What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Laptop

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My fairly new laptop is not working properly. I can't use the internet and am afraid I have a rather nasty virus. My husband has tried to fix this and and thrown up his hands, so it's my turn. Since my internet connection is shaky downloading files often takes several tries so this won't be a quick and easy fix. Plese try to help and I ask for your patience and understanding upfront. Taylor
Post #2
If you have another computer available to you to download the programs to a USB and transfer, that might be easier.

There may be a number of downloads as first we need to diagnose the problem, then give you tools to clean it up.


Please do the following

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.pif to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT


[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • Sections
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and post it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Post #3
Catbyte second try sending the DDS log, IE very unstable DDS (Ver_09-07-30.01) - NTFSx86 Run by [removed] at 8:04:24.32 on Mon 09/21/2009 Internet Explorer: 8.0.6001.18813 BrowserJavaVersion: 1.6.0_13 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.143 [GMT -4:00] AV: Norton Internet Security *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8} SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\Sony\Network Utility\NSUService.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Spyware Doctor\pctsAuxs.exe C:\Program Files\Spyware Doctor\pctsSvc.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Sony\VAIO Event Service\VESMgr.exe C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\WUDFHost.exe C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe C:\Windows\system32\igfxext.exe C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\igfxext.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Spyware Doctor\TFEngine\TFService.exe C:\Windows\system32\taskeng.exe C:\Program Files\Spyware Doctor\Update.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Sony\ISB Utility\ISBMgr.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Sony\VAIO Center Access Bar\VCAB.exe C:\Program Files\Sony\VAIO PC Wireless LAN Wizard\AutoLaunchWLASU.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Apoint\ApMsgFwd.exe C:\Program Files\Spyware Doctor\pctsTray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Sony\Network Utility\LANUtil.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehtray.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\consent.exe G:\dds.pif C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.aol.com BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: {1e8a6170-7264-4d0f-beae-d42a53123c75} - c:\program files\common files\symantec shared\coshared\browser\1.5\NppBho.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: Show Norton Toolbar: {90222687-f593-4738-b738-fbee9c7b26df} - c:\program files\common files\symantec shared\coshared\browser\1.5\UIBHO.dll TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [NSUFloatingUI] "c:\program files\sony\network utility\LANUtil.exe" uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [AOL Fast Start] "c:\program files\aol 9.1\AOL.EXE" -b uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [Apoint] c:\program files\apoint\Apoint.exe mRun: [ISBMgr.exe] "c:\program files\sony\isb utility\ISBMgr.exe" mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [VAIO Center Access Bar] "c:\program files\sony\vaio center access bar\VCAB.exe" 1 mRun: [VWLASU] "c:\program files\sony\vaio pc wireless lan wizard\AutoLaunchWLASU.exe" mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe" mRun: [Symantec PIF AlertEng] "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe" /a /m "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\AlertEng.dll" mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [HostManager] c:\program files\common files\aol\1239025762\ee\AOLSoftware.exe mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe" StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\aolddi~1.lnk - c:\ddi\AOLICON.exe mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL LSP: c:\program files\common files\pc tools\lsp\PCTLsp.dll DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/en-us/wlscctrl2.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab Notify: igfxcui - igfxdev.dll Notify: VESWinlogon - VESWinlogon.dll ================= FIREFOX =================== FF - ProfilePath - FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} ============= SERVICES / DRIVERS =============== R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2009-7-13 206256] R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2009-7-13 51488] R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2009-7-13 39200] R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\symantec\defini~1\symcdata\idsdefs\20080312.001\IDSvix86.sys [2008-3-12 261680] R1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [2009-7-13 159600] R2 NSUService;NSUService;c:\program files\sony\network utility\NSUService.exe [2007-8-26 200704] R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2009-7-13 348752] R3 pctplsg;pctplsg;c:\windows\system32\drivers\pctplsg.sys [2009-7-13 64392] R3 SYMNDISV;SYMNDISV;c:\windows\system32\drivers\symndisv.sys [2007-10-30 37936] R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2009-7-13 33056] R3 ThreatFire;ThreatFire;c:\program files\spyware doctor\tfengine\tfservice.exe service –> c:\program files\spyware doctor\tfengine\TFService.exe service [?] R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-8-26 812544] S3 downloads[1];downloads[1];c:\windows\system32\drivers\downloads[1].sys [2009-8-26 34816] S3 rootrepeal[1];rootrepeal[1];c:\windows\system32\drivers\rootrepeal[1].sys [2009-8-26 34816] S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\sony\vaio media integrated server\UCLS.exe [2007-8-26 745472] S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\sony\vaio media integrated server\platform\SV_Httpd.exe [2007-8-26 397312] S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\sony\vaio media integrated server\platform\UPnPFramework.exe [2007-8-26 1089536] S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\sony\vcm intelligent analyzing manager\VcmIAlzMgr.exe [2007-8-26 292152] S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\common