\ServicePackFiles\i386\licmgr10.dll
+ 2008-04-14 00:11:56 58,880 ——w c:\windows\ServicePackFiles\i386\licwmi.dll
+ 2008-04-14 00:11:56 19,968 ——w c:\windows\ServicePackFiles\i386\linkinfo.dll
+ 2008-04-14 00:11:56 13,824 ——w c:\windows\ServicePackFiles\i386\lmhsvc.dll
+ 2008-04-14 00:11:56 33,792 ——w c:\windows\ServicePackFiles\i386\lmmib2.dll
+ 2008-04-14 00:11:56 399,872 ——w c:\windows\ServicePackFiles\i386\lmrt.dll
+ 2008-04-14 00:11:56 97,280 ——w c:\windows\ServicePackFiles\i386\loadperf.dll
+ 2008-04-14 00:11:56 221,696 ——w c:\windows\ServicePackFiles\i386\localsec.dll
+ 2008-04-14 00:11:56 343,040 ——w c:\windows\ServicePackFiles\i386\localspl.dll
+ 2008-04-14 00:11:56 11,776 ——w c:\windows\ServicePackFiles\i386\localui.dll
+ 2008-04-14 00:12:24 75,264 ——w c:\windows\ServicePackFiles\i386\locator.exe
+ 2008-04-14 00:11:56 19,968 ——w c:\windows\ServicePackFiles\i386\log.dll
+ 2008-04-14 00:12:24 59,392 ——w c:\windows\ServicePackFiles\i386\logman.exe
+ 2008-04-14 00:12:43 220,672 ——w c:\windows\ServicePackFiles\i386\logon.scr
+ 2008-04-14 00:12:24 514,560 ——w c:\windows\ServicePackFiles\i386\logonui.exe
+ 2008-04-14 00:11:56 13,312 ——w c:\windows\ServicePackFiles\i386\lonsint.dll
+ 2008-04-14 00:11:56 22,528 ——w c:\windows\ServicePackFiles\i386\lpdsvc.dll
+ 2008-04-14 00:11:56 22,016 ——w c:\windows\ServicePackFiles\i386\lpk.dll
+ 2008-04-14 00:11:56 10,240 ——w c:\windows\ServicePackFiles\i386\lprhelp.dll
+ 2008-04-14 00:11:56 18,944 ——w c:\windows\ServicePackFiles\i386\lprmon.dll
+ 2008-04-14 00:11:56 728,064 ——w c:\windows\ServicePackFiles\i386\lsasrv.dll
+ 2008-04-14 00:12:24 13,312 ——w c:\windows\ServicePackFiles\i386\lsass.exe
+ 2004-08-04 02:41:36 606,684 ——w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
+ 2004-08-04 02:41:38 420,992 ——w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
+ 2008-04-13 18:40:52 7,040 ——w c:\windows\ServicePackFiles\i386\ltotape.sys
+ 2004-08-04 02:39:32 20,864 ——w c:\windows\ServicePackFiles\i386\lwadihid.sys
+ 2008-04-14 00:12:24 72,704 ——w c:\windows\ServicePackFiles\i386\magnify.exe
+ 2008-04-14 00:12:25 57,344 ——w c:\windows\ServicePackFiles\i386\makecab.exe
+ 2008-04-14 00:11:56 14,336 ——w c:\windows\ServicePackFiles\i386\mcastmib.dll
+ 2008-04-14 00:11:56 84,480 ——w c:\windows\ServicePackFiles\i386\mciavi32.dll
+ 2008-04-14 00:11:56 35,328 ——w c:\windows\ServicePackFiles\i386\mciqtz32.dll
+ 2008-04-14 00:11:56 23,040 ——w c:\windows\ServicePackFiles\i386\mciseq.dll
+ 2008-04-14 00:11:56 23,552 ——w c:\windows\ServicePackFiles\i386\mciwave.dll
+ 2008-04-14 00:11:56 37,888 ——w c:\windows\ServicePackFiles\i386\md5filt.dll
+ 2008-04-14 00:11:56 118,272 ——w c:\windows\ServicePackFiles\i386\mdminst.dll
+ 2008-04-14 00:11:56 86,016 ——w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
+ 2004-08-04 02:41:56 11,868 ——w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
+ 2008-04-14 00:11:56 16,896 ——w c:\windows\ServicePackFiles\i386\medctroc.dll
+ 2008-04-13 18:41:21 26,112 ——w c:\windows\ServicePackFiles\i386\memstpci.sys
+ 2008-04-14 00:11:56 85,504 ——w c:\windows\ServicePackFiles\i386\metada51.dll
+ 2008-04-13 18:36:41 63,744 ——w c:\windows\ServicePackFiles\i386\mf.sys
+ 2008-04-14 00:11:56 40,960 ——w c:\windows\ServicePackFiles\i386\mf3216.dll
+ 2008-04-14 00:11:56 927,504 ——w c:\windows\ServicePackFiles\i386\mfc40u.dll
+ 2008-04-14 00:11:56 1,028,096 ——w c:\windows\ServicePackFiles\i386\mfc42.dll
+ 2006-10-14 08:13:25 981,760 ——w c:\windows\ServicePackFiles\i386\mfc42u.dll
+ 2008-04-14 00:11:56 22,528 ——w c:\windows\ServicePackFiles\i386\mfcsubs.dll
+ 2008-04-14 00:11:56 14,848 ——w c:\windows\ServicePackFiles\i386\mgmtapi.dll
+ 2007-06-27 12:54:42 712,704 ——w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
+ 2007-06-27 12:54:48 286,720 ——w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
+ 2008-04-14 00:11:57 18,944 ——w c:\windows\ServicePackFiles\i386\midimap.dll
+ 2008-04-14 00:11:57 274,432 ——w c:\windows\ServicePackFiles\i386\migism.dll
+ 2008-04-14 00:11:57 261,120 ——w c:\windows\ServicePackFiles\i386\migisma.dll
+ 2008-04-14 00:11:57 60,928 ——w c:\windows\ServicePackFiles\i386\miglibnt.dll
+ 2008-04-14 00:12:25 103,936 ——w c:\windows\ServicePackFiles\i386\migload.exe
+ 2008-04-14 00:12:25 7,680 ——w c:\windows\ServicePackFiles\i386\migregdb.exe
+ 2008-04-14 00:12:25 245,248 ——w c:\windows\ServicePackFiles\i386\migwiz.exe
+ 2008-04-14 00:12:25 241,152 ——w c:\windows\ServicePackFiles\i386\migwiza.exe
+ 2008-04-14 00:11:57 29,696 ——w c:\windows\ServicePackFiles\i386\mimefilt.dll
+ 2008-04-14 00:11:57 586,240 ——w c:\windows\ServicePackFiles\i386\mlang.dll
+ 2008-04-14 00:12:25 1,414,656 ——w c:\windows\ServicePackFiles\i386\mmc.exe
+ 2008-04-14 00:11:57 184,320 ——w c:\windows\ServicePackFiles\i386\mmc30.dll
+ 2008-04-14 00:11:57 28,672 ——w c:\windows\ServicePackFiles\i386\mmc30r.dll
+ 2008-04-14 00:11:57 163,328 ——w c:\windows\ServicePackFiles\i386\mmcbase.dll
+ 2008-04-14 00:11:57 397,312 ——w c:\windows\ServicePackFiles\i386\mmcex.dll
+ 2008-04-14 00:11:57 40,960 ——w c:\windows\ServicePackFiles\i386\mmcexr.dll
+ 2008-04-14 00:11:57 106,496 ——w c:\windows\ServicePackFiles\i386\mmcfxc.dll
+ 2008-04-14 00:11:57 6,656 ——w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
+ 2008-04-14 00:11:57 1,872,896 ——w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
+ 2008-04-14 00:12:25 33,792 ——w c:\windows\ServicePackFiles\i386\mmcperf.exe
+ 2008-04-14 00:11:57 61,440 ——w c:\windows\ServicePackFiles\i386\mmcshext.dll
+ 2008-04-14 00:11:57 17,408 ——w c:\windows\ServicePackFiles\i386\mmfutil.dll
+ 2004-08-04 11:00:00 68,768 ——w c:\windows\ServicePackFiles\i386\mmsystem.dll
+ 2008-04-14 00:11:57 34,560 ——w c:\windows\ServicePackFiles\i386\mnmdd.dll
+ 2008-04-14 00:12:25 32,768 ——w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
+ 2008-04-14 00:11:57 207,360 ——w c:\windows\ServicePackFiles\i386\mobsync.dll
+ 2008-04-14 00:12:26 143,360 ——w c:\windows\ServicePackFiles\i386\mobsync.exe
+ 2008-04-13 19:00:19 30,080 ——w c:\windows\ServicePackFiles\i386\modem.sys
+ 2008-04-14 00:11:57 153,600 ——w c:\windows\ServicePackFiles\i386\modemui.dll
+ 2008-04-14 00:12:26 16,384 ——w c:\windows\ServicePackFiles\i386\mofcomp.exe
+ 2008-04-14 00:11:57 123,904 ——w c:\windows\ServicePackFiles\i386\mofd.dll
+ 2008-04-14 00:12:42 16,896 ——w c:\windows\ServicePackFiles\i386\more.com
+ 2008-04-13 16:45:30 216,064 ——w c:\windows\ServicePackFiles\i386\moricons.dll
+ 2008-04-13 18:39:47 23,040 ——w c:\windows\ServicePackFiles\i386\mouclass.sys
+ 2008-04-13 18:39:46 42,368 ——w c:\windows\ServicePackFiles\i386\mountmgr.sys
+ 2008-04-14 00:12:27 3,558,912 ——w c:\windows\ServicePackFiles\i386\moviemk.exe
+ 2008-04-13 18:46:22 15,232 ——w c:\windows\ServicePackFiles\i386\mpe.sys
+ 2008-04-14 00:12:27 123,392 ——w c:\windows\ServicePackFiles\i386\mplay32.exe
+ 2008-04-14 00:11:57 59,904 ——w c:\windows\ServicePackFiles\i386\mpr.dll
+ 2008-04-14 00:11:57 87,040 ——w c:\windows\ServicePackFiles\i386\mprapi.dll
+ 2008-04-14 00:11:57 53,248 ——w c:\windows\ServicePackFiles\i386\mprdim.dll
+ 2008-04-13 18:39:44 92,544 ——w c:\windows\ServicePackFiles\i386\mqac.sys
+ 2008-04-14 00:11:57 138,240 ——w c:\windows\ServicePackFiles\i386\mqad.dll
+ 2008-04-14 00:12:27 19,968 ——w c:\windows\ServicePackFiles\i386\mqbkup.exe
+ 2008-04-14 00:11:57 47,616 ——w c:\windows\ServicePackFiles\i386\mqdscli.dll
+ 2008-04-14 00:11:57 16,896 ——w c:\windows\ServicePackFiles\i386\mqise.dll
+ 2008-04-14 00:11:57 89,088 ——w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
+ 2008-04-14 00:11:57 225,280 ——w c:\windows\ServicePackFiles\i386\mqoa.dll
+ 2008-04-14 00:11:57 663,040 ——w c:\windows\ServicePackFiles\i386\mqqm.dll
+ 2008-04-14 00:11:57 177,152 ——w c:\windows\ServicePackFiles\i386\mqrt.dll
+ 2008-04-14 00:11:57 123,904 ——w c:\windows\ServicePackFiles\i386\mqrtdep.dll
+ 2008-04-14 00:11:57 95,744 ——w c:\windows\ServicePackFiles\i386\mqsec.dll
+ 2008-04-14 00:11:58 517,632 ——w c:\windows\ServicePackFiles\i386\mqsnap.dll
+ 2008-04-14 00:12:27 4,608 ——w c:\windows\ServicePackFiles\i386\mqsvc.exe
+ 2008-04-14 00:12:27 117,248 ——w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
+ 2008-04-14 00:11:58 187,392 ——w c:\windows\ServicePackFiles\i386\mqtrig.dll
+ 2008-04-14 00:11:58 49,152 ——w c:\windows\ServicePackFiles\i386\mqupgrd.dll
+ 2008-04-14 00:11:58 471,552 ——w c:\windows\ServicePackFiles\i386\mqutil.dll
+ 2008-04-13 18:32:44 180,608 ——w c:\windows\ServicePackFiles\i386\mrxdav.sys
+ 2008-04-13 19:17:01 456,576 ——w c:\windows\ServicePackFiles\i386\mrxsmb.sys
+ 2008-04-14 00:11:58 71,680 ——w c:\windows\ServicePackFiles\i386\msacm32.dll
+ 2008-04-14 00:11:58 331,776 ——w c:\windows\ServicePackFiles\i386\msadce.dll
+ 2008-04-13 17:25:57 20,480 ——w c:\windows\ServicePackFiles\i386\msadcer.dll
+ 2008-04-14 00:11:58 61,440 ——w c:\windows\ServicePackFiles\i386\msadcf.dll
+ 2008-04-13 17:25:57 16,384 ——w c:\windows\ServicePackFiles\i386\msadcfr.dll
+ 2008-04-14 00:11:58 143,360 ——w c:\windows\ServicePackFiles\i386\msadco.dll
+ 2008-04-13 17:25:57 16,384 ——w c:\windows\ServicePackFiles\i386\msadcor.dll
+ 2008-04-14 00:11:58 53,248 ——w c:\windows\ServicePackFiles\i386\msadcs.dll
+ 2008-04-14 00:11:58 155,648 ——w c:\windows\ServicePackFiles\i386\msadds.dll
+ 2008-04-13 17:25:58 24,576 ——w c:\windows\ServicePackFiles\i386\msaddsr.dll
+ 2008-04-13 17:26:17 24,576 ——w c:\windows\ServicePackFiles\i386\msader15.dll
+ 2008-04-14 00:11:58 536,576 ——w c:\windows\ServicePackFiles\i386\msado15.dll
+ 2008-04-14 00:11:58 180,224 ——w c:\windows\ServicePackFiles\i386\msadomd.dll
+ 2008-04-14 00:11:58 57,344 ——w c:\windows\ServicePackFiles\i386\msador15.dll
+ 2008-04-14 00:11:58 200,704 ——w c:\windows\ServicePackFiles\i386\msadox.dll
+ 2008-04-14 00:11:58 57,344 ——w c:\windows\ServicePackFiles\i386\msadrh15.dll
+ 2008-04-14 00:10:06 3,584 ——w c:\windows\ServicePackFiles\i386\msafd.dll
+ 2008-04-14 00:11:58 86,016 ——w c:\windows\ServicePackFiles\i386\msapsspc.dll
+ 2008-04-14 00:11:58 57,344 ——w c:\windows\ServicePackFiles\i386\msasn1.dll
+ 2008-04-14 00:11:58 220,160 ——w c:\windows\ServicePackFiles\i386\mscandui.dll
+ 2008-04-14 00:11:58 73,728 ——w c:\windows\ServicePackFiles\i386\mscms.dll
+ 2008-04-14 00:11:58 69,632 ——w c:\windows\ServicePackFiles\i386\msconf.dll
+ 2008-04-14 00:12:27 169,984 ——w c:\windows\ServicePackFiles\i386\msconfig.exe
+ 2007-04-02 20:01:06 116,288 ——w c:\windows\ServicePackFiles\i386\msconv97.dll
+ 2007-06-27 12:54:57 1,564,672 ——w c:\windows\ServicePackFiles\i386\mscorcfg.dll
+ 2008-04-13 16:10:41 69,632 ——w c:\windows\ServicePackFiles\i386\mscordbc.dll
+ 2008-04-13 16:10:42 221,184 ——w c:\windows\ServicePackFiles\i386\mscordbi.dll
+ 2007-06-27 12:55:10 131,072 ——w c:\windows\ServicePackFiles\i386\mscoree.dll
+ 2008-04-13 16:10:45 73,728 ——w c:\windows\ServicePackFiles\i386\mscorie.dll
+ 2007-06-27 12:55:20 303,104 ——w c:\windows\ServicePackFiles\i386\mscorjit.dll
+ 2008-04-13 16:10:49 86,016 ——w c:\windows\ServicePackFiles\i386\mscorld.dll
+ 2007-12-17 11:58:42 1,998,848 ——w c:\windows\ServicePackFiles\i386\mscorlib.dll
+ 2008-04-13 16:10:53 94,208 ——w c:\windows\ServicePackFiles\i386\mscorpe.dll
+ 2008-04-13 16:10:53 143,360 ——w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
+ 2008-04-13 16:10:54 143,360 ——w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
+ 2008-04-13 16:10:54 143,360 ——w c:\windows\ServicePackFiles\i386\mscorrc.dll
+ 2008-04-13 16:10:54 172,032 ——w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
+ 2008-04-13 16:10:54 172,032 ——w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
+ 2008-04-13 16:10:55 167,936 ——w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
+ 2008-04-13 16:10:55 167,936 ——w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
+ 2008-04-13 16:10:55 143,360 ——w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
+ 2008-04-13 16:10:55 143,360 ——w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
+ 2008-04-13 16:10:55 46,592 ——w c:\windows\ServicePackFiles\i386\mscorsec.dll
+ 2008-04-13 16:10:55 69,632 ——w c:\windows\ServicePackFiles\i386\mscorsn.dll
+ 2007-12-17 11:58:53 2,273,280 ——w c:\windows\ServicePackFiles\i386\mscorsvr.dll
+ 2008-04-13 16:10:58 8,704 ——w c:\windows\ServicePackFiles\i386\mscortim.dll
+ 2007-12-17 11:59:26 2,281,472 ——w c:\windows\ServicePackFiles\i386\mscorwks.dll
+ 2008-04-13 17:26:07 12,288 ——w c:\windows\ServicePackFiles\i386\mscpx32r.dll
+ 2008-04-14 00:11:58 36,864 ——w c:\windows\ServicePackFiles\i386\mscpxl32.dll
+ 2008-04-14 00:11:58 297,984 ——w c:\windows\ServicePackFiles\i386\msctf.dll
+ 2008-04-14 00:11:58 68,608 ——w c:\windows\ServicePackFiles\i386\msctfp.dll
+ 2008-04-14 00:11:58 4,096 ——w c:\windows\ServicePackFiles\i386\msdadc.dll
+ 2008-04-14 00:11:58 118,784 ——w c:\windows\ServicePackFiles\i386\msdadiag.dll
+ 2008-04-14 00:11:58 4,096 ——w c:\windows\ServicePackFiles\i386\msdaenum.dll
+ 2008-04-14 00:11:58 4,096 ——w c:\windows\ServicePackFiles\i386\msdaer.dll
+ 2008-04-14 00:11:58 532,480 ——w c:\windows\ServicePackFiles\i386\msdaipp.dll
+ 2008-04-14 00:11:58 233,472 ——w c:\windows\ServicePackFiles\i386\msdaora.dll
+ 2008-04-13 17:24:14 16,384 ——w c:\windows\ServicePackFiles\i386\msdaorar.dll
+ 2008-04-14 00:11:58 77,824 ——w c:\windows\ServicePackFiles\i386\msdaosp.dll
+ 2008-04-13 17:25:58 16,384 ——w c:\windows\ServicePackFiles\i386\msdaprsr.dll
+ 2008-04-14 00:11:58 200,704 ——w c:\windows\ServicePackFiles\i386\msdaprst.dll
+ 2008-04-14 00:11:59 204,800 ——w c:\windows\ServicePackFiles\i386\msdaps.dll
+ 2008-04-14 00:11:59 118,784 ——w c:\windows\ServicePackFiles\i386\msdarem.dll
+ 2008-04-13 17:25:58 16,384 ——w c:\windows\ServicePackFiles\i386\msdaremr.dll
+ 2008-04-14 00:11:59 151,552 ——w c:\windows\ServicePackFiles\i386\msdart.dll
+ 2008-04-14 00:11:59 4,096 ——w c:\windows\ServicePackFiles\i386\msdasc.dll
+ 2008-04-14 00:11:59 315,392 ——w c:\windows\ServicePackFiles\i386\msdasql.dll
+ 2008-04-13 17:26:07 16,384 ——w c:\windows\ServicePackFiles\i386\msdasqlr.dll
+ 2008-04-14 00:11:59 94,208 ——w c:\windows\ServicePackFiles\i386\msdatl3.dll
+ 2008-04-14 00:11:59 20,480 ——w c:\windows\ServicePackFiles\i386\msdatt.dll
+ 2008-04-14 00:11:59 4,096 ——w c:\windows\ServicePackFiles\i386\msdaurl.dll
+ 2008-04-14 00:11:59 36,864 ——w c:\windows\ServicePackFiles\i386\msdfmap.dll
+ 2008-04-14 00:11:59 14,336 ——w c:\windows\ServicePackFiles\i386\msdmo.dll
+ 2008-04-14 00:12:27 6,144 ——w c:\windows\ServicePackFiles\i386\msdtc.exe
+ 2008-04-14 00:11:59 58,880 ——w c:\windows\ServicePackFiles\i386\msdtclog.dll
+ 2008-04-14 00:11:59 427,008 ——w c:\windows\ServicePackFiles\i386\msdtcprx.dll
+ 2008-04-14 00:11:59 90,112 ——w c:\windows\ServicePackFiles\i386\msdtcstp.dll
+ 2008-04-14 00:11:59 956,928 ——w c:\windows\ServicePackFiles\i386\msdtctm.dll
+ 2008-04-14 00:11:59 161,792 ——w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
+ 2008-04-13 18:46:09 51,200 ——w c:\windows\ServicePackFiles\i386\msdv.sys
+ 2008-03-25 04:50:28 518,944 ——w c:\windows\ServicePackFiles\i386\msexch40.dll
+ 2008-03-25 04:50:30 326,432 ——w c:\windows\ServicePackFiles\i386\msexcl40.dll
+ 2008-04-13 18:32:39 19,072 ——w c:\windows\ServicePackFiles\i386\msfs.sys
+ 2008-04-14 00:11:59 539,136 ——w c:\windows\ServicePackFiles\i386\msftedit.dll
+ 2008-04-14 00:11:59 997,376 ——w c:\windows\ServicePackFiles\i386\msgina.dll
+ 2008-04-13 18:56:32 35,072 ——w c:\windows\ServicePackFiles\i386\msgpc.sys
+ 2008-04-14 00:11:59 3,166,208 ——w c:\windows\ServicePackFiles\i386\msgr3en.dll
+ 2008-04-14 00:11:59 15,360 ——w c:\windows\ServicePackFiles\i386\msgrocm.dll
+ 2008-04-14 00:11:59 82,944 ——w c:\windows\ServicePackFiles\i386\msgsc.dll
+ 2008-04-13 17:30:28 180,224 ——w c:\windows\ServicePackFiles\i386\msgslang.dll
+ 2008-04-14 00:11:59 33,792 ——w c:\windows\ServicePackFiles\i386\msgsvc.dll
+ 2008-04-14 00:12:45 188,416 ——w c:\windows\ServicePackFiles\i386\msh261.drv
+ 2008-04-14 00:12:45 294,912 ——w c:\windows\ServicePackFiles\i386\msh263.drv
+ 2008-04-14 00:12:27 29,184 ——w c:\windows\ServicePackFiles\i386\mshta.exe
+ 2008-04-14 00:11:59 3,066,880 ——w c:\windows\ServicePackFiles\i386\mshtml.dll
+ 2008-04-14 00:11:59 449,024 ——w c:\windows\ServicePackFiles\i386\mshtmled.dll
+ 2008-04-13 16:26:26 56,832 ——w c:\windows\ServicePackFiles\i386\mshtmler.dll
+ 2008-04-14 00:11:59 2,843,136 ——w c:\windows\ServicePackFiles\i386\msi.dll
+ 2008-04-14 00:11:59 51,712 ——w c:\windows\ServicePackFiles\i386\msident.dll
+ 2008-04-14 00:11:59 6,656 ——w c:\windows\ServicePackFiles\i386\msidle.dll
+ 2008-04-14 00:11:59 248,832 ——w c:\windows\ServicePackFiles\i386\msieftp.dll
+ 2008-04-14 00:12:28 78,848 ——w c:\windows\ServicePackFiles\i386\msiexec.exe
+ 2008-04-14 00:11:59 271,360 ——w c:\windows\ServicePackFiles\i386\msihnd.dll
+ 2008-04-14 00:11:59 4,608 ——w c:\windows\ServicePackFiles\i386\msimg32.dll
+ 2008-04-14 00:12:28 60,416 ——w c:\windows\ServicePackFiles\i386\msimn.exe
+ 2008-04-13 15:39:43 884,736 ——w c:\windows\ServicePackFiles\i386\msimsg.dll
+ 2008-04-14 00:11:59 159,232 ——w c:\windows\ServicePackFiles\i386\msimtf.dll
+ 2008-04-14 00:11:59 376,832 ——w c:\windows\ServicePackFiles\i386\msinfo.dll
+ 2008-04-13 18:54:28 22,016 ——w c:\windows\ServicePackFiles\i386\msircomm.sys
+ 2008-04-14 00:12:28 40,960 ——w c:\windows\ServicePackFiles\i386\msiregmv.exe
+ 2008-04-14 00:11:59 15,360 ——w c:\windows\ServicePackFiles\i386\msisip.dll
+ 2008-03-25 04:50:34 1,516,568 ——w c:\windows\ServicePackFiles\i386\msjet40.dll
+ 2008-03-25 04:50:40 355,112 ——w c:\windows\ServicePackFiles\i386\msjetol1.dll
+ 2008-04-14 00:12:00 151,583 ——w c:\windows\ServicePackFiles\i386\msjint40.dll
+ 2008-04-14 00:12:00 102,400 ——w c:\windows\ServicePackFiles\i386\msjro.dll
+ 2008-03-25 04:50:42 60,192 ——w c:\windows\ServicePackFiles\i386\msjter40.dll
+ 2008-03-25 04:50:42 248,608 ——w c:\windows\ServicePackFiles\i386\msjtes40.dll
+ 2008-04-13 18:39:52 7,552 ——w c:\windows\ServicePackFiles\i386\mskssrv.sys
+ 2008-04-14 00:12:00 25,088 ——w c:\windows\ServicePackFiles\i386\mslbui.dll
+ 2008-03-25 04:50:44 219,936 ——w c:\windows\ServicePackFiles\i386\msltus40.dll
+ 2008-04-14 00:12:00 39,936 ——w c:\windows\ServicePackFiles\i386\mslwvtts.dll
+ 2008-04-14 00:12:00 170,496 ——w c:\windows\ServicePackFiles\i386\msmqocm.dll
+ 2008-04-14 00:12:28 1,695,232 ——w c:\windows\ServicePackFiles\i386\msmsgs.exe
+ 2004-07-17 15:41:46 11,053,008 ——w c:\windows\ServicePackFiles\i386\msncli.exe
+ 2008-04-14 00:12:00 290,816 ——w c:\windows\ServicePackFiles\i386\msnsspc.dll
+ 2004-07-17 15:41:46 1,327,320 ——w c:\windows\ServicePackFiles\i386\msnsusii.exe
+ 2008-04-14 00:12:00 122,368 ——w c:\windows\ServicePackFiles\i386\msobcomm.dll
+ 2008-04-14 00:12:00 16,384 ——w c:\windows\ServicePackFiles\i386\msobdl.dll
+ 2008-04-14 00:12:00 565,248 ——w c:\windows\ServicePackFiles\i386\msobmain.dll
+ 2008-04-14 00:12:00 30,720 ——w c:\windows\ServicePackFiles\i386\msobshel.dll
+ 2008-04-14 00:12:00 19,456 ——w c:\windows\ServicePackFiles\i386\msobweb.dll
+ 2008-04-14 00:12:00 1,314,816 ——w c:\windows\ServicePackFiles\i386\msoe.dll
+ 2008-04-14 00:12:00 252,928 ——w c:\windows\ServicePackFiles\i386\msoeacct.dll
+ 2008-04-13 16:23:54 2,479,616 ——w c:\windows\ServicePackFiles\i386\msoeres.dll
+ 2008-04-14 00:12:00 105,984 ——w c:\windows\ServicePackFiles\i386\msoert2.dll
+ 2008-04-14 00:12:28 29,184 ——w c:\windows\ServicePackFiles\i386\msoobe.exe
+ 2008-04-13 17:24:14 20,480 ——w c:\windows\ServicePackFiles\i386\msorc32r.dll
+ 2008-04-14 00:12:00 143,360 ——w c:\windows\ServicePackFiles\i386\msorcl32.dll
+ 2008-04-14 00:12:28 343,040 ——w c:\windows\ServicePackFiles\i386\mspaint.exe
+ 2008-04-14 00:12:00 29,696 ——w c:\windows\ServicePackFiles\i386\mspatcha.dll
+ 2008-03-25 04:50:45 355,104 ——w c:\windows\ServicePackFiles\i386\mspbde40.dll
+ 2008-04-13 18:39:50 5,376 ——w c:\windows\ServicePackFiles\i386\mspclock.sys
+ 2008-04-13 18:39:51 4,992 ——w c:\windows\ServicePackFiles\i386\mspqm.sys
+ 2008-04-13 16:23:31 48,128 ——w c:\windows\ServicePackFiles\i386\msprivs.dll
+ 2008-04-14 00:12:00 146,432 ——w c:\windows\ServicePackFiles\i386\msrating.dll
+ 2008-03-25 04:50:47 432,928 ——w c:\windows\ServicePackFiles\i386\msrd2x40.dll
+ 2008-03-25 04:50:49 322,336 ——w c:\windows\ServicePackFiles\i386\msrd3x40.dll
+ 2008-03-25 04:50:52 559,904 ——w c:\windows\ServicePackFiles\i386\msrepl40.dll
+ 2008-04-14 00:12:00 11,264 ——w c:\windows\ServicePackFiles\i386\msrle32.dll
+ 2008-04-14 00:12:00 134,656 ——w c:\windows\ServicePackFiles\i386\mssap.dll
+ 2008-04-14 00:12:00 155,136 ——w c:\windows\ServicePackFiles\i386\mssha.dll
+ 2008-04-13 18:14:58 76,800 ——w c:\windows\ServicePackFiles\i386\msshamsg.dll
+ 2008-04-13 18:36:46 15,488 ——w c:\windows\ServicePackFiles\i386\mssmbios.sys
+ 2008-04-14 00:12:00 274,432 ——w c:\windows\ServicePackFiles\i386\mst120.dll
+ 2008-04-14 00:12:00 57,344 ——w c:\windows\ServicePackFiles\i386\mst123.dll
+ 2008-04-13 18:46:08 49,024 ——w c:\windows\ServicePackFiles\i386\mstape.sys
+ 2008-04-14 00:12:00 274,944 ——w c:\windows\ServicePackFiles\i386\mstask.dll
+ 2008-04-13 18:39:50 5,504 ——w c:\windows\ServicePackFiles\i386\mstee.sys
+ 2008-03-25 04:50:55 264,992 ——w c:\windows\ServicePackFiles\i386\mstext40.dll
+ 2008-04-14 00:12:00 532,480 ——w c:\windows\ServicePackFiles\i386\mstime.dll
+ 2008-04-14 00:12:29 12,288 ——w c:\windows\ServicePackFiles\i386\mstinit.exe
+ 2008-04-14 00:12:00 116,224 ——w c:\windows\ServicePackFiles\i386\mstlsapi.dll
+ 2008-04-14 00:12:00 195,072 ——w c:\windows\ServicePackFiles\i386\msutb.dll
+ 2008-04-14 00:12:00 132,608 ——w c:\windows\ServicePackFiles\i386\msv1_0.dll
+ 2008-04-14 00:12:00 1,384,479 ——w c:\windows\ServicePackFiles\i386\msvbvm60.dll
+ 2008-04-14 00:12:01 57,344 ——w c:\windows\ServicePackFiles\i386\msvcirt.dll
+ 2008-04-14 00:12:01 413,696 ——w c:\windows\ServicePackFiles\i386\msvcp60.dll
+ 2008-04-14 00:12:01 343,040 ——w c:\windows\ServicePackFiles\i386\msvcrt.dll
+ 2008-04-13 18:30:46 61,440 ——w c:\windows\ServicePackFiles\i386\msvcrt40.dll
+ 2008-04-14 00:12:01 121,344 ——w c:\windows\ServicePackFiles\i386\msvfw32.dll
+ 2008-04-14 00:12:01 1,428,992 ——w c:\windows\ServicePackFiles\i386\msvidctl.dll
+ 2008-04-14 00:12:01 72,704 ——w c:\windows\ServicePackFiles\i386\msw3prt.dll
+ 2008-03-25 04:50:57 838,432 ——w c:\windows\ServicePackFiles\i386\mswdat10.dll
+ 2008-04-14 00:12:01 203,776 ——w c:\windows\ServicePackFiles\i386\mswebdvd.dll
+ 2008-04-14 00:12:01 245,248 ——w c:\windows\ServicePackFiles\i386\mswsock.dll
+ 2008-03-25 04:50:58 621,344 ——w c:\windows\ServicePackFiles\i386\mswstr10.dll
+ 2008-04-14 00:12:01 24,576 ——w c:\windows\ServicePackFiles\i386\msxactps.dll
+ 2008-03-25 04:50:58 355,104 ——w c:\windows\ServicePackFiles\i386\msxbde40.dll
+ 2008-04-14 00:12:01 506,368 ——w c:\windows\ServicePackFiles\i386\msxml.dll
+ 2008-04-14 00:12:01 701,440 ——w c:\windows\ServicePackFiles\i386\msxml2.dll
+ 2008-04-14 00:12:01 1,104,896 ——w c:\windows\ServicePackFiles\i386\msxml3.dll
+ 2008-04-14 00:12:01 16,896 ——w c:\windows\ServicePackFiles\i386\msyuv.dll
+ 2004-08-04 02:41:40 126,686 ——w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
+ 2004-08-04 02:41:38 1,309,184 ——w c:\windows\ServicePackFiles\i386\mtlstrm.sys
+ 2008-04-14 00:12:29 119,808 ——w c:\windows\ServicePackFiles\i386\mtstocom.exe
+ 2008-04-14 00:12:01 66,560 ——w c:\windows\ServicePackFiles\i386\mtxclu.dll
+ 2008-04-14 00:12:01 30,720 ——w c:\windows\ServicePackFiles\i386\mtxdm.dll
+ 2008-04-14 00:12:01 4,096 ——w c:\windows\ServicePackFiles\i386\mtxex.dll
+ 2008-04-14 00:12:01 34,304 ——w c:\windows\ServicePackFiles\i386\mtxlegih.dll
+ 2008-04-14 00:12:01 91,648 ——w c:\windows\ServicePackFiles\i386\mtxoci.dll
+ 2008-04-14 00:12:01 1,737,856 ——w c:\windows\ServicePackFiles\i386\mtxparhd.dll
+ 2004-08-04 02:29:38 452,736 ——w c:\windows\ServicePackFiles\i386\mtxparhm.sys
+ 2008-04-14 00:12:29 90,624 ——w c:\windows\ServicePackFiles\i386\muisetup.exe
+ 2008-04-13 19:17:05 105,344 ——w c:\windows\ServicePackFiles\i386\mup.sys
+ 2008-04-13 18:43:55 12,672 ——w c:\windows\ServicePackFiles\i386\mutohpen.sys
+ 2008-04-14 00:12:01 90,624 ——w c:\windows\ServicePackFiles\i386\mydocs.dll
+ 2008-04-13 18:46:25 85,248 ——w c:\windows\ServicePackFiles\i386\nabtsfec.sys
+ 2008-04-14 00:12:01 221,184 ——w c:\windows\ServicePackFiles\i386\nac.dll
+ 2008-04-14 00:12:01 30,208 ——w c:\windows\ServicePackFiles\i386\napipsec.dll
+ 2008-04-14 00:12:01 193,024 ——w c:\windows\ServicePackFiles\i386\napmontr.dll
+ 2008-04-14 00:12:29 176,640 ——w c:\windows\ServicePackFiles\i386\napstat.exe
+ 2008-04-14 00:12:29 53,760 ——w c:\windows\ServicePackFiles\i386\narrator.exe
+ 2008-04-14 00:12:01 36,352 ——w c:\windows\ServicePackFiles\i386\ncobjapi.dll
+ 2008-04-14 00:12:01 47,104 ——w c:\windows\ServicePackFiles\i386\ncprov.dll
+ 2008-04-14 00:12:01 9,728 ——w c:\windows\ServicePackFiles\i386\ncpsres.dll
+ 2008-04-14 00:12:01 17,920 ——w c:\windows\ServicePackFiles\i386\nddeapi.dll
+ 2008-04-14 00:12:29 4,096 ——w c:\windows\ServicePackFiles\i386\nddeapir.exe
+ 2008-04-14 00:12:01 18,944 ——w c:\windows\ServicePackFiles\i386\nddenb32.dll
+ 2008-04-13 19:20:37 182,656 ——w c:\windows\ServicePackFiles\i386\ndis.sys
+ 2008-04-13 18:46:22 10,880 ——w c:\windows\ServicePackFiles\i386\ndisip.sys
+ 2008-04-14 00:12:01 57,344 ——w c:\windows\ServicePackFiles\i386\ndisnpp.dll
+ 2008-04-13 18:57:27 10,112 ——w c:\windows\ServicePackFiles\i386\ndistapi.sys
+ 2008-04-13 18:55:58 14,592 ——w c:\windows\ServicePackFiles\i386\ndisuio.sys
+ 2008-04-13 19:20:42 91,520 ——w c:\windows\ServicePackFiles\i386\ndiswan.sys
+ 2008-04-13 18:57:29 40,576 ——w c:\windows\ServicePackFiles\i386\ndproxy.sys
+ 2008-04-14 00:12:29 42,496 ——w c:\windows\ServicePackFiles\i386\net.exe
+ 2008-04-14 00:12:29 124,928 ——w c:\windows\ServicePackFiles\i386\net1.exe
+ 2008-04-14 00:12:01 337,408 ——w c:\windows\ServicePackFiles\i386\netapi32.dll
+ 2008-04-13 18:56:02 34,688 ——w c:\windows\ServicePackFiles\i386\netbios.sys
+ 2008-04-13 19:21:00 162,816 ——w c:\windows\ServicePackFiles\i386\netbt.sys
+ 2008-04-14 00:12:01 622,592 ——w c:\windows\ServicePackFiles\i386\netcfgx.dll
+ 2008-04-14 00:12:29 111,104 ——w c:\windows\ServicePackFiles\i386\netdde.exe
+ 2004-08-04 11:00:00 126,976 ——w c:\windows\ServicePackFiles\i386\netfxocm.dll
+ 2007-12-17 11:59:53 82,976 ——w c:\windows\ServicePackFiles\i386\netfxupdate.exe
+ 2008-04-14 00:12:01 139,264 ——w c:\windows\ServicePackFiles\i386\netid.dll
+ 2008-04-14 00:12:01 407,040 ——w c:\windows\ServicePackFiles\i386\netlogon.dll
+ 2008-04-14 00:12:01 198,144 ——w c:\windows\ServicePackFiles\i386\netman.dll
+ 2008-04-14 00:12:01 77,312 ——w c:\windows\ServicePackFiles\i386\netoc.dll
+ 2008-04-14 00:12:01 875,008 ——w c:\windows\ServicePackFiles\i386\netplwiz.dll
+ 2008-04-14 00:12:01 11,776 ——w c:\windows\ServicePackFiles\i386\netrap.dll
+ 2008-04-14 00:16:51 329,728 ——w c:\windows\ServicePackFiles\i386\netsetup.exe
+ 2008-04-14 00:12:29 86,016 ——w c:\windows\ServicePackFiles\i386\netsh.exe
+ 2008-04-14 00:12:02 1,703,936 ——w c:\windows\ServicePackFiles\i386\netshell.dll
+ 2008-04-14 00:12:29 36,864 ——w c:\windows\ServicePackFiles\i386\netstat.exe
+ 2008-04-14 00:12:02 80,896 ——w c:\windows\ServicePackFiles\i386\netui0.dll
+ 2008-04-14 00:12:02 245,760 ——w c:\windows\ServicePackFiles\i386\netui1.dll
+ 2004-08-04 02:31:42 132,695 ——w c:\windows\ServicePackFiles\i386\netwlan5.sys
+ 2008-04-14 00:12:02 247,808 ——w c:\windows\ServicePackFiles\i386\newdev.dll
+ 2008-04-13 16:11:06 147,456 ——w c:\windows\ServicePackFiles\i386\ngen.exe
+ 2008-04-13 18:51:25 61,824 ——w c:\windows\ServicePackFiles\i386\nic1394.sys
+ 2008-04-14 00:12:02 98,304 ——w c:\windows\ServicePackFiles\i386\nlhtml.dll
+ 2008-04-14 00:12:02 229,376 ——w c:\windows\ServicePackFiles\i386\nmas.dll
+ 2008-04-14 00:12:02 28,672 ——w c:\windows\ServicePackFiles\i386\nmasnt.dll
+ 2008-04-14 00:12:02 81,920 ——w c:\windows\ServicePackFiles\i386\nmchat.dll
+ 2008-04-14 00:12:02 77,824 ——w c:\windows\ServicePackFiles\i386\nmcom.dll
+ 2008-04-14 00:12:02 151,552 ——w c:\windows\ServicePackFiles\i386\nmft.dll
+ 2008-04-14 00:12:02 28,672 ——w c:\windows\ServicePackFiles\i386\nmmkcert.dll
+ 2008-04-13 18:53:09 40,320 ——w c:\windows\ServicePackFiles\i386\nmnt.sys
+ 2008-04-14 00:12:02 172,032 ——w c:\windows\ServicePackFiles\i386\nmoldwb.dll
+ 2008-04-14 00:12:02 188,416 ——w c:\windows\ServicePackFiles\i386\nmwb.dll
+ 2008-04-14 00:12:29 69,120 ——w c:\windows\ServicePackFiles\i386\notepad.exe
+ 2008-04-13 18:32:39 30,848 ——w c:\windows\ServicePackFiles\i386\npfs.sys
+ 2008-04-14 00:12:29 15,360 ——w c:\windows\ServicePackFiles\i386\nppagent.exe
+ 2008-04-14 00:12:02 54,784 ——w c:\windows\ServicePackFiles\i386\npptools.dll
+ 2008-04-13 18:54:36 28,672 ——w c:\windows\ServicePackFiles\i386\nscirda.sys
+ 2008-04-14 00:12:02 44,544 ——w c:\windows\ServicePackFiles\i386\nsepm.dll
+ 2008-04-14 00:12:29 76,800 ——w c:\windows\ServicePackFiles\i386\nslookup.exe
+ 2008-04-14 00:12:30 1,200,640 ——w c:\windows\ServicePackFiles\i386\ntbackup.exe
+ 2004-08-04 11:00:00 47,564 ——w c:\windows\ServicePackFiles\i386\ntdetect.com
+ 2008-04-14 00:11:24 706,048 ——w c:\windows\ServicePackFiles\i386\ntdll.dll
+ 2008-04-14 00:12:02 67,072 ——w c:\windows\ServicePackFiles\i386\ntdsapi.dll
+ 2008-04-14 00:12:02 212,992 ——w c:\windows\ServicePackFiles\i386\ntevt.dll
+ 2008-04-13 19:15:53 574,976 ——w c:\windows\ServicePackFiles\i386\ntfs.sys
+ 2004-08-04 11:00:00 33,840 ——w c:\windows\ServicePackFiles\i386\ntio.sys
+ 2004-08-04 11:00:00 34,560 ——w c:\windows\ServicePackFiles\i386\ntio404.sys
+ 2004-08-04 11:00:00 35,648 ——w c:\windows\ServicePackFiles\i386\ntio411.sys
+ 2004-08-04 11:00:00 35,424 ——w c:\windows\ServicePackFiles\i386\ntio412.sys
+ 2004-08-04 11:00:00 34,560 ——w c:\windows\ServicePackFiles\i386\ntio804.sys
+ 2008-04-13 19:24:37 2,145,280 ——w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
+ 2008-04-13 18:31:21 2,065,792 ——w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
+ 2008-04-13 18:31:21 2,023,936 ——w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
+ 2008-04-14 00:12:02 44,032 ——w c:\windows\ServicePackFiles\i386\ntlanman.dll
+ 2008-04-14 00:12:02 8,192 ——w c:\windows\ServicePackFiles\i386\ntlsapi.dll
+ 2008-04-14 00:12:02 118,784 ——w c:\windows\ServicePackFiles\i386\ntmarta.dll
+ 2008-04-14 00:12:02 40,960 ——w c:\windows\ServicePackFiles\i386\ntmsapi.dll
+ 2008-04-14 00:12:02 179,200 ——w c:\windows\ServicePackFiles\i386\ntmsdba.dll
+ 2008-04-14 00:12:02 488,448 ——w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
+ 2008-04-14 00:12:02 435,200 ——w c:\windows\ServicePackFiles\i386\ntmssvc.dll
+ 2004-08-04 02:41:40 180,360 ——w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
+ 2008-04-14 00:12:02 62,976 ——w c:\windows\ServicePackFiles\i386\ntoc.dll
+ 2008-04-13 19:27:53 2,188,928 ——w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
+ 2008-04-14 00:12:02 91,136 ——w c:\windows\ServicePackFiles\i386\ntprint.dll
+ 2008-04-14 00:12:02 143,360 ——w c:\windows\ServicePackFiles\i386\ntshrui.dll
+ 2008-04-14 00:12:30 420,864 ——w c:\windows\ServicePackFiles\i386\ntvdm.exe
+ 2008-04-14 00:12:02 15,360 ——w c:\windows\ServicePackFiles\i386\ntvdmd.dll
+ 2008-04-14 00:12:02 4,274,816 ——w c:\windows\ServicePackFiles\i386\nv4_disp.dll
+ 2004-08-04 04:29:56 1,897,408 ——w c:\windows\ServicePackFiles\i386\nv4_mini.sys
+ 2008-04-14 00:12:02 64,000 ——w c:\windows\ServicePackFiles\i386\nwapi32.dll
+ 2008-04-13 18:56:06 88,320 ——w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
+ 2008-04-14 00:12:02 142,336 ——w c:\windows\ServicePackFiles\i386\nwprovau.dll
+ 2008-04-13 18:34:12 163,584 ——w c:\windows\ServicePackFiles\i386\nwrdr.sys
+ 2008-04-14 00:12:02 65,536 ——w c:\windows\ServicePackFiles\i386\nwwks.dll
+ 2008-04-14 00:12:02 270,336 ——w c:\windows\ServicePackFiles\i386\oakley.dll
+ 2008-04-14 00:10:30 229,376 ——w c:\windows\ServicePackFiles\i386\obelog.dll
+ 2008-04-14 00:10:30 966,656 ——w c:\windows\ServicePackFiles\i386\obemetal.dll
+ 2007-04-02 18:44:11 77,824 ——w c:\windows\ServicePackFiles\i386\obemtllc.dll
+ 2008-04-14 00:10:30 86,016 ——w c:\windows\ServicePackFiles\i386\obepopc.dll
+ 2008-04-14 00:12:02 286,208 ——w c:\windows\ServicePackFiles\i386\objsel.dll
+ 2008-04-13 18:40:07 393,728 ——w c:\windows\ServicePackFiles\i386\obrb0401.dll
+ 2008-04-13 18:40:23 212,480 ——w c:\windows\ServicePackFiles\i386\obrb0404.dll
+ 2008-04-13 18:40:24 428,032 ——w c:\windows\ServicePackFiles\i386\obrb0405.dll
+ 2008-04-13 18:40:27 418,816 ——w c:\windows\ServicePackFiles\i386\obrb0406.dll
+ 2008-04-13 18:40:34 403,456 ——w c:\windows\ServicePackFiles\i386\obrb0407.dll
+ 2008-04-13 18:40:30 419,328 ——w c:\windows\ServicePackFiles\i386\obrb0408.dll
+ 2008-04-13 18:40:32 405,504 ——w c:\windows\ServicePackFiles\i386\obrb040b.dll
+ 2008-04-13 18:40:33 410,624 ——w c:\windows\ServicePackFiles\i386\obrb040c.dll
+ 2008-04-13 18:40:32 384,000 ——w c:\windows\ServicePackFiles\i386\obrb040d.dll
+ 2008-04-13 18:40:39 434,176 ——w c:\windows\ServicePackFiles\i386\obrb040e.dll
+ 2008-04-13 18:40:39 413,696 ——w c:\windows\ServicePackFiles\i386\obrb0410.dll
+ 2008-04-13 18:40:44 275,456 ——w c:\windows\ServicePackFiles\i386\obrb0411.dll
+ 2008-04-13 18:40:48 306,688 ——w c:\windows\ServicePackFiles\i386\obrb0412.dll
+ 2008-04-13 18:40:44 401,920 ——w c:\windows\ServicePackFiles\i386\obrb0413.dll
+ 2008-04-13 18:40:44 353,792 ——w c:\windows\ServicePackFiles\i386\obrb0414.dll
+ 2008-04-13 18:40:47 391,680 ——w c:\windows\ServicePackFiles\i386\obrb0415.dll
+ 2008-04-13 18:40:10 409,600 ——w c:\windows\ServicePackFiles\i386\obrb0416.dll
+ 2008-04-13 18:40:50 427,008 ——w c:\windows\ServicePackFiles\i386\obrb0419.dll
+ 2008-04-13 18:40:52 405,504 ——w c:\windows\ServicePackFiles\i386\obrb041b.dll
+ 2008-04-13 18:40:56 363,008 ——w c:\windows\ServicePackFiles\i386\obrb041d.dll
+ 2008-04-13 18:41:00 390,144 ——w c:\windows\ServicePackFiles\i386\obrb041f.dll
+ 2008-04-13 18:40:56 408,576 ——w c:\windows\ServicePackFiles\i386\obrb0424.dll
+ 2008-04-13 18:40:24 270,336 ——w c:\windows\ServicePackFiles\i386\obrb0804.dll
+ 2008-04-13 18:40:48 435,200 ——w c:\windows\ServicePackFiles\i386\obrb0816.dll
+ 2008-04-13 18:40:30 446,464 ——w c:\windows\ServicePackFiles\i386\obrb0c0a.dll
+ 2008-04-14 00:12:02 96,256 ——w c:\windows\ServicePackFiles\i386\occache.dll
+ 2008-04-14 00:12:02 15,360 ——w c:\windows\ServicePackFiles\i386\ocgen.dll
+ 2008-04-14 00:12:02 67,584 ——w c:\windows\ServicePackFiles\i386\ocmanage.dll
+ 2008-04-14 00:12:02 17,408 ——w c:\windows\ServicePackFiles\i386\ocmsn.dll
+ 2004-08-04 11:00:00 26,224 ——w c:\windows\ServicePackFiles\i386\odbc16gt.dll
+ 2008-04-14 00:12:02 249,856 ——w c:\windows\ServicePackFiles\i386\odbc32.dll
+ 2008-04-14 00:12:02 16,384 ——w c:\windows\ServicePackFiles\i386\odbc32gt.dll
+ 2008-04-14 00:12:30 32,768 ——w c:\windows\ServicePackFiles\i386\odbcad32.exe
+ 2008-04-14 00:12:02 24,576 ——w c:\windows\ServicePackFiles\i386\odbcbcp.dll
+ 2008-04-14 00:12:02 135,168 ——w c:\windows\ServicePackFiles\i386\odbcconf.dll
+ 2008-04-14 00:12:30 69,632 ——w c:\windows\ServicePackFiles\i386\odbcconf.exe
+ 2008-04-14 00:12:02 106,496 ——w c:\windows\ServicePackFiles\i386\odbccp32.dll
+ 2008-04-14 00:12:02 65,536 ——w c:\windows\ServicePackFiles\i386\odbccr32.dll
+ 2008-04-14 00:12:02 65,536 ——w c:\windows\ServicePackFiles\i386\odbccu32.dll
+ 2008-04-13 17:26:05 94,208 ——w c:\windows\ServicePackFiles\i386\odbcint.dll
+ 2008-04-14 00:10:31 53,279 ——w c:\windows\ServicePackFiles\i386\odbcji32.dll
+ 2008-04-14 00:12:02 278,559 ——w c:\windows\ServicePackFiles\i386\odbcjt32.dll
+ 2008-04-13 17:26:05 12,288 ——w c:\windows\ServicePackFiles\i386\odbcp32r.dll
+ 2008-04-14 00:12:02 147,456 ——w c:\windows\ServicePackFiles\i386\odbctrac.dll
+ 2008-04-14 00:12:02 20,511 ——w c:\windows\ServicePackFiles\i386\oddbse32.dll
+ 2008-04-14 00:12:02 20,510 ——w c:\windows\ServicePackFiles\i386\odexl32.dll
+ 2008-04-14 00:12:02 20,510 ——w c:\windows\ServicePackFiles\i386\odfox32.dll
+ 2008-04-14 00:12:02 20,510 ——w c:\windows\ServicePackFiles\i386\odpdx32.dll
+ 2008-04-14 00:12:02 20,511 ——w c:\windows\ServicePackFiles\i386\odtext32.dll
+ 2008-04-14 00:12:02 104,448 ——w c:\windows\ServicePackFiles\i386\oeimport.dll
+ 2008-04-14 00:12:30 60,416 ——w c:\windows\ServicePackFiles\i386\oemig50.exe
+ 2008-04-14 00:12:02 35,328 ——w c:\windows\ServicePackFiles\i386\oemiglib.dll
+ 2008-04-14 00:12:02 192,000 ——w c:\windows\ServicePackFiles\i386\offfilt.dll
+ 2008-04-13 18:46:18 61,696 ——w c:\windows\ServicePackFiles\i386\ohci1394.sys
+ 2008-04-14 00:12:02 1,287,168 ——w c:\windows\ServicePackFiles\i386\ole32.dll
+ 2008-04-14 00:12:02 551,936 ——w c:\windows\ServicePackFiles\i386\oleaut32.dll
+ 2008-04-14 00:12:02 74,752 ——w c:\windows\ServicePackFiles\i386\olecli32.dll
+ 2008-04-14 00:12:02 37,376 ——w c:\windows\ServicePackFiles\i386\olecnv32.dll
+ 2008-04-14 00:12:02 487,424 ——w c:\windows\ServicePackFiles\i386\oledb32.dll
+ 2008-04-14 00:12:02 65,536 ——w c:\windows\ServicePackFiles\i386\oledb32r.dll
+ 2008-04-14 00:12:02 122,880 ——w c:\windows\ServicePackFiles\i386\oledlg.dll
+ 2008-04-14 00:12:02 107,008 ——w c:\windows\ServicePackFiles\i386\oleprn.dll
+ 2008-04-14 00:12:02 84,992 ——w c:\windows\ServicePackFiles\i386\olepro32.dll
+ 2008-04-14 00:12:02 144,384 ——w c:\windows\ServicePackFiles\i386\onex.dll
+ 2008-04-14 00:12:31 51,200 ——w c:\windows\ServicePackFiles\i386\oobebaln.exe
+ 2008-04-14 00:12:02 713,728 ——w c:\windows\ServicePackFiles\i386\opengl32.dll
+ 2008-04-14 00:12:31 67,584 ——w c:\windows\ServicePackFiles\i386\opnfiles.exe
+ 2008-04-13 18:32:32 166,912 ——w c:\windows\ServicePackFiles\i386\oschoice.exe
+ 2008-04-14 00:12:31 215,552 ——w c:\windows\ServicePackFiles\i386\osk.exe
+ 2008-04-13 18:31:43 230,400 ——w c:\windows\ServicePackFiles\i386\osloader.exe
+ 2008-04-14 00:12:02 67,584 ——w c:\windows\ServicePackFiles\i386\osuninst.dll
+ 2008-04-14 00:12:02 153,600 ——w c:\windows\ServicePackFiles\i386\p2p.dll
+ 2008-04-14 00:12:02 105,472 ——w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
+ 2008-04-14 00:12:02 313,856 ——w c:\windows\ServicePackFiles\i386\p2pgraph.dll
+ 2008-04-14 00:12:02 115,712 ——w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
+ 2008-04-14 00:12:02 554,496 ——w c:\windows\ServicePackFiles\i386\p2psvc.dll
+ 2008-04-13 18:31:31 42,752 ——w c:\windows\ServicePackFiles\i386\p3.sys
+ 2008-04-14 00:12:31 58,368 ——w c:\windows\ServicePackFiles\i386\packager.exe
+ 2008-04-13 18:40:10 80,128 ——w c:\windows\ServicePackFiles\i386\parport.sys
+ 2008-04-13 18:40:49 19,712 ——w c:\windows\ServicePackFiles\i386\partmgr.sys
+ 2008-04-14 00:12:02 67,584 ——w c:\windows\ServicePackFiles\i386\pautoenr.dll
+ 2004-08-04 02:31:24 29,502 ——w c:\windows\ServicePackFiles\i386\pca200e.sys
+ 2008-04-14 00:12:02 102,912 ——w c:\windows\ServicePackFiles\i386\pchshell.dll
+ 2008-04-14 00:12:02 38,400 ——w c:\windows\ServicePackFiles\i386\pchsvc.dll
+ 2008-04-13 18:36:44 68,224 ——w c:\windows\ServicePackFiles\i386\pci.sys
+ 2008-04-13 18:40:29 24,960 ——w c:\windows\ServicePackFiles\i386\pciidex.sys
+ 2007-05-15 08:08:11 288,768 ——w c:\windows\ServicePackFiles\i386\pcl4res.dll
+ 2007-05-15 08:08:13 1,058,816 ——w c:\windows\ServicePackFiles\i386\pcl5eres.dll
+ 2007-05-15 08:08:14 1,057,280 ——w c:\windows\ServicePackFiles\i386\pcl5ures.dll
+ 2007-05-15 08:08:14 207,872 ——w c:\windows\ServicePackFiles\i386\pclxl.dll
+ 2008-04-13 18:36:43 120,192 ——w c:\windows\ServicePackFiles\i386\pcmcia.sys
+ 2004-08-04 02:06:18 169,984 ——w c:\windows\ServicePackFiles\i386\pcx500.sys
+ 2008-04-14 00:12:02 284,160 ——w c:\windows\ServicePackFiles\i386\pdh.dll
+ 2008-04-13 16:11:06 20,480 ——w c:\windows\ServicePackFiles\i386\perfcounter.dll
+ 2008-04-14 00:12:02 39,936 ——w c:\windows\ServicePackFiles\i386\perfctrs.dll
+ 2008-04-14 00:12:02 26,624 ——w c:\windows\ServicePackFiles\i386\perfdisk.dll
+ 2008-04-14 00:12:31 15,872 ——w c:\windows\ServicePackFiles\i386\perfmon.exe
+ 2008-04-14 00:12:02 17,920 ——w c:\windows\ServicePackFiles\i386\perfnet.dll
+ 2008-04-14 00:12:02 25,088 ——w c:\windows\ServicePackFiles\i386\perfos.dll
+ 2008-04-14 00:12:02 34,816 ——w c:\windows\ServicePackFiles\i386\perfproc.dll
+ 2008-04-13 18:44:29 27,904 ——w c:\windows\ServicePackFiles\i386\perm2.sys
+ 2008-04-14 00:10:34 211,584 ——w c:\windows\ServicePackFiles\i386\perm2dll.dll
+ 2008-04-13 18:44:30 28,032 ——w c:\windows\ServicePackFiles\i386\perm3.sys
+ 2008-04-14 00:10:34 259,328 ——w c:\windows\ServicePackFiles\i386\perm3dd.dll
+ 2008-04-14 00:12:02 176,128 ——w c:\windows\ServicePackFiles\i386\photowiz.dll
+ 2008-04-14 00:12:02 35,328 ——w c:\windows\ServicePackFiles\i386\pid.dll
+ 2008-04-14 00:11:09 24,064 ——w c:\windows\ServicePackFiles\i386\pidgen.dll
+ 2008-04-14 00:12:31 281,088 ——w c:\windows\ServicePackFiles\i386\pinball.exe
+ 2008-04-14 00:12:31 17,920 ——w c:\windows\ServicePackFiles\i386\ping.exe
+ 2008-04-14 00:12:02 15,360 ——w c:\windows\ServicePackFiles\i386\pjlmon.dll
+ 2008-04-14 00:12:02 44,544 ——w c:\windows\ServicePackFiles\i386\plotter.dll
+ 2008-04-14 00:12:02 52,736 ——w c:\windows\ServicePackFiles\i386\plotui.dll
+ 2008-04-14 00:12:02 412,160 ——w c:\windows\ServicePackFiles\i386\pmh.dll
+ 2008-04-14 00:12:02 39,424 ——w c:\windows\ServicePackFiles\i386\pngfilt.dll
+ 2008-04-14 00:12:02 58,880 ——w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
+ 2008-04-14 00:12:02 92,672 ——w c:\windows\ServicePackFiles\i386\policman.dll
+ 2008-04-14 00:12:02 105,472 ——w c:\windows\ServicePackFiles\i386\polstore.dll
+ 2008-04-13 19:19:41 146,048 ——w c:\windows\ServicePackFiles\i386\portcls.sys
+ 2008-04-14 00:12:31 49,152 ——w c:\windows\ServicePackFiles\i386\powercfg.exe
+ 2008-04-13 18:40:56 8,832 ——w c:\windows\ServicePackFiles\i386\powerfil.sys
+ 2008-04-14 00:12:03 17,408 ——w c:\windows\ServicePackFiles\i386\powrprof.dll
+ 2008-04-13 18:41:00 17,664 ——w c:\windows\ServicePackFiles\i386\ppa3.sys
+ 2008-04-14 00:12:03 560,640 ——w c:\windows\ServicePackFiles\i386\printui.dll
+ 2008-04-13 18:31:30 35,840 ——w c:\windows\ServicePackFiles\i386\processr.sys
+ 2008-04-14 00:12:03 27,648 ——w c:\windows\ServicePackFiles\i386\profmap.dll
+ 2008-04-14 00:12:31 109,568 ——w c:\windows\ServicePackFiles\i386\progman.exe
+ 2008-04-14 00:12:32 50,176 ——w c:\windows\ServicePackFiles\i386\proquota.exe
+ 2008-04-14 00:12:03 237,056 ——w c:\windows\ServicePackFiles\i386\provthrd.dll
+ 2008-04-14 00:12:32 9,216 ——w c:\windows\ServicePackFiles\i386\proxycfg.exe
+ 2008-04-14 00:12:03 728,576 ——w c:\windows\ServicePackFiles\i386\ps5ui.dll
+ 2008-04-14 00:12:03 23,040 ——w c:\windows\ServicePackFiles\i386\psapi.dll
+ 2008-04-14 00:12:03 96,768 ——w c:\windows\ServicePackFiles\i386\psbase.dll
+ 2008-04-13 18:56:38 69,120 ——w c:\windows\ServicePackFiles\i386\psched.sys
+ 2008-04-14 00:12:03 543,232 ——w c:\windows\ServicePackFiles\i386\pscript5.dll
+ 2008-04-14 00:12:03 363,520 ——w c:\windows\ServicePackFiles\i386\psisdecd.dll
+ 2008-04-14 00:12:03 43,520 ——w c:\windows\ServicePackFiles\i386\pstorec.dll
+ 2008-04-14 00:12:03 34,304 ——w c:\windows\ServicePackFiles\i386\pstorsvc.dll
+ 2008-04-14 00:12:03 159,232 ——w c:\windows\ServicePackFiles\i386\ptpusd.dll
+ 2008-04-14 00:12:03 7,680 ——w c:\windows\ServicePackFiles\i386\pwsdata.dll
+ 2008-04-14 00:12:03 150,528 ——w c:\windows\ServicePackFiles\i386\qagent.dll
+ 2008-04-14 00:12:03 291,328 ——w c:\windows\ServicePackFiles\i386\qagentrt.dll
+ 2008-04-14 00:12:03 237,568 ——w c:\windows\ServicePackFiles\i386\qasf.dll
+ 2008-04-14 00:12:03 192,512 ——w c:\windows\ServicePackFiles\i386\qcap.dll
+ 2008-04-14 00:12:03 62,464 ——w c:\windows\ServicePackFiles\i386\qcliprov.dll
+ 2008-04-14 00:12:03 279,040 ——w c:\windows\ServicePackFiles\i386\qdv.dll
+ 2008-04-14 00:12:03 386,048 ——w c:\windows\ServicePackFiles\i386\qdvd.dll
+ 2008-04-14 00:12:03 562,176 ——w c:\windows\ServicePackFiles\i386\qedit.dll
+ 2008-04-13 17:21:32 733,696 ——w c:\windows\ServicePackFiles\i386\qedwipes.dll
+ 2008-04-13 18:40:52 6,016 ——w c:\windows\ServicePackFiles\i386\qic157.sys
+ 2008-04-14 00:12:03 409,088 ——w c:\windows\ServicePackFiles\i386\qmgr.dll
+ 2008-04-14 00:12:03 18,944 ——w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
+ 2008-04-14 00:12:32 19,968 ——w c:\windows\ServicePackFiles\i386\qprocess.exe
+ 2008-04-14 00:12:03 1,288,192 ——w c:\windows\ServicePackFiles\i386\quartz.dll
+ 2008-04-14 00:12:03 1,435,648 ——w c:\windows\ServicePackFiles\i386\query.dll
+ 2008-04-14 00:12:03 76,800 ——w c:\windows\ServicePackFiles\i386\qutil.dll
+ 2008-04-14 00:12:03 43,520 ——w c:\windows\ServicePackFiles\i386\racpldlg.dll
+ 2008-04-13 18:41:23 20,736 ——w c:\windows\ServicePackFiles\i386\ramdisk.sys
+ 2008-04-14 00:12:03 7,680 ——w c:\windows\ServicePackFiles\i386\rasadhlp.dll
+ 2008-04-14 00:12:03 237,056 ——w c:\windows\ServicePackFiles\i386\rasapi32.dll
+ 2008-04-14 00:12:03 88,576 ——w c:\windows\ServicePackFiles\i386\rasauto.dll
+ 2008-04-14 00:12:03 79,872 ——w c:\windows\ServicePackFiles\i386\raschap.dll
+ 2008-04-14 00:12:03 658,432 ——w c:\windows\ServicePackFiles\i386\rasdlg.dll
+ 2008-04-13 19:19:43 51,328 ——w c:\windows\ServicePackFiles\i386\rasl2tp.sys
+ 2008-04-14 00:12:03 61,440 ——w c:\windows\ServicePackFiles\i386\rasman.dll
+ 2008-04-14 00:12:03 186,368 ——w c:\windows\ServicePackFiles\i386\rasmans.dll
+ 2008-04-14 00:12:32 56,832 ——w c:\windows\ServicePackFiles\i386\rasphone.exe
+ 2008-04-14 00:12:03 210,944 ——w c:\windows\ServicePackFiles\i386\rasppp.dll
+ 2008-04-13 18:57:32 41,472 ——w c:\windows\ServicePackFiles\i386\raspppoe.sys
+ 2008-04-13 19:19:48 48,384 ——w c:\windows\ServicePackFiles\i386\raspptp.sys
+ 2008-04-14 00:12:03 61,952 ——w c:\windows\ServicePackFiles\i386\rasqec.dll
+ 2008-04-14 00:12:03 16,384 ——w c:\windows\ServicePackFiles\i386\rassapi.dll
+ 2008-04-14 00:12:03 58,368 ——w c:\windows\ServicePackFiles\i386\rastapi.dll
+ 2008-04-14 00:12:03 150,016 ——w c:\windows\ServicePackFiles\i386\rastls.dll
+ 2008-04-14 00:12:03 102,400 ——w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
+ 2008-04-14 00:12:32 35,840 ——w c:\windows\ServicePackFiles\i386\rcimlby.exe
+ 2008-04-14 00:12:32 21,504 ——w c:\windows\ServicePackFiles\i386\rcp.exe
+ 2008-04-13 19:28:39 175,744 ——w c:\windows\ServicePackFiles\i386\rdbss.sys
+ 2008-04-14 00:12:03 147,968 ——w c:\windows\ServicePackFiles\i386\rdchost.dll
+ 2008-04-14 00:12:32 62,976 ——w c:\windows\ServicePackFiles\i386\rdpclip.exe
+ 2008-04-14 00:13:22 92,424 ——w c:\windows\ServicePackFiles\i386\rdpdd.dll
+ 2008-04-13 18:32:51 196,224 ——w c:\windows\ServicePackFiles\i386\rdpdr.sys
+ 2008-04-14 00:12:04 19,968 ——w c:\windows\ServicePackFiles\i386\rdpsnd.dll
+ 2008-04-14 00:13:22 139,656 ——w c:\windows\ServicePackFiles\i386\rdpwd.sys
+ 2008-04-14 00:13:22 87,176 ——w c:\windows\ServicePackFiles\i386\rdpwsx.dll
+ 2008-04-14 00:12:32 13,824 ——w c:\windows\ServicePackFiles\i386\rdsaddin.exe
+ 2008-04-14 00:12:32 67,072 ——w c:\windows\ServicePackFiles\i386\rdshost.exe
+ 2004-08-04 02:41:40 13,776 ——w c:\windows\ServicePackFiles\i386\recagent.sys
+ 2008-04-13 18:40:27 57,600 ——w c:\windows\ServicePackFiles\i386\redbook.sys
+ 2004-08-04 11:00:00 3,338 ——w c:\windows\ServicePackFiles\i386\redir.exe
+ 2008-04-14 00:12:32 50,176 ——w c:\windows\ServicePackFiles\i386\reg.exe
+ 2008-04-14 00:12:04 49,664 ——w c:\windows\ServicePackFiles\i386\regapi.dll
+ 2007-06-27 12:57:33 28,672 ——w c:\windows\ServicePackFiles\i386\regasm.exe
+ 2007-06-27 12:57:36 32,768 ——w c:\windows\ServicePackFiles\i386\regcode.dll
+ 2008-04-14 00:12:32 146,432 ——w c:\windows\ServicePackFiles\i386\regedit.exe
+ 2008-04-14 00:12:04 59,904 ——w c:\windows\ServicePackFiles\i386\regsvc.dll
+ 2007-06-27 12:57:41 11,264 ——w c:\windows\ServicePackFiles\i386\regsvcs.exe
+ 2008-04-14 00:12:32 11,776 ——w c:\windows\ServicePackFiles\i386\regsvr32.exe
+ 2008-04-14 00:12:04 397,824 ——w c:\windows\ServicePackFiles\i386\regwizc.dll
+ 2008-04-14 00:12:04 60,416 ——w c:\windows\ServicePackFiles\i386\remotepg.dll
+ 2008-04-14 00:12:04 178,176 ——w c:\windows\ServicePackFiles\i386\repdrvfs.dll
+ 2008-04-14 00:12:04 58,880 ——w c:\windows\ServicePackFiles\i386\resutils.dll
+ 2008-04-14 00:12:33 13,824 ——w c:\windows\ServicePackFiles\i386\rexec.exe
+ 2008-04-13 18:46:32 59,136 ——w c:\windows\ServicePackFiles\i386\rfcomm.sys
+ 2008-04-14 00:12:04 290,304 ——w c:\windows\ServicePackFiles\i386\rhttpaa.dll
+ 2008-04-14 00:12:04 123,392 ——w c:\windows\ServicePackFiles\i386\riafres.dll
+ 2008-04-14 00:12:04 11,776 ——w c:\windows\ServicePackFiles\i386\riafui1.dll
+ 2008-04-14 00:12:04 11,776 ——w c:\windows\ServicePackFiles\i386\riafui2.dll
+ 2008-04-14 00:12:04 433,664 ——w c:\windows\ServicePackFiles\i386\riched20.dll
+ 2008-04-13 18:55:08 202,624 ——w c:\windows\ServicePackFiles\i386\rmcast.sys
+ 2008-04-13 18:56:49 30,592 ——w c:\windows\ServicePackFiles\i386\rndismp.sys
+ 2008-04-13 18:56:49 30,592 ——w c:\windows\ServicePackFiles\i386\rndismpx.sys
+ 2008-04-13 18:40:14 79,104 ——w c:\windows\ServicePackFiles\i386\rocket.sys
+ 2008-04-14 00:12:04 4,096 ——w c:\windows\ServicePackFiles\i386\rpcref.dll
+ 2008-04-14 00:12:04 584,704 ——w c:\windows\ServicePackFiles\i386\rpcrt4.dll
+ 2008-04-14 00:12:04 399,360 ——w c:\windows\ServicePackFiles\i386\rpcss.dll
+ 2008-04-14 00:12:04 61,440 ——w c:\windows\ServicePackFiles\i386\rrcm.dll
+ 2008-04-13 17:37:57 208,384 ——w c:\windows\ServicePackFiles\i386\rsaenh.dll
+ 2008-04-14 00:12:33 14,848 ——w c:\windows\ServicePackFiles\i386\rsh.exe
+ 2008-04-14 00:12:04 39,936 ——w c:\windows\ServicePackFiles\i386\rshx32.dll
+ 2008-04-14 00:12:04 18,944 ——w c:\windows\ServicePackFiles\i386\rsmps.dll
+ 2008-04-14 00:12:33 107,520 ——w c:\windows\ServicePackFiles\i386\rsnotify.exe
+ 2008-04-14 00:12:33 380,416 ——w c:\windows\ServicePackFiles\i386\rstrui.exe
+ 2008-04-14 00:12:04 92,672 ——w c:\windows\ServicePackFiles\i386\rsvpsp.dll
+ 2008-04-14 00:12:33 77,312 ——w c:\windows\ServicePackFiles\i386\rtcshare.exe
+ 2008-04-14 00:12:04 31,744 ——w c:\windows\ServicePackFiles\i386\rtipxmib.dll
+ 2004-08-04 02:31:34 20,992 ——w c:\windows\ServicePackFiles\i386\rtl8139.sys
+ 2008-04-14 00:12:04 44,032 ——w c:\windows\ServicePackFiles\i386\rtutils.dll
+ 2008-04-14 00:12:33 33,280 ——w c:\windows\ServicePackFiles\i386\rundll32.exe
+ 2008-04-14 00:12:33 14,336 ——w c:\windows\ServicePackFiles\i386\runonce.exe
+ 2008-04-14 00:12:04 27,648 ——w c:\windows\ServicePackFiles\i386\rw001ext.dll
+ 2008-04-14 00:12:04 29,184 ——w c:\windows\ServicePackFiles\i386\rw330ext.dll
+ 2008-04-14 00:12:04 27,648 ——w c:\windows\ServicePackFiles\i386\rw430ext.dll
+ 2008-04-14 00:12:04 29,696 ——w c:\windows\ServicePackFiles\i386\rw450ext.dll
+ 2008-04-14 00:12:04 9,728 ——w c:\windows\ServicePackFiles\i386\rwnh.dll
+ 2008-04-14 00:12:04 397,056 ——w c:\windows\ServicePackFiles\i386\s3gnb.dll
+ 2004-08-04 02:29:52 166,912 ——w c:\windows\ServicePackFiles\i386\s3gnbm.sys
+ 2008-04-14 00:12:04 43,520 ——w c:\windows\ServicePackFiles\i386\safrcdlg.dll
+ 2008-04-14 00:12:04 29,696 ——w c:\windows\ServicePackFiles\i386\safrdm.dll
+ 2008-04-14 00:12:04 45,568 ——w c:\windows\ServicePackFiles\i386\safrslv.dll
+ 2008-04-14 00:12:04 64,000 ——w c:\windows\ServicePackFiles\i386\samlib.dll
+ 2008-04-14 00:12:04 415,744 ——w c:\windows\ServicePackFiles\i386\samsrv.dll
+ 2008-04-14 00:12:04 741,376 ——w c:\windows\ServicePackFiles\i386\sapi.dll
+ 2008-04-14 00:12:33 13,312 ——w c:\windows\ServicePackFiles\i386\savedump.exe
+ 2008-04-14 00:12:04 270,848 ——w c:\windows\ServicePackFiles\i386\sbe.dll
+ 2008-04-14 00:12:04 159,232 ——w c:\windows\ServicePackFiles\i386\sbeio.dll
+ 2008-04-13 18:40:48 43,904 ——w c:\windows\ServicePackFiles\i386\sbp2port.sys
+ 2008-04-14 00:12:04 69,632 ——w c:\windows\ServicePackFiles\i386\scarddlg.dll
+ 2008-04-14 00:12:33 95,744 ——w c:\windows\ServicePackFiles\i386\scardsvr.exe
+ 2004-08-04 11:00:00 169,984 ——w c:\windows\ServicePackFiles\i386\sccbase.dll
+ 2008-04-14 00:12:05 171,008 ——w c:\windows\ServicePackFiles\i386\sccsccp.dll
+ 2008-04-14 00:12:05 181,248 ——w c:\windows\ServicePackFiles\i386\scecli.dll
+ 2008-04-14 00:12:05 314,880 ——w c:\windows\ServicePackFiles\i386\scesrv.dll
+ 2008-04-14 00:12:05 144,384 ——w c:\windows\ServicePackFiles\i386\schannel.dll
+ 2008-04-14 00:12:05 192,512 ——w c:\windows\ServicePackFiles\i386\schedsvc.dll
+ 2008-04-14 00:12:05 20,480 ——w c:\windows\ServicePackFiles\i386\sclgntfy.dll
+ 2008-04-14 00:12:34 36,352 ——w c:\windows\ServicePackFiles\i386\scrcons.exe
+ 2008-04-14 00:12:05 215,552 ——w c:\windows\ServicePackFiles\i386\script.dll
+ 2008-04-14 00:12:05 199,680 ——w c:\windows\ServicePackFiles\i386\scripta.dll
+ 2008-04-14 00:12:43 9,216 ——w c:\windows\ServicePackFiles\i386\scrnsave.scr
+ 2008-04-14 00:12:05 180,224 ——w c:\windows\ServicePackFiles\i386\scrobj.dll
+ 2008-04-14 00:12:05 172,032 ——w c:\windows\ServicePackFiles\i386\scrrun.dll
+ 2008-04-13 18:40:30 96,384 ——w c:\windows\ServicePackFiles\i386\scsiport.sys
+ 2008-04-13 18:45:33 11,520 ——w c:\windows\ServicePackFiles\i386\scsiscan.sys
+ 2008-04-14 00:12:34 121,856 ——w c:\windows\ServicePackFiles\i386\sctasks.exe
+ 2008-04-14 00:12:34 77,312 ——w c:\windows\ServicePackFiles\i386\sdbinst.exe
+ 2008-04-13 18:36:44 79,232 ——w c:\windows\ServicePackFiles\i386\sdbus.sys
+ 2008-04-14 00:12:05 29,184 ——w c:\windows\ServicePackFiles\i386\sdhcinst.dll
+ 2007-11-13 10:25:53 20,480 ——w c:\windows\ServicePackFiles\i386\secdrv.sys
+ 2008-04-14 00:12:34 18,944 ——w c:\windows\ServicePackFiles\i386\secedit.exe
+ 2008-04-14 00:12:05 18,944 ——w c:\windows\ServicePackFiles\i386\seclogon.dll
+ 2006-12-31 11:57:08 4,569 ——w c:\windows\ServicePackFiles\i386\secupd.dat
+ 2008-04-14 00:12:05 56,320 ——w c:\windows\ServicePackFiles\i386\secur32.dll
+ 2008-04-14 00:12:05 5,632 ——w c:\windows\ServicePackFiles\i386\security.dll
+ 2008-04-14 00:12:05 29,184 ——w c:\windows\ServicePackFiles\i386\sendcmsg.dll
+ 2008-04-14 00:12:05 54,784 ——w c:\windows\ServicePackFiles\i386\sendmail.dll
+ 2008-04-14 00:12:05 39,424 ——w c:\windows\ServicePackFiles\i386\sens.dll
+ 2008-04-14 00:12:05 7,168 ——w c:\windows\ServicePackFiles\i386\sensapi.dll
+ 2008-04-14 00:12:05 221,696 ——w c:\windows\ServicePackFiles\i386\seo.dll
+ 2008-04-13 18:40:12 15,744 ——w c:\windows\ServicePackFiles\i386\serenum.sys
+ 2008-04-13 19:15:45 64,512 ——w c:\windows\ServicePackFiles\i386\serial.sys
+ 2008-04-14 00:12:05 56,320 ——w c:\windows\ServicePackFiles\i386\servdeps.dll
+ 2008-04-14 00:12:34 108,544 ——w c:\windows\ServicePackFiles\i386\services.exe
+ 2008-04-14 00:12:34 141,312 ——w c:\windows\ServicePackFiles\i386\sessmgr.exe
+ 2008-04-14 00:12:34 31,232 ——w c:\windows\ServicePackFiles\i386\sethc.exe
+ 2007-12-17 11:59:54 66,592 ——w c:\windows\ServicePackFiles\i386\setregni.exe
+ 2008-04-14 00:12:34 23,040 ——w c:\windows\ServicePackFiles\i386\setup.exe
+ 2008-04-14 00:12:34 73,216 ——w c:\windows\ServicePackFiles\i386\setup50.exe
+ 2008-04-14 09:42:06 985,088 ——w c:\windows\ServicePackFiles\i386\setupapi.dll
+ 2008-04-14 00:12:35 32,768 ——w c:\windows\ServicePackFiles\i386\setupn.exe
+ 2008-04-14 00:12:05 101,376 ——w c:\windows\ServicePackFiles\i386\setupqry.dll
+ 2008-04-14 00:12:05 5,120 ——w c:\windows\ServicePackFiles\i386\sfc.dll
+ 2008-04-14 00:12:05 140,288 ——w c:\windows\ServicePackFiles\i386\sfc_os.dll
+ 2008-04-14 00:12:05 1,614,848 ——w c:\windows\ServicePackFiles\i386\sfcfiles.dll
+ 2008-04-13 18:40:47 11,904 ——w c:\windows\ServicePackFiles\i386\sffdisk.sys
+ 2008-04-13 18:40:48 10,240 ——w c:\windows\ServicePackFiles\i386\sffp_mmc.sys
+ 2008-04-13 18:40:47 11,008 ——w c:\windows\ServicePackFiles\i386\sffp_sd.sys
+ 2008-04-13 18:40:48 11,392 ——w c:\windows\ServicePackFiles\i386\sfloppy.sys
+ 2008-04-13 17:03:19 549,376 ——w c:\windows\ServicePackFiles\i386\shdoclc.dll
+ 2008-04-14 00:12:05 1,499,136 ——w c:\windows\ServicePackFiles\i386\shdocvw.dll
+ 2008-04-14 00:12:05 8,461,312 ——w c:\windows\ServicePackFiles\i386\shell32.dll
+ 2008-04-14 00:12:05 25,088 ——w c:\windows\ServicePackFiles\i386\shfolder.dll
+ 2008-04-14 00:12:05 68,096 ——w c:\windows\ServicePackFiles\i386\shgina.dll
+ 2008-04-14 00:12:05 65,024 ——w c:\windows\ServicePackFiles\i386\shimeng.dll
+ 2008-04-14 00:12:05 438,272 ——w c:\windows\ServicePackFiles\i386\shimgvw.dll
+ 2008-04-14 00:12:05 474,112 ——w c:\windows\ServicePackFiles\i386\shlwapi.dll
+ 2008-04-14 00:12:35 45,056 ——w c:\windows\ServicePackFiles\i386\shmgrate.exe
+ 2008-04-14 00:12:35 77,824 ——w c:\windows\ServicePackFiles\i386\shrpubw.exe
+ 2008-04-14 00:12:05 27,648 ——w c:\windows\ServicePackFiles\i386\shscrap.dll
+ 2008-04-14 00:12:05 135,168 ——w c:\windows\ServicePackFiles\i386\shsvcs.dll
+ 2008-04-14 00:12:05 20,536 ——w c:\windows\ServicePackFiles\i386\shtml.dll
+ 2008-04-14 00:12:35 16,437 ——w c:\windows\ServicePackFiles\i386\shtml.exe
+ 2008-04-14 00:12:35 19,456 ——w c:\windows\ServicePackFiles\i386\shutdown.exe
+ 2008-04-14 00:12:05 13,312 ——w c:\windows\ServicePackFiles\i386\sigtab.dll
+ 2008-04-14 00:12:35 70,144 ——w c:\windows\ServicePackFiles\i386\sigverif.exe
+ 2008-04-14 00:12:05 3,901 ——w c:\windows\ServicePackFiles\i386\siint5.dll
+ 2008-04-13 18:36:39 40,960 ——w c:\windows\ServicePackFiles\i386\sisagp.sys
+ 2004-08-04 02:31:36 32,768 ——w c:\windows\ServicePackFiles\i386\sisnic.sys
+ 2008-04-14 00:12:35 26,112 ——w c:\windows\ServicePackFiles\i386\skeys.exe
+ 2004-08-04 02:31:42 63,547 ——w c:\windows\ServicePackFiles\i386\sla30nd5.sys
+ 2008-04-14 00:12:06 25,088 ——w c:\windows\ServicePackFiles\i386\slayerxp.dll
+ 2004-08-04 11:00:00 306,176 ——w c:\windows\ServicePackFiles\i386\slbcsp.dll
+ 2008-04-14 00:12:06 98,304 ——w c:\windows\ServicePackFiles\i386\slbiop.dll
+ 2008-04-14 00:12:06 73,832 ——w c:\windows\ServicePackFiles\i386\slcoinst.dll
+ 2008-04-14 00:12:06 286,792 ——w c:\windows\ServicePackFiles\i386\slextspk.dll
+ 2008-04-14 00:12:06 188,508 ——w c:\windows\ServicePackFiles\i386\slgen.dll
+ 2008-04-13 18:46:23 11,136 ——w c:\windows\ServicePackFiles\i386\slip.sys
+ 2004-08-04 02:41:42 129,535 ——w c:\windows\ServicePackFiles\i386\slnt7554.sys
+ 2004-08-04 02:41:44 404,990 ——w c:\windows\ServicePackFiles\i386\slntamr.sys
+ 2004-08-04 02:41:46 95,424 ——w c:\windows\ServicePackFiles\i386\slnthal.sys
+ 2008-04-14 00:12:35 32,866 ——w c:\windows\ServicePackFiles\i386\slrundll.exe
+ 2008-04-14 00:12:35 73,796 ——w c:\windows\ServicePackFiles\i386\slserv.exe
+ 2004-08-04 02:41:46 13,240 ——w c:\windows\ServicePackFiles\i386\slwdmsup.sys
+ 2008-04-13 18:36:34 5,888 ——w c:\windows\ServicePackFiles\i386\smbali.sys
+ 2008-04-13 18:36:33 16,000 ——w c:\windows\ServicePackFiles\i386\smbbatt.sys
+ 2008-04-13 18:36:33 6,912 ——w c:\windows\ServicePackFiles\i386\smbclass.sys
+ 2008-04-14 00:12:35 8,192 ——w c:\windows\ServicePackFiles\i386\smbinst.exe
+ 2008-04-14 00:12:35 236,544 ——w c:\windows\ServicePackFiles\i386\smi2smir.exe
+ 2008-04-14 00:12:06 362,496 ——w c:\windows\ServicePackFiles\i386\smlogcfg.dll
+ 2008-04-14 00:12:35 89,600 ——w c:\windows\ServicePackFiles\i386\smlogsvc.exe
+ 2008-04-14 00:12:36 50,688 ——w c:\windows\ServicePackFiles\i386\smss.exe
+ 2008-04-14 00:12:06 189,440 ——w c:\windows\ServicePackFiles\i386\smtpadm.dll
+ 2008-04-14 00:12:06 10,752 ——w c:\windows\ServicePackFiles\i386\smtpapi.dll
+ 2008-04-14 00:12:06 2,134,528 ——w c:\windows\ServicePackFiles\i386\smtpsnap.dll
+ 2008-04-14 00:12:06 456,192 ——w c:\windows\ServicePackFiles\i386\smtpsvc.dll
+ 2008-04-14 00:12:36 131,584 ——w c:\windows\ServicePackFiles\i386\sndrec32.exe
+ 2008-04-14 00:12:06 34,816 ——w c:\windows\ServicePackFiles\i386\sniffpol.dll
+ 2008-04-14 00:12:36 33,280 ——w c:\windows\ServicePackFiles\i386\snmp.exe
+ 2008-04-14 00:12:06 18,944 ——w c:\windows\ServicePackFiles\i386\snmpapi.dll
+ 2008-04-14 00:12:06 259,072 ——w c:\windows\ServicePackFiles\i386\snmpcl.dll