files\sony shared\vcmxml\VcmXmlIfHelper.exe [2007-8-26 79736] =============== Created Last 30 ================ 2009-09-20 23:31 897,608 a——- c:\windows\system32\drivers\tcpip.sys 2009-09-20 23:31 104,960 a——- c:\windows\system32\netiohlp.dll 2009-09-20 23:30 27,136 a——- c:\windows\system32\NETSTAT.EXE 2009-09-20 23:30 19,968 a——- c:\windows\system32\ARP.EXE 2009-09-20 23:30 9,728 a——- c:\windows\system32\TCPSVCS.EXE 2009-09-20 23:30 10,240 a——- c:\windows\system32\finger.exe 2009-09-20 23:30 11,264 a——- c:\windows\system32\MRINFO.EXE 2009-09-20 23:30 8,704 a——- c:\windows\system32\HOSTNAME.EXE 2009-09-20 23:30 17,920 a——- c:\windows\system32\ROUTE.EXE 2009-09-20 23:30 17,920 a——- c:\windows\system32\netevent.dll 2009-09-20 23:29 2,501,921 a——- c:\windows\system32\wlan.tmf 2009-09-20 23:29 293,376 a——- c:\windows\system32\wlanmsm.dll 2009-09-20 23:29 302,592 a——- c:\windows\system32\wlansec.dll 2009-09-20 23:29 127,488 a——- c:\windows\system32\L2SecHC.dll 2009-09-20 23:29 513,024 a——- c:\windows\system32\wlansvc.dll 2009-09-20 23:29 2,868,224 a——- c:\windows\system32\mf.dll 2009-09-20 18:25 0 a—h— c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf 2009-09-02 03:08 7,396 a——- c:\windows\system32\drivers\pctcore.cat 2009-09-02 02:02 28,672 a——- c:\windows\system32\Apphlpdm.dll 2009-09-02 02:02 4,240,384 a——- c:\windows\system32\GameUXLegacyGDFs.dll 2009-08-31 13:19 –dsh— C:\$RECYCLE.BIN 2009-08-31 11:59 229,376 a——- c:\windows\PEV.exe 2009-08-31 11:59 161,792 a——- c:\windows\SWREG.exe 2009-08-31 11:59 98,816 a——- c:\windows\sed.exe 2009-08-31 11:58 –ds—- C:\ComboFix 2009-08-29 03:05 2,048 a——- c:\windows\system32\tzres.dll 2009-08-28 14:09 71,680 a——- c:\windows\system32\atl.dll 2009-08-28 14:09 160,256 a——- c:\windows\system32\wkssvc.dll 2009-08-28 14:07 91,136 a——- c:\windows\system32\avifil32.dll 2009-08-28 14:06 2,066,432 a——- c:\windows\system32\mstscax.dll 2009-08-28 14:06 499,712 a——- c:\windows\system32\kerberos.dll 2009-08-28 14:06 213,504 a——- c:\windows\system32\msv1_0.dll 2009-08-28 14:06 175,104 a——- c:\windows\system32\wdigest.dll 2009-08-28 14:06 1,256,448 a——- c:\windows\system32\lsasrv.dll 2009-08-28 14:06 270,848 a——- c:\windows\system32\schannel.dll 2009-08-28 14:06 439,896 a——- c:\windows\system32\drivers\ksecdd.sys 2009-08-28 14:06 9,728 a——- c:\windows\system32\lsass.exe 2009-08-28 14:06 72,704 a——- c:\windows\system32\secur32.dll 2009-08-28 14:05 313,344 a——- c:\windows\system32\wmpdxm.dll 2009-08-28 14:05 7,680 a——- c:\windows\system32\spwmp.dll 2009-08-28 14:05 4,096 a——- c:\windows\system32\dxmasf.dll 2009-08-28 14:05 4,096 a——- c:\windows\system32\msdxm.ocx 2009-08-28 14:05 8,147,456 a——- c:\windows\system32\wmploc.DLL 2009-08-28 14:05 43,520 a——- c:\windows\system32\msdxm.tlb 2009-08-28 14:05 18,432 a——- c:\windows\system32\amcompat.tlb 2009-08-26 18:12 34,816 a——- c:\windows\system32\drivers\rootrepeal[1].sys 2009-08-26 18:11 34,816 a——- c:\windows\system32\drivers\rootrepeal.sys 2009-08-26 17:58 34,816 a——- c:\windows\system32\drivers\downloads[1].sys ==================== Find3M ==================== 2009-09-02 03:08 206,256 a——- c:\windows\system32\drivers\PCTCore.sys 2009-08-28 08:39 173,056 a——- c:\windows\apppatch\AcXtrnal.dll 2009-08-28 08:38 2,153,984 a——- c:\windows\apppatch\AcGenral.dll 2009-08-28 08:38 541,696 a——- c:\windows\apppatch\AcLayers.dll 2009-08-28 08:38 459,776 a——- c:\windows\apppatch\AcSpecfc.dll 2009-08-03 13:36 38,160 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2009-08-03 13:36 19,096 a——- c:\windows\system32\drivers\mbam.sys 2009-07-21 17:52 915,456 a——- c:\windows\system32\wininet.dll 2009-07-21 17:47 109,056 a——- c:\windows\system32\iesysprep.dll 2009-07-21 17:47 71,680 a——- c:\windows\system32\iesetup.dll 2009-07-21 16:13 133,632 a——- c:\windows\system32\ieUnatt.exe 2009-07-14 06:49 143,360 a——- c:\windows\inf\infstrng.dat 2009-07-14 06:49 86,016 a——- c:\windows\inf\infstor.dat 2009-07-14 06:49 51,200 a——- c:\windows\inf\infpub.dat 2009-07-13 10:41 54,832 a——- c:\windows\system32\AOLParconLink.exe 2008-06-12 07:38 665,600 a——- c:\windows\inf\drvindex.dat 2008-06-01 15:02 174 a–sh— c:\program files\desktop.ini 2007-08-26 06:19 1,132,112 a——- c:\programdata\pswi_preloaded.exe 2007-08-26 06:19 1,132,112 a——- c:\progra~2\pswi_preloaded.exe 2006-11-02 08:42 287,440 a——- c:\windows\inf\perflib\0409\perfi.dat 2006-11-02 08:42 287,440 a——- c:\windows\inf\perflib\0409\perfh.dat 2006-11-02 08:42 30,674 a——- c:\windows\inf\perflib\0409\perfd.dat 2006-11-02 08:42 30,674 a——- c:\windows\inf\perflib\0409\perfc.dat 2006-11-02 05:20 287,440 a——- c:\windows\inf\perflib\0000\perfi.dat 2006-11-02 05:20 287,440 a——- c:\windows\inf\perflib\0000\perfh.dat 2006-11-02 05:20 30,674 a——- c:\windows\inf\perflib\0000\perfd.dat 2006-11-02 05:20 30,674 a——- c:\windows\inf\perflib\0000\perfc.dat 2009-05-17 16:19 245,760 a–sh— c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat 2009-06-12 09:44 16,384 a–sh— c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\windows\history\history.ie5\index.dat 2009-06-12 09:44 32,768 a–sh— c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat 2009-06-12 09:44 16,384 a–sh— c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\cookies\index.dat 2009-06-12 09:44 245,760 a–sh— c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat 2009-06-11 09:04 245,760 a–sh— c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\windows\ietldcache\index.dat 2007-08-26 17:25 8,192 a–sh— c:\windows\users\default\NTUSER.DAT ============= FINISH: 8:08:20.09 ===============
Post #5
Problem signature: Problem Event Name: BlueScreen OS Version: 6.0.6001.2.1.0.768.3 Locale ID: 1033 Additional information about the problem: BCCode: 1000008e BCP1: C0000005 BCP2: 82485842 BCP3: 87337A54 BCP4: 00000000 OS Version: 6_0_6001 Service Pack: 1_0 Product: 768_1 Files that help describe the problem: opps did this wrong. Can't get GMER to run either it doesnt access it or it trries to run and after 2 tries a bluescreen pops up. I'll wait for your next suggestion, taylor
Post #6
Try this one
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive.
  • Open [external image: Posted Image] on your desktop.
  • Click the [external image: Posted Image] tab.
  • Click the [external image: Posted Image] button.
  • Check all seven boxes: [external image: Posted Image]
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the [external image: Posted Image] button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.



what was the above log from? Did combofix run previously?
Post #7
Catbyte, 8th times the charm. Scan ran a long tome but only a short log, hopefully it will post here. taylor
GMER 1.0.15.15087 - http://www.gmer.net
Rootkit scan 2009-09-21 09:57:31
Windows 6.0.6001 Service Pack 1
Running: gmer.exe; Driver: C:\Users\kevinkim\AppData\Local\Temp\aflcrkod.sys


—- System - GMER 1.0.15 —-

SSDT 865129D8 ZwConnectPort
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcess [0x82A179A6]
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcessEx [0x82A17B98]
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwTerminateProcess [0x82A17656]
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateUserProcess [0x82A17DA0]

—- Devices - GMER 1.0.15 —-

AttachedDevice \FileSystem\Ntfs \Ntfs TfFsMon.sys (ThreatFire Filesystem Monitor/PC Tools)
AttachedDevice \Driver\tdx \Device\Tcp pctgntdi.sys
AttachedDevice \Driver\tdx \Device\Udp pctgntdi.sys
AttachedDevice \Driver\tdx \Device\RawIp pctgntdi.sys
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat TfFsMon.sys (ThreatFire Filesystem Monitor/PC Tools)

—- EOF - GMER 1.0.15 —-
Post #9
Catbyte, found C:\combofix.txt and will post wht appears to be a log from 9/8 if we need a fresh one please advise how, thanks taylor ComboFix 09-08-30.04 - kevinkim 08/31/2009 12:40.1.2 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.243 [GMT -4:00] Running from: c:\users\[removed]\Downloads\1.exe AV: Norton Internet Security *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\$recycle.bin\S-1-5-21-1693903684-3139912343-2051395266-500 c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500 c:\$recycle.bin\S-1-5-21-2181796264-1699009989-3321213798-500 c:\$recycle.bin\S-1-5-21-3463033140-3895764627-2494982918-500 c:\windows\Installer\543844c.msi . ((((((((((((((((((((((((( Files Created from 2009-07-28 to 2009-08-31 ))))))))))))))))))))))))))))))) . 2009-08-31 17:08 . 2009-08-31 17:10 ——– d—–w- c:\users\kevinkim\AppData\Local\temp 2009-08-31 17:08 . 2009-08-31 17:08 ——– d—–w- c:\users\Default\AppData\Local\temp 2009-08-31 15:58 . 2009-08-31 16:06 ——– d-s—w- C:\ComboFix 2009-08-29 07:05 . 2009-06-22 10:22 2048 —-a-w- c:\windows\system32\tzres.dll 2009-08-28 18:09 . 2009-07-17 14:35 71680 —-a-w- c:\windows\system32\atl.dll 2009-08-28 18:09 . 2009-06-10 12:12 160256 —-a-w- c:\windows\system32\wkssvc.dll 2009-08-28 18:07 . 2009-06-10 12:07 91136 —-a-w- c:\windows\system32\avifil32.dll 2009-08-28 18:06 . 2009-06-04 12:34 2066432 —-a-w- c:\windows\system32\mstscax.dll 2009-08-28 18:06 . 2009-06-15 15:21 499712 —-a-w- c:\windows\system32\kerberos.dll 2009-08-28 18:06 . 2009-06-15 15:24 175104 —-a-w- c:\windows\system32\wdigest.dll 2009-08-28 18:06 . 2009-06-15 15:22 213504 —-a-w- c:\windows\system32\msv1_0.dll 2009-08-28 18:06 . 2009-06-15 15:24 270848 —-a-w- c:\windows\system32\schannel.dll 2009-08-28 18:06 . 2009-06-15 15:23 1256448 —-a-w- c:\windows\system32\lsasrv.dll 2009-08-28 18:06 . 2009-06-15 18:20 439896 —-a-w- c:\windows\system32\drivers\ksecdd.sys 2009-08-28 18:06 . 2009-06-15 12:57 9728 —-a-w- c:\windows\system32\lsass.exe 2009-08-28 18:06 . 2009-06-15 15:24 72704 —-a-w- c:\windows\system32\secur32.dll 2009-08-28 18:05 . 2009-07-14 13:00 313344 —-a-w- c:\windows\system32\wmpdxm.dll 2009-08-28 18:05 . 2009-07-14 12:58 7680 —-a-w- c:\windows\system32\spwmp.dll 2009-08-28 18:05 . 2009-07-14 12:59 4096 —-a-w- c:\windows\system32\dxmasf.dll 2009-08-28 18:05 . 2009-07-14 10:59 8147456 —-a-w- c:\windows\system32\wmploc.DLL 2009-08-28 17:38 . 2009-08-28 17:38 3942048 —-a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-08-26 22:12 . 2009-08-26 22:12 34816 —-a-w- c:\windows\system32\drivers\rootrepeal[1].sys 2009-08-26 22:11 . 2009-08-26 22:11 34816 —-a-w- c:\windows\system32\drivers\rootrepeal.sys 2009-08-26 21:58 . 2009-08-26 22:04 34816 —-a-w- c:\windows\system32\drivers\downloads[1].sys 2009-08-11 00:32 . 2009-08-11 00:32 ——– d—–w- c:\users\kevinkim\AppData\Local\Adobe 2009-08-10 18:29 . 2009-08-03 17:36 38160 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-08-10 18:29 . 2009-08-03 17:36 19096 —-a-w- c:\windows\system32\drivers\mbam.sys 2009-08-10 18:29 . 2009-08-28 17:39 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware 2009-08-07 07:15 . 2008-06-20 01:14 97800 —-a-w- c:\windows\system32\infocardapi.dll 2009-08-07 07:14 . 2008-06-20 01:14 105016 —-a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2009-08-07 07:14 . 2008-06-20 01:14 622080 —-a-w- c:\windows\system32\icardagt.exe 2009-08-07 07:14 . 2008-06-20 01:14 43544 —-a-w- c:\windows\system32\PresentationHostProxy.dll 2009-08-07 07:14 . 2008-06-20 01:14 11264 —-a-w- c:\windows\system32\icardres.dll 2009-08-07 07:14 . 2008-06-20 01:14 781344 —-a-w- c:\windows\system32\PresentationNative_v0300.dll 2009-08-07 07:14 . 2008-06-20 01:14 326160 —-a-w- c:\windows\system32\PresentationHost.exe 2009-08-07 07:03 . 2008-07-27 18:03 96760 —-a-w- c:\windows\system32\dfshim.dll 2009-08-07 07:02 . 2008-07-27 18:03 282112 —-a-w- c:\windows\system32\mscoree.dll 2009-08-07 07:02 . 2008-07-27 18:03 41984 —-a-w- c:\windows\system32\netfxperf.dll 2009-08-07 07:02 . 2008-07-27 18:03 158720 —-a-w- c:\windows\system32\mscorier.dll 2009-08-07 07:01 . 2008-07-27 18:03 83968 —-a-w- c:\windows\system32\mscories.dll 2009-08-05 20:06 . 2009-08-05 20:06 ——– d—–w- c:\program files\Trend Micro 2009-08-05 00:34 . 