+ 2008-04-14 00:12:06 358,400 ——w c:\windows\ServicePackFiles\i386\snmpincl.dll
+ 2008-04-14 00:12:06 6,144 ——w c:\windows\ServicePackFiles\i386\snmpmib.dll
+ 2008-04-14 00:12:06 188,416 ——w c:\windows\ServicePackFiles\i386\snmpsmir.dll
+ 2008-04-14 00:12:06 182,272 ——w c:\windows\ServicePackFiles\i386\snmpsnap.dll
+ 2008-04-14 00:12:06 39,936 ——w c:\windows\ServicePackFiles\i386\snmpthrd.dll
+ 2008-04-14 00:12:36 8,704 ——w c:\windows\ServicePackFiles\i386\snmptrap.exe
+ 2008-04-14 00:12:06 130,048 ——w c:\windows\ServicePackFiles\i386\softkbd.dll
+ 2008-04-13 18:40:52 7,552 ——w c:\windows\ServicePackFiles\i386\sonyait.sys
+ 2008-04-13 18:46:07 25,344 ——w c:\windows\ServicePackFiles\i386\sonydcam.sys
+ 2008-04-14 00:12:36 24,576 ——w c:\windows\ServicePackFiles\i386\sort.exe
+ 2008-04-14 00:12:36 7,680 ——w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
+ 2008-04-13 16:43:18 62,976 ——w c:\windows\ServicePackFiles\i386\spgrmr.dll
+ 2008-04-14 00:12:36 538,624 ——w c:\windows\ServicePackFiles\i386\spider.exe
+ 2008-04-13 18:43:31 12,800 ——w c:\windows\ServicePackFiles\i386\spiisupd.exe
+ 2008-04-13 18:45:07 6,272 ——w c:\windows\ServicePackFiles\i386\splitter.sys
+ 2008-04-14 09:42:38 11,264 ——w c:\windows\ServicePackFiles\i386\spnpinst.exe
+ 2008-04-14 00:12:06 75,264 ——w c:\windows\ServicePackFiles\i386\spoolss.dll
+ 2008-04-14 00:12:36 57,856 ——w c:\windows\ServicePackFiles\i386\spoolsv.exe
+ 2008-04-13 18:35:06 186,880 ——w c:\windows\ServicePackFiles\i386\spra0401.dll
+ 2008-04-13 18:35:08 189,440 ——w c:\windows\ServicePackFiles\i386\spra0402.dll
+ 2008-04-13 18:35:09 161,280 ——w c:\windows\ServicePackFiles\i386\spra0404.dll
+ 2008-04-13 18:35:09 188,928 ——w c:\windows\ServicePackFiles\i386\spra0405.dll
+ 2008-04-13 18:35:09 192,000 ——w c:\windows\ServicePackFiles\i386\spra0406.dll
+ 2008-04-13 18:35:21 199,680 ——w c:\windows\ServicePackFiles\i386\spra0407.dll
+ 2008-04-13 18:35:11 197,632 ——w c:\windows\ServicePackFiles\i386\spra0408.dll
+ 2008-04-13 18:35:11 186,368 ——w c:\windows\ServicePackFiles\i386\spra040b.dll
+ 2008-04-13 18:35:20 197,632 ——w c:\windows\ServicePackFiles\i386\spra040c.dll
+ 2008-04-13 18:35:21 181,760 ——w c:\windows\ServicePackFiles\i386\spra040d.dll
+ 2008-04-13 18:35:23 195,584 ——w c:\windows\ServicePackFiles\i386\spra040e.dll
+ 2008-04-13 18:35:23 195,072 ——w c:\windows\ServicePackFiles\i386\spra0410.dll
+ 2008-04-13 18:35:23 171,008 ——w c:\windows\ServicePackFiles\i386\spra0411.dll
+ 2008-04-13 18:35:23 167,936 ——w c:\windows\ServicePackFiles\i386\spra0412.dll
+ 2008-04-13 18:35:25 196,096 ——w c:\windows\ServicePackFiles\i386\spra0413.dll
+ 2008-04-13 18:35:25 189,440 ——w c:\windows\ServicePackFiles\i386\spra0414.dll
+ 2008-04-13 18:35:26 194,560 ——w c:\windows\ServicePackFiles\i386\spra0415.dll
+ 2008-04-13 18:35:08 192,512 ——w c:\windows\ServicePackFiles\i386\spra0416.dll
+ 2008-04-13 18:35:27 190,464 ——w c:\windows\ServicePackFiles\i386\spra0418.dll
+ 2008-04-13 18:35:27 192,512 ——w c:\windows\ServicePackFiles\i386\spra0419.dll
+ 2008-04-13 18:35:21 188,928 ——w c:\windows\ServicePackFiles\i386\spra041a.dll
+ 2008-04-13 18:35:28 192,512 ——w c:\windows\ServicePackFiles\i386\spra041b.dll
+ 2008-04-13 18:35:28 188,928 ——w c:\windows\ServicePackFiles\i386\spra041d.dll
+ 2008-04-13 18:35:29 188,416 ——w c:\windows\ServicePackFiles\i386\spra041e.dll
+ 2008-04-13 18:35:30 188,928 ——w c:\windows\ServicePackFiles\i386\spra041f.dll
+ 2008-04-13 18:35:28 192,512 ——w c:\windows\ServicePackFiles\i386\spra0424.dll
+ 2008-04-13 18:35:11 186,880 ——w c:\windows\ServicePackFiles\i386\spra0425.dll
+ 2008-04-13 18:35:24 188,928 ——w c:\windows\ServicePackFiles\i386\spra0426.dll
+ 2008-04-13 18:35:24 189,952 ——w c:\windows\ServicePackFiles\i386\spra0427.dll
+ 2008-04-13 18:35:06 161,280 ——w c:\windows\ServicePackFiles\i386\spra0804.dll
+ 2008-04-13 18:35:26 194,560 ——w c:\windows\ServicePackFiles\i386\spra0816.dll
+ 2008-04-13 18:35:11 196,096 ——w c:\windows\ServicePackFiles\i386\spra0c0a.dll
+ 2008-04-13 18:35:49 2,869,248 ——w c:\windows\ServicePackFiles\i386\sprb0401.dll
+ 2008-04-13 18:36:10 477,696 ——w c:\windows\ServicePackFiles\i386\sprb0404.dll
+ 2008-04-13 18:36:10 734,720 ——w c:\windows\ServicePackFiles\i386\sprb0405.dll
+ 2008-04-13 18:36:10 742,912 ——w c:\windows\ServicePackFiles\i386\sprb0406.dll
+ 2008-04-13 18:37:03 788,480 ——w c:\windows\ServicePackFiles\i386\sprb0407.dll
+ 2008-04-13 18:36:35 801,280 ——w c:\windows\ServicePackFiles\i386\sprb0408.dll
+ 2008-04-13 18:36:39 729,088 ——w c:\windows\ServicePackFiles\i386\sprb040b.dll
+ 2008-04-13 18:36:55 793,088 ——w c:\windows\ServicePackFiles\i386\sprb040c.dll
+ 2008-04-13 18:37:07 2,842,112 ——w c:\windows\ServicePackFiles\i386\sprb040d.dll
+ 2008-04-13 18:37:22 769,536 ——w c:\windows\ServicePackFiles\i386\sprb040e.dll
+ 2008-04-13 18:37:22 769,536 ——w c:\windows\ServicePackFiles\i386\sprb0410.dll
+ 2008-04-13 18:37:34 562,688 ——w c:\windows\ServicePackFiles\i386\sprb0411.dll
+ 2008-04-13 18:37:37 543,744 ——w c:\windows\ServicePackFiles\i386\sprb0412.dll
+ 2008-04-13 18:38:00 769,024 ——w c:\windows\ServicePackFiles\i386\sprb0413.dll
+ 2008-04-13 18:38:02 716,288 ——w c:\windows\ServicePackFiles\i386\sprb0414.dll
+ 2008-04-13 18:38:05 759,808 ——w c:\windows\ServicePackFiles\i386\sprb0415.dll
+ 2008-04-13 18:35:43 752,128 ——w c:\windows\ServicePackFiles\i386\sprb0416.dll
+ 2008-04-13 18:38:28 736,768 ——w c:\windows\ServicePackFiles\i386\sprb0419.dll
+ 2008-04-13 18:38:37 757,248 ——w c:\windows\ServicePackFiles\i386\sprb041b.dll
+ 2008-04-13 18:38:47 724,480 ——w c:\windows\ServicePackFiles\i386\sprb041d.dll
+ 2008-04-13 18:38:51 724,480 ——w c:\windows\ServicePackFiles\i386\sprb041f.dll
+ 2008-04-13 18:38:36 732,160 ——w c:\windows\ServicePackFiles\i386\sprb0424.dll
+ 2008-04-13 18:35:54 470,016 ——w c:\windows\ServicePackFiles\i386\sprb0804.dll
+ 2008-04-13 18:38:06 751,616 ——w c:\windows\ServicePackFiles\i386\sprb0816.dll
+ 2008-04-13 18:36:38 773,632 ——w c:\windows\ServicePackFiles\i386\sprb0c0a.dll
+ 2008-04-13 18:39:02 656,896 ——w c:\windows\ServicePackFiles\i386\sprc0401.dll
+ 2008-04-13 18:39:13 327,680 ——w c:\windows\ServicePackFiles\i386\sprc0404.dll
+ 2008-04-13 18:39:02 601,088 ——w c:\windows\ServicePackFiles\i386\sprc0405.dll
+ 2008-04-13 18:39:12 605,696 ——w c:\windows\ServicePackFiles\i386\sprc0406.dll
+ 2008-04-13 18:39:19 663,552 ——w c:\windows\ServicePackFiles\i386\sprc0407.dll
+ 2008-04-13 18:39:12 679,936 ——w c:\windows\ServicePackFiles\i386\sprc0408.dll
+ 2008-04-13 18:39:17 604,672 ——w c:\windows\ServicePackFiles\i386\sprc040b.dll
+ 2008-04-13 18:39:20 663,040 ——w c:\windows\ServicePackFiles\i386\sprc040c.dll
+ 2008-04-13 18:39:28 620,544 ——w c:\windows\ServicePackFiles\i386\sprc040d.dll
+ 2008-04-13 18:39:28 645,120 ——w c:\windows\ServicePackFiles\i386\sprc040e.dll
+ 2008-04-13 18:39:28 658,432 ——w c:\windows\ServicePackFiles\i386\sprc0410.dll
+ 2008-04-13 18:39:49 412,672 ——w c:\windows\ServicePackFiles\i386\sprc0411.dll
+ 2008-04-13 18:39:49 392,704 ——w c:\windows\ServicePackFiles\i386\sprc0412.dll
+ 2008-04-13 18:39:47 645,120 ——w c:\windows\ServicePackFiles\i386\sprc0413.dll
+ 2008-04-13 18:39:48 591,872 ——w c:\windows\ServicePackFiles\i386\sprc0414.dll
+ 2008-04-13 18:39:52 641,024 ——w c:\windows\ServicePackFiles\i386\sprc0415.dll
+ 2008-04-13 18:38:56 620,032 ——w c:\windows\ServicePackFiles\i386\sprc0416.dll
+ 2008-04-13 18:39:56 627,200 ——w c:\windows\ServicePackFiles\i386\sprc0419.dll
+ 2008-04-13 18:40:04 577,536 ——w c:\windows\ServicePackFiles\i386\sprc041b.dll
+ 2008-04-13 18:40:05 590,848 ——w c:\windows\ServicePackFiles\i386\sprc041d.dll
+ 2008-04-13 18:40:09 592,896 ——w c:\windows\ServicePackFiles\i386\sprc041f.dll
+ 2008-04-13 18:40:05 576,512 ——w c:\windows\ServicePackFiles\i386\sprc0424.dll
+ 2008-04-13 18:39:03 322,560 ——w c:\windows\ServicePackFiles\i386\sprc0804.dll
+ 2008-04-13 18:39:53 639,488 ——w c:\windows\ServicePackFiles\i386\sprc0816.dll
+ 2008-04-13 18:39:13 648,704 ——w c:\windows\ServicePackFiles\i386\sprc0c0a.dll
+ 2008-04-14 00:12:06 250,368 ——w c:\windows\ServicePackFiles\i386\sptip.dll
+ 2008-04-14 00:12:36 20,992 ——w c:\windows\ServicePackFiles\i386\spupdwxp.exe
+ 2008-04-14 00:12:06 151,552 ——w c:\windows\ServicePackFiles\i386\sqldb20.dll
+ 2008-04-14 00:12:06 528,384 ——w c:\windows\ServicePackFiles\i386\sqloledb.dll
+ 2008-04-14 00:12:06 462,848 ——w c:\windows\ServicePackFiles\i386\sqlqp20.dll
+ 2008-04-14 00:12:06 110,592 ——w c:\windows\ServicePackFiles\i386\sqlse20.dll
+ 2008-04-14 00:12:06 442,368 ——w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
+ 2008-04-14 00:12:06 180,800 ——w c:\windows\ServicePackFiles\i386\sqlunirl.dll
+ 2008-04-14 00:12:06 217,088 ——w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
+ 2008-04-13 18:36:52 73,472 ——w c:\windows\ServicePackFiles\i386\sr.sys
+ 2008-04-14 00:12:06 58,434 ——w c:\windows\ServicePackFiles\i386\srchctls.dll
+ 2008-04-14 00:12:07 726,078 ——w c:\windows\ServicePackFiles\i386\srchui.dll
+ 2008-04-14 00:12:07 67,584 ——w c:\windows\ServicePackFiles\i386\srclient.dll
+ 2008-04-14 00:12:07 239,104 ——w c:\windows\ServicePackFiles\i386\srrstr.dll
+ 2008-04-14 00:12:07 171,008 ——w c:\windows\ServicePackFiles\i386\srsvc.dll
+ 2008-04-13 19:15:11 334,848 ——w c:\windows\ServicePackFiles\i386\srv.sys
+ 2008-04-14 00:12:07 96,768 ——w c:\windows\ServicePackFiles\i386\srvsvc.dll
+ 2008-04-14 00:12:43 704,512 ——w c:\windows\ServicePackFiles\i386\ss3dfo.scr
+ 2008-04-14 00:12:43 19,968 ——w c:\windows\ServicePackFiles\i386\ssbezier.scr
+ 2008-04-14 00:12:07 34,816 ——w c:\windows\ServicePackFiles\i386\ssdpapi.dll
+ 2008-04-14 00:12:07 71,680 ——w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
+ 2008-04-14 00:12:43 393,216 ——w c:\windows\ServicePackFiles\i386\ssflwbox.scr
+ 2008-04-14 00:12:07 45,056 ——w c:\windows\ServicePackFiles\i386\ssinc51.dll
+ 2008-04-14 00:12:44 20,992 ——w c:\windows\ServicePackFiles\i386\ssmarque.scr
+ 2008-04-14 00:12:44 47,104 ——w c:\windows\ServicePackFiles\i386\ssmypics.scr
+ 2008-04-14 00:12:44 18,944 ——w c:\windows\ServicePackFiles\i386\ssmyst.scr
+ 2008-04-14 00:12:07 46,592 ——w c:\windows\ServicePackFiles\i386\sspifilt.dll
+ 2008-04-14 00:12:44 610,304 ——w c:\windows\ServicePackFiles\i386\sspipes.scr
+ 2008-04-14 00:12:44 14,336 ——w c:\windows\ServicePackFiles\i386\ssstars.scr
+ 2008-04-14 00:12:44 679,936 ——w c:\windows\ServicePackFiles\i386\sstext3d.scr
+ 2008-04-14 00:12:07 33,280 ——w c:\windows\ServicePackFiles\i386\sstub.dll
+ 2008-04-14 00:12:07 8,192 ——w c:\windows\ServicePackFiles\i386\staxmem.dll
+ 2008-04-14 00:12:07 59,392 ——w c:\windows\ServicePackFiles\i386\stclient.dll
+ 2008-04-14 00:12:07 86,528 ——w c:\windows\ServicePackFiles\i386\stdprov.dll
+ 2008-04-14 00:12:07 68,096 ——w c:\windows\ServicePackFiles\i386\sti.dll
+ 2008-04-14 00:12:07 136,704 ——w c:\windows\ServicePackFiles\i386\sti_ci.dll
+ 2008-04-14 00:12:36 14,848 ——w c:\windows\ServicePackFiles\i386\stimon.exe
+ 2008-04-14 00:12:07 121,856 ——w c:\windows\ServicePackFiles\i386\stobject.dll
+ 2008-04-14 00:12:07 74,752 ——w c:\windows\ServicePackFiles\i386\storprop.dll
+ 2008-04-13 18:45:15 49,408 ——w c:\windows\ServicePackFiles\i386\stream.sys
+ 2008-04-13 18:46:21 15,232 ——w c:\windows\ServicePackFiles\i386\streamip.sys
+ 2008-04-14 00:12:07 75,776 ——w c:\windows\ServicePackFiles\i386\strmfilt.dll
+ 2008-04-14 00:12:36 16,449 ——w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
+ 2008-04-14 00:12:36 65,601 ——w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
+ 2008-04-14 00:12:07 46,592 ——w c:\windows\ServicePackFiles\i386\svcext51.dll
+ 2008-04-14 00:12:36 14,336 ——w c:\windows\ServicePackFiles\i386\svchost.exe
+ 2008-04-13 18:39:53 4,352 ——w c:\windows\ServicePackFiles\i386\swenum.sys
+ 2008-04-13 18:45:09 56,576 ——w c:\windows\ServicePackFiles\i386\swmidi.sys
+ 2008-04-14 00:12:07 713,216 ——w c:\windows\ServicePackFiles\i386\sxs.dll
+ 2007-12-17 11:59:56 1,179,648 ——w c:\windows\ServicePackFiles\i386\sy52106.dll
+ 2008-04-14 00:12:07 57,856 ——w c:\windows\ServicePackFiles\i386\synceng.dll
+ 2008-04-14 00:12:07 191,488 ——w c:\windows\ServicePackFiles\i386\syncui.dll
+ 2008-04-13 19:15:55 60,800 ——w c:\windows\ServicePackFiles\i386\sysaudio.sys
+ 2008-04-14 00:12:36 71,680 ——w c:\windows\ServicePackFiles\i386\sysinfo.exe
+ 2008-04-14 00:12:07 193,024 ——w c:\windows\ServicePackFiles\i386\sysmod.dll
+ 2008-04-14 00:12:07 173,568 ——w c:\windows\ServicePackFiles\i386\sysmoda.dll
+ 2008-04-14 00:12:37 106,496 ——w c:\windows\ServicePackFiles\i386\sysocmgr.exe
+ 2008-04-14 00:12:07 990,208 ——w c:\windows\ServicePackFiles\i386\syssetup.dll
+ 2007-06-27 12:57:55 77,824 ——w c:\windows\ServicePackFiles\i386\system.configuration.install.dll
+ 2007-06-27 12:58:00 1,179,648 ——w c:\windows\ServicePackFiles\i386\system.data.dll
+ 2007-06-27 12:58:10 1,695,744 ——w c:\windows\ServicePackFiles\i386\system.design.dll
+ 2007-06-27 12:58:18 86,016 ——w c:\windows\ServicePackFiles\i386\system.directoryservices.dll
+ 2007-06-27 12:58:21 65,536 ——w c:\windows\ServicePackFiles\i386\system.drawing.design.dll
+ 2007-06-27 12:58:26 462,848 ——w c:\windows\ServicePackFiles\i386\system.drawing.dll
+ 2007-06-27 12:58:31 212,992 ——w c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll
+ 2008-04-13 16:11:22 48,640 ——w c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
+ 2007-06-27 12:58:39 352,256 ——w c:\windows\ServicePackFiles\i386\system.management.dll
+ 2007-06-27 12:58:43 241,664 ——w c:\windows\ServicePackFiles\i386\system.messaging.dll
+ 2007-06-27 12:58:55 311,296 ——w c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll
+ 2007-06-27 12:59:02 131,072 ——w c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
+ 2007-06-27 12:59:05 77,824 ——w c:\windows\ServicePackFiles\i386\system.security.dll
+ 2007-06-27 12:59:10 126,976 ——w c:\windows\ServicePackFiles\i386\system.serviceprocess.dll
+ 2007-12-17 12:00:01 1,200,128 ——w c:\windows\ServicePackFiles\i386\system.web.dll
+ 2007-06-27 12:59:21 61,440 ——w c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
+ 2007-06-27 12:59:25 507,904 ——w c:\windows\ServicePackFiles\i386\system.web.services.dll
+ 2007-06-27 12:59:34 2,002,944 ——w c:\windows\ServicePackFiles\i386\system.windows.forms.dll
+ 2007-06-27 12:59:48 1,302,528 ——w c:\windows\ServicePackFiles\i386\system.xml.dll
+ 2008-04-14 00:12:07 117,760 ——w c:\windows\ServicePackFiles\i386\t2embed.dll
+ 2008-04-14 00:12:07 33,792 ——w c:\windows\ServicePackFiles\i386\tabletoc.dll
+ 2008-04-13 18:40:50 14,976 ——w c:\windows\ServicePackFiles\i386\tape.sys
+ 2008-04-14 00:12:07 858,624 ——w c:\windows\ServicePackFiles\i386\tapi3.dll
+ 2008-04-14 00:12:07 181,760 ——w c:\windows\ServicePackFiles\i386\tapi32.dll
+ 2008-04-14 00:12:07 249,856 ——w c:\windows\ServicePackFiles\i386\tapisrv.dll
+ 2008-04-14 00:12:37 76,288 ——w c:\windows\ServicePackFiles\i386\taskkill.exe
+ 2008-04-14 00:12:37 77,824 ——w c:\windows\ServicePackFiles\i386\tasklist.exe
+ 2008-04-14 00:12:37 135,680 ——w c:\windows\ServicePackFiles\i386\taskmgr.exe
+ 2008-04-13 19:20:16 361,344 ——w c:\windows\ServicePackFiles\i386\tcpip.sys
+ 2008-04-13 19:00:02 225,664 ——w c:\windows\ServicePackFiles\i386\tcpip6.sys
+ 2008-04-14 00:12:07 14,848 ——w c:\windows\ServicePackFiles\i386\tcpmib.dll
+ 2008-04-14 00:12:07 45,568 ——w c:\windows\ServicePackFiles\i386\tcpmon.dll
+ 2008-04-14 00:12:07 45,568 ——w c:\windows\ServicePackFiles\i386\tcpmonui.dll
+ 2008-04-14 00:12:37 32,827 ——w c:\windows\ServicePackFiles\i386\tcptest.exe
+ 2007-04-02 16:36:07 16,384 ——w c:\windows\ServicePackFiles\i386\tcptsat.dll
+ 2008-04-13 19:00:05 19,072 ——w c:\windows\ServicePackFiles\i386\tdi.sys
+ 2008-04-14 00:13:20 12,040 ——w c:\windows\ServicePackFiles\i386\tdpipe.sys
+ 2008-04-14 00:13:21 21,896 ——w c:\windows\ServicePackFiles\i386\tdtcp.sys
+ 2008-04-14 00:12:37 75,776 ——w c:\windows\ServicePackFiles\i386\telnet.exe
+ 2008-04-14 00:13:20 40,840 ——w c:\windows\ServicePackFiles\i386\termdd.sys
+ 2008-04-14 00:12:07 358,400 ——w c:\windows\ServicePackFiles\i386\termmgr.dll
+ 2008-04-14 00:12:07 295,424 ——w c:\windows\ServicePackFiles\i386\termsrv.dll
+ 2008-04-13 18:40:50 149,376 ——w c:\windows\ServicePackFiles\i386\tffsport.sys
+ 2008-04-14 00:12:07 385,536 ——w c:\windows\ServicePackFiles\i386\themeui.dll
+ 2008-04-14 00:12:37 61,440 ——w c:\windows\ServicePackFiles\i386\tlntadmn.exe
+ 2008-04-14 00:12:37 78,336 ——w c:\windows\ServicePackFiles\i386\tlntsess.exe
+ 2008-04-14 00:12:38 73,216 ——w c:\windows\ServicePackFiles\i386\tlntsvr.exe
+ 2008-04-14 00:12:07 7,168 ——w c:\windows\ServicePackFiles\i386\tlntsvrp.dll
+ 2007-12-17 12:00:05 66,592 ——w c:\windows\ServicePackFiles\i386\togac.exe
+ 2008-04-14 00:12:07 33,792 ——w c:\windows\ServicePackFiles\i386\tools.dll
+ 2008-04-14 00:12:38 347,136 ——w c:\windows\ServicePackFiles\i386\tourstrt.exe
+ 2008-04-14 00:12:38 82,944 ——w c:\windows\ServicePackFiles\i386\tp4mon.exe
+ 2008-04-14 00:12:38 259,584 ——w c:\windows\ServicePackFiles\i386\tracerpt.exe
+ 2008-04-14 00:12:38 12,288 ——w c:\windows\ServicePackFiles\i386\tracert.exe
+ 2008-04-14 00:12:42 12,800 ——w c:\windows\ServicePackFiles\i386\tree.com
+ 2008-04-14 00:12:07 153,088 ——w c:\windows\ServicePackFiles\i386\triedit.dll
+ 2008-04-14 00:12:07 90,112 ——w c:\windows\ServicePackFiles\i386\trkwks.dll
+ 2008-01-18 15:13:09 2,247 ——w c:\windows\ServicePackFiles\i386\tscdsbl.bat
+ 2008-04-14 00:12:07 93,696 ——w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
+ 2007-12-12 10:33:51 18,917 ——w c:\windows\ServicePackFiles\i386\tscinst.vbs
+ 2007-10-30 10:06:46 13,801 ——w c:\windows\ServicePackFiles\i386\tscuinst.vbs
+ 2008-04-14 00:11:31 25,600 ——w c:\windows\ServicePackFiles\i386\tscupdc.dll
+ 2008-04-14 00:13:21 12,168 ——w c:\windows\ServicePackFiles\i386\tsddd.dll
+ 2008-04-14 00:12:07 53,248 ——w c:\windows\ServicePackFiles\i386\tsgqec.dll
+ 2008-04-14 00:12:07 279,040 ——w c:\windows\ServicePackFiles\i386\tshoot.dll
+ 2008-04-14 00:12:07 130,048 ——w c:\windows\ServicePackFiles\i386\tsoc.dll
+ 2008-04-14 00:12:07 50,688 ——w c:\windows\ServicePackFiles\i386\tspkg.dll
+ 2008-04-14 00:12:07 8,704 ——w c:\windows\ServicePackFiles\i386\tty.dll
+ 2007-04-02 15:31:00 39,936 ——w c:\windows\ServicePackFiles\i386\ttyres.dll
+ 2008-04-14 00:12:07 16,384 ——w c:\windows\ServicePackFiles\i386\ttyui.dll
+ 2008-04-13 18:56:01 12,288 ——w c:\windows\ServicePackFiles\i386\tunmp.sys
+ 2008-04-14 00:12:07 50,688 ——w c:\windows\ServicePackFiles\i386\twain_32.dll
+ 2008-04-14 00:12:07 57,856 ——w c:\windows\ServicePackFiles\i386\twext.dll
+ 2008-04-14 00:12:07 101,376 ——w c:\windows\ServicePackFiles\i386\txflog.dll
+ 2008-04-14 00:12:38 60,416 ——w c:\windows\ServicePackFiles\i386\tzchange.exe
+ 2008-04-13 18:36:40 44,672 ——w c:\windows\ServicePackFiles\i386\uagp35.sys
+ 2008-04-13 18:32:36 66,048 ——w c:\windows\ServicePackFiles\i386\udfs.sys
+ 2008-04-14 00:12:07 26,624 ——w c:\windows\ServicePackFiles\i386\udhisapi.dll
+ 2008-04-14 00:12:07 103,424 ——w c:\windows\ServicePackFiles\i386\uihelper.dll
+ 2008-04-14 00:12:07 275,456 ——w c:\windows\ServicePackFiles\i386\ulib.dll
+ 2008-04-14 00:12:07 35,840 ——w c:\windows\ServicePackFiles\i386\umandlg.dll
+ 2008-04-14 00:12:07 123,392 ——w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
+ 2008-04-14 00:12:07 373,248 ——w c:\windows\ServicePackFiles\i386\unidrv.dll
+ 2008-04-14 00:12:07 744,448 ——w c:\windows\ServicePackFiles\i386\unidrvui.dll
+ 2008-04-14 00:12:07 74,240 ——w c:\windows\ServicePackFiles\i386\unimdmat.dll
+ 2008-04-14 00:12:07 13,824 ——w c:\windows\ServicePackFiles\i386\uniplat.dll
+ 2007-05-15 08:08:53 761,344 ——w c:\windows\ServicePackFiles\i386\unires.dll
+ 2008-04-14 00:12:07 316,416 ——w c:\windows\ServicePackFiles\i386\untfs.dll
+ 2008-04-13 18:39:46 384,768 ——w c:\windows\ServicePackFiles\i386\update.sys
+ 2008-04-14 00:12:38 150,528 ——w c:\windows\ServicePackFiles\i386\uploadm.exe
+ 2008-04-14 00:12:08 133,632 ——w c:\windows\ServicePackFiles\i386\upnp.dll
+ 2008-04-14 00:12:38 16,896 ——w c:\windows\ServicePackFiles\i386\upnpcont.exe
+ 2008-04-14 00:12:08 185,856 ——w c:\windows\ServicePackFiles\i386\upnphost.dll
+ 2008-04-14 00:12:08 239,616 ——w c:\windows\ServicePackFiles\i386\upnpui.dll
+ 2008-04-14 00:12:38 18,432 ——w c:\windows\ServicePackFiles\i386\ups.exe
+ 2008-04-14 00:12:08 37,888 ——w c:\windows\ServicePackFiles\i386\url.dll
+ 2008-04-14 00:12:08 619,520 ——w c:\windows\ServicePackFiles\i386\urlmon.dll
+ 2004-08-04 02:31:26 32,384 ——w c:\windows\ServicePackFiles\i386\usb101et.sys
+ 2008-04-13 18:56:49 12,800 ——w c:\windows\ServicePackFiles\i386\usb8023.sys
+ 2008-04-13 18:56:49 12,800 ——w c:\windows\ServicePackFiles\i386\usb8023x.sys
+ 2008-04-13 18:45:12 60,032 ——w c:\windows\ServicePackFiles\i386\usbaudio.sys
+ 2008-04-13 18:45:40 25,600 ——w c:\windows\ServicePackFiles\i386\usbcamd.sys
+ 2008-04-13 18:45:41 25,728 ——w c:\windows\ServicePackFiles\i386\usbcamd2.sys
+ 2008-04-13 18:45:39 32,128 ——w c:\windows\ServicePackFiles\i386\usbccgp.sys
+ 2008-04-13 18:45:35 30,208 ——w c:\windows\ServicePackFiles\i386\usbehci.sys
+ 2008-04-13 18:45:37 59,520 ——w c:\windows\ServicePackFiles\i386\usbhub.sys
+ 2008-04-13 18:45:43 15,872 ——w c:\windows\ServicePackFiles\i386\usbintel.sys
+ 2008-04-14 00:12:08 16,896 ——w c:\windows\ServicePackFiles\i386\usbmon.dll
+ 2008-04-13 18:45:35 17,152 ——w c:\windows\ServicePackFiles\i386\usbohci.sys
+ 2008-04-13 18:45:36 143,872 ——w c:\windows\ServicePackFiles\i386\usbport.sys
+ 2008-04-13 18:47:37 25,856 ——w c:\windows\ServicePackFiles\i386\usbprint.sys
+ 2008-04-13 18:45:34 15,104 ——w c:\windows\ServicePackFiles\i386\usbscan.sys
+ 2008-04-13 18:45:36 26,112 ——w c:\windows\ServicePackFiles\i386\usbser.sys
+ 2008-04-13 18:45:38 26,368 ——w c:\windows\ServicePackFiles\i386\usbstor.sys
+ 2008-04-13 18:45:35 20,608 ——w c:\windows\ServicePackFiles\i386\usbuhci.sys
+ 2008-04-14 00:12:08 74,240 ——w c:\windows\ServicePackFiles\i386\usbui.dll
+ 2008-04-13 18:46:20 121,984 ——w c:\windows\ServicePackFiles\i386\usbvideo.sys
+ 2008-04-14 00:12:08 578,560 ——w c:\windows\ServicePackFiles\i386\user32.dll
+ 2008-04-14 00:12:08 727,040 ——w c:\windows\ServicePackFiles\i386\userenv.dll
+ 2008-04-14 00:12:38 26,112 ——w c:\windows\ServicePackFiles\i386\userinit.exe
+ 2008-04-14 00:12:08 406,016 ——w c:\windows\ServicePackFiles\i386\usp10.dll
+ 2008-04-14 00:12:38 50,176 ——w c:\windows\ServicePackFiles\i386\utilman.exe
+ 2008-04-14 00:12:08 218,624 ——w c:\windows\ServicePackFiles\i386\uxtheme.dll
+ 2008-04-14 00:12:08 30,749 ——w c:\windows\ServicePackFiles\i386\vbajet32.dll
+ 2007-06-27 12:59:58 716,800 ——w c:\windows\ServicePackFiles\i386\vbc.exe
+ 2008-04-13 16:11:44 126,976 ——w c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll
+ 2008-04-13 16:11:45 126,976 ——w c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll
+ 2008-04-13 16:11:45 126,976 ——w c:\windows\ServicePackFiles\i386\vbc7ui.dll
+ 2008-04-13 16:11:45 147,456 ——w c:\windows\ServicePackFiles\i386\vbc7ui.es.dll
+ 2008-04-13 16:11:45 151,552 ——w c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll
+ 2008-04-13 16:11:45 151,552 ——w c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll
+ 2008-04-13 16:11:45 147,456 ——w c:\windows\ServicePackFiles\i386\vbc7ui.it.dll
+ 2008-04-13 16:11:45 126,976 ——w c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll
+ 2008-04-13 16:11:45 126,976 ——w c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll
+ 2008-04-14 00:12:08 434,176 ——w c:\windows\ServicePackFiles\i386\vbscript.dll
+ 2008-04-14 00:12:08 11,325 ——w c:\windows\ServicePackFiles\i386\vchnt5.dll
+ 2008-04-14 00:12:08 26,112 ——w c:\windows\ServicePackFiles\i386\vdmdbg.dll
+ 2008-04-14 00:12:08 51,712 ——w c:\windows\ServicePackFiles\i386\vdmredir.dll
+ 2008-04-14 00:12:38 28,672 ——w c:\windows\ServicePackFiles\i386\verclsid.exe
+ 2008-04-14 00:12:08 26,624 ——w c:\windows\ServicePackFiles\i386\verifier.dll
+ 2008-04-14 00:12:08 18,944 ——w c:\windows\ServicePackFiles\i386\version.dll
+ 2008-04-14 00:12:08 53,760 ——w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
+ 2008-04-13 18:44:40 20,992 ——w c:\windows\ServicePackFiles\i386\vga.sys
+ 2008-04-14 00:12:08 851,968 ——w c:\windows\ServicePackFiles\i386\vgx.dll
+ 2008-04-13 18:36:40 42,240 ——w c:\windows\ServicePackFiles\i386\viaagp.sys
+ 2008-04-13 18:40:31 5,376 ——w c:\windows\ServicePackFiles\i386\viaide.sys
+ 2008-04-13 18:44:40 81,664 ——w c:\windows\ServicePackFiles\i386\videoprt.sys
+ 2008-04-14 00:12:08 131,584 ——w c:\windows\ServicePackFiles\i386\viewprov.dll
+ 2008-04-13 18:41:01 52,352 ——w c:\windows\ServicePackFiles\i386\volsnap.sys
+ 2008-04-13 16:11:47 999,424 ——w c:\windows\ServicePackFiles\i386\vsavb7rt.dll
+ 2008-04-14 00:12:08 430,592 ——w c:\windows\ServicePackFiles\i386\vssapi.dll
+ 2008-04-14 00:12:38 289,792 ——w c:\windows\ServicePackFiles\i386\vssvc.exe
+ 2008-04-14 00:12:08 175,104 ——w c:\windows\ServicePackFiles\i386\w32time.dll
+ 2008-04-14 00:12:08 15,872 ——w c:\windows\ServicePackFiles\i386\w3ssl.dll
+ 2008-04-14 00:12:08 364,032 ——w c:\windows\ServicePackFiles\i386\w3svc.dll
+ 2008-04-14 00:12:08 483,840 ——w c:\windows\ServicePackFiles\i386\w95upgnt.dll
+ 2008-04-14 00:12:38 46,080 ——w c:\windows\ServicePackFiles\i386\wab.exe
+ 2008-04-14 00:12:08 510,976 ——w c:\windows\ServicePackFiles\i386\wab32.dll
+ 2008-04-13 16:21:48 249,856 ——w c:\windows\ServicePackFiles\i386\wab32res.dll
+ 2008-04-14 00:12:08 32,768 ——w c:\windows\ServicePackFiles\i386\wabfind.dll
+ 2008-04-14 00:12:08 85,504 ——w c:\windows\ServicePackFiles\i386\wabimp.dll
+ 2008-04-14 00:12:39 30,208 ——w c:\windows\ServicePackFiles\i386\wabmig.exe
+ 2008-04-13 18:43:55 14,208 ——w c:\windows\ServicePackFiles\i386\wacompen.sys
+ 2004-08-04 02:29:38 12,415 ——w c:\windows\ServicePackFiles\i386\wadv01nt.sys
+ 2004-08-04 02:29:38 12,127 ——w c:\windows\ServicePackFiles\i386\wadv02nt.sys
+ 2004-08-04 02:29:38 11,775 ——w c:\windows\ServicePackFiles\i386\wadv05nt.sys
+ 2004-08-04 02:29:40 11,807 ——w c:\windows\ServicePackFiles\i386\wadv07nt.sys
+ 2004-08-04 02:29:40 11,295 ——w c:\windows\ServicePackFiles\i386\wadv08nt.sys
+ 2004-08-04 02:29:42 11,871 ——w c:\windows\ServicePackFiles\i386\wadv09nt.sys
+ 2004-08-04 02:29:42 11,935 ——w c:\windows\ServicePackFiles\i386\wadv11nt.sys
+ 2008-04-14 00:12:08 76,800 ——w c:\windows\ServicePackFiles\i386\wam51.dll
+ 2008-04-14 00:12:08 53,248 ——w c:\windows\ServicePackFiles\i386\wamreg51.dll
+ 2008-04-13 18:57:21 34,560 ——w c:\windows\ServicePackFiles\i386\wanarp.sys
+ 2008-04-13 18:44:59 17,664 ——w c:\windows\ServicePackFiles\i386\watchdog.sys
+ 2004-08-04 02:29:42 29,311 ——w c:\windows\ServicePackFiles\i386\watv01nt.sys
+ 2004-08-04 02:29:44 19,551 ——w c:\windows\ServicePackFiles\i386\watv02nt.sys
+ 2004-08-04 02:29:44 33,599 ——w c:\windows\ServicePackFiles\i386\watv04nt.sys
+ 2004-08-04 02:29:46 22,271 ——w c:\windows\ServicePackFiles\i386\watv06nt.sys
+ 2004-08-04 02:29:46 25,471 ——w c:\windows\ServicePackFiles\i386\watv10nt.sys
+ 2008-04-14 00:12:08 215,552 ——w c:\windows\ServicePackFiles\i386\wavemsp.dll
+ 2008-04-14 00:12:08 196,608 ——w c:\windows\ServicePackFiles\i386\wbemcntl.dll
+ 2008-04-14 00:12:08 214,528 ——w c:\windows\ServicePackFiles\i386\wbemcomn.dll
+ 2008-04-14 00:12:08 71,680 ——w c:\windows\ServicePackFiles\i386\wbemcons.dll
+ 2008-04-14 00:12:08 531,456 ——w c:\windows\ServicePackFiles\i386\wbemcore.dll
+ 2008-04-14 00:12:08 178,176 ——w c:\windows\ServicePackFiles\i386\wbemdisp.dll
+ 2008-04-14 00:12:08 273,920 ——w c:\windows\ServicePackFiles\i386\wbemess.dll
+ 2008-04-14 00:12:08 43,008 ——w c:\windows\ServicePackFiles\i386\wbemperf.dll
+ 2008-04-14 00:12:08 18,944 ——w c:\windows\ServicePackFiles\i386\wbemprox.dll
+ 2008-04-14 00:12:08 43,520 ——w c:\windows\ServicePackFiles\i386\wbemsvc.dll
+ 2008-04-14 00:12:39 116,224 ——w c:\windows\ServicePackFiles\i386\wbemtest.exe
+ 2008-04-14 00:12:08 197,120 ——w c:\windows\ServicePackFiles\i386\wbemupgd.dll
+ 2008-04-13 18:45:38 31,744 ——w c:\windows\ServicePackFiles\i386\wceusbsh.sys
+ 2004-08-04 02:29:46 23,615 ——w c:\windows\ServicePackFiles\i386\wch7xxnt.sys
+ 2008-04-14 00:12:08 49,152 ——w c:\windows\ServicePackFiles\i386\wdigest.dll
+ 2008-04-14 00:12:45 23,552 ——w c:\windows\ServicePackFiles\i386\wdmaud.drv
+ 2008-04-13 19:17:18 83,072 ——w c:\windows\ServicePackFiles\i386\wdmaud.sys
+ 2008-04-14 00:12:08 276,480 ——w c:\windows\ServicePackFiles\i386\webcheck.dll
+ 2008-04-14 00:12:08 68,096 ——w c:\windows\ServicePackFiles\i386\webclnt.dll
+ 2008-04-14 00:12:08 135,680 ——w c:\windows\ServicePackFiles\i386\webvw.dll
+ 2008-04-14 00:12:39 65,024 ——w c:\windows\ServicePackFiles\i386\wextract.exe
+ 2008-04-14 00:12:39 433,664 ——w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
+ 2008-04-14 00:12:08 463,360 ——w c:\windows\ServicePackFiles\i386\wiadefui.dll
+ 2008-04-14 00:12:08 124,416 ——w c:\windows\ServicePackFiles\i386\wiadss.dll
+ 2008-04-14 00:12:08 75,776 ——w c:\windows\ServicePackFiles\i386\wiascr.dll
+ 2008-04-14 00:12:08 333,824 ——w c:\windows\ServicePackFiles\i386\wiaservc.dll
+ 2008-04-14 00:12:08 589,312 ——w c:\windows\ServicePackFiles\i386\wiashext.dll
+ 2008-04-14 00:12:08 111,104 ——w c:\windows\ServicePackFiles\i386\wiavideo.dll
+ 2008-04-14 00:12:08 712,704 ——w c:\windows\ServicePackFiles\i386\wic.dll
+ 2008-04-14 00:12:08 346,112 ——w c:\windows\ServicePackFiles\i386\wicext.dll
+ 2008-04-13 19:30:10 1,845,632 ——w c:\windows\ServicePackFiles\i386\win32k.sys
+ 2008-04-14 00:12:08 102,400 ——w c:\windows\ServicePackFiles\i386\win32spl.dll
+ 2008-04-13 16:48:53 1,647,616 ——w c:\windows\ServicePackFiles\i386\winbrand.dll
+ 2008-04-14 00:12:39 283,648 ——w c:\windows\ServicePackFiles\i386\winhlp32.exe
+ 2008-04-14 00:12:08 354,304 ——w c:\windows\ServicePackFiles\i386\winhttp.dll
+ 2008-04-14 00:12:08 666,112 ——w c:\windows\ServicePackFiles\i386\wininet.dll
+ 2008-04-14 00:12:09 32,256 ——w c:\windows\ServicePackFiles\i386\winipsec.dll
+ 2008-04-14 00:12:39 507,904 ——w c:\windows\ServicePackFiles\i386\winlogon.exe
+ 2008-04-14 00:12:09 176,128 ——w c:\windows\ServicePackFiles\i386\winmm.dll
+ 2004-08-04 11:00:00 5,120 ——w c:\windows\ServicePackFiles\i386\winnls.dll
+ 2008-04-14 00:11:11 756,224 ——w c:\windows\ServicePackFiles\i386\winntbbu.dll
+ 2008-04-14 00:12:09 16,896 ——w c:\windows\ServicePackFiles\i386\winrnr.dll
+ 2008-04-14 00:12:09 99,328 ——w c:\windows\ServicePackFiles\i386\winscard.dll
+ 2008-04-14 00:12:09 17,408 ——w c:\windows\ServicePackFiles\i386\winshfhc.dll
+ 2008-04-14 00:12:45 146,432 ——w c:\windows\ServicePackFiles\i386\winspool.drv
+ 2008-04-14 00:12:09 293,376 ——w c:\windows\ServicePackFiles\i386\winsrv.dll
+ 2008-04-14 00:12:09 53,760 ——w c:\windows\ServicePackFiles\i386\winsta.dll
+ 2008-04-14 00:12:09 176,640 ——w c:\windows\ServicePackFiles\i386\wintrust.dll
+ 2008-04-14 00:12:40 5,632 ——w c:\windows\ServicePackFiles\i386\winver.exe
+ 2008-04-14 00:12:09 132,096 ——w c:\windows\ServicePackFiles\i386\wkssvc.dll
+ 2008-04-14 00:12:09 69,120 ——w c:\windows\ServicePackFiles\i386\wlanapi.dll
+ 2008-04-14 00:12:09 172,032 ——w c:\windows\ServicePackFiles\i386\wldap32.dll
+ 2004-08-04 02:31:28 154,624 ——w c:\windows\ServicePackFiles\i386\wlluc48.sys
+ 2008-04-14 00:12:09 92,672 ——w c:\windows\ServicePackFiles\i386\wlnotify.dll
+ 2008-04-14 00:11:15 5,632 ——w c:\windows\ServicePackFiles\i386\wmi.dll
+ 2008-04-13 18:36:38 8,832 ——w c:\windows\ServicePackFiles\i386\wmiacpi.sys
+ 2008-04-14 00:12:40 196,608 ——w c:\windows\ServicePackFiles\i386\wmiadap.exe
+ 2008-04-13 17:10:20 6,656 ——w c:\windows\ServicePackFiles\i386\wmiapres.dll
+ 2008-04-14 00:12:09 88,576 ——w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
+ 2008-04-14 00:12:40 126,464 ——w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
+ 2008-04-14 00:12:40 358,912 ——w c:\windows\ServicePackFiles\i386\wmic.exe
+ 2008-04-14 00:12:09 60,928 ——w c:\windows\ServicePackFiles\i386\wmicookr.dll
+ 2008-04-14 00:12:09 140,800 ——w c:\windows\ServicePackFiles\i386\wmidcprv.dll
+ 2008-04-14 00:12:09 156,672 ——w c:\windows\ServicePackFiles\i386\wmipcima.dll
+ 2008-04-14 00:12:09 132,096 ——w c:\windows\ServicePackFiles\i386\wmipdskq.dll
+ 2008-04-14 00:12:09 61,952 ——w c:\windows\ServicePackFiles\i386\wmipiprt.dll
+ 2008-04-14 00:12:09 62,464 ——w c:\windows\ServicePackFiles\i386\wmipjobj.dll
+ 2008-04-14 00:12:09 144,896 ——w c:\windows\ServicePackFiles\i386\wmiprov.dll
+ 2008-04-14 00:12:09 437,248 ——w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
+ 2008-04-14 00:12:40 218,112 ——w c:\windows\ServicePackFiles\i386\wmiprvse.exe
+ 2008-04-14 00:12:09 41,472 ——w c:\windows\ServicePackFiles\i386\wmipsess.dll
+ 2008-04-14 00:12:09 144,896 ——w c:\windows\ServicePackFiles\i386\wmisvc.dll
+ 2008-04-14 00:12:09 95,232 ——w c:\windows\ServicePackFiles\i386\wmiutils.dll
+ 2008-04-14 00:12:09 167,936 ——w c:\windows\ServicePackFiles\i386\wmm2ae.dll
+ 2008-04-14 00:12:09 4,096 ——w c:\windows\ServicePackFiles\i386\wmm2eres.dll
+ 2008-04-14 00:12:09 7,680 ——w c:\windows\ServicePackFiles\i386\wmm2ext.dll
+ 2008-04-14 00:12:09 402,432 ——w c:\windows\ServicePackFiles\i386\wmm2filt.dll
+ 2008-04-14 00:12:09 502,272 ——w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
+ 2008-04-14 00:12:09 325,632 ——w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
+ 2008-04-14 00:12:09 4,256,768 ——w c:\windows\ServicePackFiles\i386\wmm2res.dll
+ 2008-04-14 00:12:09 5,632 ——w c:\windows\ServicePackFiles\i386\wmm2res2.dll
+ 2008-04-14 00:12:09 276,992 ——w c:\windows\ServicePackFiles\i386\wmphoto.dll
+ 2008-04-14 00:12:40 214,528 ——w c:\windows\ServicePackFiles\i386\wordpad.exe
+ 2008-04-14 00:12:10 264,192 ——w c:\windows\ServicePackFiles\i386\wow32.dll
+ 2008-04-14 00:12:40 32,256 ——w c:\windows\ServicePackFiles\i386\wpabaln.exe
+ 2008-04-14 00:12:41 11,264 ——w c:\windows\ServicePackFiles\i386\wpnpinst.exe
+ 2008-04-14 00:12:10 82,432 ——w c:\windows\ServicePackFiles\i386\ws2_32.dll
+ 2008-04-14 00:12:10 19,968 ——w c:\windows\ServicePackFiles\i386\ws2help.dll
+ 2008-04-14 00:12:41 13,824 ——w c:\windows\ServicePackFiles\i386\wscntfy.exe
+ 2008-04-14 00:12:41 155,648 ——w c:\windows\ServicePackFiles\i386\wscript.exe
+ 2008-04-14 00:12:10 80,896 ——w c:\windows\ServicePackFiles\i386\wscsvc.dll
+ 2008-04-14 00:12:10 604,160 ——w c:\windows\ServicePackFiles\i386\wsecedit.dll
+ 2008-04-14 00:12:10 108,032 ——w c:\windows\ServicePackFiles\i386\wshbth.dll
+ 2008-04-14 00:12:10 36,864 ——w c:\windows\ServicePackFiles\i386\wshcon.dll
+ 2008-04-14 00:12:10 90,112 ——w c:\windows\ServicePackFiles\i386\wshext.dll
+ 2008-04-14 00:12:10 14,336 ——w c:\windows\ServicePackFiles\i386\wship6.dll
+ 2008-04-14 00:12:10 8,192 ——w c:\windows\ServicePackFiles\i386\wshirda.dll
+ 2008-04-14 00:12:10 11,264 ——w c:\windows\ServicePackFiles\i386\wshrm.dll
+ 2008-04-14 00:12:10 19,456 ——w c:\windows\ServicePackFiles\i386\wshtcpip.dll
+ 2004-08-04 02:29:48 12,063 ——w c:\windows\ServicePackFiles\i386\wsiintxx.sys
+ 2008-04-14 00:12:10 41,984 ——w c:\windows\ServicePackFiles\i386\wsnmp32.dll
+ 2008-04-14 00:12:10 22,528 ——w c:\windows\ServicePackFiles\i386\wsock32.dll
+ 2008-04-13 18:46:24 19,200 ——w c:\windows\ServicePackFiles\i386\wstcodec.sys
+ 2008-04-14 00:12:10 50,688 ——w c:\windows\ServicePackFiles\i386\wstdecod.dll
+ 2008-04-14 00:12:10 18,432 ——w c:\windows\ServicePackFiles\i386\wtsapi32.dll
+ 2008-04-14 00:12:10 430,592 ——w c:\windows\ServicePackFiles\i386\wuapi.dll
+ 2008-04-14 00:12:41 111,104 ——w c:\windows\ServicePackFiles\i386\wuauclt.exe
+ 2008-04-14 00:12:41 165,888 ——w c:\windows\ServicePackFiles\i386\wuauclt1.exe
+ 2008-04-14 00:12:11 1,135,616 ——w c:\windows\ServicePackFiles\i386\wuaueng.dll
+ 2008-04-14 00:12:11 183,296 ——w c:\windows\ServicePackFiles\i386\wuaueng1.dll
+ 2008-04-14 00:12:11 6,656 ——w c:\windows\ServicePackFiles\i386\wuauserv.dll
+ 2008-04-14 00:12:11 112,640 ——w c:\windows\ServicePackFiles\i386\wucltui.dll
+ 2008-04-14 00:12:11 32,256 ——w c:\windows\ServicePackFiles\i386\wups.dll
+ 2008-04-14 00:12:11 120,320 ——w c:\windows\ServicePackFiles\i386\wuweb.dll
+ 2004-08-04 02:29:50 19,455 ——w c:\windows\ServicePackFiles\i386\wvchntxx.sys
+ 2008-04-14 00:12:11 383,488 ——w c:\windows\ServicePackFiles\i386\wzcdlg.dll
+ 2008-04-14 00:12:11 52,736 ——w c:\windows\ServicePackFiles\i386\wzcsapi.dll
+ 2008-04-14 00:12:11 483,840 ——w c:\windows\ServicePackFiles\i386\wzcsvc.dll
+ 2008-04-14 00:12:11 91,648 ——w c:\windows\ServicePackFiles\i386\xactsrv.dll
+ 2008-04-14 00:12:41 30,720 ——w c:\windows\ServicePackFiles\i386\xcopy.exe
+ 2004-08-04 11:00:00 174,200 ——w c:\windows\ServicePackFiles\i386\xenroll.dll
+ 2008-04-14 00:12:11 121,856 ——w c:\windows\ServicePackFiles\i386\xmllite.dll
+ 2008-04-14 00:12:11 129,024 ——w c:\windows\ServicePackFiles\i386\xmlprov.dll
+ 2008-04-14 00:12:11 50,176 ——w c:\windows\ServicePackFiles\i386\xmlprovi.dll
+ 2008-04-14 00:12:11 11,776 ——w c:\windows\ServicePackFiles\i386\xolehlp.dll
+ 2008-04-13 18:53:32 558,080 ——w c:\windows\ServicePackFiles\i386\xpnetdg.exe
+ 2008-04-13 17:39:29 438,784 ——w c:\windows\ServicePackFiles\i386\xpob2res.dll
+ 2008-04-13 17:39:22 187,392 ——w c:\windows\ServicePackFiles\i386\xpsp1res.dll
+ 2008-04-13 17:39:24 2,897,920 ——w c:\windows\ServicePackFiles\i386\xpsp2res.dll
+ 2008-04-13 17:39:26 689,152 ——w c:\windows\ServicePackFiles\i386\xpsp3res.dll
+ 2008-04-14 00:12:11 18,944 ——w c:\windows\ServicePackFiles\i386\xrxscnui.dll
+ 2008-04-14 00:12:11 116,224 ——w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
+ 2008-04-14 00:12:11 338,432 ——w c:\windows\ServicePackFiles\i386\zipfldr.dll
+ 2008-04-14 00:11:51 33,792 ——w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
+ 2008-04-14 00:11:59 82,944 ——w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
+ 2008-04-13 17:30:28 180,224 ——w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
+ 2008-04-14 00:12:28 1,695,232 ——w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
+ 2008-04-14 00:12:35 32,866 ——w c:\windows\slrundll.exe
- 2004-08-04 11:00:00 3,166,208 —-a-w c:\windows\srchasst\msgr3en.dll
+ 2008-04-14 00:11:59 3,166,208 —-a-w c:\windows\srchasst\msgr3en.dll
- 2004-08-04 11:00:00 58,434 —-a-w c:\windows\srchasst\srchctls.dll
+ 2008-04-14 00:12:06 58,434 —-a-w c:\windows\srchasst\srchctls.dll
- 2004-08-04 11:00:00 725,566 —-a-w c:\windows\srchasst\srchui.dll
+ 2008-04-14 00:12:07 726,078 —-a-w c:\windows\srchasst\srchui.dll
- 2004-08-04 11:00:00 146,432 —-a-w c:\windows\system\WINSPOOL.DRV
+ 2008-04-14 00:12:45 146,432 —-a-w c:\windows\system\winspool.drv
- 2006-08-16 11:58:05 100,352 —-a-w c:\windows\system32\6to4svc.dll
+ 2008-04-14 00:11:48 100,352 —-a-w c:\windows\system32\6to4svc.dll
+ 2008-04-14 00:11:48 136,192 ——w c:\windows\system32\aaclient.dll
- 2004-08-04 11:00:00 183,808 —-a-w c:\windows\system32\accwiz.exe
+ 2008-04-14 00:12:11 184,320 —-a-w c:\windows\system32\accwiz.exe
- 2004-08-04 11:00:00 114,688 —-a-w c:\windows\system32\aclui.dll
+ 2008-04-14 00:11:48 115,712 —-a-w c:\windows\system32\aclui.dll
- 2004-08-04 11:00:00 194,048 —-a-w c:\windows\system32\activeds.dll
+ 2008-04-14 00:11:48 193,536 —-a-w c:\windows\system32\activeds.dll
- 2004-08-04 11:00:00 4,096 —-a-w c:\windows\system32\actmovie.exe
+ 2008-04-14 00:12:12 4,096 —-a-w c:\windows\system32\actmovie.exe
- 2004-08-04 11:00:00 101,888 —-a-w c:\windows\system32\actxprxy.dll
+ 2008-04-14 00:11:48 98,304 —-a-w c:\windows\system32\actxprxy.dll
- 2004-08-04 11:00:00 175,616 —-a-w c:\windows\system32\adsldp.dll
+ 2008-04-14 00:11:48 175,616 —-a-w c:\windows\system32\adsldp.dll
- 2004-08-04 11:00:00 143,360 —-a-w c:\windows\system32\adsldpc.dll
+ 2008-04-14 00:11:48 143,360 —-a-w c:\windows\system32\adsldpc.dll
- 2004-08-04 11:00:00 68,096 —-a-w c:\windows\system32\adsmsext.dll
+ 2008-04-14 00:11:48 68,096 —-a-w c:\windows\system32\adsmsext.dll
- 2004-08-04 11:00:00 263,680 —-a-w c:\windows\system32\adsnt.dll
+ 2008-04-14 00:11:48 263,680 —-a-w c:\windows\system32\adsnt.dll
- 2004-08-04 11:00:00 109,568 —-a-w c:\windows\system32\adsnw.dll
+ 2008-04-14 00:11:48 123,392 —-a-w c:\windows\system32\adsnw.dll
- 2004-08-04 11:00:00 616,960 —-a-w c:\windows\system32\advapi32.dll
+ 2008-04-14 00:11:48 617,472 —-a-w c:\windows\system32\advapi32.dll
- 2008-04-23 04:16:28 124,928 —-a-w c:\windows\system32\advpack.dll
+ 2008-12-20 23:15:11 124,928 —-a-w c:\windows\system32\advpack.dll
- 2004-08-04 11:00:00 98,304 —-a-w c:\windows\system32\ahui.exe
+ 2008-04-14 00:12:12 98,304 —-a-w c:\windows\system32\ahui.exe
- 2004-08-04 11:00:00 44,544 —-a-w c:\windows\system32\alg.exe
+ 2008-04-14 00:12:12 44,544 —-a-w c:\windows\system32\alg.exe
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\alrsvc.dll
+ 2008-04-14 00:11:49 17,408 —-a-w c:\windows\system32\alrsvc.dll
- 2004-08-04 11:00:00 70,656 —-a-w c:\windows\system32\amstream.dll
+ 2008-04-14 00:11:49 70,656 —-a-w c:\windows\system32\amstream.dll
- 2004-08-04 11:00:00 126,976 —-a-w c:\windows\system32\apphelp.dll
+ 2008-04-14 00:11:49 125,952 —-a-w c:\windows\system32\apphelp.dll
- 2004-08-04 11:00:00 167,936 —-a-w c:\windows\system32\appmgmts.dll
+ 2008-04-14 00:11:49 167,936 —-a-w c:\windows\system32\appmgmts.dll
- 2004-08-04 11:00:00 295,936 —-a-w c:\windows\system32\appmgr.dll
+ 2008-04-14 00:11:49 295,936 —-a-w c:\windows\system32\appmgr.dll
- 2004-08-04 11:00:00 30,208 —-a-w c:\windows\system32\asr_fmt.exe
+ 2008-04-14 00:12:12 30,208 —-a-w c:\windows\system32\asr_fmt.exe
- 2004-08-04 11:00:00 32,768 —-a-w c:\windows\system32\asr_pfu.exe
+ 2008-04-14 00:12:12 32,768 —-a-w c:\windows\system32\asr_pfu.exe
- 2004-08-04 11:00:00 65,024 —-a-w c:\windows\system32\asycfilt.dll
+ 2008-04-14 00:11:49 65,024 —-a-w c:\windows\system32\asycfilt.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\at.exe
+ 2008-04-14 00:12:12 25,088 —-a-w c:\windows\system32\at.exe
+ 2008-04-14 00:11:49 377,984 ——w c:\windows\system32\ati2dvaa.dll
+ 2008-04-14 00:11:50 32,768 ——w c:\windows\system32\ativtmxx.dll
- 2004-08-04 11:00:00 58,880 —-a-w c:\windows\system32\atl.dll
+ 2008-04-14 00:11:50 58,880 —-a-w c:\windows\system32\atl.dll
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\atmadm.exe
+ 2008-04-14 00:12:12 11,264 —-a-w c:\windows\system32\atmadm.exe
- 2004-08-04 11:00:00 285,696 —-a-w c:\windows\system32\atmfd.dll
+ 2008-04-14 00:09:01 285,696 —-a-w c:\windows\system32\atmfd.dll
- 2004-08-04 11:00:00 30,208 —-a-w c:\windows\system32\atmlib.dll
+ 2008-04-14 00:11:50 30,208 —-a-w c:\windows\system32\atmlib.dll
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\attrib.exe
+ 2008-04-14 00:12:12 12,288 —-a-w c:\windows\system32\attrib.exe
- 2004-08-04 11:00:00 42,496 —-a-w c:\windows\system32\audiosrv.dll
+ 2008-04-14 00:11:50 42,496 —-a-w c:\windows\system32\audiosrv.dll
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\auditusr.exe
+ 2008-04-14 00:12:12 14,336 —-a-w c:\windows\system32\auditusr.exe
- 2005-03-02 18:09:29 56,832 —-a-w c:\windows\system32\authz.dll
+ 2008-04-14 00:11:50 62,464 —-a-w c:\windows\system32\authz.dll
- 2004-08-04 11:00:00 588,800 —-a-w c:\windows\system32\autochk.exe
+ 2008-04-14 00:12:12 588,800 —-a-w c:\windows\system32\autochk.exe
- 2004-08-04 11:00:00 602,624 —-a-w c:\windows\system32\autoconv.exe
+ 2008-04-14 00:12:12 602,624 —-a-w c:\windows\system32\autoconv.exe
- 2004-08-04 11:00:00 580,608 —-a-w c:\windows\system32\autofmt.exe
+ 2008-04-14 00:12:13 580,608 —-a-w c:\windows\system32\autofmt.exe
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\autolfn.exe
+ 2008-04-14 00:12:13 11,264 —-a-w c:\windows\system32\autolfn.exe
- 2004-08-04 11:00:00 84,992 —-a-w c:\windows\system32\avifil32.dll
+ 2008-04-14 00:11:50 84,992 —-a-w c:\windows\system32\avifil32.dll
+ 2008-04-14 00:11:50 233,472 ——w c:\windows\system32\azroles.dll
- 2004-08-04 11:00:00 52,736 —-a-w c:\windows\system32\basesrv.dll
+ 2008-04-14 00:11:50 52,736 —-a-w c:\windows\system32\basesrv.dll
- 2004-08-04 11:00:00 28,672 —-a-w c:\windows\system32\batmeter.dll
+ 2008-04-14 00:11:50 29,184 —-a-w c:\windows\system32\batmeter.dll
- 2004-08-04 11:00:00 8,704 —-a-w c:\windows\system32\batt.dll
+ 2008-04-14 00:11:50 8,704 —-a-w c:\windows\system32\batt.dll
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\bidispl.dll
+ 2008-04-14 00:11:50 17,408 —-a-w c:\windows\system32\bidispl.dll
+ 2008-04-14 00:12:03 409,088 ——w c:\windows\system32\bits\qmgr.dll
- 2004-08-04 11:00:00 8,192 —-a-w c:\windows\system32\bitsprx2.dll
+ 2008-04-14 00:11:50 8,192 —-a-w c:\windows\system32\bitsprx2.dll
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\bitsprx3.dll
+ 2008-04-14 00:11:50 7,168 —-a-w c:\windows\system32\bitsprx3.dll
+ 2008-04-14 00:11:50 7,168 ——w c:\windows\system32\bitsprx4.dll
- 2004-08-04 11:00:00 71,680 —-a-w c:\windows\system32\blastcln.exe
+ 2008-04-14 00:12:13 71,680 —-a-w c:\windows\system32\blastcln.exe
- 2004-08-04 11:00:00 136,704 —-a-w c:\windows\system32\bootcfg.exe
+ 2008-04-14 00:12:13 142,848 —-a-w c:\windows\system32\bootcfg.exe
- 2004-08-04 11:00:00 63,488 —-a-w c:\windows\system32\browselc.dll
+ 2008-04-13 17:03:24 63,488 —-a-w c:\windows\system32\browselc.dll
- 2004-08-04 11:00:00 77,312 —-a-w c:\windows\system32\browser.dll
+ 2008-04-14 00:11:50 77,824 —-a-w c:\windows\system32\browser.dll
- 2006-09-23 17:12:50 1,022,976 —-a-w c:\windows\system32\browseui.dll
+ 2008-04-14 00:11:50 1,025,024 —-a-w c:\windows\system32\browseui.dll
- 2004-08-04 11:00:00 78,336 —-a-w c:\windows\system32\browsewm.dll
+ 2008-04-14 00:11:50 78,336 —-a-w c:\windows\system32\browsewm.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\bthci.dll
+ 2008-04-14 00:11:50 20,992 —-a-w c:\windows\system32\bthci.dll
- 2004-08-04 11:00:00 30,208 —-a-w c:\windows\system32\bthserv.dll
+ 2008-04-14 00:11:50 30,208 —-a-w c:\windows\system32\bthserv.dll
- 2004-08-04 11:00:00 50,688 —-a-w c:\windows\system32\btpanui.dll
+ 2008-04-14 00:11:50 50,688 —-a-w c:\windows\system32\btpanui.dll
- 2004-08-04 11:00:00 59,904 —-a-w c:\windows\system32\cabinet.dll
+ 2008-04-14 00:11:50 60,416 —-a-w c:\windows\system32\cabinet.dll
- 2004-08-04 11:00:00 84,480 —-a-w c:\windows\system32\cabview.dll
+ 2008-04-14 00:11:50 84,480 —-a-w c:\windows\system32\cabview.dll
- 2004-08-04 11:00:00 18,432 —-a-w c:\windows\system32\cacls.exe
+ 2008-04-14 00:12:13 19,968 —-a-w c:\windows\system32\cacls.exe
- 2004-08-04 11:00:00 50,688 —-a-w c:\windows\system32\camocx.dll
+ 2008-04-14 00:11:50 50,688 —-a-w c:\windows\system32\camocx.dll
- 2004-08-04 11:00:00 142,848 —-a-w c:\windows\system32\capesnpn.dll
+ 2008-04-14 00:11:50 150,016 —-a-w c:\windows\system32\capesnpn.dll
- 2005-07-26 04:39:42 225,792 —-a-w c:\windows\system32\catsrv.dll
+ 2008-04-14 00:11:50 226,304 —-a-w c:\windows\system32\catsrv.dll
- 2004-08-04 11:00:00 85,504 —-a-w c:\windows\system32\catsrvps.dll
+ 2008-04-14 00:11:50 85,504 —-a-w c:\windows\system32\catsrvps.dll
- 2005-07-26 04:39:43 625,152 —-a-w c:\windows\system32\catsrvut.dll
+ 2008-04-14 00:11:50 625,664 —-a-w c:\windows\system32\catsrvut.dll
- 2006-06-23 11:02:49 151,040 —-a-w c:\windows\system32\cdfview.dll
+ 2008-04-14 00:11:50 151,040 —-a-w c:\windows\system32\cdfview.dll
- 2005-09-10 01:53:41 2,067,968 —-a-w c:\windows\system32\cdosys.dll
+ 2008-04-14 00:11:50 2,091,520 —-a-w c:\windows\system32\cdosys.dll
- 2004-08-04 11:00:00 194,560 —-a-w c:\windows\system32\certcli.dll
+ 2008-04-14 00:11:50 194,560 —-a-w c:\windows\system32\certcli.dll
- 2004-08-04 11:00:00 457,728 —-a-w c:\windows\system32\certmgr.dll
+ 2008-04-14 00:11:50 457,728 —-a-w c:\windows\system32\certmgr.dll
- 2004-08-04 11:00:00 38,912 —-a-w c:\windows\system32\cfgbkend.dll
+ 2008-04-14 00:11:50 38,912 —-a-w c:\windows\system32\cfgbkend.dll
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\cfgmgr32.dll
+ 2008-04-14 00:09:05 16,896 —-a-w c:\windows\system32\cfgmgr32.dll
- 2004-08-04 11:00:00 109,568 —-a-w c:\windows\system32\cic.dll
+ 2008-04-14 00:11:50 148,480 —-a-w c:\windows\system32\cic.dll
- 2006-06-22 05:06:29 69,120 —-a-w c:\windows\system32\ciodm.dll
+ 2008-04-14 00:11:50 69,120 —-a-w c:\windows\system32\ciodm.dll
- 2004-08-04 11:00:00 56,320 —-a-w c:\windows\system32\cipher.exe
+ 2008-04-14 00:12:14 56,832 —-a-w c:\windows\system32\cipher.exe
- 2004-08-04 11:00:00 5,632 —-a-w c:\windows\system32\cisvc.exe
+ 2008-04-14 00:12:14 5,632 —-a-w c:\windows\system32\cisvc.exe
- 2005-07-26 04:39:43 110,080 —-a-w c:\windows\system32\clbcatex.dll
+ 2008-04-14 00:11:50 110,592 —-a-w c:\windows\system32\clbcatex.dll
- 2005-07-26 04:39:43 498,688 —-a-w c:\windows\system32\clbcatq.dll
+ 2008-04-14 00:11:50 498,688 —-a-w c:\windows\system32\clbcatq.dll
- 2004-08-04 11:00:00 64,000 —-a-w c:\windows\system32\cleanmgr.exe
+ 2008-04-14 00:12:14 64,000 —-a-w c:\windows\system32\cleanmgr.exe
- 2004-08-04 11:00:00 77,824 —-a-w c:\windows\system32\cliconfg.dll
+ 2008-04-14 00:11:50 77,824 —-a-w c:\windows\system32\cliconfg.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\system32\cliconfg.exe
+ 2008-04-14 00:12:14 20,480 —-a-w c:\windows\system32\cliconfg.exe
- 2004-08-04 11:00:00 102,912 —-a-w c:\windows\system32\clipbrd.exe
+ 2008-04-14 00:12:14 102,912 —-a-w c:\windows\system32\clipbrd.exe
- 2004-08-04 11:00:00 33,280 —-a-w c:\windows\system32\clipsrv.exe
+ 2008-04-14 00:12:14 33,280 —-a-w c:\windows\system32\clipsrv.exe
- 2004-08-04 11:00:00 57,856 —-a-w c:\windows\system32\clusapi.dll
+ 2008-04-14 00:11:50 58,368 —-a-w c:\windows\system32\clusapi.dll
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\cmcfg32.dll
+ 2008-04-14 00:11:50 15,872 —-a-w c:\windows\system32\cmcfg32.dll
- 2004-08-04 11:00:00 388,608 —-a-w c:\windows\system32\cmd.exe
+ 2008-04-14 00:12:14 389,120 —-a-w c:\windows\system32\cmd.exe
- 2004-08-04 11:00:00 343,040 —-a-w c:\windows\system32\cmdial32.dll
+ 2008-04-14 00:11:50 344,064 —-a-w c:\windows\system32\cmdial32.dll
- 2004-08-04 11:00:00 47,104 —-a-w c:\windows\system32\cmdl32.exe
+ 2008-04-14 00:12:14 25,600 —-a-w c:\windows\system32\cmdl32.exe
- 2004-08-04 11:00:00 39,936 —-a-w c:\windows\system32\cmmon32.exe
+ 2008-04-14 00:12:15 39,936 —-a-w c:\windows\system32\cmmon32.exe
- 2004-08-04 11:00:00 185,344 —-a-w c:\windows\system32\cmprops.dll
+ 2008-04-14 00:11:50 185,344 —-a-w c:\windows\system32\cmprops.dll
- 2004-08-04 11:00:00 13,824 —-a-w c:\windows\system32\cmsetACL.dll
+ 2008-04-14 00:11:50 13,312 —-a-w c:\windows\system32\cmsetacl.dll
- 2004-08-04 11:00:00 63,488 —-a-w c:\windows\system32\cmstp.exe
+ 2008-04-14 00:12:15 63,488 —-a-w c:\windows\system32\cmstp.exe
- 2004-08-04 11:00:00 39,936 —-a-w c:\windows\system32\cmutil.dll
+ 2008-04-14 00:11:50 39,424 —-a-w c:\windows\system32\cmutil.dll
- 2004-08-04 11:00:00 47,104 —-a-w c:\windows\system32\cnbjmon.dll
+ 2008-04-14 00:11:50 47,104 —-a-w c:\windows\system32\cnbjmon.dll
- 2005-07-26 04:39:43 60,416 —-a-w c:\windows\system32\colbact.dll
+ 2008-04-14 00:11:51 60,416 —-a-w c:\windows\system32\colbact.dll
- 2005-07-26 04:39:44 195,072 —-a-w c:\windows\system32\Com\comadmin.dll
+ 2008-04-14 00:11:51 195,072 —-a-w c:\windows\system32\Com\comadmin.dll
- 2004-08-04 11:00:00 9,728 —-a-w c:\windows\system32\Com\comrepl.exe
+ 2008-04-14 00:12:15 9,728 —-a-w c:\windows\system32\Com\comrepl.exe
- 2004-08-04 11:00:00 5,120 —-a-w c:\windows\system32\Com\comrereg.exe
+ 2008-04-14 00:12:15 6,144 —-a-w c:\windows\system32\Com\comrereg.exe
- 2004-08-04 11:00:00 25,600 —-a-w c:\windows\system32\comaddin.dll
+ 2008-04-14 00:11:51 28,160 —-a-w c:\windows\system32\comaddin.dll
- 2006-08-25 15:45:58 617,472 —-a-w c:\windows\system32\comctl32.dll
+ 2008-04-14 00:11:51 617,472 —-a-w c:\windows\system32\comctl32.dll
- 2004-08-04 11:00:00 276,992 —-a-w c:\windows\system32\comdlg32.dll
+ 2008-04-14 00:11:51 276,992 —-a-w c:\windows\system32\comdlg32.dll
- 2004-08-04 11:00:00 252,928 —-a-w c:\windows\system32\compatUI.dll
+ 2008-04-14 00:11:51 252,928 —-a-w c:\windows\system32\compatui.dll
- 2004-08-04 11:00:00 229,376 —-a-w c:\windows\system32\compstui.dll
+ 2008-04-14 00:11:51 229,376 —-a-w c:\windows\system32\compstui.dll
- 2005-07-26 04:39:44 97,792 —-a-w c:\windows\system32\comrepl.dll
+ 2008-04-14 00:11:51 97,792 —-a-w c:\windows\system32\comrepl.dll
- 2004-08-04 11:00:00 792,064 —-a-w c:\windows\system32\comres.dll
+ 2008-04-14 00:11:51 792,064 —-a-w c:\windows\system32\comres.dll
+ 2008-04-13 18:43:32 9,728 ——w c:\windows\system32\comsdupd.exe
- 2004-08-04 11:00:00 147,456 —-a-w c:\windows\system32\comsnap.dll
+ 2008-04-14 00:11:51 167,424 —-a-w c:\windows\system32\comsnap.dll
- 2005-07-26 04:39:44 1,267,200 —-a-w c:\windows\system32\comsvcs.dll
+ 2008-04-14 00:11:51 1,267,200 —-a-w c:\windows\system32\comsvcs.dll
- 2005-07-26 04:39:45 540,160 —-a-w c:\windows\system32\comuid.dll
+ 2008-04-14 00:11:51 539,648 —-a-w c:\windows\system32\comuid.dll
- 2009-04-04 13:30:20 16,384 —-a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2009-04-07 11:22:57 16,384 —-a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2009-04-04 13:30:20 32,768 —-a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2009-04-07 11:22:57 32,768 —-a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2009-04-07 11:22:41 32,768 –sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009040720090408\index.dat
- 2009-04-04 13:30:20 32,768 —-a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2009-04-07 11:22:57 32,768 —-a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2004-08-04 11:00:00 345,600 —-a-w c:\windows\system32\confmsp.dll
+ 2008-04-14 00:11:51 357,888 —-a-w c:\windows\system32\confmsp.dll
- 2004-08-04 11:00:00 27,648 —-a-w c:\windows\system32\conime.exe
+ 2008-04-14 00:12:15 27,648 —-a-w c:\windows\system32\conime.exe
- 2007-01-09 00:01:14 17,408 —-a-w c:\windows\system32\corpol.dll
+ 2008-04-14 00:11:51 35,328 —-a-w c:\windows\system32\corpol.dll
+ 2008-04-14 00:11:51 12,800 ——w c:\windows\system32\credssp.dll
- 2004-08-04 11:00:00 163,840 —-a-w c:\windows\system32\credui.dll
+ 2008-04-14 00:11:51 163,840 —-a-w c:\windows\system32\credui.dll
- 2004-08-04 11:00:00 597,504 —-a-w c:\windows\system32\crypt32.dll
+ 2008-04-14 00:11:51 599,040 —-a-w c:\windows\system32\crypt32.dll
- 2004-08-04 11:00:00 74,752 —-a-w c:\windows\system32\cryptdlg.dll
+ 2008-04-14 00:11:51 74,752 —-a-w c:\windows\system32\cryptdlg.dll
- 2004-08-04 11:00:00 33,280 —-a-w c:\windows\system32\cryptdll.dll
+ 2008-04-14 00:11:51 33,280 —-a-w c:\windows\system32\cryptdll.dll
- 2004-08-04 11:00:00 53,760 —-a-w c:\windows\system32\cryptext.dll
+ 2008-04-14 00:11:51 53,760 —-a-w c:\windows\system32\cryptext.dll
- 2004-08-04 11:00:00 63,488 —-a-w c:\windows\system32\cryptnet.dll
+ 2008-04-14 00:11:51 64,512 —-a-w c:\windows\system32\cryptnet.dll
- 2004-08-04 11:00:00 60,416 —-a-w c:\windows\system32\cryptsvc.dll
+ 2008-04-14 00:11:51 62,464 —-a-w c:\windows\system32\cryptsvc.dll
- 2004-08-04 11:00:00 512,512 —-a-w c:\windows\system32\cryptui.dll
+ 2008-04-14 00:11:51 512,512 —-a-w c:\windows\system32\cryptui.dll
- 2004-08-04 11:00:00 101,888 —-a-w c:\windows\system32\cscdll.dll
+ 2008-04-14 00:11:51 101,888 —-a-w c:\windows\system32\cscdll.dll
- 2004-08-04 11:00:00 98,304 —-a-w c:\windows\system32\cscript.exe
+ 2008-04-14 00:12:15 139,264 —-a-w c:\windows\system32\cscript.exe
- 2004-08-04 11:00:00 326,656 —-a-w c:\windows\system32\cscui.dll
+ 2008-04-14 00:11:51 326,656 —-a-w c:\windows\system32\cscui.dll
- 2004-08-04 11:00:00 32,768 —-a-w c:\windows\system32\csrsrv.dll
+ 2008-04-14 00:11:51 32,256 —-a-w c:\windows\system32\csrsrv.dll
- 2004-08-04 11:00:00 6,144 —-a-w c:\windows\system32\csrss.exe
+ 2008-04-14 00:12:15 6,144 —-a-w c:\windows\system32\csrss.exe
- 2004-08-04 11:00:00 15,360 —-a-w c:\windows\system32\ctfmon.exe
+ 2008-04-14 00:12:16 15,360 —-a-w c:\windows\system32\ctfmon.exe
- 2004-08-04 11:00:00 1,179,648 —-a-w c:\windows\system32\d3d8.dll
+ 2008-04-14 00:11:51 1,179,648 —-a-w c:\windows\system32\d3d8.dll
- 2004-08-04 11:00:00 8,192 —-a-w c:\windows\system32\d3d8thk.dll
+ 2008-04-14 00:11:51 8,192 —-a-w c:\windows\system32\d3d8thk.dll
- 2004-08-04 11:00:00 1,689,088 —-a-w c:\windows\system32\d3d9.dll
+ 2008-04-14 00:11:51 1,689,088 —-a-w c:\windows\system32\d3d9.dll
- 2004-08-04 11:00:00 825,344 —-a-w c:\windows\system32\d3dim700.dll
+ 2008-04-14 00:11:51 824,320 —-a-w c:\windows\system32\d3dim700.dll
- 2006-06-23 11:02:50 1,054,208 —-a-w c:\windows\system32\danim.dll
+ 2008-04-14 00:11:51 1,054,208 —-a-w c:\windows\system32\danim.dll
- 2004-08-04 11:00:00 54,272 —-a-w c:\windows\system32\dataclen.dll
+ 2008-04-14 00:11:51 54,272 —-a-w c:\windows\system32\dataclen.dll
- 2004-08-04 11:00:00 152,064 —-a-w c:\windows\system32\datime.dll
+ 2008-04-14 00:11:51 165,376 —-a-w c:\windows\system32\datime.dll
- 2004-08-04 11:00:00 24,576 —-a-w c:\windows\system32\davclnt.dll
+ 2008-04-14 00:11:51 25,088 —-a-w c:\windows\system32\davclnt.dll
- 2004-08-04 11:00:00 640,000 —-a-w c:\windows\system32\dbghelp.dll
+ 2008-04-14 00:11:51 640,000 —-a-w c:\windows\system32\dbghelp.dll
- 2004-08-04 11:00:00 24,576 —-a-w c:\windows\system32\dbmsrpcn.dll
+ 2008-04-14 00:11:51 24,576 —-a-w c:\windows\system32\dbmsrpcn.dll
- 2004-08-04 11:00:00 110,592 —-a-w c:\windows\system32\dbnetlib.dll
+ 2008-04-14 00:11:51 110,592 —-a-w c:\windows\system32\dbnetlib.dll
- 2004-08-04 11:00:00 28,672 —-a-w c:\windows\system32\dbnmpntw.dll
+ 2008-04-14 00:11:51 28,672 —-a-w c:\windows\system32\dbnmpntw.dll
- 2004-08-04 11:00:00 1,788 —-a-w c:\windows\system32\Dcache.bin
+ 2008-04-14 00:25:26 1,804 —-a-w c:\windows\system32\dcache.bin
- 2004-08-04 11:00:00 8,704 —-a-w c:\windows\system32\dciman32.dll
+ 2008-04-14 00:11:51 8,704 —-a-w c:\windows\system32\dciman32.dll
- 2004-08-04 11:00:00 5,120 —-a-w c:\windows\system32\dcomcnfg.exe
+ 2008-04-14 00:12:16 6,144 —-a-w c:\windows\system32\dcomcnfg.exe
- 2004-08-04 11:00:00 30,208 —-a-w c:\windows\system32\ddeshare.exe
+ 2008-04-14 00:12:16 30,208 —-a-w c:\windows\system32\ddeshare.exe
- 2004-08-04 11:00:00 266,240 —-a-w c:\windows\system32\ddraw.dll
+ 2008-04-14 00:11:51 279,552 —-a-w c:\windows\system32\ddraw.dll
- 2004-08-04 11:00:00 27,136 —-a-w c:\windows\system32\ddrawex.dll
+ 2008-04-14 00:11:51 27,136 —-a-w c:\windows\system32\ddrawex.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\defrag.exe
+ 2008-04-14 00:12:16 25,088 —-a-w c:\windows\system32\defrag.exe
- 2004-08-04 11:00:00 59,904 —-a-w c:\windows\system32\devenum.dll
+ 2008-04-14 00:11:51 59,904 —-a-w c:\windows\system32\devenum.dll
- 2004-08-04 11:00:00 282,624 —-a-w c:\windows\system32\devmgr.dll
+ 2008-04-14 00:11:51 282,624 —-a-w c:\windows\system32\devmgr.dll
- 2004-08-04 11:00:00 82,432 —-a-w c:\windows\system32\dfrgfat.exe
+ 2008-04-14 00:12:16 82,944 —-a-w c:\windows\system32\dfrgfat.exe
- 2004-08-04 11:00:00 104,960 —-a-w c:\windows\system32\dfrgntfs.exe
+ 2008-04-14 00:12:16 105,472 —-a-w c:\windows\system32\dfrgntfs.exe
- 2004-08-04 11:00:00 38,912 —-a-w c:\windows\system32\dfrgsnap.dll
+ 2008-04-14 00:11:51 39,424 —-a-w c:\windows\system32\dfrgsnap.dll
- 2004-08-04 11:00:00 123,904 —-a-w c:\windows\system32\dfrgui.dll
+ 2008-04-14 00:11:51 124,416 —-a-w c:\windows\system32\dfrgui.dll
- 2004-08-04 11:00:00 28,672 —-a-w c:\windows\system32\dfsshlex.dll
+ 2008-04-14 00:11:51 28,672 —-a-w c:\windows\system32\dfsshlex.dll
- 2004-08-04 11:00:00 111,104 —-a-w c:\windows\system32\dgnet.dll
+ 2008-04-14 00:11:51 111,104 —-a-w c:\windows\system32\dgnet.dll
- 2006-05-19 12:59:41 111,616 —-a-w c:\windows\system32\dhcpcsvc.dll
+ 2008-04-14 00:11:51 126,976 —-a-w c:\windows\system32\dhcpcsvc.dll
- 2004-08-04 11:00:00 370,176 —-a-w c:\windows\system32\dhcpmon.dll
+ 2008-04-14 00:11:52 379,904 —-a-w c:\windows\system32\dhcpmon.dll
+ 2008-04-14 00:11:52 48,640 ——w c:\windows\system32\dhcpqec.dll
- 2004-08-04 11:00:00 85,504 —-a-w c:\windows\system32\diantz.exe
+ 2008-04-14 00:12:17 87,040 —-a-w c:\windows\system32\diantz.exe
- 2004-08-04 11:00:00 68,608 —-a-w c:\windows\system32\digest.dll
+ 2008-04-14 00:11:52 68,608 —-a-w c:\windows\system32\digest.dll
+ 2008-04-14 00:11:52 19,456 ——w c:\windows\system32\dimsntfy.dll
+ 2008-04-14 00:11:52 39,936 ——w c:\windows\system32\dimsroam.dll
- 2004-08-04 11:00:00 159,232 —-a-w c:\windows\system32\dinput.dll
+ 2008-04-14 00:11:52 158,720 —-a-w c:\windows\system32\dinput.dll
- 2004-08-04 11:00:00 181,760 —-a-w c:\windows\system32\dinput8.dll
+ 2008-04-14 00:11:52 181,760 —-a-w c:\windows\system32\dinput8.dll
- 2004-08-04 11:00:00 1,501,696 —-a-w c:\windows\system32\diskcopy.dll
+ 2008-04-14 00:11:52 1,504,256 —-a-w c:\windows\system32\diskcopy.dll
- 2004-08-04 11:00:00 163,840 —-a-w c:\windows\system32\diskpart.exe
+ 2008-04-14 00:12:17 163,840 —-a-w c:\windows\system32\diskpart.exe
- 2004-08-04 11:00:00 45,083 —-a-w c:\windows\system32\dispex.dll
+ 2008-04-14 00:11:52 32,768 —-a-w c:\windows\system32\dispex.dll
- 2008-04-23 04:16:28 124,928 —-a-w c:\windows\system32\dllcache\advpack.dll
+ 2008-12-20 23:15:11 124,928 —-a-w c:\windows\system32\dllcache\advpack.dll
+ 2008-08-14 10:04:36 138,496 ——w c:\windows\system32\dllcache\afd.sys
- 2008-06-13 13:10:50 272,128 ——w c:\windows\system32\dllcache\bthport.sys
+ 2008-06-13 11:05:51 272,128 ——w c:\windows\system32\dllcache\bthport.sys
- 2008-02-20 05:32:43 148,992 —-a-w c:\windows\system32\dllcache\dnsapi.dll
+ 2008-06-20 17:46:57 147,968 ——w c:\windows\system32\dllcache\dnsapi.dll
- 2006-08-22 09:05:26 498,742 ——w c:\windows\system32\dllcache\dxmasf.dll
+ 2008-04-14 00:11:52 498,742 ——w c:\windows\system32\dllcache\dxmasf.dll
- 2008-04-23 04:16:28 347,136 —-a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-12-20 23:15:12 347,136 —-a-w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-04-23 04:16:28 214,528 —-a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2008-12-20 23:15:13 214,528 —-a-w c:\windows\system32\dllcache\dxtrans.dll
- 2005-07-26 04:39:45 243,200 —-a-w c:\windows\system32\dllcache\es.dll
+ 2008-07-07 20:26:58 253,952 ——w c:\windows\system32\dllcache\es.dll
- 2008-04-23 04:16:28 133,120 —-a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-12-20 23:15:13 133,120 —-a-w c:\windows\system32\dllcache\extmgr.dll
- 2008-02-20 06:51:05 282,624 —-a-w c:\windows\system32\dllcache\gdi32.dll
+ 2008-10-23 12:36:14 286,720 ——w c:\windows\system32\dllcache\gdi32.dll
- 2008-04-23 04:16:28 63,488 ——w c:\windows\system32\dllcache\icardie.dll
+ 2008-12-20 23:15:13 63,488 ——w c:\windows\system32\dllcache\icardie.dll
- 2008-04-22 07:39:58 70,656 ——w c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-12-19 09:10:15 70,656 ——w c:\windows\system32\dllcache\ie4uinit.exe
- 2008-04-23 04:16:28 153,088 ——w c:\windows\system32\dllcache\ieakeng.dll
+ 2008-12-20 23:15:14 153,088 ——w c:\windows\system32\dllcache\ieakeng.dll
- 2008-04-23 04:16:28 230,400 ——w c:\windows\system32\dllcache\ieaksie.dll
+ 2008-12-20 23:15:14 230,400 ——w c:\windows\system32\dllcache\ieaksie.dll
- 2008-04-20 05:07:51 161,792 ——w c:\windows\system32\dllcache\ieakui.dll
+ 2008-12-19 05:23:56 161,792 ——w c:\windows\system32\dllcache\ieakui.dll
- 2008-04-23 04:16:28 383,488 ——w c:\windows\system32\dllcache\ieapfltr.dll
+ 2008-12-20 23:15:15 383,488 ——w c:\windows\system32\dllcache\ieapfltr.dll
- 2008-04-23 04:16:28 384,512 ——w c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-12-20 23:15:16 384,512 ——w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-04-23 04:16:28 6,066,176 ——w c:\windows\system32\dllcache\ieframe.dll
+ 2008-12-20 23:15:21 6,066,688 ——w c:\windows\system32\dllcache\ieframe.dll
- 2008-04-23 04:16:28 44,544 ——w c:\windows\system32\dllcache\iernonce.dll
+ 2008-12-20 23:15:21 44,544 ——w c:\windows\system32\dllcache\iernonce.dll
- 2008-04-23 04:16:28 267,776 ——w c:\windows\system32\dllcache\iertutil.dll
+ 2008-12-20 23:15:22 267,776 ——w c:\windows\system32\dllcache\iertutil.dll
- 2008-04-22 07:39:58 13,824 ——w c:\windows\system32\dllcache\ieudinit.exe
+ 2008-12-19 09:10:15 13,824 ——w c:\windows\system32\dllcache\ieudinit.exe
- 2008-04-22 07:40:18 625,664 —-a-w c:\windows\system32\dllcache\iexplore.exe
+ 2008-12-19 05:25:25 634,024 —-a-w c:\windows\system32\dllcache\iexplore.exe
- 2008-04-23 04:16:28 27,648 —-a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2008-12-20 23:15:23 27,648 —-a-w c:\windows\system32\dllcache\jsproxy.dll
- 2005-06-29 01:46:00 74,240 —-a-w c:\windows\system32\dllcache\mscms.dll
+ 2008-06-24 16:43:16 74,240 ——w c:\windows\system32\dllcache\mscms.dll
- 2008-04-23 04:16:28 459,264 ——w c:\windows\system32\dllcache\msfeeds.dll
+ 2008-12-20 23:15:23 459,264 ——w c:\windows\system32\dllcache\msfeeds.dll
- 2008-04-23 04:16:28 52,224 ——w c:\windows\system32\dllcache\msfeedsbs.dll
+ 2008-12-20 23:15:24 52,224 ——w c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-04-24 02:16:30 3,591,680 —-a-w c:\windows\system32\dllcache\mshtml.dll
+ 2009-01-17 01:35:14 3,594,752 —-a-w c:\windows\system32\dllcache\mshtml.dll
- 2008-04-23 04:16:28 478,208 —-a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2008-12-20 23:15:30 477,696 —-a-w c:\windows\system32\dllcache\mshtmled.dll
- 2008-04-23 04:16:28 193,024 —-a-w c:\windows\system32\dllcache\msrating.dll
+ 2008-12-20 23:15:31 193,024 —-a-w c:\windows\system32\dllcache\msrating.dll
- 2008-04-23 04:16:28 671,232 —-a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-12-20 23:15:32 671,232 —-a-w c:\windows\system32\dllcache\mstime.dll
- 2004-08-04 11:00:00 245,248 —-a-w c:\windows\system32\dllcache\mswsock.dll
+ 2008-06-20 17:46:57 245,248 ——w c:\windows\system32\dllcache\mswsock.dll
+ 2008-04-14 00:12:01 1,306,624 ——w c:\windows\system32\dllcache\msxml6.dll
+ 2008-04-13 17:27:18 79,872 ——w c:\windows\system32\dllcache\msxml6r.dll
- 2008-04-23 04:16:28 102,912 ——w c:\windows\system32\dllcache\occache.dll
+ 2008-12-20 23:15:38 102,912 ——w c:\windows\system32\dllcache\occache.dll
- 2008-04-23 04:16:28 44,544 —-a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-12-20 23:15:38 44,544 —-a-w c:\windows\system32\dllcache\pngfilt.dll
- 2008-05-07 05:18:48 1,287,680 —-a-w c:\windows\system32\dllcache\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 ——w c:\windows\system32\dllcache\quartz.dll
- 2008-05-08 12:28:49 202,752 ——w c:\windows\system32\dllcache\rmcast.sys
+ 2008-05-08 14:02:52 203,136 ——w c:\windows\system32\dllcache\rmcast.sys
- 2007-04-25 14:21:15 144,896 —-a-w c:\windows\system32\dllcache\schannel.dll
+ 2008-12-05 06:54:55 144,896 ——w c:\windows\system32\dllcache\schannel.dll
- 2007-10-26 03:34:01 8,460,288 —-a-w c:\windows\system32\dllcache\shell32.dll
+ 2008-06-17 19:02:19 8,461,312 ——w c:\windows\system32\dllcache\shell32.dll
- 2006-08-21 14:52:08 246,814 ——w c:\windows\system32\dllcache\strmdll.dll
+ 2008-10-03 10:02:42 247,326 ——w c:\windows\system32\dllcache\strmdll.dll
- 2007-10-30 17:20:55 360,064 —-a-w c:\windows\system32\dllcache\tcpip.sys
+ 2008-06-20 11:51:12 361,600 ——w c:\windows\system32\dllcache\tcpip.sys
- 2006-08-16 09:37:30 225,664 ——w c:\windows\system32\dllcache\tcpip6.sys
+ 2008-06-20 11:08:27 225,856 ——w c:\windows\system32\dllcache\tcpip6.sys
- 2008-04-23 04:16:28 105,984 —-a-w c:\windows\system32\dllcache\url.dll
+ 2008-12-20 23:15:39 105,984 —-a-w c:\windows\system32\dllcache\url.dll
- 2008-04-23 04:16:29 1,159,680 —-a-w c:\windows\system32\dllcache\urlmon.dll
+ 2008-12-20 23:15:40 1,160,192 —-a-w c:\windows\system32\dllcache\urlmon.dll
- 2008-04-23 04:16:29 233,472 ——w c:\windows\system32\dllcache\webcheck.dll
+ 2008-12-20 23:15:40 233,472 ——w c:\windows\system32\dllcache\webcheck.dll
- 2008-03-19 09:47:00 1,845,248 —-a-w c:\windows\system32\dllcache\win32k.sys
+ 2009-02-09 11:13:27 1,846,784 ——w c:\windows\system32\dllcache\win32k.sys
- 2008-04-23 04:16:29 826,368 —-a-w c:\windows\system32\dllcache\wininet.dll
+ 2008-12-20 23:15:41 826,368 —-a-w c:\windows\system32\dllcache\wininet.dll
- 2007-06-12 04:51:12 10,834,944 —-a-w c:\windows\system32\dllcache\wmp.dll
+ 2008-11-11 22:34:42 10,838,016 —-a-w c:\windows\system32\dllcache\wmp.dll
- 2004-08-04 11:00:00 5,120 —-a-w c:\windows\system32\dllhost.exe
+ 2008-04-14 00:12:17 5,120 —-a-w c:\windows\system32\dllhost.exe
- 2004-08-04 11:00:00 224,768 —-a-w c:\windows\system32\dmadmin.exe
+ 2008-04-14 00:12:17 224,768 —-a-w c:\windows\system32\dmadmin.exe
- 2004-08-04 11:00:00 28,672 —-a-w c:\windows\system32\dmband.dll
+ 2008-04-14 00:11:52 28,672 —-a-w c:\windows\system32\dmband.dll
- 2004-08-04 11:00:00 61,440 —-a-w c:\windows\system32\dmcompos.dll
+ 2008-04-14 00:11:52 61,440 —-a-w c:\windows\system32\dmcompos.dll
- 2004-08-04 11:00:00 273,920 —-a-w c:\windows\system32\dmdlgs.dll
+ 2008-04-14 00:11:52 285,184 —-a-w c:\windows\system32\dmdlgs.dll
- 2004-08-04 11:00:00 200,704 —-a-w c:\windows\system32\dmdskmgr.dll
+ 2008-04-14 00:11:52 200,704 —-a-w c:\windows\system32\dmdskmgr.dll
- 2004-08-04 11:00:00 181,248 —-a-w c:\windows\system32\dmime.dll
+ 2008-04-14 00:11:52 181,248 —-a-w c:\windows\system32\dmime.dll
- 2004-08-04 11:00:00 35,840 —-a-w c:\windows\system32\dmloader.dll
+ 2008-04-14 00:11:52 35,840 —-a-w c:\windows\system32\dmloader.dll
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\dmremote.exe
+ 2008-04-14 00:12:17 15,872 —-a-w c:\windows\system32\dmremote.exe
- 2004-08-04 11:00:00 82,432 —-a-w c:\windows\system32\dmscript.dll
+ 2008-04-14 00:11:52 82,432 —-a-w c:\windows\system32\dmscript.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\dmserver.dll
+ 2008-04-14 00:11:52 23,552 —-a-w c:\windows\system32\dmserver.dll
- 2004-08-04 11:00:00 105,984 —-a-w c:\windows\system32\dmstyle.dll
+ 2008-04-14 00:11:52 105,984 —-a-w c:\windows\system32\dmstyle.dll
- 2004-08-04 11:00:00 103,424 —-a-w c:\windows\system32\dmsynth.dll
+ 2008-04-14 00:11:52 103,424 —-a-w c:\windows\system32\dmsynth.dll
- 2004-08-04 11:00:00 104,448 —-a-w c:\windows\system32\dmusic.dll
+ 2008-04-14 00:11:52 104,448 —-a-w c:\windows\system32\dmusic.dll
- 2004-08-04 11:00:00 52,224 —-a-w c:\windows\system32\dmutil.dll
+ 2008-04-14 00:11:52 52,224 —-a-w c:\windows\system32\dmutil.dll
- 2008-02-20 05:32:43 148,992 —-a-w c:\windows\system32\dnsapi.dll
+ 2008-06-20 17:46:57 147,968 —-a-w c:\windows\system32\dnsapi.dll
- 2008-02-20 05:32:43 45,568 —-a-w c:\windows\system32\dnsrslvr.dll
+ 2008-04-14 00:11:52 45,568 —-a-w c:\windows\system32\dnsrslvr.dll
- 2004-08-04 11:00:00 48,128 —-a-w c:\windows\system32\docprop2.dll
+ 2008-04-14 00:11:52 48,128 —-a-w c:\windows\system32\docprop2.dll
+ 2008-04-14 00:11:52 26,112 ——w c:\windows\system32\dot3api.dll
+ 2008-04-14 00:11:52 57,856 ——w c:\windows\system32\dot3cfg.dll
+ 2008-04-14 00:11:52 9,216 ——w c:\windows\system32\dot3dlg.dll
+ 2008-04-14 00:11:52 39,936 ——w c:\windows\system32\dot3gpclnt.dll
+ 2008-04-14 00:11:52 56,320 ——w c:\windows\system32\dot3msm.dll
+ 2008-04-14 00:11:52 132,096 ——w c:\windows\system32\dot3svc.dll
+ 2008-04-14 00:11:52 650,752 ——w c:\windows\system32\dot3ui.dll
- 2004-08-04 11:00:00 96,768 —-a-w c:\windows\system32\dpcdll.dll
+ 2008-04-14 00:11:52 102,912 —-a-w c:\windows\system32\dpcdll.dll
- 2004-08-04 11:00:00 30,208 —-a-w c:\windows\system32\dplaysvr.exe
+ 2008-04-14 00:12:17 29,696 —-a-w c:\windows\system32\dplaysvr.exe
- 2004-08-04 11:00:00 229,888 —-a-w c:\windows\system32\dplayx.dll
+ 2008-04-14 00:11:52 229,888 —-a-w c:\windows\system32\dplayx.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\dpmodemx.dll
+ 2008-04-14 00:11:52 23,552 —-a-w c:\windows\system32\dpmodemx.dll
- 2004-08-04 11:00:00 3,584 —-a-w c:\windows\system32\dpnaddr.dll
+ 2008-04-14 00:09:19 3,072 —-a-w c:\windows\system32\dpnaddr.dll
- 2004-08-04 11:00:00 375,296 —-a-w c:\windows\system32\dpnet.dll
+ 2008-04-14 00:11:52 375,296 —-a-w c:\windows\system32\dpnet.dll
- 2004-08-04 11:00:00 35,328 —-a-w c:\windows\system32\dpnhpast.dll
+ 2008-04-14 00:11:52 35,328 —-a-w c:\windows\system32\dpnhpast.dll
- 2004-08-04 11:00:00 60,928 —-a-w c:\windows\system32\dpnhupnp.dll
+ 2008-04-14 00:11:52 60,928 —-a-w c:\windows\system32\dpnhupnp.dll
- 2004-08-04 11:00:00 3,584 —-a-w c:\windows\system32\dpnlobby.dll
+ 2008-04-14 00:09:20 3,072 —-a-w c:\windows\system32\dpnlobby.dll
- 2004-08-04 11:00:00 18,432 —-a-w c:\windows\system32\dpnsvr.exe
+ 2008-04-14 00:12:17 17,920 —-a-w c:\windows\system32\dpnsvr.exe
- 2004-08-04 11:00:00 21,504 —-a-w c:\windows\system32\dpvacm.dll
+ 2008-04-14 00:11:52 21,504 —-a-w c:\windows\system32\dpvacm.dll
- 2004-08-04 11:00:00 212,480 —-a-w c:\windows\system32\dpvoice.dll
+ 2008-04-14 00:11:52 212,480 —-a-w c:\windows\system32\dpvoice.dll
- 2004-08-04 11:00:00 83,456 —-a-w c:\windows\system32\dpvsetup.exe
+ 2008-04-14 00:12:18 83,456 —-a-w c:\windows\system32\dpvsetup.exe
- 2004-08-04 11:00:00 116,736 —-a-w c:\windows\system32\dpvvox.dll
+ 2008-04-14 00:11:52 116,736 —-a-w c:\windows\system32\dpvvox.dll
- 2004-08-04 11:00:00 57,344 —-a-w c:\windows\system32\dpwsockx.dll
+ 2008-04-14 00:11:52 57,344 —-a-w c:\windows\system32\dpwsockx.dll
- 2004-08-04 11:00:00 58,368 —-a-w c:\windows\system32\driverquery.exe
+ 2008-04-14 00:12:18 62,976 —-a-w c:\windows\system32\driverquery.exe
- 2004-08-04 11:00:00 187,776 —-a-w c:\windows\system32\drivers\acpi.sys
+ 2008-04-13 18:36:35 187,776 —-a-w c:\windows\system32\drivers\acpi.sys
+ 2008-04-14 00:11:48 4,255 ——w c:\windows\system32\drivers\adv01nt5.dll
+ 2008-04-14 00:11:48 3,967 ——w c:\windows\system32\drivers\adv02nt5.dll
+ 2008-04-14 00:11:48 3,615 ——w c:\windows\system32\drivers\adv05nt5.dll
+ 2008-04-14 00:11:48 3,647 ——w c:\windows\system32\drivers\adv07nt5.dll
+ 2008-04-14 00:11:48 3,135 ——w c:\windows\system32\drivers\adv08nt5.dll
+ 2008-04-14 00:11:48 3,711 ——w c:\windows\system32\drivers\adv09nt5.dll
+ 2008-04-14 00:11:48 3,775 ——w c:\windows\system32\drivers\adv11nt5.dll
- 2006-02-15 00:22:26 142,464 —-a-w c:\windows\system32\drivers\aec.sys
+ 2008-04-13 16:39:23 142,592 —-a-w c:\windows\system32\drivers\aec.sys
- 2004-08-04 11:00:00 138,496 —-a-w c:\windows\system32\drivers\afd.sys
+ 2008-08-14 10:04:36 138,496 —-a-w c:\windows\system32\drivers\afd.sys
- 2004-08-04 05:07:42 42,368 —-a-w c:\windows\system32\drivers\AGP440.SYS
+ 2008-04-13 18:36:38 42,368 —-a-w c:\windows\system32\drivers\agp440.sys
- 2004-08-04 05:07:44 44,928 —-a-w c:\windows\system32\drivers\AGPCPQ.SYS
+ 2008-04-13 18:36:39 44,928 —-a-w c:\windows\system32\drivers\agpcpq.sys
- 2004-08-04 05:07:42 42,752 —-a-w c:\windows\system32\drivers\ALIM1541.SYS
+ 2008-04-13 18:36:38 42,752 —-a-w c:\windows\system32\drivers\alim1541.sys
- 2004-08-04 05:07:44 43,008 —-a-w c:\windows\system32\drivers\AMDAGP.SYS
+ 2008-04-13 18:36:39 43,008 —-a-w c:\windows\system32\drivers\amdagp.sys
- 2004-08-04 11:00:00 36,992 —-a-w c:\windows\system32\drivers\amdk6.sys
+ 2008-04-13 18:31:32 37,376 —-a-w c:\windows\system32\drivers\amdk6.sys
- 2004-08-04 11:00:00 37,376 —-a-w c:\windows\system32\drivers\amdk7.sys
+ 2008-04-13 18:31:33 37,760 —-a-w c:\windows\system32\drivers\amdk7.sys
- 2004-08-04 11:00:00 60,800 —-a-w c:\windows\system32\drivers\arp1394.sys
+ 2008-04-13 18:51:25 60,800 —-a-w c:\windows\system32\drivers\arp1394.sys
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\drivers\asyncmac.sys
+ 2008-04-13 18:57:27 14,336 —-a-w c:\windows\system32\drivers\asyncmac.sys
- 2004-08-04 04:59:44 95,360 —-a-w c:\windows\system32\drivers\atapi.sys
+ 2008-04-13 18:40:30 96,512 —-a-w c:\windows\system32\drivers\atapi.sys
+ 2004-08-04 02:29:30 56,623 ——w c:\windows\system32\drivers\ati1btxx.sys
+ 2004-08-04 02:29:30 11,615 ——w c:\windows\system32\drivers\ati1mdxx.sys
+ 2004-08-04 02:29:30 12,047 ——w c:\windows\system32\drivers\ati1pdxx.sys
+ 2004-08-04 02:29:32 30,671 ——w c:\windows\system32\drivers\ati1raxx.sys
+ 2004-08-04 02:29:32 63,663 ——w c:\windows\system32\drivers\ati1rvxx.sys
+ 2004-08-04 02:29:32 26,367 ——w c:\windows\system32\drivers\ati1snxx.sys
+ 2004-08-04 02:29:32 21,343 ——w c:\windows\system32\drivers\ati1ttxx.sys
+ 2004-08-04 02:29:32 36,463 ——w c:\windows\system32\drivers\ati1tuxx.sys
+ 2004-08-04 02:29:32 29,455 ——w c:\windows\system32\drivers\ati1xbxx.sys
+ 2004-08-04 02:29:32 34,735 ——w c:\windows\system32\drivers\ati1xsxx.sys
+ 2004-08-04 02:29:28 327,040 ——w c:\windows\system32\drivers\ati2mtaa.sys
+ 2004-08-04 02:29:28 57,856 ——w c:\windows\system32\drivers\atinbtxx.sys
+ 2004-08-04 02:29:30 13,824 ——w c:\windows\system32\drivers\atinmdxx.sys
+ 2004-08-04 02:29:30 14,336 ——w c:\windows\system32\drivers\atinpdxx.sys
+ 2004-08-04 02:29:30 52,224 ——w c:\windows\system32\drivers\atinraxx.sys
+ 2004-08-04 02:29:32 104,960 ——w c:\windows\system32\drivers\atinrvxx.sys
+ 2004-08-04 02:29:32 28,672 ——w c:\windows\system32\drivers\atinsnxx.sys
+ 2004-08-04 02:29:32 13,824 ——w c:\windows\system32\drivers\atinttxx.sys
+ 2004-08-04 02:29:32 73,216 ——w c:\windows\system32\drivers\atintuxx.sys
+ 2004-08-04 02:29:32 31,744 ——w c:\windows\system32\drivers\atinxbxx.sys
+ 2004-08-04 02:29:32 63,488 ——w c:\windows\system32\drivers\atinxsxx.sys
- 2004-08-04 11:00:00 59,904 —-a-w c:\windows\system32\drivers\atmarpc.sys
+ 2008-04-13 18:51:25 59,904 —-a-w c:\windows\system32\drivers\atmarpc.sys
- 2004-08-04 11:00:00 55,936 —-a-w c:\windows\system32\drivers\atmlane.sys
+ 2008-04-13 18:51:30 55,808 —-a-w c:\windows\system32\drivers\atmlane.sys
+ 2008-04-14 00:11:50 21,183 ——w c:\windows\system32\drivers\atv01nt5.dll
+ 2008-04-14 00:11:50 11,359 ——w c:\windows\system32\drivers\atv02nt5.dll
+ 2008-04-14 00:11:50 25,471 ——w c:\windows\system32\drivers\atv04nt5.dll
+ 2008-04-14 00:11:50 14,143 ——w c:\windows\system32\drivers\atv06nt5.dll
+ 2008-04-14 00:11:50 17,279 ——w c:\windows\system32\drivers\atv10nt5.dll
- 2001-08-17 19:57:54 14,080 —-a-w c:\windows\system32\drivers\battc.sys
+ 2008-04-13 18:36:32 14,208 —-a-w c:\windows\system32\drivers\battc.sys
- 2004-08-04 11:00:00 71,552 —-a-w c:\windows\system32\drivers\bridge.sys
+ 2008-04-13 18:53:23 71,552 —-a-w c:\windows\system32\drivers\bridge.sys
+ 2008-04-13 18:46:33 17,024 ——w c:\windows\system32\drivers\bthenum.sys
+ 2008-04-13 18:46:33 37,888 ——w c:\windows\system32\drivers\bthmodem.sys
+ 2008-04-13 18:51:34 101,120 ——w c:\windows\system32\drivers\bthpan.sys
- 2008-06-13 13:10:50 272,128 ——w c:\windows\system32\drivers\bthport.sys
+ 2008-06-13 11:05:51 272,128 ——w c:\windows\system32\drivers\bthport.sys
+ 2008-04-13 18:46:31 36,480 ——w c:\windows\system32\drivers\bthprint.sys
+ 2008-04-13 18:46:29 18,944 ——w c:\windows\system32\drivers\bthusb.sys
- 2004-08-04 11:00:00 63,744 —-a-w c:\windows\system32\drivers\cdfs.sys
+ 2008-04-13 19:14:21 63,744 —-a-w c:\windows\system32\drivers\cdfs.sys
- 2004-08-04 11:00:00 49,536 —-a-w c:\windows\system32\drivers\cdrom.sys
+ 2008-04-13 18:40:46 62,976 —-a-w c:\windows\system32\drivers\cdrom.sys
+ 2008-04-14 00:11:50 15,423 ——w c:\windows\system32\drivers\ch7xxnt5.dll
- 2004-08-04 11:00:00 49,664 —-a-w c:\windows\system32\drivers\classpnp.sys
+ 2008-04-13 19:16:22 49,536 —-a-w c:\windows\system32\drivers\classpnp.sys
- 2004-08-04 05:07:40 14,080 —-a-w c:\windows\system32\drivers\CmBatt.sys
+ 2008-04-13 18:36:37 13,952 —-a-w c:\windows\system32\drivers\cmbatt.sys
- 2001-08-17 19:58:00 9,344 —-a-w c:\windows\system32\drivers\compbatt.sys
+ 2008-04-13 18:36:37 10,240 —-a-w c:\windows\system32\drivers\compbatt.sys
- 2004-08-04 11:00:00 36,480 —-a-w c:\windows\system32\drivers\crusoe.sys
+ 2008-04-13 18:31:32 36,736 —-a-w c:\windows\system32\drivers\crusoe.sys
- 2004-08-04 11:00:00 36,352 —-a-w c:\windows\system32\drivers\disk.sys
+ 2008-04-13 18:40:47 36,352 —-a-w c:\windows\system32\drivers\disk.sys
- 2004-08-04 11:00:00 14,208 —-a-w c:\windows\system32\drivers\diskdump.sys
+ 2008-04-13 18:40:44 14,208 —-a-w c:\windows\system32\drivers\diskdump.sys
- 2004-08-04 11:00:00 799,744 —-a-w c:\windows\system32\drivers\dmboot.sys
+ 2008-04-13 18:44:48 799,744 —-a-w c:\windows\system32\drivers\dmboot.sys
- 2004-08-04 11:00:00 153,344 —-a-w c:\windows\system32\drivers\dmio.sys
+ 2008-04-13 18:44:46 153,344 —-a-w c:\windows\system32\drivers\dmio.sys
- 2004-08-04 05:07:40 52,864 —-a-w c:\windows\system32\drivers\DMusic.sys
+ 2008-04-13 18:45:01 52,864 —-a-w c:\windows\system32\drivers\dmusic.sys
- 2004-08-04 05:08:00 60,288 —-a-w c:\windows\system32\drivers\drmk.sys
+ 2008-04-13 18:45:14 60,160 —-a-w c:\windows\system32\drivers\drmk.sys
- 2004-08-04 05:07:58 2,944 —-a-w c:\windows\system32\drivers\drmkaud.sys
+ 2008-04-13 18:45:13 2,944 —-a-w c:\windows\system32\drivers\drmkaud.sys
- 2004-08-04 11:00:00 71,040 —-a-w c:\windows\system32\drivers\dxg.sys
+ 2008-04-13 18:38:29 71,168 —-a-w c:\windows\system32\drivers\dxg.sys
- 2004-08-04 11:00:00 143,360 —-a-w c:\windows\system32\drivers\fastfat.sys
+ 2008-04-13 19:14:29 143,744 —-a-w c:\windows\system32\drivers\fastfat.sys
- 2004-08-04 11:00:00 27,392 —-a-w c:\windows\system32\drivers\fdc.sys
+ 2008-04-13 18:40:25 27,392 —-a-w c:\windows\system32\drivers\fdc.sys
- 2004-08-04 11:00:00 34,944 —-a-w c:\windows\system32\drivers\fips.sys
+ 2008-04-13 18:33:28 44,544 —-a-w c:\windows\system32\drivers\fips.sys
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\system32\drivers\flpydisk.sys
+ 2008-04-13 18:40:25 20,480 —-a-w c:\windows\system32\drivers\flpydisk.sys
- 2006-08-21 09:14:58 128,896 —-a-w c:\windows\system32\drivers\fltmgr.sys
+ 2008-04-13 18:32:59 129,792 —-a-w c:\windows\system32\drivers\fltmgr.sys
+ 2008-04-13 18:36:40 46,464 ——w c:\windows\system32\drivers\gagp30kx.sys
+ 2008-04-13 16:36:05 144,384 ——w c:\windows\system32\drivers\hdaudbus.sys
+ 2008-04-13 18:46:30 25,600 ——w c:\windows\system32\drivers\hidbth.sys
- 2004-08-04 11:00:00 36,224 —-a-w c:\windows\system32\drivers\hidclass.sys
+ 2008-04-13 18:45:26 36,864 —-a-w c:\windows\system32\drivers\hidclass.sys
+ 2008-04-13 18:45:26 19,200 ——w c:\windows\system32\drivers\hidir.sys
- 2004-08-04 11:00:00 24,960 —-a-w c:\windows\system32\drivers\hidparse.sys
+ 2008-04-13 18:45:22 24,960 —-a-w c:\windows\system32\drivers\hidparse.sys
- 2001-08-17 19:02:20 9,600 —-a-w c:\windows\system32\drivers\hidusb.sys
+ 2008-04-13 18:45:27 10,368 —-a-w c:\windows\system32\drivers\hidusb.sys
+ 2004-08-04 02:41:48 220,032 ——w c:\windows\system32\drivers\hsfbs2s2.sys
+ 2004-08-04 02:41:50 685,056 ——w c:\windows\system32\drivers\hsfcxts2.sys
+ 2004-08-04 02:41:56 1,041,536 ——w c:\windows\system32\drivers\hsfdpsp2.sys
- 2006-03-17 00:33:10 262,784 —-a-w c:\windows\system32\drivers\http.sys
+ 2008-04-13 18:53:53 264,832 —-a-w c:\windows\system32\drivers\http.sys
- 2004-08-04 05:00:52 8,192 —-a-w c:\windows\system32\drivers\i2omgmt.sys
+ 2008-04-13 18:41:22 8,576 —-a-w c:\windows\system32\drivers\i2omgmt.sys
- 2004-08-04 05:00:52 18,560 —-a-w c:\windows\system32\drivers\i2omp.sys
+ 2008-04-13 18:41:22 18,560 —-a-w c:\windows\system32\drivers\i2omp.sys
- 2004-08-04 05:14:38 52,736 —-a-w c:\windows\system32\drivers\i8042prt.sys
+ 2008-04-13 19:18:00 52,480 —-a-w c:\windows\system32\drivers\i8042prt.sys
- 2004-08-04 11:00:00 41,856 —-a-w c:\windows\system32\drivers\imapi.sys
+ 2008-04-13 18:40:58 42,112 —-a-w c:\windows\system32\drivers\imapi.sys
- 2004-08-04 04:59:42 5,504 —-a-w c:\windows\system32\drivers\intelide.sys
+ 2008-04-13 18:40:29 5,504 —-a-w c:\windows\system32\drivers\intelide.sys
- 2004-08-04 11:00:00 36,096 —-a-w c:\windows\system32\drivers\intelppm.sys
+ 2008-04-13 18:31:32 36,352 —-a-w c:\windows\system32\drivers\intelppm.sys
- 2004-08-04 11:00:00 29,056 —-a-w c:\windows\system32\drivers\ip6fw.sys
+ 2008-04-13 18:53:34 36,608 —-a-w c:\windows\system32\drivers\ip6fw.sys
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\drivers\ipinip.sys
+ 2008-04-13 18:57:07 20,864 —-a-w c:\windows\system32\drivers\ipinip.sys
- 2004-09-29 22:28:37 134,912 —-a-w c:\windows\system32\drivers\ipnat.sys
+ 2008-04-13 18:57:15 152,832 —-a-w c:\windows\system32\drivers\ipnat.sys
- 2004-08-04 11:00:00 74,752 —-a-w c:\windows\system32\drivers\ipsec.sys
+ 2008-04-13 19:19:42 75,264 —-a-w c:\windows\system32\drivers\ipsec.sys
+ 2008-04-13 18:45:34 46,592 ——w c:\windows\system32\drivers\irbus.sys
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\drivers\irenum.sys
+ 2008-04-13 18:54:28 11,264 —-a-w c:\windows\system32\drivers\irenum.sys
- 2001-08-17 19:58:02 35,840 —-a-w c:\windows\system32\drivers\isapnp.sys
+ 2008-04-13 18:36:41 37,248 —-a-w c:\windows\system32\drivers\isapnp.sys
- 2004-08-04 04:58:34 24,576 —-a-w c:\windows\system32\drivers\kbdclass.sys
+ 2008-04-13 18:39:47 24,576 —-a-w c:\windows\system32\drivers\kbdclass.sys
- 2006-06-14 08:47:45 172,416 —-a-w c:\windows\system32\drivers\kmixer.sys
+ 2008-04-13 18:45:09 172,416 —-a-w c:\windows\system32\drivers\kmixer.sys
- 2004-08-04 11:00:00 140,928 —-a-w c:\windows\system32\drivers\ks.sys
+ 2008-04-13 19:16:36 141,056 —-a-w c:\windows\system32\drivers\ks.sys
- 2004-08-04 11:00:00 92,032 —-a-w c:\windows\system32\drivers\ksecdd.sys
+ 2008-04-13 18:31:43 92,288 —-a-w c:\windows\system32\drivers\ksecdd.sys
- 2004-08-04 11:00:00 63,744 —-a-w c:\windows\system32\drivers\mf.sys
+ 2008-04-13 18:36:41 63,744 —-a-w c:\windows\system32\drivers\mf.sys
- 2004-08-04 11:00:00 30,080 —-a-w c:\windows\system32\drivers\modem.sys
+ 2008-04-13 19:00:19 30,080 —-a-w c:\windows\system32\drivers\modem.sys
- 2004-08-04 04:58:34 23,040 —-a-w c:\windows\system32\drivers\mouclass.sys
+ 2008-04-13 18:39:47 23,040 —-a-w c:\windows\system32\drivers\mouclass.sys
- 2004-08-04 11:00:00 42,240 —-a-w c:\windows\system32\drivers\mountmgr.sys
+ 2008-04-13 18:39:46 42,368 —-a-w c:\windows\system32\drivers\mountmgr.sys
- 2007-07-06 10:05:47 72,960 —-a-w c:\windows\system32\drivers\mqac.sys
+ 2008-04-13 18:39:44 92,544 —-a-w c:\windows\system32\drivers\mqac.sys
- 2007-12-18 09:51:35 179,584 —-a-w c:\windows\system32\drivers\mrxdav.sys
+ 2008-04-13 18:32:44 180,608 —-a-w c:\windows\system32\drivers\mrxdav.sys
- 2006-05-05 09:41:45 453,120 —-a-w c:\windows\system32\drivers\mrxsmb.sys
+ 2008-10-24 11:21:09 455,296 —-a-w c:\windows\system32\drivers\mrxsmb.sys
- 2004-08-04 11:00:00 19,072 —-a-w c:\windows\system32\drivers\msfs.sys
+ 2008-04-13 18:32:39 19,072 —-a-w c:\windows\system32\drivers\msfs.sys
- 2004-08-04 11:00:00 35,072 —-a-w c:\windows\system32\drivers\msgpc.sys
+ 2008-04-13 18:56:32 35,072 —-a-w c:\windows\system32\drivers\msgpc.sys
- 2004-08-04 04:58:42 7,552 —-a-w c:\windows\system32\drivers\MSKSSRV.sys
+ 2008-04-13 18:39:52 7,552 —-a-w c:\windows\system32\drivers\mskssrv.sys
- 2004-08-04 04:58:40 5,376 —-a-w c:\windows\system32\drivers\MSPCLOCK.sys
+ 2008-04-13 18:39:50 5,376 —-a-w c:\windows\system32\drivers\mspclock.sys
- 2004-08-04 04:58:42 4,992 —-a-w c:\windows\system32\drivers\MSPQM.sys
+ 2008-04-13 18:39:51 4,992 —-a-w c:\windows\system32\drivers\mspqm.sys
- 2004-08-04 05:07:48 15,488 —-a-w c:\windows\system32\drivers\mssmbios.sys
+ 2008-04-13 18:36:46 15,488 —-a-w c:\windows\system32\drivers\mssmbios.sys
+ 2004-08-04 02:41:40 126,686 ——w c:\windows\system32\drivers\mtlmnt5.sys
+ 2004-08-04 02:41:38 1,309,184 ——w c:\windows\system32\drivers\mtlstrm.sys
+ 2004-08-04 02:29:38 452,736 ——w c:\windows\system32\drivers\mtxparhm.sys
- 2004-08-04 11:00:00 107,904 —-a-w c:\windows\system32\drivers\mup.sys
+ 2008-04-13 19:17:05 105,344 —-a-w c:\windows\system32\drivers\mup.sys
+ 2008-04-13 18:43:55 12,672 ——w c:\windows\system32\drivers\mutohpen.sys
- 2004-08-04 11:00:00 182,912 —-a-w c:\windows\system32\drivers\ndis.sys
+ 2008-04-13 19:20:37 182,656 —-a-w c:\windows\system32\drivers\ndis.sys
- 2004-08-04 11:00:00 9,600 —-a-w c:\windows\system32\drivers\ndistapi.sys
+ 2008-04-13 18:57:27 10,112 —-a-w c:\windows\system32\drivers\ndistapi.sys
- 2004-08-04 11:00:00 12,928 —-a-w c:\windows\system32\drivers\ndisuio.sys
+ 2008-04-13 18:55:58 14,592 —-a-w c:\windows\system32\drivers\ndisuio.sys
- 2004-08-04 11:00:00 91,776 —-a-w c:\windows\system32\drivers\ndiswan.sys
+ 2008-04-13 19:20:42 91,520 —-a-w c:\windows\system32\drivers\ndiswan.sys
- 2004-08-04 11:00:00 38,016 —-a-w c:\windows\system32\drivers\ndproxy.sys
+ 2008-04-13 18:57:29 40,576 —-a-w c:\windows\system32\drivers\ndproxy.sys
- 2004-08-04 11:00:00 34,560 —-a-w c:\windows\system32\drivers\netbios.sys
+ 2008-04-13 18:56:02 34,688 —-a-w c:\windows\system32\drivers\netbios.sys
- 2004-08-04 11:00:00 162,816 —-a-w c:\windows\system32\drivers\netbt.sys
+ 2008-04-13 19:21:00 162,816 —-a-w c:\windows\system32\drivers\netbt.sys
- 2004-08-04 11:00:00 61,824 —-a-w c:\windows\system32\drivers\nic1394.sys
+ 2008-04-13 18:51:25 61,824 —-a-w c:\windows\system32\drivers\nic1394.sys
- 2004-08-04 11:00:00 40,320 —-a-w c:\windows\system32\drivers\nmnt.sys
+ 2008-04-13 18:53:09 40,320 —-a-w c:\windows\system32\drivers\nmnt.sys
- 2004-08-04 11:00:00 30,848 —-a-w c:\windows\system32\drivers\npfs.sys
+ 2008-04-13 18:32:39 30,848 —-a-w c:\windows\system32\drivers\npfs.sys
- 2007-02-09 11:10:35 574,464 —-a-w c:\windows\system32\drivers\ntfs.sys
+ 2008-04-13 19:15:53 574,976 —-a-w c:\windows\system32\drivers\ntfs.sys
+ 2004-08-04 02:41:40 180,360 ——w c:\windows\system32\drivers\ntmtlfax.sys
- 2004-08-04 11:00:00 88,448 —-a-w c:\windows\system32\drivers\nwlnkipx.sys
+ 2008-04-13 18:56:06 88,320 —-a-w c:\windows\system32\drivers\nwlnkipx.sys
- 2006-10-13 10:23:15 163,584 —-a-w c:\windows\system32\drivers\nwrdr.sys
+ 2008-04-13 18:34:12 163,584 —-a-w c:\windows\system32\drivers\nwrdr.sys
- 2004-08-04 11:00:00 42,496 —-a-w c:\windows\system32\drivers\p3.sys
+ 2008-04-13 18:31:31 42,752 —-a-w c:\windows\system32\drivers\p3.sys
- 2004-08-04 11:00:00 80,128 —-a-w c:\windows\system32\drivers\parport.sys
+ 2008-04-13 18:40:10 80,128 —-a-w c:\windows\system32\drivers\parport.sys
- 2004-08-04 11:00:00 18,688 —-a-w c:\windows\system32\drivers\partmgr.sys
+ 2008-04-13 18:40:49 19,712 —-a-w c:\windows\system32\drivers\partmgr.sys
- 2004-08-04 05:07:48 68,224 —-a-w c:\windows\system32\drivers\pci.sys
+ 2008-04-13 18:36:44 68,224 —-a-w c:\windows\system32\drivers\pci.sys
- 2004-08-04 04:59:42 25,088 —-a-w c:\windows\system32\drivers\pciidex.sys
+ 2008-04-13 18:40:29 24,960 —-a-w c:\windows\system32\drivers\pciidex.sys
- 2004-08-04 05:07:48 119,936 —-a-w c:\windows\system32\drivers\pcmcia.sys
+ 2008-04-13 18:36:43 120,192 —-a-w c:\windows\system32\drivers\pcmcia.sys
- 2004-08-04 05:15:50 145,792 —-a-w c:\windows\system32\drivers\portcls.sys
+ 2008-04-13 19:19:41 146,048 —-a-w c:\windows\system32\drivers\portcls.sys
- 2004-08-04 11:00:00 35,328 —-a-w c:\windows\system32\drivers\processr.sys
+ 2008-04-13 18:31:30 35,840 —-a-w c:\windows\system32\drivers\processr.sys
- 2004-08-04 11:00:00 69,120 —-a-w c:\windows\system32\drivers\psched.sys
+ 2008-04-13 18:56:38 69,120 —-a-w c:\windows\system32\drivers\psched.sys
- 2004-08-04 11:00:00 51,328 —-a-w c:\windows\system32\drivers\rasl2tp.sys
+ 2008-04-13 19:19:43 51,328 —-a-w c:\windows\system32\drivers\rasl2tp.sys
- 2004-08-04 11:00:00 41,472 —-a-w c:\windows\system32\drivers\raspppoe.sys
+ 2008-04-13 18:57:32 41,472 —-a-w c:\windows\system32\drivers\raspppoe.sys
- 2004-08-04 11:00:00 48,384 —-a-w c:\windows\system32\drivers\raspptp.sys
+ 2008-04-13 19:19:48 48,384 —-a-w c:\windows\system32\drivers\raspptp.sys
- 2006-05-05 09:47:57 174,592 —-a-w c:\windows\system32\drivers\rdbss.sys
+ 2008-04-13 19:28:39 175,744 —-a-w c:\windows\system32\drivers\rdbss.sys
- 2004-08-04 05:01:16 196,864 —-a-w c:\windows\system32\drivers\rdpdr.sys
+ 2008-04-13 18:32:51 196,224 —-a-w c:\windows\system32\drivers\rdpdr.sys
- 2005-06-10 04:09:46 139,528 —-a-w c:\windows\system32\drivers\rdpwd.sys
+ 2008-04-14 00:13:22 139,656 —-a-w c:\windows\system32\drivers\rdpwd.sys
+ 2004-08-04 02:41:40 13,776 ——w c:\windows\system32\drivers\recagent.sys
- 2004-08-04 04:59:38 57,472 —-a-w c:\windows\system32\drivers\redbook.sys
+ 2008-04-13 18:40:27 57,600 —-a-w c:\windows\system32\drivers\redbook.sys
+ 2008-04-13 18:46:32 59,136 ——w c:\windows\system32\drivers\rfcomm.sys
- 2008-05-08 12:28:49 202,752 —-a-w c:\windows\system32\drivers\rmcast.sys
+ 2008-05-08 14:02:52 203,136 —-a-w c:\windows\system32\drivers\rmcast.sys
- 2004-08-04 11:00:00 30,080 —-a-w c:\windows\system32\drivers\rndismp.sys
+ 2008-04-13 18:56:49 30,592 —-a-w c:\windows\system32\drivers\rndismp.sys
+ 2008-04-13 18:56:49 30,592 ——w c:\windows\system32\drivers\rndismpx.sys
+ 2004-08-04 02:29:52 166,912 ——w c:\windows\system32\drivers\s3gnbm.sys
- 2004-08-04 11:00:00 96,256 —-a-w c:\windows\system32\drivers\scsiport.sys
+ 2008-04-13 18:40:30 96,384 —-a-w c:\windows\system32\drivers\scsiport.sys
- 2004-08-04 11:00:00 67,584 —-a-w c:\windows\system32\drivers\sdbus.sys
+ 2008-04-13 18:36:44 79,232 —-a-w c:\windows\system32\drivers\sdbus.sys
- 2004-08-04 11:00:00 15,488 —-a-w c:\windows\system32\drivers\serenum.sys
+ 2008-04-13 18:40:12 15,744 —-a-w c:\windows\system32\drivers\serenum.sys
- 2004-08-04 11:00:00 64,896 —-a-w c:\windows\system32\drivers\serial.sys
+ 2008-04-13 19:15:45 64,512 —-a-w c:\windows\system32\drivers\serial.sys
- 2004-08-04 11:00:00 11,136 —-a-w c:\windows\system32\drivers\sffdisk.sys
+ 2008-04-13 18:40:47 11,904 —-a-w c:\windows\system32\drivers\sffdisk.sys
+ 2008-04-13 18:40:48 10,240 ——w c:\windows\system32\drivers\sffp_mmc.sys
- 2004-08-04 11:00:00 10,240 —-a-w c:\windows\system32\drivers\sffp_sd.sys
+ 2008-04-13 18:40:47 11,008 —-a-w c:\windows\system32\drivers\sffp_sd.sys
- 2004-08-04 11:00:00 11,392 —-a-w c:\windows\system32\drivers\sfloppy.sys
+ 2008-04-13 18:40:48 11,392 —-a-w c:\windows\system32\drivers\sfloppy.sys
+ 2008-04-14 00:12:05 3,901 ——w c:\windows\system32\drivers\siint5.dll
- 2004-08-04 05:07:44 41,088 —-a-w c:\windows\system32\drivers\SISAGP.SYS
+ 2008-04-13 18:36:39 40,960 —-a-w c:\windows\system32\drivers\sisagp.sys
+ 2004-08-04 02:41:42 129,535 ——w c:\windows\system32\drivers\slnt7554.sys
+ 2004-08-04 02:41:44 404,990 ——w c:\windows\system32\drivers\slntamr.sys
+ 2004-08-04 02:41:46 95,424 ——w c:\windows\system32\drivers\slnthal.sys
+ 2004-08-04 02:41:46 13,240 ——w c:\windows\system32\drivers\slwdmsup.sys
+ 2008-04-13 18:36:34 5,888 ——w c:\windows\system32\drivers\smbali.sys
- 2004-08-04 11:00:00 25,472 —-a-w c:\windows\system32\drivers\sonydcam.sys
+ 2008-04-13 18:46:07 25,344 —-a-w c:\windows\system32\drivers\sonydcam.sys
- 2006-06-14 08:47:46 6,400 —-a-w c:\windows\system32\drivers\splitter.sys
+ 2008-04-13 18:45:07 6,272 —-a-w c:\windows\system32\drivers\splitter.sys
- 2004-08-04 11:00:00 73,472 —-a-w c:\windows\system32\drivers\sr.sys
+ 2008-04-13 18:36:52 73,472 —-a-w c:\windows\system32\drivers\sr.sys
- 2006-08-14 10:34:41 332,928 —-a-w c:\windows\system32\drivers\srv.sys
+ 2008-12-11 10:57:09 333,952 —-a-w c:\windows\system32\drivers\srv.sys
- 2004-08-04 11:00:00 48,640 —-a-w c:\windows\system32\drivers\stream.sys
+ 2008-04-13 18:45:15 49,408 —-a-w c:\windows\system32\drivers\stream.sys
- 2004-08-04 04:58:42 4,352 —-a-w c:\windows\system32\drivers\swenum.sys
+ 2008-04-13 18:39:53 4,352 —-a-w c:\windows\system32\drivers\swenum.sys
- 2001-08-17 20:00:52 54,272 —-a-w c:\windows\system32\drivers\swmidi.sys
+ 2008-04-13 18:45:09 56,576 —-a-w c:\windows\system32\drivers\swmidi.sys
- 2004-08-04 05:15:56 60,800 —-a-w c:\windows\system32\drivers\sysaudio.sys
+ 2008-04-13 19:15:55 60,800 —-a-w c:\windows\system32\drivers\sysaudio.sys
- 2004-08-04 11:00:00 14,976 —-a-w c:\windows\system32\drivers\tape.sys
+ 2008-04-13 18:40:50 14,976 —-a-w c:\windows\system32\drivers\tape.sys
- 2007-10-30 17:20:55 360,064 —-a-w c:\windows\system32\drivers\tcpip.sys
+ 2008-06-20 11:51:12 361,600 —-a-w c:\windows\system32\drivers\tcpip.sys
- 2006-08-16 09:37:30 225,664 —-a-w c:\windows\system32\drivers\tcpip6.sys
+ 2008-06-20 11:08:27 225,856 —-a-w c:\windows\system32\drivers\tcpip6.sys
- 2004-08-04 11:00:00 18,560 —-a-w c:\windows\system32\drivers\tdi.sys
+ 2008-04-13 19:00:05 19,072 —-a-w c:\windows\system32\drivers\tdi.sys
- 2004-08-04 11:00:00 12,040 —-a-w c:\windows\system32\drivers\tdpipe.sys
+ 2008-04-14 00:13:20 12,040 —-a-w c:\windows\system32\drivers\tdpipe.sys
- 2004-08-04 11:00:00 21,896 —-a-w c:\windows\system32\drivers\tdtcp.sys
+ 2008-04-14 00:13:21 21,896 —-a-w c:\windows\system32\drivers\tdtcp.sys
- 2004-08-04 07:01:08 40,840 —-a-w c:\windows\system32\drivers\termdd.sys
+ 2008-04-14 00:13:20 40,840 —-a-w c:\windows\system32\drivers\termdd.sys
- 2004-08-04 11:00:00 12,416 —-a-w c:\windows\system32\drivers\tunmp.sys
+ 2008-04-13 18:56:01 12,288 —-a-w c:\windows\system32\drivers\tunmp.sys
+ 2008-04-13 18:36:40 44,672 ——w c:\windows\system32\drivers\uagp35.sys
- 2004-08-04 11:00:00 66,176 —-a-w c:\windows\system32\drivers\udfs.sys
+ 2008-04-13 18:32:36 66,048 —-a-w c:\windows\system32\drivers\udfs.sys
- 2007-04-23 10:32:54 364,160 —-a-w c:\windows\system32\drivers\update.sys
+ 2008-04-13 18:39:46 384,768 —-a-w c:\windows\system32\drivers\update.sys
- 2004-08-04 11:00:00 12,672 —-a-w c:\windows\system32\drivers\usb8023.sys
+ 2008-04-13 18:56:49 12,800 —-a-w c:\windows\system32\drivers\usb8023.sys
+ 2008-04-13 18:56:49 12,800 ——w c:\windows\system32\drivers\usb8023x.sys
- 2004-08-04 11:00:00 23,808 —-a-w c:\windows\system32\drivers\usbcamd.sys
+ 2008-04-13 18:45:40 25,600 —-a-w c:\windows\system32\drivers\usbcamd.sys
- 2004-08-04 11:00:00 23,936 —-a-w c:\windows\system32\drivers\usbcamd2.sys
+ 2008-04-13 18:45:41 25,728 —-a-w c:\windows\system32\drivers\usbcamd2.sys
- 2004-08-04 03:08:48 31,616 —-a-w c:\windows\system32\drivers\usbccgp.sys
+ 2008-04-13 18:45:39 32,128 —-a-w c:\windows\system32\drivers\usbccgp.sys
- 2004-08-04 11:00:00 26,624 —-a-w c:\windows\system32\drivers\usbehci.sys
+ 2008-04-13 18:45:35 30,208 —-a-w c:\windows\system32\drivers\usbehci.sys
- 2004-08-04 05:08:44 57,600 —-a-w c:\windows\system32\drivers\usbhub.sys
+ 2008-04-13 18:45:37 59,520 —-a-w c:\windows\system32\drivers\usbhub.sys
- 2004-08-04 11:00:00 16,000 —-a-w c:\windows\system32\drivers\usbintel.sys
+ 2008-04-13 18:45:43 15,872 —-a-w c:\windows\system32\drivers\usbintel.sys
- 2004-08-04 05:08:44 142,976 —-a-w c:\windows\system32\drivers\usbport.sys
+ 2008-04-13 18:45:36 143,872 —-a-w c:\windows\system32\drivers\usbport.sys
- 2004-08-04 03:01:26 25,856 —-a-w c:\windows\system32\drivers\usbprint.sys
+ 2008-04-13 18:47:37 25,856 —-a-w c:\windows\system32\drivers\usbprint.sys
- 2004-08-04 02:58:46 15,104 —-a-w c:\windows\system32\drivers\usbscan.sys
+ 2008-04-13 18:45:34 15,104 —-a-w c:\windows\system32\drivers\usbscan.sys
- 2004-08-04 03:08:48 26,496 —-a-w c:\windows\system32\drivers\USBSTOR.SYS
+ 2008-04-13 18:45:38 26,368 —-a-w c:\windows\system32\drivers\usbstor.sys
- 2004-08-04 05:08:38 20,480 —-a-w c:\windows\system32\drivers\usbuhci.sys
+ 2008-04-13 18:45:35 20,608 —-a-w c:\windows\system32\drivers\usbuhci.sys
+ 2008-04-13 18:46:20 121,984 ——w c:\windows\system32\drivers\usbvideo.sys
+ 2008-04-14 00:12:08 11,325 ——w c:\windows\system32\drivers\vchnt5.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\drivers\vga.sys
+ 2008-04-13 18:44:40 20,992 —-a-w c:\windows\system32\drivers\vga.sys
- 2004-08-04 05:07:44 42,240 —-a-w c:\windows\system32\drivers\VIAAGP.SYS
+ 2008-04-13 18:36:40 42,240 —-a-w c:\windows\system32\drivers\viaagp.sys
- 2004-08-04 04:59:44 5,376 —-a-w c:\windows\system32\drivers\viaide.sys
+ 2008-04-13 18:40:31 5,376 —-a-w c:\windows\system32\drivers\viaide.sys
- 2004-08-04 11:00:00 79,744 —-a-w c:\windows\system32\drivers\videoprt.sys
+ 2008-04-13 18:44:40 81,664 —-a-w c:\windows\system32\drivers\videoprt.sys
- 2004-08-04 11:00:00 52,352 —-a-w c:\windows\system32\drivers\volsnap.sys
+ 2008-04-13 18:41:01 52,352 —-a-w c:\windows\system32\drivers\volsnap.sys
+ 2008-04-13 18:43:55 14,208 ——w c:\windows\system32\drivers\wacompen.sys
+ 2004-08-04 02:29:40 11,807 ——w c:\windows\system32\drivers\wadv07nt.sys
+ 2004-08-04 02:29:40 11,295 ——w c:\windows\system32\drivers\wadv08nt.sys
+ 2004-08-04 02:29:42 11,871 ——w c:\windows\system32\drivers\wadv09nt.sys
+ 2004-08-04 02:29:42 11,935 ——w c:\windows\system32\drivers\wadv11nt.sys
- 2004-08-04 11:00:00 34,560 —-a-w c:\windows\system32\drivers\wanarp.sys
+ 2008-04-13 18:57:21 34,560 —-a-w c:\windows\system32\drivers\wanarp.sys
+ 2004-08-04 02:29:46 22,271 ——w c:\windows\system32\drivers\watv06nt.sys
+ 2004-08-04 02:29:46 25,471 ——w c:\windows\system32\drivers\watv10nt.sys
- 2006-06-14 09:00:45 82,944 —-a-w c:\windows\system32\drivers\wdmaud.sys
+ 2008-04-13 19:17:18 83,072 —-a-w c:\windows\system32\drivers\wdmaud.sys
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\drprov.dll
+ 2008-04-14 00:11:52 14,336 —-a-w c:\windows\system32\drprov.dll
- 2004-08-04 11:00:00 16,384 —-a-w c:\windows\system32\ds32gt.dll
+ 2008-04-14 00:11:52 16,384 —-a-w c:\windows\system32\ds32gt.dll
- 2004-08-04 11:00:00 181,760 —-a-w c:\windows\system32\dsdmo.dll
+ 2008-04-14 00:11:52 181,248 —-a-w c:\windows\system32\dsdmo.dll
- 2004-08-04 11:00:00 71,680 —-a-w c:\windows\system32\dsdmoprp.dll
+ 2008-04-14 00:11:52 71,680 —-a-w c:\windows\system32\dsdmoprp.dll
- 2004-08-04 11:00:00 92,672 —-a-w c:\windows\system32\dskquota.dll
+ 2008-04-14 00:11:52 92,672 —-a-w c:\windows\system32\dskquota.dll
- 2004-08-04 11:00:00 144,384 —-a-w c:\windows\system32\dskquoui.dll
+ 2008-04-14 00:11:52 155,648 —-a-w c:\windows\system32\dskquoui.dll
- 2004-08-04 11:00:00 367,616 —-a-w c:\windows\system32\dsound.dll
+ 2008-04-14 00:11:52 367,616 —-a-w c:\windows\system32\dsound.dll
- 2004-08-04 11:00:00 1,294,336 —-a-w c:\windows\system32\dsound3d.dll
+ 2008-04-14 00:11:52 1,293,824 —-a-w c:\windows\system32\dsound3d.dll
- 2004-08-04 11:00:00 142,336 —-a-w c:\windows\system32\dsprop.dll
+ 2008-04-14 00:11:52 142,848 —-a-w c:\windows\system32\dsprop.dll
- 2004-08-04 11:00:00 4,096 —-a-w c:\windows\system32\dsprpres.dll
+ 2008-04-13 17:09:30 4,096 —-a-w c:\windows\system32\dsprpres.dll
- 2004-08-04 11:00:00 239,104 —-a-w c:\windows\system32\dsquery.dll
+ 2008-04-14 00:11:52 239,104 —-a-w c:\windows\system32\dsquery.dll
- 2004-08-04 11:00:00 51,200 —-a-w c:\windows\system32\dssec.dll
+ 2008-04-14 00:11:52 51,200 —-a-w c:\windows\system32\dssec.dll
- 2004-08-04 11:00:00 137,216 —-a-w c:\windows\system32\dssenh.dll
+ 2008-04-13 17:37:57 138,752 —-a-w c:\windows\system32\dssenh.dll
- 2004-08-04 11:00:00 113,152 —-a-w c:\windows\system32\dsuiext.dll
+ 2008-04-14 00:11:52 113,152 —-a-w c:\windows\system32\dsuiext.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\system32\dswave.dll
+ 2008-04-14 00:11:52 19,456 —-a-w c:\windows\system32\dswave.dll
- 2004-08-04 11:00:00 10,752 —-a-w c:\windows\system32\dumprep.exe
+ 2008-04-14 00:12:18 10,752 —-a-w c:\windows\system32\dumprep.exe
- 2004-08-04 11:00:00 304,128 —-a-w c:\windows\system32\duser.dll
+ 2008-04-14 00:11:52 304,128 —-a-w c:\windows\system32\duser.dll
- 2004-08-04 11:00:00 17,920 —-a-w c:\windows\system32\dvdupgrd.exe
+ 2008-04-14 00:12:18 17,920 —-a-w c:\windows\system32\dvdupgrd.exe
- 2004-08-04 11:00:00 180,224 —-a-w c:\windows\system32\dwwin.exe
+ 2008-04-14 00:12:18 180,224 —-a-w c:\windows\system32\dwwin.exe
- 2004-08-04 11:00:00 619,008 —-a-w c:\windows\system32\dx7vb.dll
+ 2008-04-14 00:11:52 619,008 —-a-w c:\windows\system32\dx7vb.dll
- 2004-08-04 11:00:00 1,227,264 —-a-w c:\windows\system32\dx8vb.dll
+ 2008-04-14 00:11:52 1,227,264 —-a-w c:\windows\system32\dx8vb.dll
- 2004-08-04 11:00:00 1,298,432 —-a-w c:\windows\system32\dxdiag.exe
+ 2008-04-14 00:12:18 1,298,432 —-a-w c:\windows\system32\dxdiag.exe
- 2004-08-04 11:00:00 2,113,536 —-a-w c:\windows\system32\dxdiagn.dll
+ 2008-04-14 00:11:52 2,113,536 —-a-w c:\windows\system32\dxdiagn.dll
- 2006-08-22 09:05:26 498,742 —-a-w c:\windows\system32\dxmasf.dll
+ 2008-04-14 00:11:52 498,742 —-a-w c:\windows\system32\dxmasf.dll
- 2008-04-23 04:16:28 347,136 —-a-w c:\windows\system32\dxtmsft.dll
+ 2008-12-20 23:15:12 347,136 —-a-w c:\windows\system32\dxtmsft.dll
- 2008-04-23 04:16:28 214,528 —-a-w c:\windows\system32\dxtrans.dll
+ 2008-12-20 23:15:13 214,528 —-a-w c:\windows\system32\dxtrans.dll
+ 2008-04-14 00:11:52 30,720 ——w c:\windows\system32\eapolqec.dll
+ 2008-04-14 00:11:52 184,832 ——w c:\windows\system32\eapp3hst.dll
+ 2008-04-14 00:11:52 126,976 ——w c:\windows\system32\eappcfg.dll
+ 2008-04-14 00:11:52 94,208 ——w c:\windows\system32\eappgnui.dll
+ 2008-04-14 00:11:52 180,224 ——w c:\windows\system32\eapphost.dll
+ 2008-04-14 00:11:52 40,960 ——w c:\windows\system32\eappprxy.dll
+ 2008-04-14 00:11:52 59,392 ——w c:\windows\system32\eapqec.dll
+ 2008-04-14 00:11:52 33,792 ——w c:\windows\system32\eapsvc.dll
- 2004-08-04 11:00:00 26,624 —-a-w c:\windows\system32\efsadu.dll
+ 2008-04-14 00:11:52 26,624 —-a-w c:\windows\system32\efsadu.dll
- 2004-08-04 11:00:00 183,296 —-a-w c:\windows\system32\els.dll
+ 2008-04-14 00:11:53 183,296 —-a-w c:\windows\system32\els.dll
+ 2008-04-14 00:11:57 28,672 ——w c:\windows\system32\en\microsoft.managementconsole.resources.dll
+ 2008-04-14 00:11:57 40,960 ——w c:\windows\system32\en\mmcex.resources.dll
+ 2008-04-14 00:11:57 6,656 ——w c:\windows\system32\en\mmcfxcommon.resources.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\system32\encapi.dll
+ 2008-04-14 00:11:53 20,480 —-a-w c:\windows\system32\encapi.dll
- 2004-08-04 11:00:00 186,368 —-a-w c:\windows\system32\encdec.dll
+ 2008-04-14 00:11:53 186,880 —-a-w c:\windows\system32\encdec.dll
- 2004-08-04 11:00:00 23,040 —-a-w c:\windows\system32\ersvc.dll
+ 2008-04-14 00:11:53 23,040 —-a-w c:\windows\system32\ersvc.dll
- 2005-07-26 04:39:45 243,200 —-a-w c:\windows\system32\es.dll
+ 2008-07-07 20:26:58 253,952 —-a-w c:\windows\system32\es.dll
- 2005-10-20 22:20:03 1,082,368 —-a-w c:\windows\system32\esent.dll
+ 2008-04-14 00:11:53 1,082,368 —-a-w c:\windows\system32\esent.dll
- 2004-08-04 11:00:00 193,024 —-a-w c:\windows\system32\eudcedit.exe
+ 2008-04-14 00:12:19 193,024 —-a-w c:\windows\system32\eudcedit.exe
- 2004-08-04 11:00:00 50,176 —-a-w c:\windows\system32\eventcreate.exe
+ 2008-04-14 00:12:19 50,688 —-a-w c:\windows\system32\eventcreate.exe
- 2004-08-04 11:00:00 55,808 —-a-w c:\windows\system32\eventlog.dll
+ 2008-04-14 00:11:53 56,320 —-a-w c:\windows\system32\eventlog.dll
- 2004-08-04 11:00:00 77,824 —-a-w c:\windows\system32\eventtriggers.exe
+ 2008-04-14 00:12:19 82,944 —-a-w c:\windows\system32\eventtriggers.exe
- 2004-08-04 11:00:00 380,957 —-a-w c:\windows\system32\expsrv.dll
+ 2008-04-14 00:11:53 380,445 —-a-w c:\windows\system32\expsrv.dll
- 2008-04-23 04:16:28 133,120 —-a-w c:\windows\system32\extmgr.dll
+ 2008-12-20 23:15:13 133,120 —-a-w c:\windows\system32\extmgr.dll
- 2004-08-04 11:00:00 45,568 —-a-w c:\windows\system32\extrac32.exe
+ 2008-04-14 00:12:19 24,064 —-a-w c:\windows\system32\extrac32.exe
- 2004-08-04 11:00:00 121,856 —-a-w c:\windows\system32\exts.dll
+ 2008-04-14 00:11:53 125,952 —-a-w c:\windows\system32\exts.dll
- 2004-08-04 11:00:00 80,384 —-a-w c:\windows\system32\faultrep.dll
+ 2008-04-14 00:11:53 80,384 —-a-w c:\windows\system32\faultrep.dll
+ 2008-04-14 00:12:20 20,992 ——w c:\windows\system32\faxpatch.exe
- 2004-08-04 11:00:00 117,760 —-a-w c:\windows\system32\fde.dll
+ 2008-04-14 00:11:53 124,928 —-a-w c:\windows\system32\fde.dll
- 2004-08-04 11:00:00 73,728 —-a-w c:\windows\system32\fdeploy.dll
+ 2008-04-14 00:11:53 73,728 —-a-w c:\windows\system32\fdeploy.dll
- 2004-08-04 11:00:00 21,504 —-a-w c:\windows\system32\feclient.dll
+ 2008-04-14 00:11:53 21,504 —-a-w c:\windows\system32\feclient.dll
- 2004-08-04 11:00:00 337,920 —-a-w c:\windows\system32\filemgmt.dll
+ 2008-04-14 00:11:53 337,920 —-a-w c:\windows\system32\filemgmt.dll
- 2004-08-04 11:00:00 27,136 —-a-w c:\windows\system32\findstr.exe
+ 2008-04-14 00:12:20 27,136 —-a-w c:\windows\system32\findstr.exe
- 2004-08-04 11:00:00 87,552 —-a-w c:\windows\system32\fldrclnr.dll
+ 2008-04-14 00:11:53 87,552 —-a-w c:\windows\system32\fldrclnr.dll
- 2006-08-21 12:21:06 16,896 —-a-w c:\windows\system32\fltlib.dll
+ 2008-04-14 00:11:53 16,896 —-a-w c:\windows\system32\fltlib.dll
- 2006-08-21 09:14:58 23,040 —-a-w c:\windows\system32\fltmc.exe
+ 2008-04-14 00:12:20 23,040 —-a-w c:\windows\system32\fltmc.exe
- 2004-03-11 22:13:13 1,146,320 —-a-w c:\windows\system32\FM20.DLL
+ 2007-06-06 14:53:34 1,195,888 —-a-w c:\windows\system32\FM20.DLL
- 2003-07-15 02:57:04 32,584 —-a-w c:\windows\system32\FM20ENU.DLL
+ 2007-03-22 23:17:04 35,440 —-a-w c:\windows\system32\FM20ENU.DLL
- 2009-01-10 16:21:09 359,344 —-a-w c:\windows\system32\FNTCACHE.DAT
+ 2009-04-07 11:55:24 359,344 —-a-w c:\windows\system32\FNTCACHE.DAT
- 2004-08-04 11:00:00 382,976 —-a-w c:\windows\system32\fontext.dll
+ 2008-04-14 00:11:53 382,976 —-a-w c:\windows\system32\fontext.dll
- 2005-10-17 21:14:45 80,896 —-a-w c:\windows\system32\fontsub.dll
+ 2008-04-14 00:11:53 80,896 —-a-w c:\windows\system32\fontsub.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\fontview.exe
+ 2008-04-14 00:12:20 20,992 —-a-w c:\windows\system32\fontview.exe
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\forcedos.exe
+ 2008-04-14 00:12:20 7,680 —-a-w c:\windows\system32\forcedos.exe
- 2004-08-04 11:00:00 25,600 —-a-w c:\windows\system32\format.com
+ 2008-04-14 00:12:42 29,696 —-a-w c:\windows\system32\format.com
- 2004-08-04 11:00:00 9,344 —-a-w c:\windows\system32\framebuf.dll
+ 2008-04-14 00:09:33 9,344 —-a-w c:\windows\system32\framebuf.dll
- 2004-08-04 11:00:00 193,024 —-a-w c:\windows\system32\fsquirt.exe
+ 2008-04-14 00:12:20 193,024 —-a-w c:\windows\system32\fsquirt.exe
- 2004-08-04 11:00:00 42,496 —-a-w c:\windows\system32\ftp.exe
+ 2008-04-14 00:12:20 42,496 —-a-w c:\windows\system32\ftp.exe
- 2004-08-04 11:00:00 60,416 —-a-w c:\windows\system32\fwcfg.dll
+ 2008-04-14 00:11:53 60,416 —-a-w c:\windows\system32\fwcfg.dll
- 2004-08-04 11:00:00 452,096 —-a-w c:\windows\system32\fxsapi.dll
+ 2008-04-14 00:11:53 451,584 —-a-w c:\windows\system32\fxsapi.dll
- 2004-08-04 11:00:00 143,360 —-a-w c:\windows\system32\fxsclnt.exe
+ 2008-04-14 00:12:21 142,848 —-a-w c:\windows\system32\fxsclnt.exe
- 2004-08-04 11:00:00 72,192 —-a-w c:\windows\system32\fxscom.dll
+ 2008-04-14 00:11:54 72,192 —-a-w c:\windows\system32\fxscom.dll
- 2004-08-04 11:00:00 285,184 —-a-w c:\windows\system32\fxscomex.dll
+ 2008-04-14 00:11:54 285,184 —-a-w c:\windows\system32\fxscomex.dll
- 2004-08-04 11:00:00 229,376 —-a-w c:\windows\system32\fxscover.exe
+ 2008-04-14 00:12:21 229,376 —-a-w c:\windows\system32\fxscover.exe
- 2004-08-04 11:00:00 27,136 —-a-w c:\windows\system32\fxsdrv.dll
+ 2008-04-14 00:11:54 26,624 —-a-w c:\windows\system32\fxsdrv.dll
- 2004-08-04 11:00:00 55,296 —-a-w c:\windows\system32\fxsevent.dll
+ 2008-04-14 00:11:54 55,296 —-a-w c:\windows\system32\fxsevent.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\fxsext32.dll
+ 2008-04-14 00:11:54 23,552 —-a-w c:\windows\system32\fxsext32.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\fxsmon.dll
+ 2008-04-14 00:11:54 23,552 —-a-w c:\windows\system32\fxsmon.dll
- 2004-08-04 11:00:00 8,704 —-a-w c:\windows\system32\fxsperf.dll
+ 2008-04-14 00:11:54 8,704 —-a-w c:\windows\system32\fxsperf.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\fxsres.dll
+ 2008-04-14 00:09:33 6,656 —-a-w c:\windows\system32\fxsres.dll
- 2004-08-04 11:00:00 562,176 —-a-w c:\windows\system32\fxsst.dll
+ 2008-04-14 00:11:54 562,176 —-a-w c:\windows\system32\fxsst.dll
- 2004-08-04 11:00:00 267,776 —-a-w c:\windows\system32\fxssvc.exe
+ 2008-04-14 00:12:21 267,776 —-a-w c:\windows\system32\fxssvc.exe
- 2004-08-04 11:00:00 246,272 —-a-w c:\windows\system32\fxst30.dll
+ 2008-04-14 00:11:54 246,272 —-a-w c:\windows\system32\fxst30.dll
- 2004-08-04 11:00:00 397,312 —-a-w c:\windows\system32\fxstiff.dll
+ 2008-04-14 00:11:54 397,312 —-a-w c:\windows\system32\fxstiff.dll
- 2004-08-04 11:00:00 154,112 —-a-w c:\windows\system32\fxsui.dll
+ 2008-04-14 00:11:54 154,112 —-a-w c:\windows\system32\fxsui.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\fxswzrd.dll
+ 2008-04-14 00:11:54 192,512 —-a-w c:\windows\system32\fxswzrd.dll
- 2004-08-04 11:00:00 400,384 —-a-w c:\windows\system32\fxsxp32.dll
+ 2008-04-14 00:11:54 400,384 —-a-w c:\windows\system32\fxsxp32.dll
- 2008-02-20 06:51:05 282,624 —-a-w c:\windows\system32\gdi32.dll
+ 2008-10-23 12:36:14 286,720 —-a-w c:\windows\system32\gdi32.dll
- 2004-08-04 11:00:00 55,296 —-a-w c:\windows\system32\getmac.exe
+ 2008-04-14 00:12:21 59,904 —-a-w c:\windows\system32\getmac.exe
- 2004-08-04 11:00:00 122,880 —-a-w c:\windows\system32\glu32.dll
+ 2008-04-14 00:11:54 122,880 —-a-w c:\windows\system32\glu32.dll
- 2004-08-04 11:00:00 566,784 —-a-w c:\windows\system32\gpedit.dll
+ 2008-04-14 00:09:35 566,784 —-a-w c:\windows\system32\gpedit.dll
- 2004-08-04 11:00:00 9,728 —-a-w c:\windows\system32\gpkrsrc.dll
+ 2006-12-31 01:26:44 9,728 —-a-w c:\windows\system32\gpkrsrc.dll
- 2004-08-04 11:00:00 119,808 —-a-w c:\windows\system32\gpresult.exe
+ 2008-04-14 00:12:21 120,832 —-a-w c:\windows\system32\gpresult.exe
- 2004-08-04 11:00:00 198,656 —-a-w c:\windows\system32\gptext.dll
+ 2008-04-14 00:11:54 199,680 —-a-w c:\windows\system32\gptext.dll
- 2004-08-04 11:00:00 39,424 —-a-w c:\windows\system32\grpconv.exe
+ 2008-04-14 00:12:21 39,424 —-a-w c:\windows\system32\grpconv.exe
- 2004-08-04 11:00:00 614,912 —-a-w c:\windows\system32\h323msp.dll
+ 2008-04-14 00:11:54 614,912 —-a-w c:\windows\system32\h323msp.dll
- 2004-08-04 04:59:08 81,280 —-a-w c:\windows\system32\hal.dll
+ 2008-04-13 18:31:27 81,152 —-a-w c:\windows\system32\HAL.DLL
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\hccoin.dll
+ 2008-04-14 00:11:54 7,168 —-a-w c:\windows\system32\hccoin.dll
- 2004-08-04 11:00:00 14,848 —-a-w c:\windows\system32\help.exe
+ 2008-04-14 00:12:21 15,872 —-a-w c:\windows\system32\help.exe
- 2005-05-27 02:04:27 41,472 —-a-w c:\windows\system32\hhsetup.dll
+ 2008-04-14 00:11:54 41,472 —-a-w c:\windows\system32\hhsetup.dll
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\hid.dll
+ 2008-04-14 00:11:54 20,992 —-a-w c:\windows\system32\hid.dll
- 2004-08-04 04:56:44 21,504 —-a-w c:\windows\system32\hidserv.dll
+ 2008-04-14 00:11:54 21,504 —-a-w c:\windows\system32\hidserv.dll
- 2006-07-21 08:24:43 72,704 —-a-w c:\windows\system32\hlink.dll
+ 2008-04-14 00:11:54 72,704 —-a-w c:\windows\system32\hlink.dll
- 2004-08-04 11:00:00 344,064 —-a-w c:\windows\system32\hnetcfg.dll
+ 2008-04-14 00:11:54 344,064 —-a-w c:\windows\system32\hnetcfg.dll
- 2004-08-04 11:00:00 330,752 —-a-w c:\windows\system32\hnetwiz.dll
+ 2008-04-14 00:11:54 330,752 —-a-w c:\windows\system32\hnetwiz.dll
- 2004-08-04 11:00:00 144,896 —-a-w c:\windows\system32\hotplug.dll
+ 2008-04-14 00:11:54 144,896 —-a-w c:\windows\system32\hotplug.dll
+ 2008-04-14 00:11:54 32,285 ——w c:\windows\system32\hsfcisp2.dll
- 2004-08-04 11:00:00 24,576 —-a-w c:\windows\system32\httpapi.dll
+ 2008-04-14 00:11:54 24,576 —-a-w c:\windows\system32\httpapi.dll
- 2004-08-04 11:00:00 41,984 —-a-w c:\windows\system32\htui.dll
+ 2008-04-14 00:11:54 41,984 —-a-w c:\windows\system32\htui.dll
- 2004-11-17 17:41:24 347,136 —-a-w c:\windows\system32\hypertrm.dll
+ 2008-04-14 00:11:54 347,136 —-a-w c:\windows\system32\hypertrm.dll
- 2004-08-04 11:00:00 119,808 —-a-w c:\windows\system32\iasrad.dll
+ 2008-04-14 00:11:54 119,808 —-a-w c:\windows\system32\iasrad.dll
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\icaapi.dll
+ 2008-04-14 00:11:54 11,264 —-a-w c:\windows\system32\icaapi.dll
- 2008-04-23 04:16:28 63,488 —-a-w c:\windows\system32\icardie.dll
+ 2008-12-20 23:15:13 63,488 —-a-w c:\windows\system32\icardie.dll
- 2004-08-04 11:00:00 80,384 —-a-w c:\windows\system32\iccvid.dll
+ 2008-04-14 00:11:54 80,384 —-a-w c:\windows\system32\iccvid.dll
- 2005-06-29 01:46:00 254,976 —-a-w c:\windows\system32\icm32.dll
+ 2008-04-14 00:11:54 254,976 —-a-w c:\windows\system32\icm32.dll
- 2004-08-04 11:00:00 3,584 —-a-w c:\windows\system32\icmp.dll
+ 2008-04-14 00:09:40 3,584 —-a-w c:\windows\system32\icmp.dll
- 2004-08-04 11:00:00 73,728 —-a-w c:\windows\system32\icwdial.dll
+ 2008-04-14 00:11:54 73,728 —-a-w c:\windows\system32\icwdial.dll
- 2004-08-04 11:00:00 65,536 —-a-w c:\windows\system32\icwphbk.dll
+ 2008-04-14 00:11:54 65,536 —-a-w c:\windows\system32\icwphbk.dll
- 2004-08-04 11:00:00 120,832 —-a-w c:\windows\system32\idq.dll
+ 2008-04-14 00:11:54 120,832 —-a-w c:\windows\system32\idq.dll
- 2008-04-22 07:39:58 70,656 —-a-w c:\windows\system32\ie4uinit.exe
+ 2008-12-19 09:10:15 70,656 —-a-w c:\windows\system32\ie4uinit.exe
- 2008-04-23 04:16:28 153,088 —-a-w c:\windows\system32\ieakeng.dll
+ 2008-12-20 23:15:14 153,088 —-a-w c:\windows\system32\ieakeng.dll
- 2008-04-23 04:16:28 230,400 —-a-w c:\windows\system32\ieaksie.dll
+ 2008-12-20 23:15:14 230,400 —-a-w c:\windows\system32\ieaksie.dll
- 2008-04-20 05:07:51 161,792 —-a-w c:\windows\system32\ieakui.dll
+ 2008-12-19 05:23:56 161,792 —-a-w c:\windows\system32\ieakui.dll
- 2008-04-23 04:16:28 383,488 —-a-w c:\windows\system32\ieapfltr.dll
+ 2008-12-20 23:15:15 383,488 —-a-w c:\windows\system32\ieapfltr.dll
- 2008-04-23 04:16:28 384,512 —-a-w c:\windows\system32\iedkcs32.dll
+ 2008-12-20 23:15:16 384,512 —-a-w c:\windows\system32\iedkcs32.dll
- 2006-10-17 17:06:00 78,336 —-a-w c:\windows\system32\ieencode.dll
+ 2008-04-14 00:11:54 81,920 —-a-w c:\windows\system32\ieencode.dll
- 2008-04-23 04:16:28 6,066,176 —-a-w c:\windows\system32\ieframe.dll
+ 2008-12-20 23:15:21 6,066,688 —-a-w c:\windows\system32\ieframe.dll
- 2008-04-23 04:16:28 44,544 —-a-w c:\windows\system32\iernonce.dll
+ 2008-12-20 23:15:21 44,544 —-a-w c:\windows\system32\iernonce.dll
- 2008-04-23 04:16:28 267,776 —-a-w c:\windows\system32\iertutil.dll
+ 2008-12-20 23:15:22 267,776 —-a-w c:\windows\system32\iertutil.dll
- 2008-04-22 07:39:58 13,824 —-a-w c:\windows\system32\ieudinit.exe
+ 2008-12-19 09:10:15 13,824 —-a-w c:\windows\system32\ieudinit.exe
- 2004-08-04 11:00:00 114,688 —-a-w c:\windows\system32\iexpress.exe
+ 2008-04-14 00:12:22 114,688 —-a-w c:\windows\system32\iexpress.exe
- 2004-08-04 11:00:00 135,680 —-a-w c:\windows\system32\ifmon.dll
+ 2008-04-14 00:11:54 135,680 —-a-w c:\windows\system32\ifmon.dll
- 2004-08-04 11:00:00 8,192 —-a-w c:\windows\system32\igmpagnt.dll
+ 2008-04-14 00:11:54 8,192 —-a-w c:\windows\system32\igmpagnt.dll
- 2004-08-04 11:00:00 81,920 —-a-w c:\windows\system32\ils.dll
+ 2008-04-14 00:11:54 81,920 —-a-w c:\windows\system32\ils.dll
- 2004-08-04 11:00:00 144,384 —-a-w c:\windows\system32\imagehlp.dll
+ 2008-04-14 00:11:54 144,384 —-a-w c:\windows\system32\imagehlp.dll
- 2004-08-04 11:00:00 150,016 —-a-w c:\windows\system32\imapi.exe
+ 2008-04-14 00:12:22 150,528 —-a-w c:\windows\system32\imapi.exe
- 2004-08-04 11:00:00 36,921 —-a-w c:\windows\system32\imeshare.dll
+ 2008-04-14 00:11:54 36,921 —-a-w c:\windows\system32\imeshare.dll
- 2004-08-04 11:00:00 110,080 —-a-w c:\windows\system32\imm32.dll
+ 2008-04-14 00:11:54 110,080 —-a-w c:\windows\system32\imm32.dll
- 2004-08-04 11:00:00 274,432 —-a-w c:\windows\system32\inetcfg.dll
+ 2008-04-14 00:11:54 274,432 —-a-w c:\windows\system32\inetcfg.dll
- 2007-08-21 06:15:44 683,520 —-a-w c:\windows\system32\inetcomm.dll
+ 2008-04-11 19:04:26 691,712 —-a-w c:\windows\system32\inetcomm.dll
- 2004-08-04 11:00:00 33,280 —-a-w c:\windows\system32\inetmib1.dll
+ 2008-04-14 00:11:55 32,768 —-a-w c:\windows\system32\inetmib1.dll
- 2004-08-04 11:00:00 75,264 —-a-w c:\windows\system32\inetpp.dll
+ 2008-04-14 00:11:55 75,264 —-a-w c:\windows\system32\inetpp.dll
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\inetppui.dll
+ 2008-04-14 00:11:55 15,872 —-a-w c:\windows\system32\inetppui.dll