2009-06-15 15:24 156672 —-a-w- c:\windows\system32\t2embed.dll 2009-08-05 00:34 . 2009-06-15 15:20 72704 —-a-w- c:\windows\system32\fontsub.dll 2009-08-05 00:34 . 2009-06-15 15:20 10240 —-a-w- c:\windows\system32\dciman32.dll 2009-08-05 00:34 . 2009-06-15 12:52 289792 —-a-w- c:\windows\system32\atmfd.dll 2009-08-05 00:32 . 2009-07-21 21:52 915456 —-a-w- c:\windows\system32\wininet.dll 2009-08-05 00:31 . 2009-07-21 20:13 133632 —-a-w- c:\windows\system32\ieUnatt.exe 2009-08-05 00:31 . 2009-07-21 21:47 109056 —-a-w- c:\windows\system32\iesysprep.dll 2009-08-05 00:31 . 2009-07-21 21:47 71680 —-a-w- c:\windows\system32\iesetup.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-08-31 17:09 . 2009-07-13 12:22 ——– d—–w- c:\program files\Spyware Doctor 2009-08-29 07:03 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail 2009-08-05 17:15 . 2008-04-02 02:59 ——– d—–w- c:\program files\Microsoft Silverlight 2009-08-05 00:07 . 2009-03-31 21:33 ——– d—–w- c:\program files\Windows Live Safety Center 2009-08-05 00:07 . 2007-12-22 17:13 ——– d—–w- c:\programdata\AOL 2009-08-05 00:07 . 2009-04-06 13:49 ——– d—–w- c:\program files\Common Files\aolshare 2009-08-05 00:06 . 2009-07-13 14:43 ——– d—–w- c:\program files\AOL 9.1 2009-07-30 16:26 . 2009-07-30 16:17 ——– d—–w- c:\program files\AOL 9(4).1 2009-07-30 16:25 . 2007-12-22 18:11 ——– d—–w- c:\users\kevinkim\AppData\Roaming\AOL 2009-07-30 16:23 . 2009-07-30 16:17 ——– d—–w- c:\program files\Common Files\aolshare(16) 2009-07-30 16:22 . 2009-07-30 16:17 ——– d—–w- c:\program files\AOL(3) 2009-07-30 16:21 . 2009-07-30 16:21 ——– d—–w- c:\program files\AOL Toolbar 2009-07-25 22:36 . 2009-07-20 16:46 ——– d—–w- c:\programdata\Spybot - Search & Destroy 2009-07-25 22:33 . 2009-07-25 20:35 ——– d—–w- c:\users\kevinkim\AppData\Roaming\uTorrent 2009-07-25 13:27 . 2009-07-25 13:27 ——– d—–w- c:\users\kevinkim\AppData\Roaming\Thinstall 2009-07-23 16:48 . 2009-07-23 16:47 680 —-a-w- c:\users\kevinkim\AppData\Local\d3d9caps.dat 2009-07-21 00:29 . 2007-12-22 17:13 ——– d—–w- c:\users\kevinkim\AppData\Roaming\Corel 2009-07-14 17:14 . 2008-07-11 20:14 ——– d—–w- c:\program files\Google 2009-07-14 17:09 . 2009-07-13 19:48 ——– d—–w- c:\users\kevinkim\AppData\Roaming\IObit 2009-07-14 17:09 . 2009-07-14 01:18 ——– d—–w- c:\programdata\Viewpoint 2009-07-14 17:09 . 2007-08-26 21:38 ——– d—–w- c:\programdata\Sony Corporation 2009-07-14 17:09 . 2007-08-26 21:08 ——– d–h–w- c:\program files\InstallShield Installation Information 2009-07-14 17:09 . 2007-08-26 10:42 ——– d—–w- c:\program files\Common Files\Symantec Shared 2009-07-14 17:09 . 2007-08-26 21:26 ——– d—–w- c:\program files\Common Files\Sony Shared 2009-07-14 17:09 . 2007-08-26 21:19 ——– d—–w- c:\program files\Apoint 2009-07-14 15:17 . 2007-08-26 21:26 ——– d—–w- c:\program files\Sony 2009-07-14 15:17 . 2007-08-26 10:42 ——– d—–w- c:\program files\Symantec 2009-07-14 10:23 . 2007-08-26 09:43 ——– d—–w- c:\program files\Common Files\AOL 2009-07-14 02:43 . 2008-02-04 17:01 ——– d—–w- c:\programdata\Apple Computer 2009-07-14 01:04 . 2007-08-26 21:40 ——– d—–w- c:\programdata\Napster 2009-07-13 14:40 . 2009-07-13 14:40 127224 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\afix\afixlang.exe 2009-07-13 14:40 . 2009-07-13 14:40 2439824 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\ccu\ocpinsti.exe 2009-07-13 14:40 . 2009-07-13 14:40 711520 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\sysinfo\SinfInst.exe 2009-07-13 14:40 . 2009-07-13 14:40 62816 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\ocp\ocpgc.exe 2009-07-13 14:40 . 2009-07-13 14:37 35387072 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\noneCodesignFilesBundle.exe 2009-07-13 14:37 . 2009-07-13 14:37 359184 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\tb\tbsetup.exe 2009-07-13 14:37 . 2009-07-13 14:37 75104 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\ocp\instSup.dll 2009-07-13 14:37 . 2009-07-13 14:37 223152 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\afix\wsfinst.exe 2009-07-13 14:37 . 2009-07-13 14:37 175224 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\sm\stmninst.exe 2009-07-13 14:37 . 2009-07-13 14:37 1475416 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\ocp\ocpinst.exe 2009-07-13 14:37 . 2009-07-13 14:37 15712 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\ocp\ocpchk.dll 2009-07-13 14:37 . 2009-07-13 14:37 390704 —-a-w- c:\programdata\AOL Downloads\waol\0.4334.34.14\comps\afix\WinsockFix.exe 2009-07-13 13:47 . 2007-08-26 10:42 ——– d—–w- c:\programdata\Symantec 2009-07-13 13:21 . 2009-07-12 21:18 ——– d—–w- c:\program files\NeoSmart Technologies 2009-07-13 13:02 . 2009-07-13 12:22 ——– d—–w- c:\programdata\PC Tools 2009-07-13 12:24 . 2009-07-13 12:22 ——– d—–w- c:\program files\Common Files\PC Tools 2009-07-13 12:22 . 2009-07-13 12:22 ——– d—–w- c:\users\kevinkim\AppData\Roaming\PC Tools 2009-07-09 17:31 . 2009-07-09 17:31 ——– d—–w- c:\users\kevinkim\AppData\Roaming\InstallShield 2009-06-27 01:20 . 2009-06-27 01:20 746744 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2009-06-04 16:04 . 2009-06-04 16:04 410984 —-a-w- c:\windows\system32\deploytk.dll 2007-08-26 21:25 . 2007-08-26 21:25 8192 –sha-w- c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . .
Post #10
Delete the copy of ComboFix that you have on your desktop and download a fresh copy from one of the following locations