- 2004-08-04 11:00:00 48,128 —-a-w c:\windows\system32\inetres.dll
+ 2008-04-13 16:22:12 48,128 —-a-w c:\windows\system32\inetres.dll
- 2004-08-04 11:00:00 29,696 —-a-w c:\windows\system32\inetsrv\admexs.dll
+ 2008-04-14 00:11:48 29,696 —-a-w c:\windows\system32\inetsrv\admexs.dll
- 2004-08-04 11:00:00 108,544 —-a-w c:\windows\system32\inetsrv\AppConf.dll
+ 2008-04-14 00:11:49 108,544 —-a-w c:\windows\system32\inetsrv\appconf.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\inetsrv\iisadmin.dll
+ 2008-04-14 00:11:54 25,088 —-a-w c:\windows\system32\inetsrv\iisadmin.dll
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\inetsrv\iisfecnv.dll
+ 2008-04-14 00:11:54 7,168 —-a-w c:\windows\system32\inetsrv\iisfecnv.dll
- 2004-08-04 11:00:00 257,024 —-a-w c:\windows\system32\inetsrv\infocomm.dll
+ 2008-04-14 00:11:55 257,024 —-a-w c:\windows\system32\inetsrv\infocomm.dll
- 2004-08-04 11:00:00 26,624 —-a-w c:\windows\system32\inetsrv\iscomlog.dll
+ 2008-04-14 00:11:55 26,624 —-a-w c:\windows\system32\inetsrv\iscomlog.dll
+ 2008-04-14 00:12:05 221,696 ——w c:\windows\system32\inetsrv\seo.dll
+ 2008-04-14 00:12:06 189,440 ——w c:\windows\system32\inetsrv\smtpadm.dll
+ 2008-04-14 00:12:06 2,134,528 ——w c:\windows\system32\inetsrv\smtpsnap.dll
- 2004-08-04 11:00:00 147,456 —-a-w c:\windows\system32\initpki.dll
+ 2008-04-14 00:11:55 147,456 —-a-w c:\windows\system32\initpki.dll
- 2004-08-04 11:00:00 123,392 —-a-w c:\windows\system32\input.dll
+ 2008-04-14 00:11:55 123,392 —-a-w c:\windows\system32\input.dll
- 2004-08-04 11:00:00 55,808 —-a-w c:\windows\system32\ipconfig.exe
+ 2008-04-14 00:12:22 55,808 —-a-w c:\windows\system32\ipconfig.exe
- 2006-05-19 12:59:41 94,720 —-a-w c:\windows\system32\iphlpapi.dll
+ 2008-04-14 00:11:55 94,720 —-a-w c:\windows\system32\iphlpapi.dll
- 2004-08-04 11:00:00 154,112 —-a-w c:\windows\system32\ipmontr.dll
+ 2008-04-14 00:11:55 161,280 —-a-w c:\windows\system32\ipmontr.dll
- 2004-08-04 11:00:00 331,264 —-a-w c:\windows\system32\ipnathlp.dll
+ 2008-04-14 00:11:55 331,264 —-a-w c:\windows\system32\ipnathlp.dll
- 2004-08-04 11:00:00 330,752 —-a-w c:\windows\system32\ippromon.dll
+ 2008-04-14 00:11:55 330,752 —-a-w c:\windows\system32\ippromon.dll
- 2004-08-04 11:00:00 169,984 —-a-w c:\windows\system32\iprtrmgr.dll
+ 2008-04-14 00:11:55 177,152 —-a-w c:\windows\system32\iprtrmgr.dll
- 2004-08-04 11:00:00 349,696 —-a-w c:\windows\system32\ipsecsnp.dll
+ 2008-04-14 00:11:55 349,696 —-a-w c:\windows\system32\ipsecsnp.dll
- 2004-08-04 11:00:00 182,784 —-a-w c:\windows\system32\ipsecsvc.dll
+ 2008-04-14 00:11:55 183,808 —-a-w c:\windows\system32\ipsecsvc.dll
- 2004-08-04 11:00:00 384,000 —-a-w c:\windows\system32\ipsmsnap.dll
+ 2008-04-14 00:11:55 384,000 —-a-w c:\windows\system32\ipsmsnap.dll
- 2004-08-04 11:00:00 53,248 —-a-w c:\windows\system32\ipv6.exe
+ 2008-04-14 00:12:23 53,248 —-a-w c:\windows\system32\ipv6.exe
- 2004-08-04 11:00:00 59,904 —-a-w c:\windows\system32\ipv6mon.dll
+ 2008-04-14 00:11:55 59,904 —-a-w c:\windows\system32\ipv6mon.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\ipxroute.exe
+ 2008-04-14 00:12:23 23,552 —-a-w c:\windows\system32\ipxroute.exe
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\ipxwan.dll
+ 2008-04-14 00:11:55 22,016 —-a-w c:\windows\system32\ipxwan.dll
- 2004-08-04 11:00:00 120,320 —-a-w c:\windows\system32\ir41_qc.dll
+ 2008-04-14 00:11:55 120,320 —-a-w c:\windows\system32\ir41_qc.dll
- 2004-08-04 11:00:00 338,432 —-a-w c:\windows\system32\ir41_qcx.dll
+ 2008-04-14 00:11:55 338,432 —-a-w c:\windows\system32\ir41_qcx.dll
- 2004-08-04 11:00:00 755,200 —-a-w c:\windows\system32\ir50_32.dll
+ 2008-04-14 00:11:55 755,200 —-a-w c:\windows\system32\ir50_32.dll
- 2002-12-20 16:40:58 200,192 —-a-w c:\windows\system32\ir50_qc.dll
+ 2008-04-14 00:11:55 200,192 —-a-w c:\windows\system32\ir50_qc.dll
- 2002-12-20 16:40:58 183,808 —-a-w c:\windows\system32\ir50_qcx.dll
+ 2008-04-14 00:11:55 183,808 —-a-w c:\windows\system32\ir50_qcx.dll
- 2004-08-04 11:00:00 81,920 —-a-w c:\windows\system32\isign32.dll
+ 2008-04-14 00:11:55 81,920 —-a-w c:\windows\system32\isign32.dll
- 2004-08-04 11:00:00 32,768 —-a-w c:\windows\system32\isrdbg32.dll
+ 2008-04-14 00:11:55 32,768 —-a-w c:\windows\system32\isrdbg32.dll
- 2005-05-27 02:04:27 155,136 —-a-w c:\windows\system32\itircl.dll
+ 2008-04-14 00:11:55 155,136 —-a-w c:\windows\system32\itircl.dll
- 2005-05-27 02:04:27 137,216 —-a-w c:\windows\system32\itss.dll
+ 2008-04-14 00:11:55 138,240 —-a-w c:\windows\system32\itss.dll
- 2004-08-04 11:00:00 54,272 —-a-w c:\windows\system32\ixsso.dll
+ 2008-04-14 00:11:55 54,272 —-a-w c:\windows\system32\ixsso.dll
- 2004-08-04 11:00:00 47,616 —-a-w c:\windows\system32\iyuv_32.dll
+ 2008-04-14 00:11:55 47,616 —-a-w c:\windows\system32\iyuv_32.dll
- 2006-06-01 18:47:07 163,840 —-a-w c:\windows\system32\jgdw400.dll
+ 2008-04-14 00:11:55 163,840 —-a-w c:\windows\system32\jgdw400.dll
- 2006-06-01 18:47:07 27,648 —-a-w c:\windows\system32\jgpl400.dll
+ 2008-04-14 00:11:55 27,648 —-a-w c:\windows\system32\jgpl400.dll
- 2006-10-17 17:00:00 491,520 —-a-w c:\windows\system32\jscript.dll
+ 2008-04-14 00:11:56 512,000 —-a-w c:\windows\system32\jscript.dll
- 2008-04-23 04:16:28 27,648 —-a-w c:\windows\system32\jsproxy.dll
+ 2008-12-20 23:15:23 27,648 —-a-w c:\windows\system32\jsproxy.dll
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\kbdfi1.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdfi1.dll
- 2004-08-04 11:00:00 6,144 —-a-w c:\windows\system32\kbdinbe1.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdinbe1.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\kbdinben.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdinben.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\kbdinmal.dll
+ 2008-04-14 00:09:55 6,656 —-a-w c:\windows\system32\kbdinmal.dll
- 2004-08-04 11:00:00 5,632 —-a-w c:\windows\system32\kbdmaori.dll
+ 2008-04-14 00:09:55 5,632 —-a-w c:\windows\system32\kbdmaori.dll
- 2004-08-04 11:00:00 6,144 —-a-w c:\windows\system32\kbdmlt47.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdmlt47.dll
- 2004-08-04 11:00:00 6,144 —-a-w c:\windows\system32\kbdmlt48.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdmlt48.dll
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\kbdnec.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdnec.dll
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\kbdno1.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdno1.dll
- 2004-08-04 11:00:00 7,680 —-a-w c:\windows\system32\kbdsmsfi.dll
+ 2008-04-14 00:09:55 7,680 —-a-w c:\windows\system32\kbdsmsfi.dll
- 2004-08-04 11:00:00 7,680 —-a-w c:\windows\system32\kbdsmsno.dll
+ 2008-04-14 00:09:55 7,680 —-a-w c:\windows\system32\kbdsmsno.dll
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\kbdukx.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdukx.dll
- 2004-08-04 11:00:00 7,424 —-a-w c:\windows\system32\kd1394.dll
+ 2008-04-13 18:31:35 7,424 —-a-w c:\windows\system32\kd1394.dll
- 2005-06-15 17:49:30 295,936 —-a-w c:\windows\system32\kerberos.dll
+ 2008-04-14 00:11:56 299,520 —-a-w c:\windows\system32\kerberos.dll
- 2007-04-16 15:52:53 984,576 —-a-w c:\windows\system32\kernel32.dll
+ 2008-04-14 00:11:56 989,696 —-a-w c:\windows\system32\kernel32.dll
- 2004-08-04 11:00:00 150,528 —-a-w c:\windows\system32\keymgr.dll
+ 2008-04-14 00:11:56 150,528 —-a-w c:\windows\system32\keymgr.dll
- 2004-08-04 06:56:44 4,096 —-a-w c:\windows\system32\ksuser.dll
+ 2008-04-14 00:11:56 4,096 —-a-w c:\windows\system32\ksuser.dll
- 2007-03-15 22:19:28 1,476,992 —-a-w c:\windows\system32\LegitCheckControl.dll
+ 2008-03-20 22:06:36 1,480,232 —-a-w c:\windows\system32\LegitCheckControl.dll
- 2004-08-04 11:00:00 423,936 —-a-w c:\windows\system32\licdll.dll
+ 2008-04-14 09:41:58 423,936 —-a-w c:\windows\system32\licdll.dll
- 2004-08-04 11:00:00 58,880 —-a-w c:\windows\system32\licwmi.dll
+ 2008-04-14 00:11:56 58,880 —-a-w c:\windows\system32\licwmi.dll
- 2005-09-01 01:41:53 19,968 —-a-w c:\windows\system32\linkinfo.dll
+ 2008-04-14 00:11:56 19,968 —-a-w c:\windows\system32\linkinfo.dll
- 2004-08-04 11:00:00 13,824 —-a-w c:\windows\system32\lmhsvc.dll
+ 2008-04-14 00:11:56 13,824 —-a-w c:\windows\system32\lmhsvc.dll
- 2004-08-04 11:00:00 399,872 —-a-w c:\windows\system32\lmrt.dll
+ 2008-04-14 00:11:56 399,872 —-a-w c:\windows\system32\lmrt.dll
- 2004-08-04 11:00:00 97,280 —-a-w c:\windows\system32\loadperf.dll
+ 2008-04-14 00:11:56 97,280 —-a-w c:\windows\system32\loadperf.dll
- 2004-08-04 11:00:00 221,696 —-a-w c:\windows\system32\localsec.dll
+ 2008-04-14 00:11:56 221,696 —-a-w c:\windows\system32\localsec.dll
- 2004-08-04 11:00:00 341,504 —-a-w c:\windows\system32\localspl.dll
+ 2008-04-14 00:11:56 343,040 —-a-w c:\windows\system32\localspl.dll
- 2004-08-04 11:00:00 11,776 —-a-w c:\windows\system32\localui.dll
+ 2008-04-14 00:11:56 11,776 —-a-w c:\windows\system32\localui.dll
- 2004-08-04 11:00:00 75,264 —-a-w c:\windows\system32\locator.exe
+ 2008-04-14 00:12:24 75,264 —-a-w c:\windows\system32\locator.exe
- 2004-08-04 11:00:00 59,392 —-a-w c:\windows\system32\logman.exe
+ 2008-04-14 00:12:24 59,392 —-a-w c:\windows\system32\logman.exe
- 2004-08-04 11:00:00 220,672 —-a-w c:\windows\system32\logon.scr
+ 2008-04-14 00:12:43 220,672 —-a-w c:\windows\system32\logon.scr
- 2004-08-04 11:00:00 514,560 —-a-w c:\windows\system32\logonui.exe
+ 2008-04-14 00:12:24 514,560 —-a-w c:\windows\system32\logonui.exe
- 2004-08-04 11:00:00 22,016 —-a-w c:\windows\system32\lpk.dll
+ 2008-04-14 00:11:56 22,016 —-a-w c:\windows\system32\lpk.dll
- 2004-08-04 11:00:00 10,240 —-a-w c:\windows\system32\lprhelp.dll
+ 2008-04-14 00:11:56 10,240 —-a-w c:\windows\system32\lprhelp.dll
- 2007-11-07 09:26:56 721,920 —-a-w c:\windows\system32\lsasrv.dll
+ 2008-04-14 00:11:56 728,064 —-a-w c:\windows\system32\lsasrv.dll
- 2004-08-04 11:00:00 13,312 —-a-w c:\windows\system32\lsass.exe
+ 2008-04-14 00:12:24 13,312 —-a-w c:\windows\system32\lsass.exe
- 2004-08-04 11:00:00 72,704 —-a-w c:\windows\system32\magnify.exe
+ 2008-04-14 00:12:24 72,704 —-a-w c:\windows\system32\magnify.exe
- 2004-08-04 11:00:00 85,504 —-a-w c:\windows\system32\makecab.exe
+ 2008-04-14 00:12:25 57,344 —-a-w c:\windows\system32\makecab.exe
- 2004-08-04 11:00:00 14,848 —-a-w c:\windows\system32\mcastmib.dll
+ 2008-04-14 00:11:56 14,336 —-a-w c:\windows\system32\mcastmib.dll
- 2004-08-04 11:00:00 84,480 —-a-w c:\windows\system32\mciavi32.dll
+ 2008-04-14 00:11:56 84,480 —-a-w c:\windows\system32\mciavi32.dll
- 2004-08-04 11:00:00 35,328 —-a-w c:\windows\system32\mciqtz32.dll
+ 2008-04-14 00:11:56 35,328 —-a-w c:\windows\system32\mciqtz32.dll
- 2004-08-04 11:00:00 23,040 —-a-w c:\windows\system32\mciseq.dll
+ 2008-04-14 00:11:56 23,040 —-a-w c:\windows\system32\mciseq.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\mciwave.dll
+ 2008-04-14 00:11:56 23,552 —-a-w c:\windows\system32\mciwave.dll
- 2004-03-22 22:17:05 24,816 —-a-w c:\windows\system32\mdimon.dll
+ 2007-04-09 17:23:54 28,040 —-a-w c:\windows\system32\mdimon.dll
- 2004-08-04 11:00:00 118,272 —-a-w c:\windows\system32\mdminst.dll
+ 2008-04-14 00:11:56 118,272 —-a-w c:\windows\system32\mdminst.dll
- 2007-03-08 15:36:28 40,960 —-a-w c:\windows\system32\mf3216.dll
+ 2008-04-14 00:11:56 40,960 —-a-w c:\windows\system32\mf3216.dll
- 2006-11-01 19:17:45 927,504 —-a-w c:\windows\system32\mfc40u.dll
+ 2008-04-14 00:11:56 927,504 —-a-w c:\windows\system32\mfc40u.dll
- 2004-08-04 11:00:00 1,028,096 —-a-w c:\windows\system32\mfc42.dll
+ 2008-04-14 00:11:56 1,028,096 —-a-w c:\windows\system32\mfc42.dll
- 2004-08-04 11:00:00 22,528 —-a-w c:\windows\system32\mfcsubs.dll
+ 2008-04-14 00:11:56 22,528 —-a-w c:\windows\system32\mfcsubs.dll
- 2004-08-04 11:00:00 14,848 —-a-w c:\windows\system32\mgmtapi.dll
+ 2008-04-14 00:11:56 14,848 —-a-w c:\windows\system32\mgmtapi.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\midimap.dll
+ 2008-04-14 00:11:57 18,944 —-a-w c:\windows\system32\midimap.dll
- 2004-08-04 11:00:00 60,928 —-a-w c:\windows\system32\miglibnt.dll
+ 2008-04-14 00:11:57 60,928 —-a-w c:\windows\system32\miglibnt.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\mimefilt.dll
+ 2008-04-14 00:11:57 29,696 —-a-w c:\windows\system32\mimefilt.dll
- 2004-08-04 11:00:00 586,240 —-a-w c:\windows\system32\mlang.dll
+ 2008-04-14 00:11:57 586,240 —-a-w c:\windows\system32\mlang.dll
- 2004-08-04 11:00:00 815,104 —-a-w c:\windows\system32\mmc.exe
+ 2008-04-14 00:12:25 1,414,656 —-a-w c:\windows\system32\mmc.exe
- 2004-08-04 11:00:00 70,656 —-a-w c:\windows\system32\mmcbase.dll
+ 2008-04-14 00:11:57 163,328 —-a-w c:\windows\system32\mmcbase.dll
- 2004-08-04 11:00:00 1,192,960 —-a-w c:\windows\system32\mmcndmgr.dll
+ 2008-04-14 00:11:57 1,872,896 —-a-w c:\windows\system32\mmcndmgr.dll
- 2004-08-04 11:00:00 50,688 —-a-w c:\windows\system32\mmcshext.dll
+ 2008-04-14 00:11:57 61,440 —-a-w c:\windows\system32\mmcshext.dll
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\mmfutil.dll
+ 2008-04-14 00:11:57 17,408 —-a-w c:\windows\system32\mmfutil.dll
- 2004-08-04 11:00:00 34,560 —-a-w c:\windows\system32\mnmdd.dll
+ 2008-04-14 00:11:57 34,560 —-a-w c:\windows\system32\mnmdd.dll
- 2004-08-04 11:00:00 32,768 —-a-w c:\windows\system32\mnmsrvc.exe
+ 2008-04-14 00:12:25 32,768 —-a-w c:\windows\system32\mnmsrvc.exe
- 2004-08-04 11:00:00 207,360 —-a-w c:\windows\system32\mobsync.dll
+ 2008-04-14 00:11:57 207,360 —-a-w c:\windows\system32\mobsync.dll
- 2004-08-04 11:00:00 143,360 —-a-w c:\windows\system32\mobsync.exe
+ 2008-04-14 00:12:26 143,360 —-a-w c:\windows\system32\mobsync.exe
- 2004-08-04 11:00:00 153,600 —-a-w c:\windows\system32\modemui.dll
+ 2008-04-14 00:11:57 153,600 —-a-w c:\windows\system32\modemui.dll
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\more.com
+ 2008-04-14 00:12:42 16,896 —-a-w c:\windows\system32\more.com
- 2004-08-04 11:00:00 216,064 —-a-w c:\windows\system32\moricons.dll
+ 2008-04-13 16:45:30 216,064 —-a-w c:\windows\system32\moricons.dll
- 2004-08-04 11:00:00 123,392 —-a-w c:\windows\system32\mplay32.exe
+ 2008-04-14 00:12:27 123,392 —-a-w c:\windows\system32\mplay32.exe
- 2004-08-04 11:00:00 59,904 —-a-w c:\windows\system32\mpr.dll
+ 2008-04-14 00:11:57 59,904 —-a-w c:\windows\system32\mpr.dll
- 2004-08-04 11:00:00 87,040 —-a-w c:\windows\system32\mprapi.dll
+ 2008-04-14 00:11:57 87,040 —-a-w c:\windows\system32\mprapi.dll
- 2004-08-04 11:00:00 49,152 —-a-w c:\windows\system32\mprdim.dll
+ 2008-04-14 00:11:57 53,248 —-a-w c:\windows\system32\mprdim.dll
- 2007-07-06 12:46:59 138,240 —-a-w c:\windows\system32\mqad.dll
+ 2008-04-14 00:11:57 138,240 —-a-w c:\windows\system32\mqad.dll
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\system32\mqbkup.exe
+ 2008-04-14 00:12:27 19,968 —-a-w c:\windows\system32\mqbkup.exe
- 2007-07-06 12:46:59 47,104 —-a-w c:\windows\system32\mqdscli.dll
+ 2008-04-14 00:11:57 47,616 —-a-w c:\windows\system32\mqdscli.dll
- 2007-07-06 12:46:59 16,896 —-a-w c:\windows\system32\mqise.dll
+ 2008-04-14 00:11:57 16,896 —-a-w c:\windows\system32\mqise.dll
- 2004-08-04 11:00:00 89,088 —-a-w c:\windows\system32\mqlogmgr.dll
+ 2008-04-14 00:11:57 89,088 —-a-w c:\windows\system32\mqlogmgr.dll
- 2004-08-04 11:00:00 225,280 —-a-w c:\windows\system32\mqoa.dll
+ 2008-04-14 00:11:57 225,280 —-a-w c:\windows\system32\mqoa.dll
- 2007-07-06 12:46:59 660,992 —-a-w c:\windows\system32\mqqm.dll
+ 2008-04-14 00:11:57 663,040 —-a-w c:\windows\system32\mqqm.dll
- 2007-07-06 12:46:59 177,152 —-a-w c:\windows\system32\mqrt.dll
+ 2008-04-14 00:11:57 177,152 —-a-w c:\windows\system32\mqrt.dll
- 2004-08-04 11:00:00 123,392 —-a-w c:\windows\system32\mqrtdep.dll
+ 2008-04-14 00:11:57 123,904 —-a-w c:\windows\system32\mqrtdep.dll
- 2007-07-06 12:46:59 95,744 —-a-w c:\windows\system32\mqsec.dll
+ 2008-04-14 00:11:57 95,744 —-a-w c:\windows\system32\mqsec.dll
- 2004-08-04 11:00:00 517,632 —-a-w c:\windows\system32\mqsnap.dll
+ 2008-04-14 00:11:58 517,632 —-a-w c:\windows\system32\mqsnap.dll
- 2004-08-04 11:00:00 4,608 —-a-w c:\windows\system32\mqsvc.exe
+ 2008-04-14 00:12:27 4,608 —-a-w c:\windows\system32\mqsvc.exe
- 2004-08-04 11:00:00 117,248 —-a-w c:\windows\system32\mqtgsvc.exe
+ 2008-04-14 00:12:27 117,248 —-a-w c:\windows\system32\mqtgsvc.exe
- 2004-08-04 11:00:00 186,880 —-a-w c:\windows\system32\mqtrig.dll
+ 2008-04-14 00:11:58 187,392 —-a-w c:\windows\system32\mqtrig.dll
- 2007-07-06 12:46:59 48,640 —-a-w c:\windows\system32\mqupgrd.dll
+ 2008-04-14 00:11:58 49,152 —-a-w c:\windows\system32\mqupgrd.dll
- 2007-07-06 12:46:59 471,552 —-a-w c:\windows\system32\mqutil.dll
+ 2008-04-14 00:11:58 471,552 —-a-w c:\windows\system32\mqutil.dll
+ 2009-02-25 16:55:00 24,768,960 —-a-w c:\windows\system32\MRT.exe
- 2004-08-04 11:00:00 71,680 —-a-w c:\windows\system32\msacm32.dll
+ 2008-04-14 00:11:58 71,680 —-a-w c:\windows\system32\msacm32.dll
- 2004-08-04 11:00:00 3,584 —-a-w c:\windows\system32\msafd.dll
+ 2008-04-14 00:10:06 3,584 —-a-w c:\windows\system32\msafd.dll
- 2004-08-04 11:00:00 86,016 —-a-w c:\windows\system32\msapsspc.dll
+ 2008-04-14 00:11:58 86,016 —-a-w c:\windows\system32\msapsspc.dll
- 2004-08-04 11:00:00 57,344 —-a-w c:\windows\system32\msasn1.dll
+ 2008-04-14 00:11:58 57,344 —-a-w c:\windows\system32\msasn1.dll
- 2005-06-29 01:46:00 74,240 —-a-w c:\windows\system32\mscms.dll
+ 2008-06-24 16:43:16 74,240 —-a-w c:\windows\system32\mscms.dll
- 2004-08-04 11:00:00 69,632 —-a-w c:\windows\system32\msconf.dll
+ 2008-04-14 00:11:58 69,632 —-a-w c:\windows\system32\msconf.dll
- 2004-08-04 11:00:00 12,288 —-a-w c:\windows\system32\mscpx32r.dLL
+ 2008-04-13 17:26:07 12,288 —-a-w c:\windows\system32\mscpx32r.dll
- 2004-08-04 11:00:00 36,864 —-a-w c:\windows\system32\mscpxl32.dLL
+ 2008-04-14 00:11:58 36,864 —-a-w c:\windows\system32\mscpxl32.dll
- 2008-02-26 11:59:50 294,912 —-a-w c:\windows\system32\msctf.dll
+ 2008-04-14 00:11:58 297,984 —-a-w c:\windows\system32\msctf.dll
- 2004-08-04 11:00:00 69,120 —-a-w c:\windows\system32\MSCTFP.dll
+ 2008-04-14 00:11:58 68,608 —-a-w c:\windows\system32\msctfp.dll
- 2004-08-04 11:00:00 118,784 —-a-w c:\windows\system32\msdadiag.dll
+ 2008-04-14 00:11:58 118,784 —-a-w c:\windows\system32\msdadiag.dll
- 2004-08-04 11:00:00 151,552 —-a-w c:\windows\system32\msdart.dll
+ 2008-04-14 00:11:59 151,552 —-a-w c:\windows\system32\msdart.dll
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\msdmo.dll
+ 2008-04-14 00:11:59 14,336 —-a-w c:\windows\system32\msdmo.dll
- 2004-08-04 11:00:00 6,144 —-a-w c:\windows\system32\msdtc.exe
+ 2008-04-14 00:12:27 6,144 —-a-w c:\windows\system32\msdtc.exe
- 2004-08-04 11:00:00 58,880 —-a-w c:\windows\system32\msdtclog.dll
+ 2008-04-14 00:11:59 58,880 —-a-w c:\windows\system32\msdtclog.dll
- 2006-03-01 19:42:42 426,496 —-a-w c:\windows\system32\msdtcprx.dll
+ 2008-04-14 00:11:59 427,008 —-a-w c:\windows\system32\msdtcprx.dll
- 2006-03-01 19:42:42 956,416 —-a-w c:\windows\system32\msdtctm.dll
+ 2008-04-14 00:11:59 956,928 —-a-w c:\windows\system32\msdtctm.dll
- 2006-03-01 19:42:42 161,280 —-a-w c:\windows\system32\msdtcuiu.dll
+ 2008-04-14 00:11:59 161,792 —-a-w c:\windows\system32\msdtcuiu.dll
- 2004-08-04 11:00:00 4,126 —-a-w c:\windows\system32\msdxmlc.dll
+ 2008-04-14 00:10:08 4,126 —-a-w c:\windows\system32\msdxmlc.dll
- 2008-04-23 04:16:28 459,264 —-a-w c:\windows\system32\msfeeds.dll
+ 2008-12-20 23:15:23 459,264 —-a-w c:\windows\system32\msfeeds.dll
- 2008-04-23 04:16:28 52,224 —-a-w c:\windows\system32\msfeedsbs.dll
+ 2008-12-20 23:15:24 52,224 —-a-w c:\windows\system32\msfeedsbs.dll
- 2006-11-27 14:54:06 539,136 —-a-w c:\windows\system32\msftedit.dll
+ 2008-04-14 00:11:59 539,136 —-a-w c:\windows\system32\msftedit.dll
- 2004-08-04 11:00:00 994,304 —-a-w c:\windows\system32\msgina.dll
+ 2008-04-14 00:11:59 997,376 —-a-w c:\windows\system32\msgina.dll
- 2004-08-04 11:00:00 33,792 —-a-w c:\windows\system32\msgsvc.dll
+ 2008-04-14 00:11:59 33,792 —-a-w c:\windows\system32\msgsvc.dll
- 2004-08-04 11:00:00 188,416 —-a-w c:\windows\system32\msh261.drv
+ 2008-04-14 00:12:45 188,416 —-a-w c:\windows\system32\msh261.drv
- 2004-08-04 11:00:00 294,912 —-a-w c:\windows\system32\msh263.drv
+ 2008-04-14 00:12:45 294,912 —-a-w c:\windows\system32\msh263.drv
- 2008-04-24 02:16:30 3,591,680 —-a-w c:\windows\system32\mshtml.dll
+ 2009-01-17 01:35:14 3,594,752 —-a-w c:\windows\system32\mshtml.dll
- 2008-04-23 04:16:28 478,208 —-a-w c:\windows\system32\mshtmled.dll
+ 2008-12-20 23:15:30 477,696 —-a-w c:\windows\system32\mshtmled.dll
- 2007-04-18 16:12:23 2,854,400 —-a-w c:\windows\system32\msi.dll
+ 2008-04-14 00:11:59 2,843,136 —-a-w c:\windows\system32\msi.dll
- 2004-08-04 11:00:00 51,712 —-a-w c:\windows\system32\msident.dll
+ 2008-04-14 00:11:59 51,712 —-a-w c:\windows\system32\msident.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\msidle.dll
+ 2008-04-14 00:11:59 6,656 —-a-w c:\windows\system32\msidle.dll
- 2004-08-04 11:00:00 248,832 —-a-w c:\windows\system32\msieftp.dll
+ 2008-04-14 00:11:59 248,832 —-a-w c:\windows\system32\msieftp.dll
- 2005-03-21 19:00:22 78,848 —-a-w c:\windows\system32\msiexec.exe
+ 2008-04-14 00:12:28 78,848 —-a-w c:\windows\system32\msiexec.exe
- 2005-03-21 19:00:22 271,360 —-a-w c:\windows\system32\msihnd.dll
+ 2008-04-14 00:11:59 271,360 —-a-w c:\windows\system32\msihnd.dll
- 2004-08-04 11:00:00 4,608 —-a-w c:\windows\system32\msimg32.dll
+ 2008-04-14 00:11:59 4,608 —-a-w c:\windows\system32\msimg32.dll
- 2005-03-21 19:00:22 884,736 —-a-w c:\windows\system32\msimsg.dll
+ 2008-04-13 15:39:43 884,736 —-a-w c:\windows\system32\msimsg.dll
- 2004-08-04 11:00:00 159,232 —-a-w c:\windows\system32\MSIMTF.dll
+ 2008-04-14 00:11:59 159,232 —-a-w c:\windows\system32\msimtf.dll
- 2005-03-21 19:00:22 15,360 —-a-w c:\windows\system32\msisip.dll
+ 2008-04-14 00:11:59 15,360 —-a-w c:\windows\system32\msisip.dll
- 2008-03-27 08:12:54 151,583 —-a-w c:\windows\system32\msjint40.dll
+ 2008-04-14 00:12:00 151,583 —-a-w c:\windows\system32\msjint40.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\mslbui.dll
+ 2008-04-14 00:12:00 25,088 —-a-w c:\windows\system32\mslbui.dll
- 2004-08-04 11:00:00 290,816 —-a-w c:\windows\system32\msnsspc.dll
+ 2008-04-14 00:12:00 290,816 —-a-w c:\windows\system32\msnsspc.dll
- 2004-08-04 11:00:00 252,928 —-a-w c:\windows\system32\msoeacct.dll
+ 2008-04-14 00:12:00 252,928 —-a-w c:\windows\system32\msoeacct.dll
- 2004-08-04 11:00:00 105,984 —-a-w c:\windows\system32\msoert2.dll
+ 2008-04-14 00:12:00 105,984 —-a-w c:\windows\system32\msoert2.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\system32\msorc32r.dll
+ 2008-04-13 17:24:14 20,480 —-a-w c:\windows\system32\msorc32r.dll
- 2004-08-04 11:00:00 143,360 —-a-w c:\windows\system32\msorcl32.dll
+ 2008-04-14 00:12:00 143,360 —-a-w c:\windows\system32\msorcl32.dll
- 2004-08-04 11:00:00 343,040 —-a-w c:\windows\system32\mspaint.exe
+ 2008-04-14 00:12:28 343,040 —-a-w c:\windows\system32\mspaint.exe
- 2004-08-04 11:00:00 30,208 —-a-w c:\windows\system32\mspatcha.dll
+ 2008-04-14 00:12:00 29,696 —-a-w c:\windows\system32\mspatcha.dll
- 2004-08-04 11:00:00 48,128 —-a-w c:\windows\system32\msprivs.dll
+ 2008-04-13 16:23:31 48,128 —-a-w c:\windows\system32\msprivs.dll
- 2008-04-23 04:16:28 193,024 —-a-w c:\windows\system32\msrating.dll
+ 2008-12-20 23:15:31 193,024 —-a-w c:\windows\system32\msrating.dll
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\msrle32.dll
+ 2008-04-14 00:12:00 11,264 —-a-w c:\windows\system32\msrle32.dll
- 2004-08-04 11:00:00 134,656 —-a-w c:\windows\system32\mssap.dll
+ 2008-04-14 00:12:00 134,656 —-a-w c:\windows\system32\mssap.dll
+ 2008-04-14 00:12:00 155,136 ——w c:\windows\system32\mssha.dll
+ 2008-04-13 18:14:58 76,800 ——w c:\windows\system32\msshavmsg.dll
- 2004-08-04 11:00:00 274,944 —-a-w c:\windows\system32\mstask.dll
+ 2008-04-14 00:12:00 274,944 —-a-w c:\windows\system32\mstask.dll
- 2008-04-23 04:16:28 671,232 —-a-w c:\windows\system32\mstime.dll
+ 2008-12-20 23:15:32 671,232 —-a-w c:\windows\system32\mstime.dll
- 2004-08-04 11:00:00 12,288 —-a-w c:\windows\system32\mstinit.exe
+ 2008-04-14 00:12:29 12,288 —-a-w c:\windows\system32\mstinit.exe
- 2004-08-04 11:00:00 115,712 —-a-w c:\windows\system32\mstlsapi.dll
+ 2008-04-14 00:12:00 116,224 —-a-w c:\windows\system32\mstlsapi.dll
- 2004-08-04 11:00:00 407,552 —-a-w c:\windows\system32\mstsc.exe
+ 2008-04-14 00:12:23 677,888 —-a-w c:\windows\system32\mstsc.exe
- 2004-08-04 11:00:00 655,360 —-a-w c:\windows\system32\mstscax.dll
+ 2008-04-14 00:11:56 2,061,824 —-a-w c:\windows\system32\mstscax.dll
- 2004-08-04 11:00:00 195,072 —-a-w c:\windows\system32\msutb.dll
+ 2008-04-14 00:12:00 195,072 —-a-w c:\windows\system32\msutb.dll
- 2004-08-04 11:00:00 129,536 —-a-w c:\windows\system32\msv1_0.dll
+ 2008-04-14 00:12:00 132,608 —-a-w c:\windows\system32\msv1_0.dll
- 2004-08-04 11:00:00 1,392,671 —-a-w c:\windows\system32\msvbvm60.dll
+ 2008-04-14 00:12:00 1,384,479 —-a-w c:\windows\system32\msvbvm60.dll
- 2004-08-04 11:00:00 54,784 —-a-w c:\windows\system32\msvcirt.dll
+ 2008-04-14 00:12:01 57,344 —-a-w c:\windows\system32\msvcirt.dll
- 2004-08-04 11:00:00 413,696 —-a-w c:\windows\system32\msvcp60.dll
+ 2008-04-14 00:12:01 413,696 —-a-w c:\windows\system32\msvcp60.dll
- 2004-08-04 11:00:00 343,040 —-a-w c:\windows\system32\msvcrt.dll
+ 2008-04-14 00:12:01 343,040 —-a-w c:\windows\system32\msvcrt.dll
- 2004-08-04 11:00:00 61,440 —-a-w c:\windows\system32\msvcrt40.dll
+ 2008-04-13 18:30:46 61,440 —-a-w c:\windows\system32\msvcrt40.dll
- 2004-08-04 11:00:00 120,832 —-a-w c:\windows\system32\msvfw32.dll
+ 2008-04-14 00:12:01 121,344 —-a-w c:\windows\system32\msvfw32.dll
- 2004-08-04 11:00:00 1,428,480 —-a-w c:\windows\system32\msvidctl.dll
+ 2008-04-14 00:12:01 1,428,992 —-a-w c:\windows\system32\msvidctl.dll
- 2004-08-04 11:00:00 72,704 —-a-w c:\windows\system32\msw3prt.dll
+ 2008-04-14 00:12:01 72,704 —-a-w c:\windows\system32\msw3prt.dll
- 2004-08-04 11:00:00 204,288 —-a-w c:\windows\system32\mswebdvd.dll
+ 2008-04-14 00:12:01 203,776 —-a-w c:\windows\system32\mswebdvd.dll
- 2004-08-04 11:00:00 245,248 —-a-w c:\windows\system32\mswsock.dll
+ 2008-06-20 17:46:57 245,248 —-a-w c:\windows\system32\mswsock.dll
- 2004-08-04 11:00:00 506,368 —-a-w c:\windows\system32\msxml.dll
+ 2008-04-14 00:12:01 506,368 —-a-w c:\windows\system32\msxml.dll
- 2004-08-04 11:00:00 701,440 —-a-w c:\windows\system32\msxml2.dll
+ 2008-04-14 00:12:01 701,440 —-a-w c:\windows\system32\msxml2.dll
- 2007-06-26 06:08:16 1,104,896 —-a-w c:\windows\system32\msxml3.dll
+ 2008-09-04 17:15:04 1,106,944 —-a-w c:\windows\system32\msxml3.dll
- 2007-05-08 20:03:04 1,275,392 —-a-w c:\windows\system32\msxml4.dll
+ 2008-09-30 20:43:34 1,286,152 —-a-w c:\windows\system32\msxml4.dll
+ 2008-04-14 00:12:01 1,306,624 ——w c:\windows\system32\msxml6.dll
+ 2008-04-13 17:27:18 79,872 ——w c:\windows\system32\msxml6r.dll
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\msyuv.dll
+ 2008-04-14 00:12:01 16,896 —-a-w c:\windows\system32\msyuv.dll
- 2006-03-01 19:42:42 66,560 —-a-w c:\windows\system32\mtxclu.dll
+ 2008-04-14 00:12:01 66,560 —-a-w c:\windows\system32\mtxclu.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\system32\mtxdm.dll
+ 2008-04-14 00:12:01 30,720 —-a-w c:\windows\system32\mtxdm.dll
- 2004-08-04 11:00:00 4,096 —-a-w c:\windows\system32\mtxex.dll
+ 2008-04-14 00:12:01 4,096 —-a-w c:\windows\system32\mtxex.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\mtxlegih.dll
+ 2008-04-14 00:12:01 34,304 —-a-w c:\windows\system32\mtxlegih.dll
- 2006-03-01 19:42:42 91,136 —-a-w c:\windows\system32\mtxoci.dll
+ 2008-04-14 00:12:01 91,648 —-a-w c:\windows\system32\mtxoci.dll
- 2004-08-04 11:00:00 393,728 —-a-w c:\windows\system32\mui\0401\xpob2res.dll
+ 2008-04-13 18:40:07 393,728 —-a-w c:\windows\system32\mui\0401\xpob2res.dll
- 2004-08-04 11:00:00 186,880 —-a-w c:\windows\system32\mui\0401\xpsp1res.dll
+ 2008-04-13 18:35:06 186,880 —-a-w c:\windows\system32\mui\0401\xpsp1res.dll
- 2004-08-04 11:00:00 2,869,248 —-a-w c:\windows\system32\mui\0401\xpsp2res.dll
+ 2008-04-13 18:35:49 2,869,248 —-a-w c:\windows\system32\mui\0401\xpsp2res.dll
+ 2008-04-13 18:39:02 656,896 ——w c:\windows\system32\mui\0401\xpsp3res.dll
- 2004-08-04 11:00:00 189,440 —-a-w c:\windows\system32\mui\0402\xpsp1res.dll
+ 2008-04-13 18:35:08 189,440 —-a-w c:\windows\system32\mui\0402\xpsp1res.dll
- 2004-08-04 11:00:00 212,480 —-a-w c:\windows\system32\mui\0404\xpob2res.dll
+ 2008-04-13 18:40:23 212,480 —-a-w c:\windows\system32\mui\0404\xpob2res.dll
- 2004-08-04 11:00:00 161,280 —-a-w c:\windows\system32\mui\0404\xpsp1res.dll
+ 2008-04-13 18:35:09 161,280 —-a-w c:\windows\system32\mui\0404\xpsp1res.dll
- 2004-08-04 11:00:00 477,696 —-a-w c:\windows\system32\mui\0404\xpsp2res.dll
+ 2008-04-13 18:36:10 477,696 —-a-w c:\windows\system32\mui\0404\xpsp2res.dll
+ 2008-04-13 18:39:13 327,680 ——w c:\windows\system32\mui\0404\xpsp3res.dll
- 2004-08-04 11:00:00 428,032 —-a-w c:\windows\system32\mui\0405\xpob2res.dll
+ 2008-04-13 18:40:24 428,032 —-a-w c:\windows\system32\mui\0405\xpob2res.dll
- 2004-08-04 11:00:00 188,928 —-a-w c:\windows\system32\mui\0405\xpsp1res.dll
+ 2008-04-13 18:35:09 188,928 —-a-w c:\windows\system32\mui\0405\xpsp1res.dll
- 2004-08-04 11:00:00 734,720 —-a-w c:\windows\system32\mui\0405\xpsp2res.dll
+ 2008-04-13 18:36:10 734,720 —-a-w c:\windows\system32\mui\0405\xpsp2res.dll
+ 2008-04-13 18:39:02 601,088 ——w c:\windows\system32\mui\0405\xpsp3res.dll
- 2004-08-04 11:00:00 418,816 —-a-w c:\windows\system32\mui\0406\xpob2res.dll
+ 2008-04-13 18:40:27 418,816 —-a-w c:\windows\system32\mui\0406\xpob2res.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\mui\0406\xpsp1res.dll
+ 2008-04-13 18:35:09 192,000 —-a-w c:\windows\system32\mui\0406\xpsp1res.dll
- 2004-08-04 11:00:00 742,912 —-a-w c:\windows\system32\mui\0406\xpsp2res.dll
+ 2008-04-13 18:36:10 742,912 —-a-w c:\windows\system32\mui\0406\xpsp2res.dll
+ 2008-04-13 18:39:12 605,696 ——w c:\windows\system32\mui\0406\xpsp3res.dll
- 2004-08-04 11:00:00 403,456 —-a-w c:\windows\system32\mui\0407\xpob2res.dll
+ 2008-04-13 18:40:34 403,456 —-a-w c:\windows\system32\mui\0407\xpob2res.dll
- 2004-08-04 11:00:00 199,680 —-a-w c:\windows\system32\mui\0407\xpsp1res.dll
+ 2008-04-13 18:35:21 199,680 —-a-w c:\windows\system32\mui\0407\xpsp1res.dll
- 2004-08-04 11:00:00 788,992 —-a-w c:\windows\system32\mui\0407\xpsp2res.dll
+ 2008-04-13 18:37:03 788,480 —-a-w c:\windows\system32\mui\0407\xpsp2res.dll
+ 2008-04-13 18:39:19 663,552 ——w c:\windows\system32\mui\0407\xpsp3res.dll
- 2004-08-04 11:00:00 419,328 —-a-w c:\windows\system32\mui\0408\xpob2res.dll
+ 2008-04-13 18:40:30 419,328 —-a-w c:\windows\system32\mui\0408\xpob2res.dll
- 2004-08-04 11:00:00 197,632 —-a-w c:\windows\system32\mui\0408\xpsp1res.dll
+ 2008-04-13 18:35:11 197,632 —-a-w c:\windows\system32\mui\0408\xpsp1res.dll
- 2004-08-04 11:00:00 801,280 —-a-w c:\windows\system32\mui\0408\xpsp2res.dll
+ 2008-04-13 18:36:35 801,280 —-a-w c:\windows\system32\mui\0408\xpsp2res.dll
+ 2008-04-13 18:39:12 679,936 ——w c:\windows\system32\mui\0408\xpsp3res.dll
- 2004-08-04 11:00:00 405,504 —-a-w c:\windows\system32\mui\040b\xpob2res.dll
+ 2008-04-13 18:40:32 405,504 —-a-w c:\windows\system32\mui\040b\xpob2res.dll
- 2004-08-04 11:00:00 186,368 —-a-w c:\windows\system32\mui\040b\xpsp1res.dll
+ 2008-04-13 18:35:11 186,368 —-a-w c:\windows\system32\mui\040b\xpsp1res.dll
- 2004-08-04 11:00:00 729,088 —-a-w c:\windows\system32\mui\040b\xpsp2res.dll
+ 2008-04-13 18:36:39 729,088 —-a-w c:\windows\system32\mui\040b\xpsp2res.dll
+ 2008-04-13 18:39:17 604,672 ——w c:\windows\system32\mui\040b\xpsp3res.dll
- 2004-08-04 11:00:00 410,624 —-a-w c:\windows\system32\mui\040C\xpob2res.dll
+ 2008-04-13 18:40:33 410,624 —-a-w c:\windows\system32\mui\040C\xpob2res.dll
- 2004-08-04 11:00:00 197,632 —-a-w c:\windows\system32\mui\040C\xpsp1res.dll
+ 2008-04-13 18:35:20 197,632 —-a-w c:\windows\system32\mui\040C\xpsp1res.dll
- 2004-08-04 11:00:00 793,600 —-a-w c:\windows\system32\mui\040C\xpsp2res.dll
+ 2008-04-13 18:36:55 793,088 —-a-w c:\windows\system32\mui\040C\xpsp2res.dll
+ 2008-04-13 18:39:20 663,040 ——w c:\windows\system32\mui\040C\xpsp3res.dll
- 2004-08-04 11:00:00 384,000 —-a-w c:\windows\system32\mui\040D\xpob2res.dll
+ 2008-04-13 18:40:32 384,000 —-a-w c:\windows\system32\mui\040D\xpob2res.dll
- 2004-08-04 11:00:00 181,760 —-a-w c:\windows\system32\mui\040D\xpsp1res.dll
+ 2008-04-13 18:35:21 181,760 —-a-w c:\windows\system32\mui\040D\xpsp1res.dll
- 2004-08-04 11:00:00 2,842,112 —-a-w c:\windows\system32\mui\040D\xpsp2res.dll
+ 2008-04-13 18:37:07 2,842,112 —-a-w c:\windows\system32\mui\040D\xpsp2res.dll
+ 2008-04-13 18:39:28 620,544 ——w c:\windows\system32\mui\040D\xpsp3res.dll
- 2004-08-04 11:00:00 434,176 —-a-w c:\windows\system32\mui\040e\xpob2res.dll
+ 2008-04-13 18:40:39 434,176 —-a-w c:\windows\system32\mui\040e\xpob2res.dll
- 2004-08-04 11:00:00 195,584 —-a-w c:\windows\system32\mui\040e\xpsp1res.dll
+ 2008-04-13 18:35:23 195,584 —-a-w c:\windows\system32\mui\040e\xpsp1res.dll
- 2004-08-04 11:00:00 769,536 —-a-w c:\windows\system32\mui\040e\xpsp2res.dll
+ 2008-04-13 18:37:22 769,536 —-a-w c:\windows\system32\mui\040e\xpsp2res.dll
+ 2008-04-13 18:39:28 645,120 ——w c:\windows\system32\mui\040e\xpsp3res.dll
- 2004-08-04 11:00:00 413,696 —-a-w c:\windows\system32\mui\0410\xpob2res.dll
+ 2008-04-13 18:40:39 413,696 —-a-w c:\windows\system32\mui\0410\xpob2res.dll
- 2004-08-04 11:00:00 195,072 —-a-w c:\windows\system32\mui\0410\xpsp1res.dll
+ 2008-04-13 18:35:23 195,072 —-a-w c:\windows\system32\mui\0410\xpsp1res.dll
- 2004-08-04 11:00:00 769,536 —-a-w c:\windows\system32\mui\0410\xpsp2res.dll
+ 2008-04-13 18:37:22 769,536 —-a-w c:\windows\system32\mui\0410\xpsp2res.dll
+ 2008-04-13 18:39:28 658,432 ——w c:\windows\system32\mui\0410\xpsp3res.dll
- 2004-08-04 11:00:00 275,456 —-a-w c:\windows\system32\mui\0411\xpob2res.dll
+ 2008-04-13 18:40:44 275,456 —-a-w c:\windows\system32\mui\0411\xpob2res.dll
- 2004-08-04 11:00:00 171,008 —-a-w c:\windows\system32\mui\0411\xpsp1res.dll
+ 2008-04-13 18:35:23 171,008 —-a-w c:\windows\system32\mui\0411\xpsp1res.dll
- 2004-08-04 11:00:00 562,688 —-a-w c:\windows\system32\mui\0411\xpsp2res.dll
+ 2008-04-13 18:37:34 562,688 —-a-w c:\windows\system32\mui\0411\xpsp2res.dll
+ 2008-04-13 18:39:49 412,672 ——w c:\windows\system32\mui\0411\xpsp3res.dll
- 2004-08-04 11:00:00 306,688 —-a-w c:\windows\system32\mui\0412\xpob2res.dll
+ 2008-04-13 18:40:48 306,688 —-a-w c:\windows\system32\mui\0412\xpob2res.dll
- 2004-08-04 11:00:00 167,936 —-a-w c:\windows\system32\mui\0412\xpsp1res.dll
+ 2008-04-13 18:35:23 167,936 —-a-w c:\windows\system32\mui\0412\xpsp1res.dll
- 2004-08-04 11:00:00 543,744 —-a-w c:\windows\system32\mui\0412\xpsp2res.dll
+ 2008-04-13 18:37:37 543,744 —-a-w c:\windows\system32\mui\0412\xpsp2res.dll
+ 2008-04-13 18:39:49 392,704 ——w c:\windows\system32\mui\0412\xpsp3res.dll
- 2004-08-04 11:00:00 401,920 —-a-w c:\windows\system32\mui\0413\xpob2res.dll
+ 2008-04-13 18:40:44 401,920 —-a-w c:\windows\system32\mui\0413\xpob2res.dll
- 2004-08-04 11:00:00 196,096 —-a-w c:\windows\system32\mui\0413\xpsp1res.dll
+ 2008-04-13 18:35:25 196,096 —-a-w c:\windows\system32\mui\0413\xpsp1res.dll
- 2004-08-04 11:00:00 769,024 —-a-w c:\windows\system32\mui\0413\xpsp2res.dll
+ 2008-04-13 18:38:00 769,024 —-a-w c:\windows\system32\mui\0413\xpsp2res.dll
+ 2008-04-13 18:39:47 645,120 ——w c:\windows\system32\mui\0413\xpsp3res.dll
- 2004-08-04 11:00:00 353,792 —-a-w c:\windows\system32\mui\0414\xpob2res.dll
+ 2008-04-13 18:40:44 353,792 —-a-w c:\windows\system32\mui\0414\xpob2res.dll
- 2004-08-04 11:00:00 189,440 —-a-w c:\windows\system32\mui\0414\xpsp1res.dll
+ 2008-04-13 18:35:25 189,440 —-a-w c:\windows\system32\mui\0414\xpsp1res.dll
- 2004-08-04 11:00:00 716,288 —-a-w c:\windows\system32\mui\0414\xpsp2res.dll
+ 2008-04-13 18:38:02 716,288 —-a-w c:\windows\system32\mui\0414\xpsp2res.dll
+ 2008-04-13 18:39:48 591,872 ——w c:\windows\system32\mui\0414\xpsp3res.dll
- 2004-08-04 11:00:00 391,680 —-a-w c:\windows\system32\mui\0415\xpob2res.dll
+ 2008-04-13 18:40:47 391,680 —-a-w c:\windows\system32\mui\0415\xpob2res.dll
- 2004-08-04 11:00:00 194,560 —-a-w c:\windows\system32\mui\0415\xpsp1res.dll
+ 2008-04-13 18:35:26 194,560 —-a-w c:\windows\system32\mui\0415\xpsp1res.dll
- 2004-08-04 11:00:00 759,808 —-a-w c:\windows\system32\mui\0415\xpsp2res.dll
+ 2008-04-13 18:38:05 759,808 —-a-w c:\windows\system32\mui\0415\xpsp2res.dll
+ 2008-04-13 18:39:52 641,024 ——w c:\windows\system32\mui\0415\xpsp3res.dll
- 2004-08-04 11:00:00 409,600 —-a-w c:\windows\system32\mui\0416\xpob2res.dll
+ 2008-04-13 18:40:10 409,600 —-a-w c:\windows\system32\mui\0416\xpob2res.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\mui\0416\xpsp1res.dll
+ 2008-04-13 18:35:08 192,512 —-a-w c:\windows\system32\mui\0416\xpsp1res.dll
- 2004-08-04 11:00:00 752,128 —-a-w c:\windows\system32\mui\0416\xpsp2res.dll
+ 2008-04-13 18:35:43 752,128 —-a-w c:\windows\system32\mui\0416\xpsp2res.dll
+ 2008-04-13 18:38:56 620,032 ——w c:\windows\system32\mui\0416\xpsp3res.dll
- 2004-08-04 11:00:00 190,464 —-a-w c:\windows\system32\mui\0418\xpsp1res.dll
+ 2008-04-13 18:35:27 190,464 —-a-w c:\windows\system32\mui\0418\xpsp1res.dll
- 2004-08-04 11:00:00 427,008 —-a-w c:\windows\system32\mui\0419\xpob2res.dll
+ 2008-04-13 18:40:50 427,008 —-a-w c:\windows\system32\mui\0419\xpob2res.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\mui\0419\xpsp1res.dll
+ 2008-04-13 18:35:27 192,512 —-a-w c:\windows\system32\mui\0419\xpsp1res.dll
- 2004-08-04 11:00:00 736,768 —-a-w c:\windows\system32\mui\0419\xpsp2res.dll
+ 2008-04-13 18:38:28 736,768 —-a-w c:\windows\system32\mui\0419\xpsp2res.dll
+ 2008-04-13 18:39:56 627,200 ——w c:\windows\system32\mui\0419\xpsp3res.dll
- 2004-08-04 11:00:00 188,928 —-a-w c:\windows\system32\mui\041a\xpsp1res.dll
+ 2008-04-13 18:35:21 188,928 —-a-w c:\windows\system32\mui\041a\xpsp1res.dll
- 2004-08-04 11:00:00 405,504 —-a-w c:\windows\system32\mui\041b\xpob2res.dll
+ 2008-04-13 18:40:52 405,504 —-a-w c:\windows\system32\mui\041b\xpob2res.dll
- 2004-08-04 11:00:00 193,024 —-a-w c:\windows\system32\mui\041b\xpsp1res.dll
+ 2008-04-13 18:35:28 192,512 —-a-w c:\windows\system32\mui\041b\xpsp1res.dll
- 2004-08-04 11:00:00 757,248 —-a-w c:\windows\system32\mui\041b\xpsp2res.dll
+ 2008-04-13 18:38:37 757,248 —-a-w c:\windows\system32\mui\041b\xpsp2res.dll
+ 2008-04-13 18:40:04 577,536 ——w c:\windows\system32\mui\041b\xpsp3res.dll
- 2004-08-04 11:00:00 363,520 —-a-w c:\windows\system32\mui\041D\xpob2res.dll
+ 2008-04-13 18:40:56 363,008 —-a-w c:\windows\system32\mui\041D\xpob2res.dll
- 2004-08-04 11:00:00 188,928 —-a-w c:\windows\system32\mui\041D\xpsp1res.dll
+ 2008-04-13 18:35:28 188,928 —-a-w c:\windows\system32\mui\041D\xpsp1res.dll
- 2004-08-04 11:00:00 724,992 —-a-w c:\windows\system32\mui\041D\xpsp2res.dll
+ 2008-04-13 18:38:47 724,480 —-a-w c:\windows\system32\mui\041D\xpsp2res.dll
+ 2008-04-13 18:40:05 590,848 ——w c:\windows\system32\mui\041D\xpsp3res.dll
- 2004-08-04 11:00:00 188,416 —-a-w c:\windows\system32\mui\041e\xpsp1res.dll
+ 2008-04-13 18:35:29 188,416 —-a-w c:\windows\system32\mui\041e\xpsp1res.dll
- 2004-08-04 11:00:00 390,144 —-a-w c:\windows\system32\mui\041f\xpob2res.dll
+ 2008-04-13 18:41:00 390,144 —-a-w c:\windows\system32\mui\041f\xpob2res.dll
- 2004-08-04 11:00:00 188,928 —-a-w c:\windows\system32\mui\041f\xpsp1res.dll
+ 2008-04-13 18:35:30 188,928 —-a-w c:\windows\system32\mui\041f\xpsp1res.dll
- 2004-08-04 11:00:00 724,480 —-a-w c:\windows\system32\mui\041f\xpsp2res.dll
+ 2008-04-13 18:38:51 724,480 —-a-w c:\windows\system32\mui\041f\xpsp2res.dll
+ 2008-04-13 18:40:09 592,896 ——w c:\windows\system32\mui\041f\xpsp3res.dll
- 2004-08-04 11:00:00 408,576 —-a-w c:\windows\system32\mui\0424\xpob2res.dll
+ 2008-04-13 18:40:56 408,576 —-a-w c:\windows\system32\mui\0424\xpob2res.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\mui\0424\xpsp1res.dll
+ 2008-04-13 18:35:28 192,512 —-a-w c:\windows\system32\mui\0424\xpsp1res.dll
- 2004-08-04 11:00:00 732,160 —-a-w c:\windows\system32\mui\0424\xpsp2res.dll
+ 2008-04-13 18:38:36 732,160 —-a-w c:\windows\system32\mui\0424\xpsp2res.dll
+ 2008-04-13 18:40:05 576,512 ——w c:\windows\system32\mui\0424\xpsp3res.dll
- 2004-08-04 11:00:00 187,392 —-a-w c:\windows\system32\mui\0425\xpsp1res.dll
+ 2008-04-13 18:35:11 186,880 —-a-w c:\windows\system32\mui\0425\xpsp1res.dll
- 2004-08-04 11:00:00 188,928 —-a-w c:\windows\system32\mui\0426\xpsp1res.dll
+ 2008-04-13 18:35:24 188,928 —-a-w c:\windows\system32\mui\0426\xpsp1res.dll
- 2004-08-04 11:00:00 189,952 —-a-w c:\windows\system32\mui\0427\xpsp1res.dll
+ 2008-04-13 18:35:24 189,952 —-a-w c:\windows\system32\mui\0427\xpsp1res.dll
- 2004-08-04 11:00:00 270,336 —-a-w c:\windows\system32\mui\0804\xpob2res.dll
+ 2008-04-13 18:40:24 270,336 —-a-w c:\windows\system32\mui\0804\xpob2res.dll
- 2004-08-04 11:00:00 161,280 —-a-w c:\windows\system32\mui\0804\xpsp1res.dll
+ 2008-04-13 18:35:06 161,280 —-a-w c:\windows\system32\mui\0804\xpsp1res.dll
- 2004-08-04 11:00:00 470,016 —-a-w c:\windows\system32\mui\0804\xpsp2res.dll
+ 2008-04-13 18:35:54 470,016 —-a-w c:\windows\system32\mui\0804\xpsp2res.dll
+ 2008-04-13 18:39:03 322,560 ——w c:\windows\system32\mui\0804\xpsp3res.dll
- 2004-08-04 11:00:00 435,200 —-a-w c:\windows\system32\mui\0816\xpob2res.dll
+ 2008-04-13 18:40:48 435,200 —-a-w c:\windows\system32\mui\0816\xpob2res.dll
- 2004-08-04 11:00:00 194,560 —-a-w c:\windows\system32\mui\0816\xpsp1res.dll
+ 2008-04-13 18:35:26 194,560 —-a-w c:\windows\system32\mui\0816\xpsp1res.dll
- 2004-08-04 11:00:00 751,616 —-a-w c:\windows\system32\mui\0816\xpsp2res.dll
+ 2008-04-13 18:38:06 751,616 —-a-w c:\windows\system32\mui\0816\xpsp2res.dll
+ 2008-04-13 18:39:53 639,488 ——w c:\windows\system32\mui\0816\xpsp3res.dll
- 2004-08-04 11:00:00 446,464 —-a-w c:\windows\system32\mui\0C0A\xpob2res.dll
+ 2008-04-13 18:40:30 446,464 —-a-w c:\windows\system32\mui\0C0A\xpob2res.dll
- 2004-08-04 11:00:00 196,096 —-a-w c:\windows\system32\mui\0C0A\xpsp1res.dll
+ 2008-04-13 18:35:11 196,096 —-a-w c:\windows\system32\mui\0C0A\xpsp1res.dll
- 2004-08-04 11:00:00 773,632 —-a-w c:\windows\system32\mui\0C0A\xpsp2res.dll
+ 2008-04-13 18:36:38 773,632 —-a-w c:\windows\system32\mui\0C0A\xpsp2res.dll
+ 2008-04-13 18:39:13 648,704 ——w c:\windows\system32\mui\0C0A\xpsp3res.dll
- 2004-08-04 11:00:00 90,624 —-a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 00:12:01 90,624 —-a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 00:12:01 30,208 ——w c:\windows\system32\napipsec.dll
+ 2008-04-14 00:12:01 193,024 ——w c:\windows\system32\napmontr.dll
+ 2008-04-14 00:12:29 176,640 ——w c:\windows\system32\napstat.exe
- 2004-08-04 11:00:00 53,760 —-a-w c:\windows\system32\narrator.exe
+ 2008-04-14 00:12:29 53,760 —-a-w c:\windows\system32\narrator.exe
- 2004-08-04 11:00:00 36,352 —-a-w c:\windows\system32\ncobjapi.dll
+ 2008-04-14 00:12:01 36,352 —-a-w c:\windows\system32\ncobjapi.dll
- 2004-08-04 11:00:00 17,920 —-a-w c:\windows\system32\nddeapi.dll
+ 2008-04-14 00:12:01 17,920 —-a-w c:\windows\system32\nddeapi.dll
- 2004-08-04 11:00:00 4,096 —-a-w c:\windows\system32\nddeapir.exe
+ 2008-04-14 00:12:29 4,096 —-a-w c:\windows\system32\nddeapir.exe
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\nddenb32.dll
+ 2008-04-14 00:12:01 18,944 —-a-w c:\windows\system32\nddenb32.dll
- 2004-08-04 11:00:00 42,496 —-a-w c:\windows\system32\net.exe
+ 2008-04-14 00:12:29 42,496 —-a-w c:\windows\system32\net.exe
- 2004-08-04 11:00:00 124,928 —-a-w c:\windows\system32\net1.exe
+ 2008-04-14 00:12:29 124,928 —-a-w c:\windows\system32\net1.exe
- 2008-10-15 16:57:55 332,800 —-a-w c:\windows\system32\netapi32.dll
+ 2008-10-15 16:34:24 337,408 —-a-w c:\windows\system32\netapi32.dll
- 2004-08-04 11:00:00 622,080 —-a-w c:\windows\system32\netcfgx.dll
+ 2008-04-14 00:12:01 622,592 —-a-w c:\windows\system32\netcfgx.dll
- 2004-08-04 11:00:00 111,104 —-a-w c:\windows\system32\netdde.exe
+ 2008-04-14 00:12:29 111,104 —-a-w c:\windows\system32\netdde.exe
- 2004-08-04 11:00:00 139,264 —-a-w c:\windows\system32\netid.dll
+ 2008-04-14 00:12:01 139,264 —-a-w c:\windows\system32\netid.dll
- 2004-08-04 11:00:00 407,040 —-a-w c:\windows\system32\netlogon.dll
+ 2008-04-14 00:12:01 407,040 —-a-w c:\windows\system32\netlogon.dll
- 2005-08-22 18:29:46 197,632 —-a-w c:\windows\system32\netman.dll
+ 2008-04-14 00:12:01 198,144 —-a-w c:\windows\system32\netman.dll
- 2004-08-04 11:00:00 875,008 —-a-w c:\windows\system32\netplwiz.dll
+ 2008-04-14 00:12:01 875,008 —-a-w c:\windows\system32\netplwiz.dll
- 2004-08-04 11:00:00 12,288 —-a-w c:\windows\system32\netrap.dll
+ 2008-04-14 00:12:01 11,776 —-a-w c:\windows\system32\netrap.dll
- 2004-08-04 11:00:00 329,728 —-a-w c:\windows\system32\netsetup.exe
+ 2008-04-14 00:16:51 329,728 —-a-w c:\windows\system32\netsetup.exe
- 2004-08-04 11:00:00 86,016 —-a-w c:\windows\system32\netsh.exe
+ 2008-04-14 00:12:29 86,016 —-a-w c:\windows\system32\netsh.exe
- 2004-08-04 11:00:00 1,708,032 —-a-w c:\windows\system32\netshell.dll
+ 2008-04-14 00:12:02 1,703,936 —-a-w c:\windows\system32\netshell.dll
- 2004-08-04 11:00:00 36,864 —-a-w c:\windows\system32\netstat.exe
+ 2008-04-14 00:12:29 36,864 —-a-w c:\windows\system32\netstat.exe
- 2004-08-04 11:00:00 80,896 —-a-w c:\windows\system32\netui0.dll
+ 2008-04-14 00:12:02 80,896 —-a-w c:\windows\system32\netui0.dll
- 2004-08-04 11:00:00 245,760 —-a-w c:\windows\system32\netui1.dll
+ 2008-04-14 00:12:02 245,760 —-a-w c:\windows\system32\netui1.dll
- 2004-08-04 11:00:00 248,832 —-a-w c:\windows\system32\newdev.dll
+ 2008-04-14 00:12:02 247,808 —-a-w c:\windows\system32\newdev.dll
- 2004-08-04 11:00:00 103,936 —-a-w c:\windows\system32\nlhtml.dll
+ 2008-04-14 00:12:02 98,304 —-a-w c:\windows\system32\nlhtml.dll
- 2004-08-04 11:00:00 28,672 —-a-w c:\windows\system32\nmmkcert.dll
+ 2008-04-14 00:12:02 28,672 —-a-w c:\windows\system32\nmmkcert.dll
- 2004-08-04 11:00:00 69,120 —-a-w c:\windows\system32\notepad.exe
+ 2008-04-14 00:12:29 69,120 —-a-w c:\windows\system32\notepad.exe
- 2004-08-04 11:00:00 57,344 —-a-w c:\windows\system32\npp\ndisnpp.dll
+ 2008-04-14 00:12:01 57,344 —-a-w c:\windows\system32\npp\ndisnpp.dll
- 2004-08-04 11:00:00 15,360 —-a-w c:\windows\system32\npp\nppagent.exe
+ 2008-04-14 00:12:29 15,360 —-a-w c:\windows\system32\npp\nppagent.exe
- 2004-08-04 11:00:00 54,784 —-a-w c:\windows\system32\npptools.dll
+ 2008-04-14 00:12:02 54,784 —-a-w c:\windows\system32\npptools.dll
- 2004-08-04 11:00:00 76,800 —-a-w c:\windows\system32\nslookup.exe
+ 2008-04-14 00:12:29 76,800 —-a-w c:\windows\system32\nslookup.exe
- 2004-08-04 11:00:00 1,200,128 —-a-w c:\windows\system32\ntbackup.exe
+ 2008-04-14 00:12:30 1,200,640 —-a-w c:\windows\system32\ntbackup.exe
- 2004-08-04 11:00:00 708,096 —-a-w c:\windows\system32\ntdll.dll
+ 2008-04-14 00:11:24 706,048 —-a-w c:\windows\system32\ntdll.dll
- 2004-08-04 11:00:00 67,072 —-a-w c:\windows\system32\ntdsapi.dll
+ 2008-04-14 00:12:02 67,072 —-a-w c:\windows\system32\ntdsapi.dll
- 2007-02-28 08:38:55 2,057,600 —-a-w c:\windows\system32\ntkrnlpa.exe
+ 2008-08-14 09:33:16 2,066,048 —-a-w c:\windows\system32\ntkrnlpa.exe
- 2004-08-04 11:00:00 43,520 —-a-w c:\windows\system32\ntlanman.dll
+ 2008-04-14 00:12:02 44,032 —-a-w c:\windows\system32\ntlanman.dll
- 2004-08-04 11:00:00 8,192 —-a-w c:\windows\system32\ntlsapi.dll
+ 2008-04-14 00:12:02 8,192 —-a-w c:\windows\system32\ntlsapi.dll
- 2004-08-04 11:00:00 118,784 —-a-w c:\windows\system32\ntmarta.dll
+ 2008-04-14 00:12:02 118,784 —-a-w c:\windows\system32\ntmarta.dll
- 2004-08-04 11:00:00 40,960 —-a-w c:\windows\system32\ntmsapi.dll
+ 2008-04-14 00:12:02 40,960 —-a-w c:\windows\system32\ntmsapi.dll
- 2004-08-04 11:00:00 179,712 —-a-w c:\windows\system32\ntmsdba.dll
+ 2008-04-14 00:12:02 179,200 —-a-w c:\windows\system32\ntmsdba.dll
- 2004-08-04 11:00:00 488,448 —-a-w c:\windows\system32\ntmsmgr.dll
+ 2008-04-14 00:12:02 488,448 —-a-w c:\windows\system32\ntmsmgr.dll
- 2004-08-04 11:00:00 435,200 —-a-w c:\windows\system32\ntmssvc.dll
+ 2008-04-14 00:12:02 435,200 —-a-w c:\windows\system32\ntmssvc.dll
- 2007-02-28 09:10:57 2,180,352 —-a-w c:\windows\system32\ntoskrnl.exe
+ 2008-08-14 10:11:02 2,189,184 —-a-w c:\windows\system32\ntoskrnl.exe
- 2004-08-04 11:00:00 91,136 —-a-w c:\windows\system32\ntprint.dll
+ 2008-04-14 00:12:02 91,136 —-a-w c:\windows\system32\ntprint.dll
- 2004-08-04 11:00:00 143,872 —-a-w c:\windows\system32\ntshrui.dll
+ 2008-04-14 00:12:02 143,360 —-a-w c:\windows\system32\ntshrui.dll
- 2004-08-04 11:00:00 419,840 —-a-w c:\windows\system32\ntvdm.exe
+ 2008-04-14 00:12:30 420,864 —-a-w c:\windows\system32\ntvdm.exe
- 2004-08-04 11:00:00 13,312 —-a-w c:\windows\system32\ntvdmd.dll
+ 2008-04-14 00:12:02 15,360 —-a-w c:\windows\system32\ntvdmd.dll
- 2004-08-04 06:56:46 4,274,816 —-a-w c:\windows\system32\nv4_disp.dll
+ 2008-04-14 00:12:02 4,274,816 —-a-w c:\windows\system32\nv4_disp.dll
- 2006-10-13 12:35:12 64,000 —-a-w c:\windows\system32\nwapi32.dll
+ 2008-04-14 00:12:02 64,000 —-a-w c:\windows\system32\nwapi32.dll
- 2006-10-13 12:35:12 142,336 —-a-w c:\windows\system32\nwprovau.dll
+ 2008-04-14 00:12:02 142,336 —-a-w c:\windows\system32\nwprovau.dll
- 2006-10-13 12:35:12 65,536 —-a-w c:\windows\system32\nwwks.dll
+ 2008-04-14 00:12:02 65,536 —-a-w c:\windows\system32\nwwks.dll
- 2004-08-04 11:00:00 266,752 —-a-w c:\windows\system32\oakley.dll
+ 2008-04-14 00:12:02 270,336 —-a-w c:\windows\system32\oakley.dll
- 2004-08-04 11:00:00 285,696 —-a-w c:\windows\system32\objsel.dll
+ 2008-04-14 00:12:02 286,208 —-a-w c:\windows\system32\objsel.dll
- 2008-04-23 04:16:28 102,912 —-a-w c:\windows\system32\occache.dll
+ 2008-12-20 23:15:38 102,912 —-a-w c:\windows\system32\occache.dll
- 2004-08-04 11:00:00 60,928 —-a-w c:\windows\system32\ocmanage.dll
+ 2008-04-14 00:12:02 67,584 —-a-w c:\windows\system32\ocmanage.dll
- 2004-08-04 11:00:00 249,856 —-a-w c:\windows\system32\odbc32.dll
+ 2008-04-14 00:12:02 249,856 —-a-w c:\windows\system32\odbc32.dll
- 2004-08-04 11:00:00 16,384 —-a-w c:\windows\system32\odbc32gt.dll
+ 2008-04-14 00:12:02 16,384 —-a-w c:\windows\system32\odbc32gt.dll
- 2004-08-04 11:00:00 32,768 —-a-w c:\windows\system32\odbcad32.exe
+ 2008-04-14 00:12:30 32,768 —-a-w c:\windows\system32\odbcad32.exe
- 2004-08-04 11:00:00 24,576 —-a-w c:\windows\system32\odbcbcp.dll
+ 2008-04-14 00:12:02 24,576 —-a-w c:\windows\system32\odbcbcp.dll
- 2004-08-04 11:00:00 135,168 —-a-w c:\windows\system32\odbcconf.dll
+ 2008-04-14 00:12:02 135,168 —-a-w c:\windows\system32\odbcconf.dll
- 2004-08-04 11:00:00 69,632 —-a-w c:\windows\system32\odbcconf.exe
+ 2008-04-14 00:12:30 69,632 —-a-w c:\windows\system32\odbcconf.exe
- 2004-08-04 11:00:00 106,496 —-a-w c:\windows\system32\odbccp32.dll
+ 2008-04-14 00:12:02 106,496 —-a-w c:\windows\system32\odbccp32.dll
- 2004-08-04 11:00:00 65,536 —-a-w c:\windows\system32\odbccr32.dll
+ 2008-04-14 00:12:02 65,536 —-a-w c:\windows\system32\odbccr32.dll
- 2004-08-04 11:00:00 65,536 —-a-w c:\windows\system32\odbccu32.dll
+ 2008-04-14 00:12:02 65,536 —-a-w c:\windows\system32\odbccu32.dll
- 2004-08-04 11:00:00 94,208 —-a-w c:\windows\system32\odbcint.dll
+ 2008-04-13 17:26:05 94,208 —-a-w c:\windows\system32\odbcint.dll
- 2004-08-04 11:00:00 53,279 —-a-w c:\windows\system32\odbcji32.dll
+ 2008-04-14 00:10:31 53,279 —-a-w c:\windows\system32\odbcji32.dll
- 2004-08-04 11:00:00 278,559 —-a-w c:\windows\system32\odbcjt32.dll
+ 2008-04-14 00:12:02 278,559 —-a-w c:\windows\system32\odbcjt32.dll
- 2004-08-04 11:00:00 12,288 —-a-w c:\windows\system32\odbcp32r.dll
+ 2008-04-13 17:26:05 12,288 —-a-w c:\windows\system32\odbcp32r.dll
- 2004-08-04 11:00:00 147,456 —-a-w c:\windows\system32\odbctrac.dll
+ 2008-04-14 00:12:02 147,456 —-a-w c:\windows\system32\odbctrac.dll
- 2004-08-04 11:00:00 20,511 —-a-w c:\windows\system32\oddbse32.dll
+ 2008-04-14 00:12:02 20,511 —-a-w c:\windows\system32\oddbse32.dll
- 2004-08-04 11:00:00 20,510 —-a-w c:\windows\system32\odexl32.dll
+ 2008-04-14 00:12:02 20,510 —-a-w c:\windows\system32\odexl32.dll
- 2004-08-04 11:00:00 20,510 —-a-w c:\windows\system32\odfox32.dll
+ 2008-04-14 00:12:02 20,510 —-a-w c:\windows\system32\odfox32.dll
- 2004-08-04 11:00:00 20,510 —-a-w c:\windows\system32\odpdx32.dll
+ 2008-04-14 00:12:02 20,510 —-a-w c:\windows\system32\odpdx32.dll
- 2004-08-04 11:00:00 20,511 —-a-w c:\windows\system32\odtext32.dll
+ 2008-04-14 00:12:02 20,511 —-a-w c:\windows\system32\odtext32.dll
- 2004-08-04 11:00:00 120,832 —-a-w c:\windows\system32\offfilt.dll
+ 2008-04-14 00:12:02 192,000 —-a-w c:\windows\system32\offfilt.dll
- 2005-07-26 04:39:48 1,285,120 —-a-w c:\windows\system32\ole32.dll
+ 2008-04-14 00:12:02 1,287,168 —-a-w c:\windows\system32\ole32.dll
- 2007-12-04 18:38:13 550,912 —-a-w c:\windows\system32\oleaut32.dll
+ 2008-04-14 00:12:02 551,936 —-a-w c:\windows\system32\oleaut32.dll
- 2005-07-26 04:39:48 74,752 —-a-w c:\windows\system32\olecli32.dll
+ 2008-04-14 00:12:02 74,752 —-a-w c:\windows\system32\olecli32.dll
- 2005-07-26 04:39:49 37,888 —-a-w c:\windows\system32\olecnv32.dll
+ 2008-04-14 00:12:02 37,376 —-a-w c:\windows\system32\olecnv32.dll
- 2006-10-16 16:15:00 122,880 —-a-w c:\windows\system32\oledlg.dll
+ 2008-04-14 00:12:02 122,880 —-a-w c:\windows\system32\oledlg.dll
- 2004-08-04 11:00:00 107,008 —-a-w c:\windows\system32\oleprn.dll
+ 2008-04-14 00:12:02 107,008 —-a-w c:\windows\system32\oleprn.dll
- 2004-08-04 11:00:00 83,456 —-a-w c:\windows\system32\olepro32.dll
+ 2008-04-14 00:12:02 84,992 —-a-w c:\windows\system32\olepro32.dll
+ 2008-04-14 00:12:02 144,384 ——w c:\windows\system32\onex.dll
- 2004-08-04 11:00:00 122,368 —-a-w c:\windows\system32\oobe\msobcomm.dll
+ 2008-04-14 00:12:00 122,368 —-a-w c:\windows\system32\oobe\msobcomm.dll
- 2004-08-04 11:00:00 16,384 —-a-w c:\windows\system32\oobe\msobdl.dll
+ 2008-04-14 00:12:00 16,384 —-a-w c:\windows\system32\oobe\msobdl.dll
- 2004-08-04 11:00:00 561,664 —-a-w c:\windows\system32\oobe\msobmain.dll
+ 2008-04-14 00:12:00 565,248 —-a-w c:\windows\system32\oobe\msobmain.dll
- 2004-08-04 11:00:00 30,720 —-a-w c:\windows\system32\oobe\msobshel.dll
+ 2008-04-14 00:12:00 30,720 —-a-w c:\windows\system32\oobe\msobshel.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\oobe\msobweb.dll
+ 2008-04-14 00:12:00 19,456 —-a-w c:\windows\system32\oobe\msobweb.dll
- 2004-08-04 11:00:00 28,160 —-a-w c:\windows\system32\oobe\msoobe.exe
+ 2008-04-14 00:12:28 29,184 —-a-w c:\windows\system32\oobe\msoobe.exe
- 2004-08-04 11:00:00 51,200 —-a-w c:\windows\system32\oobe\oobebaln.exe
+ 2008-04-14 00:12:31 51,200 —-a-w c:\windows\system32\oobe\oobebaln.exe
- 2004-08-04 11:00:00 67,584 —-a-w c:\windows\system32\openfiles.exe
+ 2008-04-14 00:12:31 67,584 —-a-w c:\windows\system32\openfiles.exe
- 2004-08-04 11:00:00 713,728 —-a-w c:\windows\system32\opengl32.dll
+ 2008-04-14 00:12:02 713,728 —-a-w c:\windows\system32\opengl32.dll
- 2004-08-04 11:00:00 215,552 —-a-w c:\windows\system32\osk.exe
+ 2008-04-14 00:12:31 215,552 —-a-w c:\windows\system32\osk.exe
- 2004-08-04 11:00:00 67,584 —-a-w c:\windows\system32\osuninst.dll
+ 2008-04-14 00:12:02 67,584 —-a-w c:\windows\system32\osuninst.dll
- 2004-08-04 11:00:00 116,224 —-a-w c:\windows\system32\p2p.dll
+ 2008-04-14 00:12:02 153,600 —-a-w c:\windows\system32\p2p.dll
- 2004-08-04 11:00:00 86,016 —-a-w c:\windows\system32\p2pgasvc.dll
+ 2008-04-14 00:12:02 105,472 —-a-w c:\windows\system32\p2pgasvc.dll
- 2004-08-04 11:00:00 312,320 —-a-w c:\windows\system32\p2pgraph.dll
+ 2008-04-14 00:12:02 313,856 —-a-w c:\windows\system32\p2pgraph.dll
- 2004-08-04 11:00:00 88,064 —-a-w c:\windows\system32\p2pnetsh.dll
+ 2008-04-14 00:12:02 115,712 —-a-w c:\windows\system32\p2pnetsh.dll
- 2004-08-04 11:00:00 526,848 —-a-w c:\windows\system32\p2psvc.dll
+ 2008-04-14 00:12:02 554,496 —-a-w c:\windows\system32\p2psvc.dll
- 2004-08-04 11:00:00 58,368 —-a-w c:\windows\system32\packager.exe
+ 2008-04-14 00:12:31 58,368 —-a-w c:\windows\system32\packager.exe
- 2004-08-04 11:00:00 62,976 —-a-w c:\windows\system32\pautoenr.dll
+ 2008-04-14 00:12:02 67,584 —-a-w c:\windows\system32\pautoenr.dll
- 2004-08-04 11:00:00 283,648 —-a-w c:\windows\system32\pdh.dll
+ 2008-04-14 00:12:02 284,160 —-a-w c:\windows\system32\pdh.dll
- 2009-03-21 15:56:58 54,682 —-a-w c:\windows\system32\perfc009.dat
+ 2009-04-07 11:59:19 54,682 —-a-w c:\windows\system32\perfc009.dat
- 2004-08-04 11:00:00 39,936 —-a-w c:\windows\system32\perfctrs.dll
+ 2008-04-14 00:12:02 39,936 —-a-w c:\windows\system32\perfctrs.dll
- 2004-08-04 11:00:00 26,624 —-a-w c:\windows\system32\perfdisk.dll
+ 2008-04-14 00:12:02 26,624 —-a-w c:\windows\system32\perfdisk.dll
- 2009-03-21 15:56:58 385,164 —-a-w c:\windows\system32\perfh009.dat
+ 2009-04-07 11:59:19 385,164 —-a-w c:\windows\system32\perfh009.dat
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\perfmon.exe
+ 2008-04-14 00:12:31 15,872 —-a-w c:\windows\system32\perfmon.exe
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\perfnet.dll
+ 2008-04-14 00:12:02 17,920 —-a-w c:\windows\system32\perfnet.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\perfos.dll
+ 2008-04-14 00:12:02 25,088 —-a-w c:\windows\system32\perfos.dll
- 2004-08-04 11:00:00 34,816 —-a-w c:\windows\system32\perfproc.dll
+ 2008-04-14 00:12:02 34,816 —-a-w c:\windows\system32\perfproc.dll
+ 2008-04-14 00:12:02 412,160 ——w c:\windows\system32\photometadatahandler.dll
- 2004-08-04 11:00:00 176,128 —-a-w c:\windows\system32\photowiz.dll
+ 2008-04-14 00:12:02 176,128 —-a-w c:\windows\system32\photowiz.dll
- 2004-08-04 11:00:00 35,328 —-a-w c:\windows\system32\pid.dll
+ 2008-04-14 00:12:02 35,328 —-a-w c:\windows\system32\pid.dll
- 2004-08-04 11:00:00 24,064 —-a-w c:\windows\system32\pidgen.dll
+ 2008-04-14 00:11:09 24,064 —-a-w c:\windows\system32\pidgen.dll
- 2004-08-04 11:00:00 17,920 —-a-w c:\windows\system32\ping.exe
+ 2008-04-14 00:12:31 17,920 —-a-w c:\windows\system32\ping.exe
- 2004-08-04 11:00:00 15,360 —-a-w c:\windows\system32\pjlmon.dll
+ 2008-04-14 00:12:02 15,360 —-a-w c:\windows\system32\pjlmon.dll
- 2008-04-23 04:16:28 44,544 —-a-w c:\windows\system32\pngfilt.dll
+ 2008-12-20 23:15:38 44,544 —-a-w c:\windows\system32\pngfilt.dll
- 2004-08-04 11:00:00 48,640 —-a-w c:\windows\system32\pnrpnsp.dll
+ 2008-04-14 00:12:02 58,880 —-a-w c:\windows\system32\pnrpnsp.dll
- 2004-08-04 11:00:00 105,472 —-a-w c:\windows\system32\polstore.dll
+ 2008-04-14 00:12:02 105,472 —-a-w c:\windows\system32\polstore.dll
- 2004-08-04 11:00:00 49,152 —-a-w c:\windows\system32\powercfg.exe
+ 2008-04-14 00:12:31 49,152 —-a-w c:\windows\system32\powercfg.exe
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\powrprof.dll
+ 2008-04-14 00:12:03 17,408 —-a-w c:\windows\system32\powrprof.dll
- 2004-08-04 11:00:00 560,640 —-a-w c:\windows\system32\printui.dll
+ 2008-04-14 00:12:03 560,640 —-a-w c:\windows\system32\printui.dll
- 2004-08-04 11:00:00 27,648 —-a-w c:\windows\system32\profmap.dll
+ 2008-04-14 00:12:03 27,648 —-a-w c:\windows\system32\profmap.dll
- 2004-08-04 11:00:00 109,568 —-a-w c:\windows\system32\progman.exe
+ 2008-04-14 00:12:31 109,568 —-a-w c:\windows\system32\progman.exe
- 2004-08-04 11:00:00 50,176 —-a-w c:\windows\system32\proquota.exe
+ 2008-04-14 00:12:32 50,176 —-a-w c:\windows\system32\proquota.exe
- 2004-08-04 11:00:00 9,216 —-a-w c:\windows\system32\proxycfg.exe
+ 2008-04-14 00:12:32 9,216 —-a-w c:\windows\system32\proxycfg.exe
- 2004-08-04 11:00:00 23,040 ——w c:\windows\system32\psapi.dll