Link 1
Link 2


Run it, make sure your security programs are disabled
Post #11
Catbyte, stumped me on this one. It looks like I've got Malware and Spydoctor on this laptop. I know how to unistall them but not how to disable them, can you give me some guidance, thanks taylor
Post #12
It's just the Norton that needs disabling:

you did it for the initial run of ComboFix:

NORTON ANTIVIRUS
Please navigate to the system tray on the bottom right hand corner and look for a [external image: Posted Image] sign.
  • right-click it -> chose "Disable Auto-Protect."
  • select a duration of 5 hours (this assures no interference with the cleanup of your pc)
  • click "Ok."
  • a popup will warn that protection will now be disabled and the sign will now look like this: [external image: Posted Image]
You have successfully disabled the Norton Antivirus Guard.
Post #13
Catbyte, hopefully the scan went ok. taylor
ComboFix 09-09-20.04 - kevinkim 09/21/2009 19:59.2.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.141 [GMT -4:00]
Running from: G:\ComboFix.exe
AV: Norton Internet Security *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
ADS - system32: deleted 78 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Mozilla Firefox\AccessibleMarshal.dll
c:\program files\Mozilla Firefox\Components\browserdirprovider.dll
c:\program files\Mozilla Firefox\Components\brwsrcmp.dll
c:\program files\Mozilla Firefox\xpcom.dll
c:\program files\Mozilla Firefox\xul.dll

.
((((((((((((((((((((((((( Files Created from 2009-08-21 to 2009-09-21 )))))))))))))))))))))))))))))))
.