+ 2008-04-14 00:12:03 23,040 —-a-w c:\windows\system32\psapi.dll
- 2004-08-04 11:00:00 96,768 —-a-w c:\windows\system32\psbase.dll
+ 2008-04-14 00:12:03 96,768 —-a-w c:\windows\system32\psbase.dll
- 2004-08-04 11:00:00 43,520 —-a-w c:\windows\system32\pstorec.dll
+ 2008-04-14 00:12:03 43,520 —-a-w c:\windows\system32\pstorec.dll
- 2004-08-04 11:00:00 34,304 —-a-w c:\windows\system32\pstorsvc.dll
+ 2008-04-14 00:12:03 34,304 —-a-w c:\windows\system32\pstorsvc.dll
+ 2008-04-14 00:12:03 150,528 ——w c:\windows\system32\qagent.dll
+ 2008-04-14 00:12:03 291,328 ——w c:\windows\system32\qagentrt.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\qcap.dll
+ 2008-04-14 00:12:03 192,512 —-a-w c:\windows\system32\qcap.dll
+ 2008-04-14 00:12:03 62,464 ——w c:\windows\system32\qcliprov.dll
- 2004-08-04 11:00:00 279,040 —-a-w c:\windows\system32\qdv.dll
+ 2008-04-14 00:12:03 279,040 —-a-w c:\windows\system32\qdv.dll
- 2004-08-04 11:00:00 385,024 —-a-w c:\windows\system32\qdvd.dll
+ 2008-04-14 00:12:03 386,048 —-a-w c:\windows\system32\qdvd.dll
- 2004-08-04 11:00:00 562,176 —-a-w c:\windows\system32\qedit.dll
+ 2008-04-14 00:12:03 562,176 —-a-w c:\windows\system32\qedit.dll
- 2004-08-04 11:00:00 733,696 —-a-w c:\windows\system32\qedwipes.dll
+ 2008-04-13 17:21:32 733,696 —-a-w c:\windows\system32\qedwipes.dll
- 2004-08-04 11:00:00 382,464 —-a-w c:\windows\system32\qmgr.dll
+ 2008-04-14 00:12:03 409,088 —-a-w c:\windows\system32\qmgr.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\qmgrprxy.dll
+ 2008-04-14 00:12:03 18,944 —-a-w c:\windows\system32\qmgrprxy.dll
- 2004-08-04 11:00:00 20,480 —-a-w c:\windows\system32\qprocess.exe
+ 2008-04-14 00:12:32 19,968 —-a-w c:\windows\system32\qprocess.exe
- 2008-05-07 05:18:48 1,287,680 —-a-w c:\windows\system32\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 —-a-w c:\windows\system32\quartz.dll
- 2006-06-22 05:06:30 1,435,648 —-a-w c:\windows\system32\query.dll
+ 2008-04-14 00:12:03 1,435,648 —-a-w c:\windows\system32\query.dll
+ 2008-04-14 00:12:03 76,800 ——w c:\windows\system32\qutil.dll
- 2004-08-04 11:00:00 43,520 —-a-w c:\windows\system32\racpldlg.dll
+ 2008-04-14 00:12:03 43,520 —-a-w c:\windows\system32\racpldlg.dll
- 2006-06-26 17:37:10 8,192 —-a-w c:\windows\system32\rasadhlp.dll
+ 2008-04-14 00:12:03 7,680 —-a-w c:\windows\system32\rasadhlp.dll
- 2004-08-04 11:00:00 236,544 —-a-w c:\windows\system32\rasapi32.dll
+ 2008-04-14 00:12:03 237,056 —-a-w c:\windows\system32\rasapi32.dll
- 2004-08-04 11:00:00 89,088 —-a-w c:\windows\system32\rasauto.dll
+ 2008-04-14 00:12:03 88,576 —-a-w c:\windows\system32\rasauto.dll
- 2004-08-04 11:00:00 69,632 —-a-w c:\windows\system32\raschap.dll
+ 2008-04-14 00:12:03 79,872 —-a-w c:\windows\system32\raschap.dll
- 2004-08-04 11:00:00 657,920 —-a-w c:\windows\system32\rasdlg.dll
+ 2008-04-14 00:12:03 658,432 —-a-w c:\windows\system32\rasdlg.dll
- 2004-08-04 11:00:00 61,440 —-a-w c:\windows\system32\rasman.dll
+ 2008-04-14 00:12:03 61,440 —-a-w c:\windows\system32\rasman.dll
- 2006-05-14 08:44:08 181,248 —-a-w c:\windows\system32\rasmans.dll
+ 2008-04-14 00:12:03 186,368 —-a-w c:\windows\system32\rasmans.dll
- 2004-08-04 11:00:00 56,832 —-a-w c:\windows\system32\rasphone.exe
+ 2008-04-14 00:12:32 56,832 —-a-w c:\windows\system32\rasphone.exe
- 2004-08-04 11:00:00 206,336 —-a-w c:\windows\system32\rasppp.dll
+ 2008-04-14 00:12:03 210,944 —-a-w c:\windows\system32\rasppp.dll
+ 2008-04-14 00:12:03 61,952 ——w c:\windows\system32\rasqec.dll
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\rassapi.dll
+ 2008-04-14 00:12:03 16,384 —-a-w c:\windows\system32\rassapi.dll
- 2004-08-04 11:00:00 58,880 —-a-w c:\windows\system32\rastapi.dll
+ 2008-04-14 00:12:03 58,368 —-a-w c:\windows\system32\rastapi.dll
- 2004-08-04 11:00:00 112,128 —-a-w c:\windows\system32\rastls.dll
+ 2008-04-14 00:12:03 150,016 —-a-w c:\windows\system32\rastls.dll
- 2004-08-04 11:00:00 102,400 —-a-w c:\windows\system32\rcbdyctl.dll
+ 2008-04-14 00:12:03 102,400 —-a-w c:\windows\system32\rcbdyctl.dll
- 2004-08-04 11:00:00 35,840 —-a-w c:\windows\system32\rcimlby.exe
+ 2008-04-14 00:12:32 35,840 —-a-w c:\windows\system32\rcimlby.exe
- 2004-08-04 11:00:00 21,504 —-a-w c:\windows\system32\rcp.exe
+ 2008-04-14 00:12:32 21,504 —-a-w c:\windows\system32\rcp.exe
- 2004-08-04 11:00:00 147,968 —-a-w c:\windows\system32\rdchost.dll
+ 2008-04-14 00:12:03 147,968 —-a-w c:\windows\system32\rdchost.dll
- 2004-08-04 11:00:00 62,464 —-a-w c:\windows\system32\rdpclip.exe
+ 2008-04-14 00:12:32 62,976 —-a-w c:\windows\system32\rdpclip.exe
- 2004-08-04 11:00:00 92,168 —-a-w c:\windows\system32\rdpdd.dll
+ 2008-04-14 00:13:22 92,424 —-a-w c:\windows\system32\rdpdd.dll
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\system32\rdpsnd.dll
+ 2008-04-14 00:12:04 19,968 —-a-w c:\windows\system32\rdpsnd.dll
- 2004-08-04 11:00:00 87,176 —-a-w c:\windows\system32\rdpwsx.dll
+ 2008-04-14 00:13:22 87,176 —-a-w c:\windows\system32\rdpwsx.dll
- 2004-08-04 11:00:00 13,824 —-a-w c:\windows\system32\rdsaddin.exe
+ 2008-04-14 00:12:32 13,824 —-a-w c:\windows\system32\rdsaddin.exe
- 2004-08-04 11:00:00 67,072 —-a-w c:\windows\system32\rdshost.exe
+ 2008-04-14 00:12:32 67,072 —-a-w c:\windows\system32\rdshost.exe
- 2004-08-04 11:00:00 50,176 —-a-w c:\windows\system32\reg.exe
+ 2008-04-14 00:12:32 50,176 —-a-w c:\windows\system32\reg.exe
- 2004-08-04 11:00:00 49,664 —-a-w c:\windows\system32\regapi.dll
+ 2008-04-14 00:12:04 49,664 —-a-w c:\windows\system32\regapi.dll
- 2004-08-04 11:00:00 59,904 —-a-w c:\windows\system32\regsvc.dll
+ 2008-04-14 00:12:04 59,904 —-a-w c:\windows\system32\regsvc.dll
- 2004-08-04 11:00:00 11,776 —-a-w c:\windows\system32\regsvr32.exe
+ 2008-04-14 00:12:32 11,776 —-a-w c:\windows\system32\regsvr32.exe
- 2004-08-04 11:00:00 397,824 —-a-w c:\windows\system32\regwizc.dll
+ 2008-04-14 00:12:04 397,824 —-a-w c:\windows\system32\regwizc.dll
+ 2004-08-04 11:00:00 36,096 —-a-w c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\intelppm.sys
- 2004-08-04 11:00:00 60,416 —-a-w c:\windows\system32\remotepg.dll
+ 2008-04-14 00:12:04 60,416 —-a-w c:\windows\system32\remotepg.dll
- 2004-08-04 11:00:00 380,416 —-a-w c:\windows\system32\Restore\rstrui.exe
+ 2008-04-14 00:12:33 380,416 —-a-w c:\windows\system32\Restore\rstrui.exe
- 2004-08-04 11:00:00 58,880 —-a-w c:\windows\system32\resutils.dll
+ 2008-04-14 00:12:04 58,880 —-a-w c:\windows\system32\resutils.dll
- 2004-08-04 11:00:00 13,824 —-a-w c:\windows\system32\rexec.exe
+ 2008-04-14 00:12:33 13,824 —-a-w c:\windows\system32\rexec.exe
+ 2008-04-14 00:12:04 290,304 ——w c:\windows\system32\rhttpaa.dll
- 2006-11-27 14:54:06 433,152 —-a-w c:\windows\system32\riched20.dll
+ 2008-04-14 00:12:04 433,664 —-a-w c:\windows\system32\riched20.dll
- 2007-07-09 13:16:16 582,656 —-a-w c:\windows\system32\rpcrt4.dll
+ 2008-04-14 00:12:04 584,704 —-a-w c:\windows\system32\rpcrt4.dll
- 2005-07-26 04:39:49 397,824 —-a-w c:\windows\system32\rpcss.dll
+ 2008-04-14 00:12:04 399,360 —-a-w c:\windows\system32\rpcss.dll
- 2004-08-04 11:00:00 152,576 —-a-w c:\windows\system32\rsaenh.dll
+ 2008-04-13 17:37:57 208,384 —-a-w c:\windows\system32\rsaenh.dll
- 2004-08-04 11:00:00 14,848 —-a-w c:\windows\system32\rsh.exe
+ 2008-04-14 00:12:33 14,848 —-a-w c:\windows\system32\rsh.exe
- 2004-08-04 11:00:00 39,936 —-a-w c:\windows\system32\rshx32.dll
+ 2008-04-14 00:12:04 39,936 —-a-w c:\windows\system32\rshx32.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\rsmps.dll
+ 2008-04-14 00:12:04 18,944 —-a-w c:\windows\system32\rsmps.dll
- 2004-08-04 11:00:00 107,520 —-a-w c:\windows\system32\rsnotify.exe
+ 2008-04-14 00:12:33 107,520 —-a-w c:\windows\system32\rsnotify.exe
- 2004-08-04 11:00:00 90,112 —-a-w c:\windows\system32\rsvpsp.dll
+ 2008-04-14 00:12:04 92,672 —-a-w c:\windows\system32\rsvpsp.dll
- 2004-08-04 11:00:00 77,312 —-a-w c:\windows\system32\rtcshare.exe
+ 2008-04-14 00:12:33 77,312 —-a-w c:\windows\system32\rtcshare.exe
- 2004-08-04 11:00:00 31,744 —-a-w c:\windows\system32\rtipxmib.dll
+ 2008-04-14 00:12:04 31,744 —-a-w c:\windows\system32\rtipxmib.dll
- 2004-08-04 11:00:00 44,032 —-a-w c:\windows\system32\rtutils.dll
+ 2008-04-14 00:12:04 44,032 —-a-w c:\windows\system32\rtutils.dll
- 2004-08-04 11:00:00 33,280 —-a-w c:\windows\system32\rundll32.exe
+ 2008-04-14 00:12:33 33,280 —-a-w c:\windows\system32\rundll32.exe
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\runonce.exe
+ 2008-04-14 00:12:33 14,336 —-a-w c:\windows\system32\runonce.exe
+ 2008-04-14 00:12:04 9,728 ——w c:\windows\system32\rwnh.dll
+ 2008-04-14 00:12:04 397,056 ——w c:\windows\system32\s3gnb.dll
- 2004-08-04 11:00:00 43,520 —-a-w c:\windows\system32\safrcdlg.dll
+ 2008-04-14 00:12:04 43,520 —-a-w c:\windows\system32\safrcdlg.dll
- 2004-08-04 11:00:00 29,696 —-a-w c:\windows\system32\safrdm.dll
+ 2008-04-14 00:12:04 29,696 —-a-w c:\windows\system32\safrdm.dll
- 2004-08-04 11:00:00 45,568 —-a-w c:\windows\system32\safrslv.dll
+ 2008-04-14 00:12:04 45,568 —-a-w c:\windows\system32\safrslv.dll
- 2004-08-04 11:00:00 64,000 —-a-w c:\windows\system32\samlib.dll
+ 2008-04-14 00:12:04 64,000 —-a-w c:\windows\system32\samlib.dll
- 2004-08-04 11:00:00 415,744 —-a-w c:\windows\system32\samsrv.dll
+ 2008-04-14 00:12:04 415,744 —-a-w c:\windows\system32\samsrv.dll
- 2004-08-04 11:00:00 13,312 —-a-w c:\windows\system32\savedump.exe
+ 2008-04-14 00:12:33 13,312 —-a-w c:\windows\system32\savedump.exe
- 2004-08-04 11:00:00 270,848 —-a-w c:\windows\system32\sbe.dll
+ 2008-04-14 00:12:04 270,848 —-a-w c:\windows\system32\sbe.dll
- 2004-08-04 11:00:00 159,232 —-a-w c:\windows\system32\sbeio.dll
+ 2008-04-14 00:12:04 159,232 —-a-w c:\windows\system32\sbeio.dll
- 2004-08-04 11:00:00 69,632 —-a-w c:\windows\system32\scarddlg.dll
+ 2008-04-14 00:12:04 69,632 —-a-w c:\windows\system32\scarddlg.dll
- 2004-08-04 11:00:00 95,744 —-a-w c:\windows\system32\scardsvr.exe
+ 2008-04-14 00:12:33 95,744 —-a-w c:\windows\system32\scardsvr.exe
- 2004-08-04 11:00:00 171,008 —-a-w c:\windows\system32\sccsccp.dll
+ 2008-04-14 00:12:05 171,008 —-a-w c:\windows\system32\sccsccp.dll
- 2004-08-04 11:00:00 180,224 —-a-w c:\windows\system32\scecli.dll
+ 2008-04-14 00:12:05 181,248 —-a-w c:\windows\system32\scecli.dll
- 2004-08-04 11:00:00 313,856 —-a-w c:\windows\system32\scesrv.dll
+ 2008-04-14 00:12:05 314,880 —-a-w c:\windows\system32\scesrv.dll
- 2007-04-25 14:21:15 144,896 —-a-w c:\windows\system32\schannel.dll
+ 2008-12-05 06:54:55 144,896 —-a-w c:\windows\system32\schannel.dll
- 2004-08-04 11:00:00 190,976 —-a-w c:\windows\system32\schedsvc.dll
+ 2008-04-14 00:12:05 192,512 —-a-w c:\windows\system32\schedsvc.dll
- 2004-08-04 11:00:00 121,856 —-a-w c:\windows\system32\schtasks.exe
+ 2008-04-14 00:12:34 121,856 —-a-w c:\windows\system32\schtasks.exe
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\sclgntfy.dll
+ 2008-04-14 00:12:05 20,480 —-a-w c:\windows\system32\sclgntfy.dll
- 2004-08-04 11:00:00 9,216 —-a-w c:\windows\system32\scrnsave.scr
+ 2008-04-14 00:12:43 9,216 —-a-w c:\windows\system32\scrnsave.scr
- 2004-08-04 11:00:00 159,744 —-a-w c:\windows\system32\scrobj.dll
+ 2008-04-14 00:12:05 180,224 —-a-w c:\windows\system32\scrobj.dll
- 2004-08-04 11:00:00 151,552 —-a-w c:\windows\system32\scrrun.dll
+ 2008-04-14 00:12:05 172,032 —-a-w c:\windows\system32\scrrun.dll
- 2004-08-04 11:00:00 77,312 —-a-w c:\windows\system32\sdbinst.exe
+ 2008-04-14 00:12:34 77,312 —-a-w c:\windows\system32\sdbinst.exe
- 2004-08-04 11:00:00 29,184 —-a-w c:\windows\system32\sdhcinst.dll
+ 2008-04-14 00:12:05 29,184 —-a-w c:\windows\system32\sdhcinst.dll
- 2004-08-04 11:00:00 18,432 —-a-w c:\windows\system32\secedit.exe
+ 2008-04-14 00:12:34 18,944 —-a-w c:\windows\system32\secedit.exe
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\seclogon.dll
+ 2008-04-14 00:12:05 18,944 —-a-w c:\windows\system32\seclogon.dll
- 2004-08-04 11:00:00 55,808 —-a-w c:\windows\system32\secur32.dll
+ 2008-04-14 00:12:05 56,320 —-a-w c:\windows\system32\secur32.dll
- 2004-08-04 11:00:00 5,632 —-a-w c:\windows\system32\security.dll
+ 2008-04-14 00:12:05 5,632 —-a-w c:\windows\system32\security.dll
- 2004-08-04 11:00:00 29,184 —-a-w c:\windows\system32\sendcmsg.dll
+ 2008-04-14 00:12:05 29,184 —-a-w c:\windows\system32\sendcmsg.dll
- 2004-08-04 11:00:00 55,296 —-a-w c:\windows\system32\sendmail.dll
+ 2008-04-14 00:12:05 54,784 —-a-w c:\windows\system32\sendmail.dll
- 2004-08-04 11:00:00 38,912 —-a-w c:\windows\system32\sens.dll
+ 2008-04-14 00:12:05 39,424 —-a-w c:\windows\system32\sens.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\sensapi.dll
+ 2008-04-14 00:12:05 7,168 —-a-w c:\windows\system32\sensapi.dll
- 2004-08-04 11:00:00 56,320 —-a-w c:\windows\system32\servdeps.dll
+ 2008-04-14 00:12:05 56,320 —-a-w c:\windows\system32\servdeps.dll
- 2004-08-04 11:00:00 108,032 —-a-w c:\windows\system32\services.exe
+ 2008-04-14 00:12:34 108,544 —-a-w c:\windows\system32\services.exe
- 2004-08-04 11:00:00 140,800 —-a-w c:\windows\system32\sessmgr.exe
+ 2008-04-14 00:12:34 141,312 —-a-w c:\windows\system32\sessmgr.exe
- 2004-08-04 11:00:00 31,232 —-a-w c:\windows\system32\sethc.exe
+ 2008-04-14 00:12:34 31,232 —-a-w c:\windows\system32\sethc.exe
- 2004-08-04 11:00:00 23,040 —-a-w c:\windows\system32\setup.exe
+ 2008-04-14 00:12:34 23,040 —-a-w c:\windows\system32\setup.exe
- 2004-08-04 11:00:00 259,584 —-a-w c:\windows\system32\Setup\comsetup.dll
+ 2008-04-14 00:11:51 274,944 —-a-w c:\windows\system32\Setup\comsetup.dll
- 2004-08-04 11:00:00 32,828 —-a-w c:\windows\system32\Setup\fp40ext.dll
+ 2008-04-14 00:11:53 32,828 —-a-w c:\windows\system32\Setup\fp40ext.dll
- 2004-08-04 11:00:00 132,608 —-a-w c:\windows\system32\Setup\fxsocm.dll
+ 2008-04-14 00:11:54 132,608 —-a-w c:\windows\system32\Setup\fxsocm.dll
- 2004-08-04 11:00:00 505,344 —-a-w c:\windows\system32\Setup\iis.dll
+ 2008-04-14 00:11:54 505,344 —-a-w c:\windows\system32\Setup\iis.dll
- 2004-08-04 11:00:00 115,712 —-a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2008-04-14 00:11:54 123,392 —-a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2008-04-14 00:11:56 8,192 —-a-w c:\windows\system32\Setup\koc.dll
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\Setup\medctroc.dll
+ 2008-04-14 00:11:56 16,896 —-a-w c:\windows\system32\Setup\medctroc.dll
- 2004-08-04 11:00:00 82,432 —-a-w c:\windows\system32\Setup\msdtcstp.dll
+ 2008-04-14 00:11:59 90,112 —-a-w c:\windows\system32\Setup\msdtcstp.dll
- 2004-08-04 11:00:00 15,360 —-a-w c:\windows\system32\Setup\msgrocm.dll
+ 2008-04-14 00:11:59 15,360 —-a-w c:\windows\system32\Setup\msgrocm.dll
- 2004-08-04 11:00:00 169,984 —-a-w c:\windows\system32\Setup\msmqocm.dll
+ 2008-04-14 00:12:00 170,496 —-a-w c:\windows\system32\Setup\msmqocm.dll
- 2004-08-04 11:00:00 77,312 —-a-w c:\windows\system32\Setup\netoc.dll
+ 2008-04-14 00:12:01 77,312 —-a-w c:\windows\system32\Setup\netoc.dll
- 2004-08-04 11:00:00 62,976 —-a-w c:\windows\system32\Setup\ntoc.dll
+ 2008-04-14 00:12:02 62,976 —-a-w c:\windows\system32\Setup\ntoc.dll
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\Setup\ocgen.dll
+ 2008-04-14 00:12:02 15,360 —-a-w c:\windows\system32\Setup\ocgen.dll
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\Setup\ocmsn.dll
+ 2008-04-14 00:12:02 17,408 —-a-w c:\windows\system32\Setup\ocmsn.dll
- 2004-08-04 11:00:00 101,376 —-a-w c:\windows\system32\Setup\setupqry.dll
+ 2008-04-14 00:12:05 101,376 —-a-w c:\windows\system32\Setup\setupqry.dll
- 2004-08-04 11:00:00 33,792 —-a-w c:\windows\system32\Setup\tabletoc.dll
+ 2008-04-14 00:12:07 33,792 —-a-w c:\windows\system32\Setup\tabletoc.dll
- 2004-08-04 11:00:00 121,856 —-a-w c:\windows\system32\Setup\tsoc.dll
+ 2008-04-14 00:12:07 130,048 —-a-w c:\windows\system32\Setup\tsoc.dll
- 2004-08-04 11:00:00 983,552 —-a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 09:42:06 985,088 —-a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 00:12:35 32,768 ——w c:\windows\system32\setupn.exe
- 2004-08-04 11:00:00 5,120 —-a-w c:\windows\system32\sfc.dll
+ 2008-04-14 00:12:05 5,120 —-a-w c:\windows\system32\sfc.dll
- 2004-08-04 11:00:00 140,288 —-a-w c:\windows\system32\sfc_os.dll
+ 2008-04-14 00:12:05 140,288 —-a-w c:\windows\system32\sfc_os.dll
- 2004-08-04 11:00:00 1,580,544 —-a-w c:\windows\system32\sfcfiles.dll
+ 2008-04-14 00:12:05 1,614,848 —-a-w c:\windows\system32\sfcfiles.dll
- 2004-08-04 11:00:00 549,376 —-a-w c:\windows\system32\shdoclc.dll
+ 2008-04-13 17:03:19 549,376 —-a-w c:\windows\system32\shdoclc.dll
- 2006-09-23 17:12:50 1,497,088 —-a-w c:\windows\system32\shdocvw.dll
+ 2008-04-14 00:12:05 1,499,136 —-a-w c:\windows\system32\shdocvw.dll
- 2007-10-26 03:34:01 8,460,288 —-a-w c:\windows\system32\shell32.dll
+ 2008-06-17 19:02:19 8,461,312 —-a-w c:\windows\system32\shell32.dll
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\shfolder.dll
+ 2008-04-14 00:12:05 25,088 —-a-w c:\windows\system32\shfolder.dll
- 2004-08-04 11:00:00 68,096 —-a-w c:\windows\system32\shgina.dll
+ 2008-04-14 00:12:05 68,096 —-a-w c:\windows\system32\shgina.dll
- 2004-08-04 11:00:00 65,536 —-a-w c:\windows\system32\shimeng.dll
+ 2008-04-14 00:12:05 65,024 —-a-w c:\windows\system32\shimeng.dll
- 2004-08-04 11:00:00 438,272 —-a-w c:\windows\system32\shimgvw.dll
+ 2008-04-14 00:12:05 438,272 —-a-w c:\windows\system32\shimgvw.dll
- 2006-09-23 17:12:50 474,112 —-a-w c:\windows\system32\shlwapi.dll
+ 2008-04-14 00:12:05 474,112 —-a-w c:\windows\system32\shlwapi.dll
- 2004-08-04 11:00:00 151,552 —-a-w c:\windows\system32\shmedia.dll
+ 2008-04-14 00:12:05 152,064 —-a-w c:\windows\system32\shmedia.dll
- 2004-08-04 11:00:00 42,496 —-a-w c:\windows\system32\shmgrate.exe
+ 2008-04-14 00:12:35 45,056 —-a-w c:\windows\system32\shmgrate.exe
- 2004-08-04 11:00:00 77,824 —-a-w c:\windows\system32\shrpubw.exe
+ 2008-04-14 00:12:35 77,824 —-a-w c:\windows\system32\shrpubw.exe
- 2004-08-04 11:00:00 27,648 —-a-w c:\windows\system32\shscrap.dll
+ 2008-04-14 00:12:05 27,648 —-a-w c:\windows\system32\shscrap.dll
- 2006-12-19 21:52:18 134,656 —-a-w c:\windows\system32\shsvcs.dll
+ 2008-04-14 00:12:05 135,168 —-a-w c:\windows\system32\shsvcs.dll
- 2004-08-04 11:00:00 19,456 —-a-w c:\windows\system32\shutdown.exe
+ 2008-04-14 00:12:35 19,456 —-a-w c:\windows\system32\shutdown.exe
- 2004-08-04 11:00:00 13,312 —-a-w c:\windows\system32\sigtab.dll
+ 2008-04-14 00:12:05 13,312 —-a-w c:\windows\system32\sigtab.dll
- 2004-08-04 11:00:00 70,144 —-a-w c:\windows\system32\sigverif.exe
+ 2008-04-14 00:12:35 70,144 —-a-w c:\windows\system32\sigverif.exe
- 2004-08-04 11:00:00 26,112 —-a-w c:\windows\system32\skeys.exe
+ 2008-04-14 00:12:35 26,112 —-a-w c:\windows\system32\skeys.exe
- 2004-08-04 11:00:00 25,088 —-a-w c:\windows\system32\slayerxp.dll
+ 2008-04-14 00:12:06 25,088 —-a-w c:\windows\system32\slayerxp.dll
- 2004-08-04 11:00:00 98,304 —-a-w c:\windows\system32\slbiop.dll
+ 2008-04-14 00:12:06 98,304 —-a-w c:\windows\system32\slbiop.dll
+ 2008-04-14 00:12:06 73,832 ——w c:\windows\system32\slcoinst.dll
+ 2008-04-14 00:12:06 286,792 ——w c:\windows\system32\slextspk.dll
+ 2008-04-14 00:12:06 188,508 ——w c:\windows\system32\slgen.dll
+ 2008-04-14 00:12:35 32,866 ——w c:\windows\system32\slrundll.exe
+ 2008-04-14 00:12:35 73,796 ——w c:\windows\system32\slserv.exe
- 2004-08-04 11:00:00 8,192 —-a-w c:\windows\system32\smbinst.exe
+ 2008-04-14 00:12:35 8,192 —-a-w c:\windows\system32\smbinst.exe
- 2004-08-04 11:00:00 363,008 —-a-w c:\windows\system32\smlogcfg.dll
+ 2008-04-14 00:12:06 362,496 —-a-w c:\windows\system32\smlogcfg.dll
- 2004-08-04 11:00:00 89,600 —-a-w c:\windows\system32\smlogsvc.exe
+ 2008-04-14 00:12:35 89,600 —-a-w c:\windows\system32\smlogsvc.exe
- 2004-08-04 11:00:00 50,688 —-a-w c:\windows\system32\smss.exe
+ 2008-04-14 00:12:36 50,688 —-a-w c:\windows\system32\smss.exe
+ 2008-04-14 00:12:06 10,752 ——w c:\windows\system32\smtpapi.dll
- 2004-08-04 11:00:00 131,584 —-a-w c:\windows\system32\sndrec32.exe
+ 2008-04-14 00:12:36 131,584 —-a-w c:\windows\system32\sndrec32.exe
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\snmpapi.dll
+ 2008-04-14 00:12:06 18,944 —-a-w c:\windows\system32\snmpapi.dll
- 2004-08-04 11:00:00 182,272 —-a-w c:\windows\system32\snmpsnap.dll
+ 2008-04-14 00:12:06 182,272 —-a-w c:\windows\system32\snmpsnap.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\sort.exe
+ 2008-04-14 00:12:36 24,576 —-a-w c:\windows\system32\sort.exe
+ 2008-04-14 00:12:36 7,680 —-a-w c:\windows\system32\spdwnwxp.exe
- 2004-08-04 11:00:00 538,624 —-a-w c:\windows\system32\spider.exe
+ 2008-04-14 00:12:36 538,624 —-a-w c:\windows\system32\spider.exe
- 2004-08-04 11:00:00 12,800 —-a-w c:\windows\system32\spiisupd.exe
+ 2008-04-13 18:43:31 12,800 —-a-w c:\windows\system32\spiisupd.exe
- 2007-11-30 11:18:51 17,272 ——w c:\windows\system32\spmsg.dll
+ 2007-11-30 12:39:22 17,272 ——w c:\windows\system32\spmsg.dll
- 2004-08-04 11:00:00 11,776 —-a-w c:\windows\system32\spnpinst.exe
+ 2008-04-14 09:42:38 11,264 —-a-w c:\windows\system32\spnpinst.exe
- 2004-08-04 11:00:00 452,096 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSAPI.DLL
+ 2008-04-14 00:11:53 451,584 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsapi.dll
- 2004-08-04 11:00:00 27,136 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSDRV.DLL
+ 2008-04-14 00:11:54 26,624 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsdrv.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSRES.DLL
+ 2008-04-14 00:09:33 6,656 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsres.dll
- 2004-08-04 11:00:00 397,312 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSTIFF.DLL
+ 2008-04-14 00:11:54 397,312 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxstiff.dll
- 2004-08-04 11:00:00 154,112 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSUI.DLL
+ 2008-04-14 00:11:54 154,112 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsui.dll
- 2004-08-04 11:00:00 192,512 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSWZRD.DLL
+ 2008-04-14 00:11:54 192,512 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxswzrd.dll
- 2004-08-04 05:56:44 87,552 —-a-w c:\windows\system32\spool\drivers\w32x86\3\HPFUD50.DLL
+ 2008-04-14 00:11:54 87,552 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpfud50.dll
- 2004-03-22 22:17:02 765,680 —-a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
+ 2007-04-09 17:24:04 758,664 —-a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
- 2004-03-22 22:17:08 42,224 —-a-w c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
+ 2007-04-09 17:23:58 46,472 —-a-w c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
- 2004-08-04 05:56:24 676,864 —-a-w c:\windows\system32\spool\drivers\w32x86\3\pcl5eres.dll
+ 2007-05-15 08:08:13 1,058,816 —-a-w c:\windows\system32\spool\drivers\w32x86\3\pcl5eres.dll
- 2004-08-04 06:56:46 132,608 —-a-w c:\windows\system32\spool\drivers\w32x86\3\PS5UI.DLL
+ 2008-04-14 00:12:03 728,576 —-a-w c:\windows\system32\spool\drivers\w32x86\3\ps5ui.dll
- 2004-08-04 06:56:46 464,384 —-a-w c:\windows\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL
+ 2008-04-14 00:12:03 543,232 —-a-w c:\windows\system32\spool\drivers\w32x86\3\pscript5.dll
- 2004-08-04 05:56:48 264,704 —-a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL
+ 2008-04-14 00:12:07 373,248 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
- 2004-08-04 05:56:48 197,120 —-a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
+ 2008-04-14 00:12:07 744,448 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
- 2004-08-04 05:56:36 619,520 —-a-w c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL
+ 2007-05-15 08:08:53 761,344 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unires.dll
- 2004-03-22 22:17:02 765,680 —-a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
+ 2007-04-09 17:24:04 758,664 —-a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
- 2004-03-22 22:17:08 42,224 —-a-w c:\windows\system32\spool\drivers\w32x86\mdiui.dll
+ 2007-04-09 17:23:58 46,472 —-a-w c:\windows\system32\spool\drivers\w32x86\mdiui.dll
- 2004-03-22 22:17:06 25,840 —-a-w c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
+ 2007-04-09 17:23:54 28,552 —-a-w c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
- 2004-08-04 11:00:00 74,752 —-a-w c:\windows\system32\spoolss.dll
+ 2008-04-14 00:12:06 75,264 —-a-w c:\windows\system32\spoolss.dll
- 2005-06-10 23:53:32 57,856 —-a-w c:\windows\system32\spoolsv.exe
+ 2008-04-14 00:12:36 57,856 —-a-w c:\windows\system32\spoolsv.exe
- 2006-09-25 22:58:48 23,856 —-a-w c:\windows\system32\spupdsvc.exe
+ 2007-07-27 13:41:38 26,488 —-a-w c:\windows\system32\spupdsvc.exe
+ 2008-04-14 00:12:36 20,992 ——w c:\windows\system32\spupdwxp.exe
- 2004-08-04 11:00:00 442,368 —-a-w c:\windows\system32\sqlsrv32.dll
+ 2008-04-14 00:12:06 442,368 —-a-w c:\windows\system32\sqlsrv32.dll
- 2004-08-04 11:00:00 180,800 —-a-w c:\windows\system32\sqlunirl.dll
+ 2008-04-14 00:12:06 180,800 —-a-w c:\windows\system32\sqlunirl.dll
- 2004-08-04 11:00:00 67,584 —-a-w c:\windows\system32\srclient.dll
+ 2008-04-14 00:12:07 67,584 —-a-w c:\windows\system32\srclient.dll
- 2004-08-04 11:00:00 239,104 —-a-w c:\windows\system32\srrstr.dll
+ 2008-04-14 00:12:07 239,104 —-a-w c:\windows\system32\srrstr.dll
- 2004-08-04 11:00:00 170,496 —-a-w c:\windows\system32\srsvc.dll
+ 2008-04-14 00:12:07 171,008 —-a-w c:\windows\system32\srsvc.dll
- 2004-12-07 19:32:34 96,768 —-a-w c:\windows\system32\srvsvc.dll
+ 2008-04-14 00:12:07 96,768 —-a-w c:\windows\system32\srvsvc.dll
- 2004-08-04 11:00:00 704,512 —-a-w c:\windows\system32\ss3dfo.scr
+ 2008-04-14 00:12:43 704,512 —-a-w c:\windows\system32\ss3dfo.scr
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\system32\ssbezier.scr
+ 2008-04-14 00:12:43 19,968 —-a-w c:\windows\system32\ssbezier.scr
- 2004-08-04 11:00:00 34,816 —-a-w c:\windows\system32\ssdpapi.dll
+ 2008-04-14 00:12:07 34,816 —-a-w c:\windows\system32\ssdpapi.dll
- 2004-08-04 11:00:00 71,680 —-a-w c:\windows\system32\ssdpsrv.dll
+ 2008-04-14 00:12:07 71,680 —-a-w c:\windows\system32\ssdpsrv.dll
- 2004-08-04 11:00:00 393,216 —-a-w c:\windows\system32\ssflwbox.scr
+ 2008-04-14 00:12:43 393,216 —-a-w c:\windows\system32\ssflwbox.scr
- 2004-08-04 11:00:00 20,992 —-a-w c:\windows\system32\ssmarque.scr
+ 2008-04-14 00:12:44 20,992 —-a-w c:\windows\system32\ssmarque.scr
- 2004-08-04 11:00:00 47,104 —-a-w c:\windows\system32\ssmypics.scr
+ 2008-04-14 00:12:44 47,104 —-a-w c:\windows\system32\ssmypics.scr
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\ssmyst.scr
+ 2008-04-14 00:12:44 18,944 —-a-w c:\windows\system32\ssmyst.scr
- 2004-08-04 11:00:00 610,304 —-a-w c:\windows\system32\sspipes.scr
+ 2008-04-14 00:12:44 610,304 —-a-w c:\windows\system32\sspipes.scr
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\ssstars.scr
+ 2008-04-14 00:12:44 14,336 —-a-w c:\windows\system32\ssstars.scr
- 2004-08-04 11:00:00 679,936 —-a-w c:\windows\system32\sstext3d.scr
+ 2008-04-14 00:12:44 679,936 —-a-w c:\windows\system32\sstext3d.scr
- 2004-08-04 11:00:00 8,192 —-a-w c:\windows\system32\staxmem.dll
+ 2008-04-14 00:12:07 8,192 —-a-w c:\windows\system32\staxmem.dll
- 2004-08-04 11:00:00 54,272 —-a-w c:\windows\system32\stclient.dll
+ 2008-04-14 00:12:07 59,392 —-a-w c:\windows\system32\stclient.dll
- 2004-08-04 11:00:00 67,584 —-a-w c:\windows\system32\sti.dll
+ 2008-04-14 00:12:07 68,096 —-a-w c:\windows\system32\sti.dll
- 2004-08-04 11:00:00 136,704 —-a-w c:\windows\system32\sti_ci.dll
+ 2008-04-14 00:12:07 136,704 —-a-w c:\windows\system32\sti_ci.dll
- 2004-08-04 11:00:00 14,848 —-a-w c:\windows\system32\stimon.exe
+ 2008-04-14 00:12:36 14,848 —-a-w c:\windows\system32\stimon.exe
- 2004-08-04 11:00:00 121,856 —-a-w c:\windows\system32\stobject.dll
+ 2008-04-14 00:12:07 121,856 —-a-w c:\windows\system32\stobject.dll
- 2004-08-04 06:56:46 74,752 —-a-w c:\windows\system32\storprop.dll
+ 2008-04-14 00:12:07 74,752 —-a-w c:\windows\system32\storprop.dll
- 2006-08-21 14:52:08 246,814 —-a-w c:\windows\system32\strmdll.dll
+ 2008-10-03 10:02:42 247,326 —-a-w c:\windows\system32\strmdll.dll
- 2004-08-04 11:00:00 75,776 —-a-w c:\windows\system32\strmfilt.dll
+ 2008-04-14 00:12:07 75,776 —-a-w c:\windows\system32\strmfilt.dll
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\svchost.exe
+ 2008-04-14 00:12:36 14,336 —-a-w c:\windows\system32\svchost.exe
- 2006-10-19 13:56:32 713,216 —-a-w c:\windows\system32\sxs.dll
+ 2008-04-14 00:12:07 713,216 —-a-w c:\windows\system32\sxs.dll
- 2004-08-04 11:00:00 57,856 —-a-w c:\windows\system32\synceng.dll
+ 2008-04-14 00:12:07 57,856 —-a-w c:\windows\system32\synceng.dll
- 2004-08-04 11:00:00 191,488 —-a-w c:\windows\system32\syncui.dll
+ 2008-04-14 00:12:07 191,488 —-a-w c:\windows\system32\syncui.dll
- 2004-08-04 11:00:00 105,984 —-a-w c:\windows\system32\sysocmgr.exe
+ 2008-04-14 00:12:37 106,496 —-a-w c:\windows\system32\sysocmgr.exe
- 2004-08-04 11:00:00 984,576 —-a-w c:\windows\system32\syssetup.dll
+ 2008-04-14 00:12:07 990,208 —-a-w c:\windows\system32\syssetup.dll
- 2004-08-04 11:00:00 68,096 —-a-w c:\windows\system32\systeminfo.exe
+ 2008-04-14 00:12:36 71,680 —-a-w c:\windows\system32\systeminfo.exe
- 2005-10-17 21:14:46 118,272 —-a-w c:\windows\system32\t2embed.dll
+ 2008-04-14 00:12:07 117,760 —-a-w c:\windows\system32\t2embed.dll
- 2004-08-04 11:00:00 858,624 —-a-w c:\windows\system32\tapi3.dll
+ 2008-04-14 00:12:07 858,624 —-a-w c:\windows\system32\tapi3.dll
- 2004-08-04 11:00:00 181,760 —-a-w c:\windows\system32\tapi32.dll
+ 2008-04-14 00:12:07 181,760 —-a-w c:\windows\system32\tapi32.dll
- 2005-07-08 16:27:56 249,344 —-a-w c:\windows\system32\tapisrv.dll
+ 2008-04-14 00:12:07 249,856 —-a-w c:\windows\system32\tapisrv.dll
- 2004-08-04 11:00:00 72,192 —-a-w c:\windows\system32\taskkill.exe
+ 2008-04-14 00:12:37 76,288 —-a-w c:\windows\system32\taskkill.exe
- 2004-08-04 11:00:00 72,192 —-a-w c:\windows\system32\tasklist.exe
+ 2008-04-14 00:12:37 77,824 —-a-w c:\windows\system32\tasklist.exe
- 2004-08-04 11:00:00 135,680 —-a-w c:\windows\system32\taskmgr.exe
+ 2008-04-14 00:12:37 135,680 —-a-w c:\windows\system32\taskmgr.exe
- 2004-08-04 11:00:00 14,848 —-a-w c:\windows\system32\tcpmib.dll
+ 2008-04-14 00:12:07 14,848 —-a-w c:\windows\system32\tcpmib.dll
- 2004-08-04 11:00:00 45,568 —-a-w c:\windows\system32\tcpmon.dll
+ 2008-04-14 00:12:07 45,568 —-a-w c:\windows\system32\tcpmon.dll
- 2004-08-04 11:00:00 45,568 —-a-w c:\windows\system32\tcpmonui.dll
+ 2008-04-14 00:12:07 45,568 —-a-w c:\windows\system32\tcpmonui.dll
- 2005-05-10 23:45:48 75,776 —-a-w c:\windows\system32\telnet.exe
+ 2008-04-14 00:12:37 75,776 —-a-w c:\windows\system32\telnet.exe
- 2004-08-04 11:00:00 358,400 —-a-w c:\windows\system32\termmgr.dll
+ 2008-04-14 00:12:07 358,400 —-a-w c:\windows\system32\termmgr.dll
- 2004-08-04 11:00:00 295,424 —-a-w c:\windows\system32\termsrv.dll
+ 2008-04-14 00:12:07 295,424 —-a-w c:\windows\system32\termsrv.dll
- 2004-08-04 11:00:00 385,536 —-a-w c:\windows\system32\themeui.dll
+ 2008-04-14 00:12:07 385,536 —-a-w c:\windows\system32\themeui.dll
- 2004-08-04 11:00:00 61,440 —-a-w c:\windows\system32\tlntadmn.exe
+ 2008-04-14 00:12:37 61,440 —-a-w c:\windows\system32\tlntadmn.exe
- 2004-08-04 11:00:00 78,336 —-a-w c:\windows\system32\tlntsess.exe
+ 2008-04-14 00:12:37 78,336 —-a-w c:\windows\system32\tlntsess.exe
- 2004-08-04 11:00:00 73,216 —-a-w c:\windows\system32\tlntsvr.exe
+ 2008-04-14 00:12:38 73,216 —-a-w c:\windows\system32\tlntsvr.exe
- 2004-08-04 11:00:00 7,168 —-a-w c:\windows\system32\tlntsvrp.dll
+ 2008-04-14 00:12:07 7,168 —-a-w c:\windows\system32\tlntsvrp.dll
- 2004-08-04 11:00:00 347,136 —-a-w c:\windows\system32\tourstart.exe
+ 2008-04-14 00:12:38 347,136 —-a-w c:\windows\system32\tourstart.exe
- 2004-08-04 11:00:00 259,584 —-a-w c:\windows\system32\tracerpt.exe
+ 2008-04-14 00:12:38 259,584 —-a-w c:\windows\system32\tracerpt.exe
- 2004-08-04 11:00:00 12,288 —-a-w c:\windows\system32\tracert.exe
+ 2008-04-14 00:12:38 12,288 —-a-w c:\windows\system32\tracert.exe
- 2004-08-04 11:00:00 11,264 —-a-w c:\windows\system32\tree.com
+ 2008-04-14 00:12:42 12,800 —-a-w c:\windows\system32\tree.com
- 2004-08-04 11:00:00 90,624 —-a-w c:\windows\system32\trkwks.dll
+ 2008-04-14 00:12:07 90,112 —-a-w c:\windows\system32\trkwks.dll
- 2004-08-04 11:00:00 93,696 —-a-w c:\windows\system32\tscfgwmi.dll
+ 2008-04-14 00:12:07 93,696 —-a-w c:\windows\system32\tscfgwmi.dll
- 2004-08-04 11:00:00 12,168 —-a-w c:\windows\system32\tsddd.dll
+ 2008-04-14 00:13:21 12,168 —-a-w c:\windows\system32\tsddd.dll
+ 2008-04-14 00:12:07 53,248 ——w c:\windows\system32\tsgqec.dll
+ 2008-04-14 00:12:07 50,688 ——w c:\windows\system32\tspkg.dll
- 2004-08-04 11:00:00 44,032 —-a-w c:\windows\system32\twext.dll
+ 2008-04-14 00:12:07 57,856 —-a-w c:\windows\system32\twext.dll
- 2005-07-26 04:39:49 101,376 —-a-w c:\windows\system32\txflog.dll
+ 2008-04-14 00:12:07 101,376 —-a-w c:\windows\system32\txflog.dll
- 2007-11-13 11:31:11 60,416 ——w c:\windows\system32\tzchange.exe
+ 2008-10-23 10:06:59 62,976 ——w c:\windows\system32\tzchange.exe
- 2004-08-04 11:00:00 25,600 —-a-w c:\windows\system32\udhisapi.dll
+ 2008-04-14 00:12:07 26,624 —-a-w c:\windows\system32\udhisapi.dll
- 2004-08-04 11:00:00 275,456 —-a-w c:\windows\system32\ulib.dll
+ 2008-04-14 00:12:07 275,456 —-a-w c:\windows\system32\ulib.dll
- 2004-08-04 11:00:00 35,840 —-a-w c:\windows\system32\umandlg.dll
+ 2008-04-14 00:12:07 35,840 —-a-w c:\windows\system32\umandlg.dll
- 2005-08-23 03:35:42 123,392 —-a-w c:\windows\system32\umpnpmgr.dll
+ 2008-04-14 00:12:07 123,392 —-a-w c:\windows\system32\umpnpmgr.dll
- 2004-08-04 11:00:00 74,240 —-a-w c:\windows\system32\unimdmat.dll
+ 2008-04-14 00:12:07 74,240 —-a-w c:\windows\system32\unimdmat.dll
- 2004-08-04 11:00:00 13,824 —-a-w c:\windows\system32\uniplat.dll
+ 2008-04-14 00:12:07 13,824 —-a-w c:\windows\system32\uniplat.dll
- 2004-08-04 11:00:00 316,416 —-a-w c:\windows\system32\untfs.dll
+ 2008-04-14 00:12:07 316,416 —-a-w c:\windows\system32\untfs.dll
- 2004-08-04 11:00:00 132,608 —-a-w c:\windows\system32\upnp.dll
+ 2008-04-14 00:12:08 133,632 —-a-w c:\windows\system32\upnp.dll
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\upnpcont.exe
+ 2008-04-14 00:12:38 16,896 —-a-w c:\windows\system32\upnpcont.exe
- 2007-02-05 20:17:02 185,344 —-a-w c:\windows\system32\upnphost.dll
+ 2008-04-14 00:12:08 185,856 —-a-w c:\windows\system32\upnphost.dll
- 2004-08-04 11:00:00 239,616 —-a-w c:\windows\system32\upnpui.dll
+ 2008-04-14 00:12:08 239,616 —-a-w c:\windows\system32\upnpui.dll
- 2004-08-04 11:00:00 18,432 —-a-w c:\windows\system32\ups.exe
+ 2008-04-14 00:12:38 18,432 —-a-w c:\windows\system32\ups.exe
- 2008-04-23 04:16:28 105,984 —-a-w c:\windows\system32\url.dll
+ 2008-12-20 23:15:39 105,984 —-a-w c:\windows\system32\url.dll
- 2008-04-23 04:16:29 1,159,680 —-a-w c:\windows\system32\urlmon.dll
+ 2008-12-20 23:15:40 1,160,192 —-a-w c:\windows\system32\urlmon.dll
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\usbmon.dll
+ 2008-04-14 00:12:08 16,896 —-a-w c:\windows\system32\usbmon.dll
- 2004-08-04 06:56:48 74,240 —-a-w c:\windows\system32\usbui.dll
+ 2008-04-14 00:12:08 74,240 —-a-w c:\windows\system32\usbui.dll
- 2007-03-08 15:36:28 577,536 —-a-w c:\windows\system32\user32.dll
+ 2008-04-14 00:12:08 578,560 —-a-w c:\windows\system32\user32.dll
- 2004-08-04 11:00:00 723,456 —-a-w c:\windows\system32\userenv.dll
+ 2008-04-14 00:12:08 727,040 —-a-w c:\windows\system32\userenv.dll
- 2004-08-04 11:00:00 24,576 —-a-w c:\windows\system32\userinit.exe
+ 2008-04-14 00:12:38 26,112 —-a-w c:\windows\system32\userinit.exe
+ 2008-04-13 16:44:16 17,920 ——w c:\windows\system32\usmt\cobramsg.dll
- 2004-08-04 11:00:00 123,904 —-a-w c:\windows\system32\usmt\guitrn.dll
+ 2008-04-14 00:11:54 133,120 —-a-w c:\windows\system32\usmt\guitrn.dll
+ 2008-04-14 00:11:54 115,200 ——w c:\windows\system32\usmt\guitrna.dll
- 2004-08-04 11:00:00 4,096 —-a-w c:\windows\system32\usmt\iconlib.dll
+ 2008-04-13 16:44:29 2,560 —-a-w c:\windows\system32\usmt\iconlib.dll
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\system32\usmt\log.dll
+ 2008-04-14 00:11:56 19,968 —-a-w c:\windows\system32\usmt\log.dll
- 2004-08-04 11:00:00 201,216 —-a-w c:\windows\system32\usmt\migism.dll
+ 2008-04-14 00:11:57 274,432 —-a-w c:\windows\system32\usmt\migism.dll
+ 2008-04-14 00:11:57 261,120 ——w c:\windows\system32\usmt\migisma.dll
- 2004-08-04 11:00:00 103,424 —-a-w c:\windows\system32\usmt\migload.exe
+ 2008-04-14 00:12:25 103,936 —-a-w c:\windows\system32\usmt\migload.exe
- 2004-08-04 11:00:00 240,128 —-a-w c:\windows\system32\usmt\migwiz.exe
+ 2008-04-14 00:12:25 245,248 —-a-w c:\windows\system32\usmt\migwiz.exe
+ 2008-04-14 00:12:25 241,152 ——w c:\windows\system32\usmt\migwiza.exe
- 2004-08-04 11:00:00 202,752 —-a-w c:\windows\system32\usmt\script.dll
+ 2008-04-14 00:12:05 215,552 —-a-w c:\windows\system32\usmt\script.dll
+ 2008-04-14 00:12:05 199,680 ——w c:\windows\system32\usmt\scripta.dll
- 2004-08-04 11:00:00 168,960 —-a-w c:\windows\system32\usmt\sysmod.dll
+ 2008-04-14 00:12:07 193,024 —-a-w c:\windows\system32\usmt\sysmod.dll
+ 2008-04-14 00:12:07 173,568 ——w c:\windows\system32\usmt\sysmoda.dll
- 2004-08-04 11:00:00 406,528 —-a-w c:\windows\system32\usp10.dll
+ 2008-04-14 00:12:08 406,016 —-a-w c:\windows\system32\usp10.dll
- 2004-08-04 11:00:00 50,176 —-a-w c:\windows\system32\utilman.exe
+ 2008-04-14 00:12:38 50,176 —-a-w c:\windows\system32\utilman.exe
- 2004-08-04 11:00:00 218,624 —-a-w c:\windows\system32\uxtheme.dll
+ 2008-04-14 00:12:08 218,624 —-a-w c:\windows\system32\uxtheme.dll
- 2004-08-04 11:00:00 30,749 —-a-w c:\windows\system32\vbajet32.dll
+ 2008-04-14 00:12:08 30,749 —-a-w c:\windows\system32\vbajet32.dll
- 2006-11-08 02:03:36 413,696 —-a-w c:\windows\system32\vbscript.dll
+ 2008-04-14 00:12:08 434,176 —-a-w c:\windows\system32\vbscript.dll
- 2004-08-04 11:00:00 26,112 —-a-w c:\windows\system32\vdmdbg.dll
+ 2008-04-14 00:12:08 26,112 —-a-w c:\windows\system32\vdmdbg.dll
- 2004-08-04 11:00:00 51,712 —-a-w c:\windows\system32\vdmredir.dll
+ 2008-04-14 00:12:08 51,712 —-a-w c:\windows\system32\vdmredir.dll
- 2006-03-17 00:38:01 28,672 ——w c:\windows\system32\verclsid.exe
+ 2008-04-14 00:12:38 28,672 ——w c:\windows\system32\verclsid.exe
- 2004-08-04 11:00:00 13,312 —-a-w c:\windows\system32\verifier.dll
+ 2008-04-14 00:12:08 26,624 —-a-w c:\windows\system32\verifier.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\version.dll
+ 2008-04-14 00:12:08 18,944 —-a-w c:\windows\system32\version.dll
- 2004-08-04 11:00:00 430,592 —-a-w c:\windows\system32\vssapi.dll
+ 2008-04-14 00:12:08 430,592 —-a-w c:\windows\system32\vssapi.dll
- 2004-08-04 11:00:00 289,792 —-a-w c:\windows\system32\vssvc.exe
+ 2008-04-14 00:12:38 289,792 —-a-w c:\windows\system32\vssvc.exe
- 2004-08-04 11:00:00 174,592 —-a-w c:\windows\system32\w32time.dll
+ 2008-04-14 00:12:08 175,104 —-a-w c:\windows\system32\w32time.dll
- 2004-08-04 11:00:00 15,872 —-a-w c:\windows\system32\w3ssl.dll
+ 2008-04-14 00:12:08 15,872 —-a-w c:\windows\system32\w3ssl.dll
- 2004-08-04 11:00:00 17,664 —-a-w c:\windows\system32\watchdog.sys
+ 2008-04-13 18:44:59 17,664 —-a-w c:\windows\system32\watchdog.sys
- 2004-08-04 11:00:00 208,896 —-a-w c:\windows\system32\wavemsp.dll
+ 2008-04-14 00:12:08 215,552 —-a-w c:\windows\system32\wavemsp.dll
- 2004-08-04 11:00:00 1,352,192 —-a-w c:\windows\system32\wbem\cimwin32.dll
+ 2008-04-14 00:11:50 1,358,848 —-a-w c:\windows\system32\wbem\cimwin32.dll
- 2004-08-04 11:00:00 45,568 —-a-w c:\windows\system32\wbem\CmdEvTgProv.dll
+ 2008-04-14 00:11:53 45,056 —-a-w c:\windows\system32\wbem\cmdevtgprov.dll
- 2004-08-04 11:00:00 247,808 —-a-w c:\windows\system32\wbem\esscli.dll
+ 2008-04-14 00:11:53 247,808 —-a-w c:\windows\system32\wbem\esscli.dll
- 2004-08-04 11:00:00 22,016 —-a-w c:\windows\system32\wbem\evntrprv.dll
+ 2008-04-14 00:11:53 21,504 —-a-w c:\windows\system32\wbem\evntrprv.dll
- 2004-08-04 11:00:00 472,064 —-a-w c:\windows\system32\wbem\fastprox.dll
+ 2008-04-14 00:11:53 472,064 —-a-w c:\windows\system32\wbem\fastprox.dll
- 2004-08-04 11:00:00 185,856 —-a-w c:\windows\system32\wbem\framedyn.dll
+ 2008-04-14 00:11:53 185,344 —-a-w c:\windows\system32\wbem\framedyn.dll
- 2004-08-04 11:00:00 24,576 —-a-w c:\windows\system32\wbem\krnlprov.dll
+ 2008-04-14 00:11:56 24,576 —-a-w c:\windows\system32\wbem\krnlprov.dll
- 2004-08-04 11:00:00 16,384 —-a-w c:\windows\system32\wbem\mofcomp.exe
+ 2008-04-14 00:12:26 16,384 —-a-w c:\windows\system32\wbem\mofcomp.exe
- 2004-08-04 11:00:00 123,904 —-a-w c:\windows\system32\wbem\mofd.dll
+ 2008-04-14 00:11:57 123,904 —-a-w c:\windows\system32\wbem\mofd.dll
- 2004-08-04 11:00:00 47,104 —-a-w c:\windows\system32\wbem\ncprov.dll
+ 2008-04-14 00:12:01 47,104 —-a-w c:\windows\system32\wbem\ncprov.dll
- 2004-08-04 11:00:00 212,992 —-a-w c:\windows\system32\wbem\ntevt.dll
+ 2008-04-14 00:12:02 212,992 —-a-w c:\windows\system32\wbem\ntevt.dll
- 2004-08-04 11:00:00 92,672 —-a-w c:\windows\system32\wbem\policman.dll
+ 2008-04-14 00:12:02 92,672 —-a-w c:\windows\system32\wbem\policman.dll
- 2004-08-04 11:00:00 237,056 —-a-w c:\windows\system32\wbem\provthrd.dll
+ 2008-04-14 00:12:03 237,056 —-a-w c:\windows\system32\wbem\provthrd.dll
- 2004-08-04 11:00:00 177,152 —-a-w c:\windows\system32\wbem\repdrvfs.dll
+ 2008-04-14 00:12:04 178,176 —-a-w c:\windows\system32\wbem\repdrvfs.dll
- 2004-08-04 11:00:00 36,864 —-a-w c:\windows\system32\wbem\scrcons.exe
+ 2008-04-14 00:12:34 36,352 —-a-w c:\windows\system32\wbem\scrcons.exe
- 2004-08-04 11:00:00 86,528 —-a-w c:\windows\system32\wbem\stdprov.dll
+ 2008-04-14 00:12:07 86,528 —-a-w c:\windows\system32\wbem\stdprov.dll
- 2004-08-04 11:00:00 131,584 —-a-w c:\windows\system32\wbem\viewprov.dll
+ 2008-04-14 00:12:08 131,584 —-a-w c:\windows\system32\wbem\viewprov.dll
- 2004-08-04 11:00:00 196,608 —-a-w c:\windows\system32\wbem\wbemcntl.dll
+ 2008-04-14 00:12:08 196,608 —-a-w c:\windows\system32\wbem\wbemcntl.dll
- 2004-08-04 11:00:00 214,528 —-a-w c:\windows\system32\wbem\wbemcomn.dll
+ 2008-04-14 00:12:08 214,528 —-a-w c:\windows\system32\wbem\wbemcomn.dll
- 2004-08-04 11:00:00 71,680 —-a-w c:\windows\system32\wbem\wbemcons.dll
+ 2008-04-14 00:12:08 71,680 —-a-w c:\windows\system32\wbem\wbemcons.dll
- 2004-08-04 11:00:00 530,944 —-a-w c:\windows\system32\wbem\wbemcore.dll
+ 2008-04-14 00:12:08 531,456 —-a-w c:\windows\system32\wbem\wbemcore.dll
- 2004-08-04 11:00:00 178,176 —-a-w c:\windows\system32\wbem\wbemdisp.dll
+ 2008-04-14 00:12:08 178,176 —-a-w c:\windows\system32\wbem\wbemdisp.dll
- 2004-08-04 11:00:00 273,920 —-a-w c:\windows\system32\wbem\wbemess.dll
+ 2008-04-14 00:12:08 273,920 —-a-w c:\windows\system32\wbem\wbemess.dll
- 2004-08-04 11:00:00 43,008 —-a-w c:\windows\system32\wbem\wbemperf.dll
+ 2008-04-14 00:12:08 43,008 —-a-w c:\windows\system32\wbem\wbemperf.dll
- 2004-08-04 11:00:00 18,944 —-a-w c:\windows\system32\wbem\wbemprox.dll
+ 2008-04-14 00:12:08 18,944 —-a-w c:\windows\system32\wbem\wbemprox.dll
- 2004-08-04 11:00:00 43,520 —-a-w c:\windows\system32\wbem\wbemsvc.dll
+ 2008-04-14 00:12:08 43,520 —-a-w c:\windows\system32\wbem\wbemsvc.dll
- 2004-08-04 11:00:00 116,224 —-a-w c:\windows\system32\wbem\wbemtest.exe
+ 2008-04-14 00:12:39 116,224 —-a-w c:\windows\system32\wbem\wbemtest.exe
- 2004-08-04 11:00:00 197,120 —-a-w c:\windows\system32\wbem\wbemupgd.dll
+ 2008-04-14 00:12:08 197,120 —-a-w c:\windows\system32\wbem\wbemupgd.dll
- 2004-08-04 11:00:00 196,608 —-a-w c:\windows\system32\wbem\wmiadap.exe
+ 2008-04-14 00:12:40 196,608 —-a-w c:\windows\system32\wbem\wmiadap.exe
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\wbem\wmiapres.dll
+ 2008-04-13 17:10:20 6,656 —-a-w c:\windows\system32\wbem\wmiapres.dll
- 2004-08-04 11:00:00 89,088 —-a-w c:\windows\system32\wbem\wmiaprpl.dll
+ 2008-04-14 00:12:09 88,576 —-a-w c:\windows\system32\wbem\wmiaprpl.dll
- 2004-08-04 11:00:00 126,464 —-a-w c:\windows\system32\wbem\wmiapsrv.exe
+ 2008-04-14 00:12:40 126,464 —-a-w c:\windows\system32\wbem\wmiapsrv.exe
- 2004-08-04 11:00:00 358,912 —-a-w c:\windows\system32\wbem\wmic.exe
+ 2008-04-14 00:12:40 358,912 —-a-w c:\windows\system32\wbem\wmic.exe
- 2004-08-04 11:00:00 60,928 —-a-w c:\windows\system32\wbem\wmicookr.dll
+ 2008-04-14 00:12:09 60,928 —-a-w c:\windows\system32\wbem\wmicookr.dll
- 2004-08-04 11:00:00 140,800 —-a-w c:\windows\system32\wbem\wmidcprv.dll
+ 2008-04-14 00:12:09 140,800 —-a-w c:\windows\system32\wbem\wmidcprv.dll
- 2004-08-04 11:00:00 156,672 —-a-w c:\windows\system32\wbem\wmipcima.dll
+ 2008-04-14 00:12:09 156,672 —-a-w c:\windows\system32\wbem\wmipcima.dll
- 2004-08-04 11:00:00 132,096 —-a-w c:\windows\system32\wbem\wmipdskq.dll
+ 2008-04-14 00:12:09 132,096 —-a-w c:\windows\system32\wbem\wmipdskq.dll
- 2004-08-04 11:00:00 62,464 —-a-w c:\windows\system32\wbem\wmipiprt.dll
+ 2008-04-14 00:12:09 61,952 —-a-w c:\windows\system32\wbem\wmipiprt.dll
- 2004-08-04 11:00:00 62,976 —-a-w c:\windows\system32\wbem\wmipjobj.dll
+ 2008-04-14 00:12:09 62,464 —-a-w c:\windows\system32\wbem\wmipjobj.dll
- 2004-08-04 11:00:00 144,896 —-a-w c:\windows\system32\wbem\wmiprov.dll
+ 2008-04-14 00:12:09 144,896 —-a-w c:\windows\system32\wbem\wmiprov.dll
- 2004-08-04 11:00:00 437,248 —-a-w c:\windows\system32\wbem\wmiprvsd.dll
+ 2008-04-14 00:12:09 437,248 —-a-w c:\windows\system32\wbem\wmiprvsd.dll
- 2004-08-04 11:00:00 218,112 —-a-w c:\windows\system32\wbem\wmiprvse.exe
+ 2008-04-14 00:12:40 218,112 —-a-w c:\windows\system32\wbem\wmiprvse.exe
- 2004-08-04 11:00:00 41,472 —-a-w c:\windows\system32\wbem\wmipsess.dll
+ 2008-04-14 00:12:09 41,472 —-a-w c:\windows\system32\wbem\wmipsess.dll
- 2004-08-04 11:00:00 144,896 —-a-w c:\windows\system32\wbem\wmisvc.dll
+ 2008-04-14 00:12:09 144,896 —-a-w c:\windows\system32\wbem\wmisvc.dll
- 2004-08-04 11:00:00 95,232 —-a-w c:\windows\system32\wbem\wmiutils.dll
+ 2008-04-14 00:12:09 95,232 —-a-w c:\windows\system32\wbem\wmiutils.dll
- 2006-03-24 04:37:50 49,152 —-a-w c:\windows\system32\wdigest.dll
+ 2008-04-14 00:12:08 49,152 —-a-w c:\windows\system32\wdigest.dll
- 2004-08-04 11:00:00 23,552 —-a-w c:\windows\system32\wdmaud.drv
+ 2008-04-14 00:12:45 23,552 —-a-w c:\windows\system32\wdmaud.drv
- 2008-04-23 04:16:29 233,472 —-a-w c:\windows\system32\webcheck.dll
+ 2008-12-20 23:15:40 233,472 —-a-w c:\windows\system32\webcheck.dll
- 2006-01-04 03:35:05 68,096 —-a-w c:\windows\system32\webclnt.dll
+ 2008-04-14 00:12:08 68,096 —-a-w c:\windows\system32\webclnt.dll
- 2004-08-04 11:00:00 135,680 —-a-w c:\windows\system32\webvw.dll
+ 2008-04-14 00:12:08 135,680 —-a-w c:\windows\system32\webvw.dll
- 2004-08-04 11:00:00 65,536 —-a-w c:\windows\system32\wextract.exe
+ 2008-04-14 00:12:39 65,024 —-a-w c:\windows\system32\wextract.exe
- 2004-08-04 11:00:00 433,664 —-a-w c:\windows\system32\wiaacmgr.exe
+ 2008-04-14 00:12:39 433,664 —-a-w c:\windows\system32\wiaacmgr.exe
- 2004-08-04 11:00:00 463,360 —-a-w c:\windows\system32\wiadefui.dll
+ 2008-04-14 00:12:08 463,360 —-a-w c:\windows\system32\wiadefui.dll
- 2004-08-04 11:00:00 124,416 —-a-w c:\windows\system32\wiadss.dll
+ 2008-04-14 00:12:08 124,416 —-a-w c:\windows\system32\wiadss.dll
- 2004-08-04 11:00:00 75,776 —-a-w c:\windows\system32\wiascr.dll
+ 2008-04-14 00:12:08 75,776 —-a-w c:\windows\system32\wiascr.dll
- 2006-12-19 18:16:47 333,824 —-a-w c:\windows\system32\wiaservc.dll
+ 2008-04-14 00:12:08 333,824 —-a-w c:\windows\system32\wiaservc.dll
- 2004-08-04 11:00:00 589,312 —-a-w c:\windows\system32\wiashext.dll
+ 2008-04-14 00:12:08 589,312 —-a-w c:\windows\system32\wiashext.dll
- 2004-08-04 11:00:00 111,104 —-a-w c:\windows\system32\wiavideo.dll
+ 2008-04-14 00:12:08 111,104 —-a-w c:\windows\system32\wiavideo.dll
- 2008-03-19 09:47:00 1,845,248 —-a-w c:\windows\system32\win32k.sys
+ 2009-02-09 11:13:27 1,846,784 —-a-w c:\windows\system32\win32k.sys
- 2004-08-04 11:00:00 101,888 —-a-w c:\windows\system32\win32spl.dll
+ 2008-04-14 00:12:08 102,400 —-a-w c:\windows\system32\win32spl.dll
- 2004-08-04 11:00:00 937,984 —-a-w c:\windows\system32\winbrand.dll
+ 2008-04-13 16:48:53 1,647,616 —-a-w c:\windows\system32\winbrand.dll
+ 2008-04-14 00:12:08 712,704 ——w c:\windows\system32\windowscodecs.dll
+ 2008-04-14 00:12:08 346,112 ——w c:\windows\system32\windowscodecsext.dll
- 2004-08-04 11:00:00 351,232 —-a-w c:\windows\system32\winhttp.dll
+ 2008-04-14 00:12:08 354,304 —-a-w c:\windows\system32\winhttp.dll
- 2008-04-23 04:16:29 826,368 —-a-w c:\windows\system32\wininet.dll
+ 2008-12-20 23:15:41 826,368 —-a-w c:\windows\system32\wininet.dll
- 2004-08-04 11:00:00 32,768 —-a-w c:\windows\system32\winipsec.dll
+ 2008-04-14 00:12:09 32,256 —-a-w c:\windows\system32\winipsec.dll
- 2004-08-04 11:00:00 502,272 —-a-w c:\windows\system32\winlogon.exe
+ 2008-04-14 00:12:39 507,904 —-a-w c:\windows\system32\winlogon.exe
- 2004-08-04 11:00:00 176,128 —-a-w c:\windows\system32\winmm.dll
+ 2008-04-14 00:12:09 176,128 —-a-w c:\windows\system32\winmm.dll
- 2004-08-04 11:00:00 764,928 —-a-w c:\windows\system32\winntbbu.dll
+ 2008-04-14 00:11:11 756,224 —-a-w c:\windows\system32\winntbbu.dll
- 2004-08-04 11:00:00 16,896 —-a-w c:\windows\system32\winrnr.dll
+ 2008-04-14 00:12:09 16,896 —-a-w c:\windows\system32\winrnr.dll
- 2004-08-04 11:00:00 99,328 —-a-w c:\windows\system32\winscard.dll
+ 2008-04-14 00:12:09 99,328 —-a-w c:\windows\system32\winscard.dll
- 2004-08-04 11:00:00 17,408 —-a-w c:\windows\system32\winshfhc.dll
+ 2008-04-14 00:12:09 17,408 —-a-w c:\windows\system32\winshfhc.dll
- 2004-08-04 11:00:00 146,432 —-a-w c:\windows\system32\winspool.drv
+ 2008-04-14 00:12:45 146,432 —-a-w c:\windows\system32\winspool.drv
- 2007-03-17 13:43:01 292,864 —-a-w c:\windows\system32\winsrv.dll
+ 2008-04-14 00:12:09 293,376 —-a-w c:\windows\system32\winsrv.dll
- 2004-08-04 11:00:00 53,760 —-a-w c:\windows\system32\winsta.dll
+ 2008-04-14 00:12:09 53,760 —-a-w c:\windows\system32\winsta.dll
- 2004-08-04 11:00:00 176,640 —-a-w c:\windows\system32\wintrust.dll
+ 2008-04-14 00:12:09 176,640 —-a-w c:\windows\system32\wintrust.dll
- 2004-08-04 11:00:00 5,632 —-a-w c:\windows\system32\winver.exe
+ 2008-04-14 00:12:40 5,632 —-a-w c:\windows\system32\winver.exe
- 2006-08-17 12:28:27 132,096 —-a-w c:\windows\system32\wkssvc.dll
+ 2008-04-14 00:12:09 132,096 —-a-w c:\windows\system32\wkssvc.dll
+ 2008-04-14 00:12:09 69,120 ——w c:\windows\system32\wlanapi.dll
- 2004-08-04 11:00:00 172,032 —-a-w c:\windows\system32\wldap32.dll
+ 2008-04-14 00:12:09 172,032 —-a-w c:\windows\system32\wldap32.dll
- 2004-08-04 11:00:00 92,672 —-a-w c:\windows\system32\wlnotify.dll
+ 2008-04-14 00:12:09 92,672 —-a-w c:\windows\system32\wlnotify.dll
- 2004-08-04 11:00:00 5,632 —-a-w c:\windows\system32\wmi.dll
+ 2008-04-14 00:11:15 5,632 —-a-w c:\windows\system32\wmi.dll
- 2007-06-12 04:51:12 10,834,944 —-a-w c:\windows\system32\wmp.dll
+ 2008-11-11 22:34:42 10,838,016 —-a-w c:\windows\system32\wmp.dll
- 2006-10-19 02:47:20 295,936 ——w c:\windows\system32\wmpeffects.dll
+ 2008-06-24 22:12:58 295,936 ——w c:\windows\system32\wmpeffects.dll
+ 2008-04-14 00:12:09 276,992 ——w c:\windows\system32\wmphoto.dll
- 2004-08-04 11:00:00 115,200 —-a-w c:\windows\system32\wmsdmoe.dll
+ 2008-04-14 00:12:09 115,200 —-a-w c:\windows\system32\wmsdmoe.dll
- 2004-08-04 11:00:00 303,616 —-a-w c:\windows\system32\wmstream.dll
+ 2008-04-14 00:12:10 303,616 —-a-w c:\windows\system32\wmstream.dll
- 2004-08-04 11:00:00 264,192 —-a-w c:\windows\system32\wow32.dll
+ 2008-04-14 00:12:10 264,192 —-a-w c:\windows\system32\wow32.dll
- 2004-08-04 11:00:00 32,256 —-a-w c:\windows\system32\wpabaln.exe
+ 2008-04-14 00:12:40 32,256 —-a-w c:\windows\system32\wpabaln.exe
- 2004-08-04 11:00:00 32,256 —-a-w c:\windows\system32\wpnpinst.exe
+ 2008-04-14 00:12:41 11,264 —-a-w c:\windows\system32\wpnpinst.exe
- 2004-08-04 11:00:00 82,944 —-a-w c:\windows\system32\ws2_32.dll
+ 2008-04-14 00:12:10 82,432 —-a-w c:\windows\system32\ws2_32.dll
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\system32\ws2help.dll
+ 2008-04-14 00:12:10 19,968 —-a-w c:\windows\system32\ws2help.dll
- 2004-08-04 11:00:00 13,824 —-a-w c:\windows\system32\wscntfy.exe
+ 2008-04-14 00:12:41 13,824 —-a-w c:\windows\system32\wscntfy.exe
- 2004-08-04 11:00:00 114,688 —-a-w c:\windows\system32\wscript.exe
+ 2008-04-14 00:12:41 155,648 —-a-w c:\windows\system32\wscript.exe
- 2004-08-04 11:00:00 81,408 —-a-w c:\windows\system32\wscsvc.dll
+ 2008-04-14 00:12:10 80,896 —-a-w c:\windows\system32\wscsvc.dll
- 2004-08-04 11:00:00 596,992 —-a-w c:\windows\system32\wsecedit.dll
+ 2008-04-14 00:12:10 604,160 —-a-w c:\windows\system32\wsecedit.dll
- 2004-08-04 11:00:00 108,032 —-a-w c:\windows\system32\wshbth.dll
+ 2008-04-14 00:12:10 108,032 —-a-w c:\windows\system32\wshbth.dll
- 2004-08-04 11:00:00 28,672 —-a-w c:\windows\system32\wshcon.dll
+ 2008-04-14 00:12:10 36,864 —-a-w c:\windows\system32\wshcon.dll
- 2004-08-04 11:00:00 65,536 —-a-w c:\windows\system32\wshext.dll
+ 2008-04-14 00:12:10 90,112 —-a-w c:\windows\system32\wshext.dll
- 2004-08-04 11:00:00 14,336 —-a-w c:\windows\system32\wship6.dll
+ 2008-04-14 00:12:10 14,336 —-a-w c:\windows\system32\wship6.dll
- 2004-08-04 11:00:00 11,776 —-a-w c:\windows\system32\WshRm.dll
+ 2008-04-14 00:12:10 11,264 —-a-w c:\windows\system32\wshrm.dll
- 2004-08-04 11:00:00 19,968 —-a-w c:\windows\system32\wshtcpip.dll
+ 2008-04-14 00:12:10 19,456 —-a-w c:\windows\system32\wshtcpip.dll
- 2004-08-04 11:00:00 42,496 —-a-w c:\windows\system32\wsnmp32.dll
+ 2008-04-14 00:12:10 41,984 —-a-w c:\windows\system32\wsnmp32.dll
- 2004-08-04 11:00:00 22,528 —-a-w c:\windows\system32\wsock32.dll
+ 2008-04-14 00:12:10 22,528 —-a-w c:\windows\system32\wsock32.dll
- 2004-08-04 11:00:00 50,688 —-a-w c:\windows\system32\wstdecod.dll
+ 2008-04-14 00:12:10 50,688 —-a-w c:\windows\system32\wstdecod.dll
- 2004-08-04 11:00:00 18,432 —-a-w c:\windows\system32\wtsapi32.dll
+ 2008-04-14 00:12:10 18,432 —-a-w c:\windows\system32\wtsapi32.dll
- 2004-08-04 11:00:00 6,656 —-a-w c:\windows\system32\wuauserv.dll
+ 2008-04-14 00:12:11 6,656 —-a-w c:\windows\system32\wuauserv.dll
- 2004-08-04 11:00:00 378,368 —-a-w c:\windows\system32\wzcdlg.dll
+ 2008-04-14 00:12:11 383,488 —-a-w c:\windows\system32\wzcdlg.dll
- 2004-08-04 11:00:00 51,712 —-a-w c:\windows\system32\wzcsapi.dll
+ 2008-04-14 00:12:11 52,736 —-a-w c:\windows\system32\wzcsapi.dll
- 2004-08-04 11:00:00 359,936 —-a-w c:\windows\system32\wzcsvc.dll
+ 2008-04-14 00:12:11 483,840 —-a-w c:\windows\system32\wzcsvc.dll
- 2004-08-04 11:00:00 91,648 —-a-w c:\windows\system32\xactsrv.dll
+ 2008-04-14 00:12:11 91,648 —-a-w c:\windows\system32\xactsrv.dll
- 2004-08-04 11:00:00 30,720 —-a-w c:\windows\system32\xcopy.exe
+ 2008-04-14 00:12:41 30,720 —-a-w c:\windows\system32\xcopy.exe
- 2006-07-14 15:51:51 121,856 ——w c:\windows\system32\xmllite.dll
+ 2008-04-14 00:12:11 121,856 —-a-w c:\windows\system32\xmllite.dll
- 2004-08-04 11:00:00 129,536 —-a-w c:\windows\system32\xmlprov.dll
+ 2008-04-14 00:12:11 129,024 —-a-w c:\windows\system32\xmlprov.dll
- 2004-08-04 11:00:00 50,176 —-a-w c:\windows\system32\xmlprovi.dll
+ 2008-04-14 00:12:11 50,176 —-a-w c:\windows\system32\xmlprovi.dll
- 2006-03-01 19:42:42 11,776 —-a-w c:\windows\system32\xolehlp.dll
+ 2008-04-14 00:12:11 11,776 —-a-w c:\windows\system32\xolehlp.dll
- 2004-08-04 11:00:00 438,784 —-a-w c:\windows\system32\xpob2res.dll
+ 2008-04-13 17:39:29 438,784 —-a-w c:\windows\system32\xpob2res.dll
- 2004-08-04 11:00:00 187,392 —-a-w c:\windows\system32\xpsp1res.dll
+ 2008-04-13 17:39:22 187,392 —-a-w c:\windows\system32\xpsp1res.dll
- 2004-08-04 11:00:00 2,897,920 —-a-w c:\windows\system32\xpsp2res.dll
+ 2008-04-13 17:39:24 2,897,920 —-a-w c:\windows\system32\xpsp2res.dll
- 2007-10-29 10:04:03 350,720 —-a-w c:\windows\system32\xpsp3res.dll
+ 2008-04-13 17:39:26 689,152 —-a-w c:\windows\system32\xpsp3res.dll
- 2004-08-04 11:00:00 337,920 —-a-w c:\windows\system32\zipfldr.dll
+ 2008-04-14 00:12:11 338,432 —-a-w c:\windows\system32\zipfldr.dll
- 2004-08-04 11:00:00 50,688 —-a-w c:\windows\twain_32.dll
+ 2008-04-14 00:12:07 50,688 —-a-w c:\windows\twain_32.dll
- 2004-08-04 11:00:00 283,648 —-a-w c:\windows\winhlp32.exe
+ 2008-04-14 00:12:39 283,648 —-a-w c:\windows\winhlp32.exe
+ 2008-09-30 20:42:08 1,286,152 —-a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
+ 2008-09-30 20:45:12 91,656 —-a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
- 2007-01-19 20:15:24 74,802 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
+ 2008-04-14 00:12:50 74,802 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
- 2007-01-19 20:15:24 995,383 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
+ 2008-04-14 00:12:50 995,383 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
- 2007-01-19 20:15:24 1,011,774 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
+ 2008-04-14 00:12:50 1,011,774 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
- 2007-01-19 20:15:24 401,462 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2008-04-14 00:12:50 401,462 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2008-04-14 00:12:51 1,054,208 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
+ 2008-04-14 00:12:51 57,344 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2008-04-14 00:12:51 343,040 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
+ 2008-04-14 00:12:47 1,724,416 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
+ 2008-04-15 17:47:33 1,724,416 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\GdiPlus.dll
- 2004-08-04 11:00:00 853,504 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2008-04-14 00:12:49 853,504 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2004-08-04 11:00:00 991,232 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2008-04-14 00:12:50 991,232 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2004-08-04 11:00:00 132,096 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
0\rtcres.dll
+ 2008-04-13 18:26:33 132,096 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
0\rtcres.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-04 68856]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-04-03 165784]
"Zinio DLM"="c:\program files\Zinio\ZinioReader.exe" [2008-10-29 2699334]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2005-01-31 155648]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-31 339968]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-12-06 127035]
"gcasServ"="c:\program files\Microsoft AntiSpyware\gcasServ.exe" [2005-11-15 473928]
"DLBXCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll" [2004-12-07 69632]
"dlbxmon.exe"="c:\program files\Dell Photo AIO Printer 962\dlbxmon.exe" [2005-01-18 425984]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 63712]
"googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2009-01-05 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-12 342312]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-09 515416]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-04-01 1932568]
"wiyobebaja"="c:\windows\system32\gijimedo.dll" [BU]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.exe.lnk - c:\windows\Installer\{A4E760F4-17A0-4DFE-B636-511806093892}\IconA4E760F4.exe [2006-08-17 51712]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2005-03-29 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
2004-09-07 18:08 110592 c:\program files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-04-01 17:25 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.avis"= ff_acm.acm