2009-09-22 00:18 . 2009-09-22 00:18 ——– d—–w- c:\users\Public\AppData\Local\temp
2009-09-22 00:18 . 2009-09-22 00:18 ——– d—–w- c:\users\Default\AppData\Local\temp
2009-09-22 00:18 . 2009-09-22 00:19 ——– d—–w- c:\users\kevinkim\AppData\Local\temp
2009-09-21 03:31 . 2009-08-14 17:07 897608 —-a-w- c:\windows\system32\drivers\tcpip.sys
2009-09-21 03:31 . 2009-08-14 16:29 104960 —-a-w- c:\windows\system32\netiohlp.dll
2009-09-21 03:30 . 2009-08-14 14:16 9728 —-a-w- c:\windows\system32\TCPSVCS.EXE
2009-09-21 03:30 . 2009-08-14 14:16 27136 —-a-w- c:\windows\system32\NETSTAT.EXE
2009-09-21 03:30 . 2009-08-14 14:16 19968 —-a-w- c:\windows\system32\ARP.EXE
2009-09-21 03:30 . 2009-08-14 14:16 10240 —-a-w- c:\windows\system32\finger.exe
2009-09-21 03:30 . 2009-08-14 14:16 11264 —-a-w- c:\windows\system32\MRINFO.EXE
2009-09-21 03:30 . 2009-08-14 14:16 8704 —-a-w- c:\windows\system32\HOSTNAME.EXE
2009-09-21 03:30 . 2009-08-14 14:16 17920 —-a-w- c:\windows\system32\ROUTE.EXE
2009-09-21 03:30 . 2009-08-14 16:29 17920 —-a-w- c:\windows\system32\netevent.dll
2009-09-21 03:29 . 2009-07-11 19:32 293376 —-a-w- c:\windows\system32\wlanmsm.dll
2009-09-21 03:29 . 2009-07-11 19:32 302592 —-a-w- c:\windows\system32\wlansec.dll
2009-09-21 03:29 . 2009-07-11 19:29 127488 —-a-w- c:\windows\system32\L2SecHC.dll
2009-09-21 03:29 . 2009-07-11 19:32 513024 —-a-w- c:\windows\system32\wlansvc.dll
2009-09-21 03:29 . 2009-06-10 12:11 2868224 —-a-w- c:\windows\system32\mf.dll
2009-09-02 06:02 . 2009-08-28 12:39 28672 —-a-w- c:\windows\system32\Apphlpdm.dll
2009-09-02 06:02 . 2009-08-28 10:15 4240384 —-a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-29 07:05 . 2009-06-22 10:22 2048 —-a-w- c:\windows\system32\tzres.dll
2009-08-28 18:09 . 2009-07-17 14:35 71680 —-a-w- c:\windows\system32\atl.dll
2009-08-28 18:09 . 2009-06-10 12:12 160256 —-a-w- c:\windows\system32\wkssvc.dll
2009-08-28 18:07 . 2009-06-10 12:07 91136 —-a-w- c:\windows\system32\avifil32.dll
2009-08-28 18:06 . 2009-06-04 12:34 2066432 —-a-w- c:\windows\system32\mstscax.dll
2009-08-28 18:06 . 2009-06-15 15:21 499712 —-a-w- c:\windows\system32\kerberos.dll
2009-08-28 18:06 . 2009-06-15 15:24 175104 —-a-w- c:\windows\system32\wdigest.dll
2009-08-28 18:06 . 2009-06-15 15:22 213504 —-a-w- c:\windows\system32\msv1_0.dll
2009-08-28 18:06 . 2009-06-15 15:24 270848 —-a-w- c:\windows\system32\schannel.dll
2009-08-28 18:06 . 2009-06-15 15:23 1256448 —-a-w- c:\windows\system32\lsasrv.dll
2009-08-28 18:06 . 2009-06-15 18:20 439896 —-a-w- c:\windows\system32\drivers\ksecdd.sys
2009-08-28 18:06 . 2009-06-15 12:57 9728 —-a-w- c:\windows\system32\lsass.exe
2009-08-28 18:06 . 2009-06-15 15:24 72704 —-a-w- c:\windows\system32\secur32.dll
2009-08-28 18:05 . 2009-07-14 13:00 313344 —-a-w- c:\windows\system32\wmpdxm.dll
2009-08-28 18:05 . 2009-07-14 12:58 7680 —-a-w- c:\windows\system32\spwmp.dll
2009-08-28 18:05 . 2009-07-14 12:59 4096 —-a-w- c:\windows\system32\dxmasf.dll
2009-08-28 18:05 . 2009-07-14 10:59 8147456 —-a-w- c:\windows\system32\wmploc.DLL
2009-08-26 22:12 . 2009-08-26 22:12 34816 —-a-w- c:\windows\system32\drivers\rootrepeal[1].sys
2009-08-26 22:11 . 2009-08-26 22:11 34816 —-a-w- c:\windows\system32\drivers\rootrepeal.sys
2009-08-26 21:58 . 2009-08-26 22:04 34816 —-a-w- c:\windows\system32\drivers\downloads[1].sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-21 07:15 . 2008-04-02 02:59 ——– d—–w- c:\program files\Microsoft Silverlight
2009-09-21 07:02 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail
2009-09-20 22:25 . 2009-09-20 22:25 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-09-02 07:13 . 2009-07-13 12:22 ——– d—–w- c:\program files\Spyware Doctor
2009-09-02 07:08 . 2009-07-13 12:22 206256 —-a-w- c:\windows\system32\drivers\PCTCore.sys
2009-09-02 07:08 . 2009-09-02 07:08 7396 —-a-w- c:\windows\system32\drivers\pctcore.cat
2009-08-28 17:39 . 2009-08-10 18:29 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2009-08-05 20:06 . 2009-08-05 20:06 ——– d—–w- c:\program files\Trend Micro
2009-08-05 00:07 . 2009-03-31 21:33 ——– d—–w- c:\program files\Windows Live Safety Center
2009-08-05 00:07 . 2007-12-22 17:13 ——– d—–w- c:\programdata\AOL
2009-08-05 00:07 . 2009-04-06 13:49 ——– d—–w- c:\program files\Common Files\aolshare
2009-08-05 00:06 . 2009-07-13 14:43 ——– d—–w- c:\program files\AOL 9.1
2009-08-03 17:36 . 2009-08-10 18:29 38160 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-03 17:36 . 2009-08-10 18:29 19096 —-a-w- c:\windows\system32\drivers\mbam.sys
2009-07-30 16:26 . 2009-07-30 16:17 ——– d—–w- c:\program files\AOL 9(4).1
2009-07-30 16:25 . 2007-12-22 18:11 ——– d—–w- c:\users\kevinkim\AppData\Roaming\AOL
2009-07-30 16:23 . 2009-07-30 16:17 ——– d—–w- c:\program files\Common Files\aolshare(16)
2009-07-30 16:22 . 2009-07-30 16:17 ——– d—–w- c:\program files\AOL(3)
2009-07-30 16:21 . 2009-07-30 16:21 ——– d—–w- c:\program files\AOL Toolbar
2009-07-25 22:36 . 2009-07-20 16:46 ——– d—–w- c:\programdata\Spybot - Search & Destroy
2009-07-25 22:33 . 2009-07-25 20:35 ——– d—–w- c:\users\kevinkim\AppData\Roaming\uTorrent
2009-07-25 13:27 . 2009-07-25 13:27 ——– d—–w- c:\users\kevinkim\AppData\Roaming\Thinstall
2009-07-23 16:48 . 2009-07-23 16:47 680 —-a-w- c:\users\kevinkim\AppData\Local\d3d9caps.dat
2009-07-21 21:52 . 2009-08-05 00:32 915456 —-a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-08-05 00:31 109056 —-a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-08-05 00:31 71680 —-a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-08-05 00:31 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2009-07-13 14:41 . 2009-07-13 14:46 54832 —-a-w- c:\windows\system32\AOLParconLink.exe
2007-08-26 21:25 . 2007-08-26 21:25 8192 –sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2009-08-31_17.09.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-06-01 17:47 . 2008-01-19 02:15 16896 c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68bace\WSDPrint.sys
+ 2008-06-01 17:47 . 2008-01-19 02:04 39936 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdUsb.sys
+ 2008-06-01 17:47 . 2008-01-19 03:37 60928 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpUS.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 66560 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpIP.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 33280 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdConns.dll
+ 2008-07-29 13:46 . 2008-05-27 04:59 18904 c:\windows\winsxs\x86_windowssearchengine..uredqueryschema.bin_31bf3856ad364e35_7.0.6002.1800
5_none_8ae0ca49e0ec3b69\StructuredQuerySchemaTrivial.bin
+ 2008-06-01 17:46 . 2008-01-19 01:53 23552 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbuhci.sys
+ 2008-06-01 17:47 . 2008-01-19 03:34 15872 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\hcrstco.dll
+ 2008-06-01 17:46 . 2008-01-19 01:53 73216 c:\windows\winsxs\x86_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_cce3e0020b941ebb\usbccgp.sys
+ 2008-06-01 17:47 . 2006-11-02 05:46 89088 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\wiafbdrv.dll
+ 2008-06-01 17:46 . 2008-01-19 02:14 35328 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\usbscan.sys
+ 2008-06-01 17:48 . 2008-01-19 02:14 14848 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\scsiscan.sys
+ 2008-06-01 17:48 . 2008-01-19 01:49 13312 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffdisk.sys
+ 2006-11-02 12:34 . 2006-11-02 12:34 11368 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MsMpLics.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 58936 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpRtPlug.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 90680 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpOAV.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 16488 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpAsDesc.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 17920 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\wfapigp.dll
+ 2008-06-01 17:49 . 2008-01-19 01:54 64000 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\mpsdrv.sys
+ 2008-06-01 17:47 . 2008-01-19 03:34 87552 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\icfupgd.dll
+ 2008-06-01 17:48 . 2008-01-05 07:25 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6002.18005_none_6862e2e7643773d9\SharedReg12.dll
+ 2008-06-01 17:48 . 2008-01-05 07:25 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6002.18005_none_8199f0814373a5b3\sbscmp20_mscorwks.dll
+ 2008-06-01 17:48 . 2008-01-05 07:26 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6002.18005_none_54ad0b7a61344e8c\sbscmp20_mscorlib.dll
+ 2008-06-01 17:48 . 2008-01-05 07:25 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6002.18005_none_76f179ae021db881\sbscmp10.dll
+ 2008-06-01 17:46 . 2008-01-19 03:41 20024 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\viaide.sys
+ 2008-06-01 17:49 . 2008-01-19 03:41 17976 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\intelide.sys
+ 2008-06-01 17:48 . 2008-01-19 03:41 19000 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\cmdide.sys
+ 2008-06-01 17:48 . 2008-01-19 03:41 17976 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\amdide.sys
+ 2008-06-01 17:48 . 2008-01-19 03:41 17464 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\aliide.sys
+ 2008-06-01 17:47 . 2008-01-19 03:37 91136 c:\windows\winsxs\x86_microsoft-windows-wmiperf_31bf3856ad364e35_6.0.6002.18005_none_a1858d34af79a11c\WmiPerfClass.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 19968 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\mofcomp.exe
+ 2008-06-01 17:47 . 2008-01-19 03:33 77824 c:\windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.0.6002.18005_none_a29e34dbf412e9da\WinMgmt.exe
+ 2009-09-21 03:29 . 2009-07-11 19:10 68096 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\wlanhlp.dll
+ 2009-09-21 03:29 . 2009-07-11 19:10 65024 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\wlanapi.dll
+ 2008-06-01 17:47 . 2008-01-05 07:34 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\gatherWirelessInfo.vbs
+ 2009-09-21 03:29 . 2009-04-11 06:28 68096 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\wlanhlp.dll
+ 2009-09-21 03:29 . 2009-07-11 19:01 65024 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\wlanapi.dll
+ 2008-06-01 17:47 . 2008-01-05 07:34 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\gatherWirelessInfo.vbs
+ 2008-06-01 17:47 . 2008-01-19 03:36 64512 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\wlanapi.dll
+ 2008-06-01 17:47 . 2008-01-05 07:34 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\gatherWirelessInfo.vbs
+ 2009-09-21 03:29 . 2009-07-11 19:17 68096 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\wlanhlp.dll
+ 2009-09-21 03:29 . 2009-07-11 19:17 64512 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\wlanapi.dll
+ 2008-06-01 17:47 . 2008-01-05 07:34 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\gatherWirelessInfo.vbs
+ 2008-06-01 17:47 . 2008-01-19 03:36 68096 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlanhlp.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 64512 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlanapi.dll
+ 2008-06-01 17:47 . 2008-01-05 07:34 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\gatherWirelessInfo.vbs
+ 2009-09-21 03:29 . 2009-07-11 19:24 67584 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\wlanhlp.dll
+ 2009-09-21 03:29 . 2009-07-11 19:24 47104 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\wlanapi.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 14827 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\gatherWirelessInfo.vbs
+ 2009-09-21 03:29 . 2009-07-11 19:32 67584 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\wlanhlp.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 47104 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\wlanapi.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 14827 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\gatherWirelessInfo.vbs
+ 2006-11-02 08:48 . 2006-11-02 09:46 41984 c:\windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6002.18005_none_570ee68146eaef3c\wabimp.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45 66048 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabmig.exe
+ 2006-11-02 08:48 . 2006-11-02 09:46 33280 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabfind.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 32768 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4c\wups2.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 43008 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4c\wuauclt.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34 12800 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiatrace.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 32768 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiarpc.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 23040 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464f\wups.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 80384 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464f\wudriver.dll
+ 2008-06-01 17:47 . 2008-01-19 01:39 13312 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmRes.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 54784 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmProv.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 30720 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WSManHTTPConfig.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 69120 c:\windows\winsxs\x86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769a\vsstrace.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 19968 c:\windows\winsxs\x86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769a\eventcls.dll
+ 2008-06-01 17:46 . 2008-01-19 03:33 19968 c:\windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785\vdsldr.exe
+ 2008-06-01 17:46 . 2008-01-19 03:36 37888 c:\windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785\vds_ps.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46 34816 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\uicom.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 15360 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\serialui.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 22528 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604\netiougc.exe
+ 2008-06-01 17:49 . 2008-01-19 03:35 49664 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604\netiomig.dll
+ 2009-09-21 03:30 . 2009-08-15 21:30 22016 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\netiougc.exe
+ 2009-09-21 03:30 . 2009-08-15 23:56 49152 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\netiomig.dll
+ 2009-09-21 03:30 . 2009-08-14 14:23 22016 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\netiougc.exe
+ 2009-09-21 03:30 . 2009-08-14 16:40 49152 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\netiomig.dll
+ 2009-09-21 03:30 . 2009-08-14 13:52 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\ROUTE.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:52 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\NETSTAT.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:52 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\MRINFO.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:52 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\finger.exe
+ 2009-09-21 03:30 . 2009-08-14 13:52 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\ARP.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:49 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\ROUTE.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:49 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\NETSTAT.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:49 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\MRINFO.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:49 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\finger.exe
+ 2009-09-21 03:30 . 2009-08-14 13:49 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\ARP.EXE
+ 2008-06-01 17:48 . 2008-01-19 03:33 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ROUTE.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\NETSTAT.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\MRINFO.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\finger.exe
+ 2006-11-02 08:58 . 2006-11-02 09:44 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ARP.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:11 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\ROUTE.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:11 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\NETSTAT.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:11 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\MRINFO.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:11 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\finger.exe
+ 2009-09-21 03:30 . 2009-08-14 14:11 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\ARP.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:16 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\ROUTE.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:16 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\NETSTAT.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:16 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\MRINFO.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:16 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\finger.exe
+ 2009-09-21 03:30 . 2009-08-14 14:16 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\ARP.EXE
+ 2009-09-21 03:30 . 2009-08-15 21:31 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\ROUTE.EXE
+ 2009-09-21 03:30 . 2009-08-15 21:31 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\NETSTAT.EXE
+ 2009-09-21 03:30 . 2009-08-15 21:31 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\MRINFO.EXE
+ 2009-09-21 03:30 . 2009-08-15 21:31 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\finger.exe
+ 2009-09-21 03:30 . 2009-08-15 21:31 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\ARP.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:25 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\ROUTE.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:25 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\NETSTAT.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:25 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\MRINFO.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:25 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\finger.exe
+ 2009-09-21 03:30 . 2009-08-14 14:25 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\ARP.EXE
+ 2009-08-28 18:06 . 2009-04-11 06:28 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18005_none_31d980c8c2ca01c9\tsgqec.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 68096 c:\windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6002.18005_none_d2fbc584d9efb14a\TabSvc.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 19456 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\TabIpsps.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 14848 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\srdelayed.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 40960 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\srclient.dll
+ 2008-06-01 17:50 . 2008-01-19 03:36 28160 c:\windows\winsxs\x86_microsoft-windows-spp-main_31bf3856ad364e35_6.0.6002.18005_none_e6326fcda9fe9b59\sxproxy.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 99328 c:\windows\winsxs\x86_microsoft-windows-speechengine_31bf3856ad364e35_6.0.6002.18005_none_f0a9964297040c1c\spsrx.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 43520 c:\windows\winsxs\x86_microsoft-windows-speechcommon_31bf3856ad364e35_6.0.6002.18005_none_d7edc1a2cfccb087\SCGMigPlugin.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 16384 c:\windows\winsxs\x86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6002.18005_none_1df5691748ee6b08\SpeechUXPS.DLL
+ 2006-11-02 08:43 . 2006-11-02 09:46 66560 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\SCardDlg.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 11776 c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbunattend.exe
+ 2006-11-02 12:35 . 2006-11-02 12:35 66048 c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbdrop.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 62976 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\windeploy.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 47616 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\wdsutil.dll