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Matt^Start Menu^Programs^Startup^V CAST Music Monitor.lnk]
path=c:\documents and settings\Matt\Start Menu\Programs\Startup\V CAST Music Monitor.lnk
backup=c:\windows\pss\V CAST Music Monitor.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]
–a—— 2005-01-27 03:02 86016 c:\program files\Dell\Media Experience\DMXLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
——— 2004-10-12 18:54 57344 c:\program files\CyberLink\PowerDVD\DVDLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
–a—— 2004-09-14 10:50 53248 c:\program files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray]
–a—— 2004-09-14 10:50 131072 c:\program files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QBReminderFlash]
–a—— 2004-11-11 12:26 26112 c:\program files\Intuit\QuickBooks 2005\Atom\QBReminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
–a—— 2005-04-10 21:10 204845 c:\program files\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]
–a—— 2004-01-07 03:01 110592 c:\program files\Common Files\Sonic\Update Manager\sgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
–a—— 2005-08-19 19:34 3084288 c:\program files\Yahoo!\Messenger\YPager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\SmartFTP\\SmartFTP.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\TVersity\\Media Server\\MediaServer.exe"=
"c:\\WINDOWS\\system32\\dldocoms.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\dldopswx.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\dldojswx.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Intel\\Wireless\\Bin\\WLKEEPER.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=

R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [2009-04-01 26624]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-29 64160]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-04-01 325640]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-04-01 108552]
R1 vcdrom;Virtual CD-ROM Device Driver;c:\program files\VCD\VCdRom.sys [2001-12-19 8576]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-04-01 298264]
R2 dldo_device;dldo_device;c:\windows\system32\dldocoms.exe -service –> c:\windows\system32\dldocoms.exe -service [?]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-03-09 951632]
R3 Eacfilt;Eacfilt Miniport;c:\windows\system32\drivers\eacfilt.sys [2006-08-30 9433]
S0 black;black;c:\windows\system32\drivers\BlackDrv.sys –> c:\windows\system32\drivers\BlackDrv.sys [?]
S2 IPSECEXT;Nortel Extranet Access Protocol;c:\windows\system32\drivers\ipsecw2k.sys [2006-08-30 115680]
S3 RapFile;RapFile;c:\windows\system32\drivers\RapFile.sys [2006-08-30 36676]
S3 RapNet;RapNet;c:\windows\system32\drivers\RapNet.sys [2006-08-30 24344]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37c78ef0-211d-11de-8b58-444553544200}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J:\m.exe /s

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A4E760F4-17A0-4DFE-B636-511806093892}]
msiexec.exe /fup /quiet
.
Contents of the 'Scheduled Tasks' folder

2009-04-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 15:06]

2009-03-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 13:34]

2009-04-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 15:07]

2009-04-07 c:\windows\Tasks\User_Feed_Synchronization-{D9572040-587F-48C4-B2DF-5DF4973341D5}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 12:58]
.
- - - - ORPHANS REMOVED - - - -

BHO-{d00ba341-8a6d-460d-aecd-eb6093e185a2} - (no file)
HKLM-Run-CPM2fbafc54 - c:\windows\system32\bujumuto.dll
HKLM-Run-2c89cfc8 - c:\windows\system32\wugoruwu.dll

.
——- Supplementary Scan ——-
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - hxxp://download.ewido.net/ewidoOnlineScan.cab
DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} - hxxp://aon.bluecurrent.com/utils/BCFileControl/BCFileControl.cab
DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} - hxxp://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} - hxxp://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-07 15:46:50
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLBXCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1880)
c:\windows\system32\Ati2evxx.dll
c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\ati2evxx.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Intel\Wireless\Bin\WLKEEPER.exe
c:\windows\system32\scardsvr.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\dldocoms.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\TVersity\Media Server\MediaServer.exe
c:\progra~1\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\ati2evxx.exe
c:\progra~1\Intel\Wireless\Bin\1XConfig.exe
c:\program files\Apoint\ApntEx.exe
c:\program files\Microsoft AntiSpyware\gcasDtServ.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\dlbxcoms.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\MSN Messenger\usnsvc.exe
c:\program files\Java\jre1.6.0_05\bin\jucheck.exe
.
**************************************************************************
.
Completion time: 2009-04-07 15:54:22 - machine was rebooted [Matt]
ComboFix-quarantined-files.txt 2009-04-07 19:53:25
ComboFix2.txt 2009-04-07 00:20:40

Pre-Run: 8,664,723,456 bytes free
Post-Run: 8,650,977,280 bytes free

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
5621 — E O F — 2009-04-07 11:52:49

____________________________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:57:21 PM, on 4/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dldocoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [wiyobebaja] Rundll32.exe "C:\WINDOWS\system32\gijimedo.dll",s
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/…trolLite_EN.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} (BCFileControlX Control) - http://aon.bluecurrent.com/utils/BCFileCon…FileControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9}
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://www.viidoo.tv/TVUAx.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1238630328391
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://pki.honeywell.com/pki/VSApps/vspta3.cab
O16 - DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} (BCMigrateX Control) - http://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {8FD68625-2346-418A-8899-67CB36B1917F} - http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} (BCCopyX Control) - http://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: dldo_device - - C:\WINDOWS\system32\dldocoms.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 12997 bytes

Noviciate

Post #6April 7, 2009, 8:14 PM UTC

1) You will need to disable Spybot's Tea Timer function, if it is running, as it may interfere with this fix. - this is a two step process.
First step:

Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
If you have the new version 1.5, Click once on Resident Protection, then Right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
If you have Version 1.4, Click on Exit Spybot S&D Resident

Second step, For Either Version :

Open Spybot S&D
Click Mode, choose Advanced Mode
Go To the bottom of the Vertical Panel on the Left, Click Tools
then, also in left panel, click Resident shows a red/white shield.
If your firewall raises a question, say OK
In the Resident protection status frame, Uncheck the box labelled Resident "Tea-Timer"(Protection of over-all system settings) active
OK any prompts.
Use File, Exit to terminate Spybot
Reboot your machine for the changes to take effect.

2) Run HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [wiyobebaja] Rundll32.exe "C:\WINDOWS\system32\gijimedo.dll",s

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked

3) You can now re-enable Tea Timer.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download Malwarebytes' Anti-Malware from here and save it to your Desktop - unless you already have it, in which case skip to the "updating" bit below.

Double-click mbam-setup.exe and follow the prompts to install the program.
Ensure a checkmark is placed next to both Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware and then click Finish.
If an update is found, it will download and install the latest version - you'll need to clear it with your firewall.
Once the program has loaded, select Perform full scan and then Scan.
When the scan has finished, click OK and then Show Results to view the results - no surprise there!
If MBAM finds anything, check the box(es) and click Remove Selected.
When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt

Let me have the MBAM log, a fresh HJT log (run in Normal Mode) AND a description of how your PC is behaving.

golfball1

Post #7April 7, 2009, 9:54 PM UTC

This time when I rebooted I didn't get the dll errors. Everything seems to be running OK now. Do you see anything else still lingering around?

Thanks.

Malwarebytes' Anti-Malware 1.36
Database version: 1949
Windows 5.1.2600 Service Pack 3

4/7/2009 5:45:11 PM
mbam-log-2009-04-07 (17-45-11).txt

Scan type: Full Scan (C:\|)
Objects scanned: 182967
Time elapsed: 1 hour(s), 2 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 2
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm2fbafc54 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\2c89cfc8 (Trojan.Vundo.H) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

———————————————————————————————–

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:50:52 PM, on 4/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dldocoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: (no name) - {d00ba341-8a6d-460d-aecd-eb6093e185a2} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/…trolLite_EN.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} (BCFileControlX Control) - http://aon.bluecurrent.com/utils/BCFileCon…FileControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9}
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://www.viidoo.tv/TVUAx.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1238630328391
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://pki.honeywell.com/pki/VSApps/vspta3.cab
O16 - DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} (BCMigrateX Control) - http://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {8FD68625-2346-418A-8899-67CB36B1917F} - http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} (BCCopyX Control) - http://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: dldo_device - - C:\WINDOWS\system32\dldocoms.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 12769 bytes

Noviciate

Post #8April 7, 2009, 10:23 PM UTC

Worryingly, I think that might be that! I'd like you to run the PC for a day or two, and then do one last scan - given the amount of crud removed already, i'd like to be sure that nothing got left behind.

Pay a visit to the Kaspersky Online Scanner 7 - I.E. is preferred for this scan.

Read the Information panel and then click Accept.
Allow the ActiveX download if necessary.
Both the anti-virus engine and database will need to be downloaded, which may take a little time.
Once this has been completed, select My Computer from the Scan section on the left hand side.
Put the kettle on!
Although it is recommended by Kaspersky that you should disable your anti-virus scanner before starting this scan, it should work OK with it still active - it does on my PC.
Although you may find the scan speed increases if you carry out this step, I never like to disable my resident scanner while online, so I don't.
When the scan has completed, click View scan report at the bottom.
Click Save Report As…
Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
Click Save and pick a location for the file - the Desktop is always handy.

Copy and paste the report into your next reply along with a fresh HJT log, run in Normal Mode, and a description of how your PC is behaving.

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

golfball1

Post #9April 9, 2009, 12:52 PM UTC

Everything seems to be working fine now. Let me know if you see anything else.

——————————————————————————–
KASPERSKY ONLINE SCANNER 7 REPORT
Wednesday, April 8, 2009
Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Wednesday, April 08, 2009 00:54:34
Records in database: 2021752
——————————————————————————–

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\

Scan statistics:
Files scanned: 104869
Threat name: 23
Infected objects: 35
Suspicious objects: 0
Duration of the scan: 04:29:23

File name / Threat name / Threats count
C:\HP\HP\Matt's stuff\klite203ec.exe Infected: Trojan-Downloader.Win32.VB.kxl 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.Cydoor 2
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.NewDotNet 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.SaveNow.av 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.CommonName.g 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.1007 2
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.Altnet.a 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.1044 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.d 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.e 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.f 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.3120 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: Trojan.Win32.Krepper.y 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.i 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.a 1
C:\HP\HP\Matt's stuff\My Shared Folder\kmd15_en.exe Infected: not-a-virus:AdWare.Win32.BrilliantDigital.b 1
C:\HP\HP\Matt's stuff\xp_keyfinder_141.zip Infected: not-a-virus:PSWTool.Win32.RAS.a 2
C:\i386\SMTP.ocx Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Matt\Apps\AON-ENG-AdobeSystems-AcrobatDistiller-6.0-GBL-R1\AdobeSystems-AcrobatDistiller_V6.0_ENG.zip Infected: not-a-virus:RiskTool.Win32.PsKill.h 1
C:\Matt\Apps\AON-ENG-AdobeSystems-AcrobatDistiller-6.0-GBL-R1\Process.exe Infected: not-a-virus:RiskTool.Win32.PsKill.h 1
C:\Program Files\Microsoft AntiSpyware\Quarantine\5C5A3D94-2056-47E9-8CCA-D39158\5B221E6C-9A7B-4E95-9F5A-4C8B28 Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Program Files\Microsoft AntiSpyware\Quarantine\6B204A26-CCD9-4CF3-99C9-395ED8\AC0DD91C-29EF-41CD-8430-E18FBF Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Program Files\Microsoft AntiSpyware\Quarantine\C7C0F6D7-4694-4ECE-B5A4-5A9F8D\445B7B79-7B6B-4211-893F-4FECED Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Program Files\Microsoft AntiSpyware\Quarantine\C7F4ECF6-AD3F-4E4D-82BB-97E3BA\9D6ADA9B-5D08-44F3-8C1C-4DDF44 Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Program Files\Microsoft AntiSpyware\Quarantine\EF81E5B3-42CB-4FB3-BB00-905CEE\C15AAED4-2BC3-44DA-9492-BA1C19 Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Qoobox\Quarantine\C\WINDOWS\system32\wugoruwu.dll.vir Infected: Trojan.Win32.Stuh.bur 1
C:\Tally\full 3.18.05\TallySales Full 4-2-14.msi Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\Tally\New Folder\vnc-4_1_1-x86_win32.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4110 1
C:\Tally\New Folder\vnc-4_1_1-x86_win32.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
C:\Tally\Support\Controls\SMTP.ocx Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1
C:\WINDOWS\system32\SMTP.ocx Infected: not-a-virus:NetTool.Win32.SmtpModule.b 1

The selected area was scanned.

__________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:49:09 AM, on 4/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dldocoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\msfeedssync.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Microsoft Streets & Trips\Streets.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\logon.scr
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: (no name) - {d00ba341-8a6d-460d-aecd-eb6093e185a2} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [wiyobebaja] Rundll32.exe "C:\WINDOWS\system32\gijimedo.dll",s
O4 - HKLM\..\Run: [CPM2fbafc54] Rundll32.exe "c:\windows\system32\bujumuto.dll",a
O4 - HKLM\..\Run: [2c89cfc8] rundll32.exe "C:\WINDOWS\system32\wugoruwu.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/…trolLite_EN.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} (BCFileControlX Control) - http://aon.bluecurrent.com/utils/BCFileCon…FileControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9}
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://www.viidoo.tv/TVUAx.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1238630328391
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://pki.honeywell.com/pki/VSApps/vspta3.cab
O16 - DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} (BCMigrateX Control) - http://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {8FD68625-2346-418A-8899-67CB36B1917F} - http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} (BCCopyX Control) - http://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: dldo_device - - C:\WINDOWS\system32\dldocoms.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 13468 bytes

Noviciate

Post #10April 9, 2009, 6:56 PM UTC

You may need to set Windows to show All Hidden Files and Folders.
Instructions can be found here.
** These files are hidden to stop you accidentally removing something important.
It is advisable to hide them again after fixing your computer. **

1) Run HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

O4 - HKLM\..\Run: [wiyobebaja] Rundll32.exe "C:\WINDOWS\system32\gijimedo.dll",s
O4 - HKLM\..\Run: [CPM2fbafc54] Rundll32.exe "c:\windows\system32\bujumuto.dll",a
O4 - HKLM\..\Run: [2c89cfc8] rundll32.exe "C:\WINDOWS\system32\wugoruwu.dll",b

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked

2) Reboot your computer in Safe Mode.

If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

3) Remove any/all of the following files/folders that you can find:

Files

C:\WINDOWS\system32\gijimedo.dll
c:\windows\system32\bujumuto.dll
C:\WINDOWS\system32\wugoruwu.dll

As an example:
To delete C:\WINDOWS\system32\filetogo.bye
Double click the My Computer icon on your Desktop.
Double click on Local Disc (C:)
Double click on the Windows folder,
Double click on the System 32 folder,
Right click on filetogo.bye and from the menu that appears, click on 'Delete'

4) Boot into normal mode.

Let me have a fresh HJT log and tell me which files, if any, you found and deleted.

golfball1

Post #11April 10, 2009, 12:46 PM UTC

After I ran the HJT and selected those files for removal my spy bot asked me for permission to have them removed. I then booted in safemode, but couldn't find them in the system32 with all files and folders showing.

Here is the updated log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:40:12 AM, on 4/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dldocoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msfeedssync.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: (no name) - {d00ba341-8a6d-460d-aecd-eb6093e185a2} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/…trolLite_EN.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25C54745-34D4-11D5-AFF5-005004211DB3} (BCFileControlX Control) - http://aon.bluecurrent.com/utils/BCFileCon…FileControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9}
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://www.viidoo.tv/TVUAx.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1238630328391
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.putfile.com/includes/ImageUploader4.cab
O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://pki.honeywell.com/pki/VSApps/vspta3.cab
O16 - DPF: {77349B07-BCEA-11D4-AFAE-005004211DB3} (BCMigrateX Control) - http://aon.bluecurrent.com/utils/BCMigrate/BCMigrate.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {8FD68625-2346-418A-8899-67CB36B1917F} - http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {E2824BC5-4AA0-11D4-AF78-005004211DB3} (BCCopyX Control) - http://aon.bluecurrent.com/utils/BCCopy/BCCopy.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: dldo_device - - C:\WINDOWS\system32\dldocoms.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 12989 bytes

Noviciate

Post #12April 10, 2009, 6:46 PM UTC

Run HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {d00ba341-8a6d-460d-aecd-eb6093e185a2} - (no file)

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked

If Spybot asks, tell it to mind it's own business!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Your log shows these three entries:

Ad-Aware
Ad-Aware
Ad-Aware SE Personal

I don't know if the first two are leftovers or what, but the third is an old version which may not update. The latest version, Ad-Aware Anniversary Edition, is available here - it's still free for Home use.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Your version of Adobe Reader is a little old too. You can get the latest version here - and Yup, it's free too.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

You also need to deal with Sun Java as it's old too.

1) Go here and click on the Windows XP/Vista/2000/2003 Offline link in the Windows section near the top and save it to your Desktop.

2) Download JavaRa from here and save it to your Desktop.
You will need to extract the file(s):
Right click on the zipped folder and from the menu that appears, click on Extract All…
In the 'Extraction Wizard' window that opens, click on Next> and in the next window that appears, click on Next> again.
In the final window, click on Finish
***Please close any instances of Internet Explorer before continuing!***

Double-click JavaRa.exe to begin.
Pick your preferred language from the drop-down menu and click Select.
Click on Remove Older Versions to remove older version of Java - obvious really, isn't it!
Click Yes when prompted. When JavaRa is done, a notice will appear that a logfile has been produced. Click OK.
A logfile will pop up. Please save it to a convenient location, just in case you have any problems with Java afterwards.

3) Run the installer that you downloaded earlier.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Your log doesn't appear to show a third-party software firewall installed - if you have one, and i've missed it, please ignore this.
If you are relying the firewall that comes with Service Pack 2, then you need to install one. While the SP2 firewall is better than nothing, it doesn't monitor outgoing traffic, so anything malicious on your computer can 'phone home' at will.
If you are using a wireless router that comes with a NAT hardware firewall, this also doesn't monitor outgoing connections.

There are a few free firewalls available.
Comodo Firewall Pro, available here. This download has both a firewall and anti-virus in the same package, so be sure that you uncheck the AV option if you choose to install this one.
PC Tools Firewall Plus, available here.
Online Armor Free, available here.

It is important to note that you should only have one firewall installed at a time, but you can download them all to your Desktop and install each in turn to see which one you prefer.

Understanding and Using Firewalls: http://www.bleepingcomputer.com/tutorials/tutorial60.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I want you to run your PC as normal for a few days and when you are happy that everything is fine, do the following:

Go to Start > Run, enter the following into the textbox and click OK: combofix /u
This will uninstall Combofix and do a little housework besides.

Create a new Restore Point - this will give a clean one should you need it in the future.
A tutorial for System Restore is available here.

The reason for waiting is that if removing the malware has caused a problem, which it occasionally does, you can put your PC back to how it was before the fix. This will re-install the malware, but an infected PC is better than an expensive paperweight!

Some bedtime reading: This is a very good tutorial about keeping your computer safe and secure on the internet.

Noviciate

Post #13April 18, 2009, 9:48 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Auto Updates Disabled

✨ Ask AI

Ask AI