+ 2008-06-01 17:46 . 2008-01-19 03:33 94720 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\sysprep.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 54272 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\spprgrss.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 42496 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\oobeldr.exe
+ 2008-06-01 17:48 . 2008-01-19 03:36 31232 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\diagER.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 52736 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\audit.exe
+ 2008-06-01 17:47 . 2008-01-19 03:37 36864 c:\windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\wshcon.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 32768 c:\windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\dispex.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 88064 c:\windows\winsxs\x86_microsoft-windows-scanprofiles_31bf3856ad364e35_6.0.6002.18005_none_4952ad655043b399\wiascanprofiles.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18005_none_26f5355863ea5f18\sdshext.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6002.18005_none_5669453d850ccabc\wshrm.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 47616 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmutil.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 14336 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmstplua.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 84992 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmstp.exe
+ 2008-06-01 17:48 . 2008-01-19 03:33 26112 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmpbk32.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 56320 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmmigr.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 32768 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmlua.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 72704 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmdl32.exe
+ 2008-06-01 17:48 . 2008-01-19 03:33 31232 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmcfg32.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 39424 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_none_713248d4a5d30dec\rasphone.exe
+ 2008-06-01 17:47 . 2008-01-19 01:56 62464 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\wanarp.sys
+ 2006-11-02 08:58 . 2006-11-02 09:46 22016 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasser.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46 32768 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasmxs.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 81408 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rascfg.dll
+ 2008-06-01 17:49 . 2008-01-19 01:56 49664 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\ndproxy.sys
+ 2008-06-01 17:49 . 2008-01-19 01:56 20992 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\ndistapi.sys
+ 2006-11-02 08:57 . 2006-11-02 09:46 13824 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\wshqos.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 33280 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\traffic.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 15360 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\pacerprf.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 29184 c:\windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.0.6002.18005_none_fd9cd0792fced6f5\profprov.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\wbhstipm.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\wbhst_pm.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\w3tp.dll
+ 2006-11-02 08:33 . 2006-11-02 09:46 53248 c:\windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_eaccaa9547e03a1f\hotplug.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 42496 c:\windows\winsxs\x86_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.0.6002.18005_none_15c2137e1ca283f9\dmocx.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 46592 c:\windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.0.6002.18005_none_9df537379e15bb5c\pdhui.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 66048 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabElev.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 20480 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabDecorator.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 56320 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabContacts.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 39424 c:\windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbddeb9c585058e\wpnpinst.exe
+ 2008-06-01 17:48 . 2008-01-19 03:36 96256 c:\windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\PlaMig.dll
+ 2006-11-02 09:15 . 2006-11-02 09:45 61440 c:\windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6002.18005_none_f1eef3487a8e01f0\ntprint.exe
+ 2006-11-02 08:35 . 2006-11-02 09:46 35840 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfproc.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 28672 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfos.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 19968 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfnet.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 39424 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfctrs.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 37888 c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6002.18005_none_3b5eb3c56e0bcf3e\printcom.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45 39936 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\typeperf.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 37376 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\relog.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 17408 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\diskperf.exe
+ 2006-11-02 09:15 . 2006-11-02 09:45 60416 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\printui.exe
+ 2008-06-01 17:48 . 2008-01-19 03:34 64512 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\findnetprinters.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\win87em.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 12704 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WFWNET.DRV
+ 2008-06-01 17:46 . 2008-01-19 03:36 41984 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\vdmredir.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 47840 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\USER.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 13888 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\TOOLHELP.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\sysedit.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\setver.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\pmspl.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 24064 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\OLESVR.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\olecli.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ntvdmd.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35536 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35776 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 33952 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTIO.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29274 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29370 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 27866 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\NTDOS.SYS
+ 2006-11-02 07:10 . 2006-11-02 07:10 68992 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\MMSYSTEM.DLL
+ 2006-11-02 07:09 . 2006-11-02 07:09 39274 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\mem.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 92320 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\krnl386.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 42537 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\KEYBOARD.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 42809 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\KEY01.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 14710 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\KB16.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 19694 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\GRAPHICS.COM
+ 2008-06-01 17:47 . 2008-01-19 01:33 56320 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\graftabl.com
+ 2006-11-02 07:10 . 2006-11-02 07:10 24576 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\GDI.EXE
+ 2006-11-02 07:09 . 2006-11-02 07:09 12642 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\edlin.exe
+ 2006-11-02 07:09 . 2006-09-18 21:43 69886 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\edit.com
+ 2006-11-02 07:10 . 2006-11-02 07:10 28112 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\DRWATSON.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 53536 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\dosx.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 20634 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\debug.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 39424 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\DDEML.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 27200 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ctl3dv2.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 27097 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\country.sys
+ 2006-11-02 07:10 . 2006-11-02 07:10 32816 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\COMMDLG.DLL
+ 2006-11-02 07:09 . 2006-11-02 07:09 50648 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\COMMAND.COM
+ 2006-11-02 07:10 . 2006-11-02 07:10 10544 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\COMM.drv
+ 2006-11-02 07:09 . 2006-11-02 07:09 12498 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\append.exe
+ 2006-11-02 12:36 . 2006-11-02 12:36 89600 c:\windows\winsxs\x86_microsoft-windows-networkprojection_31bf3856ad364e35_6.0.6002.18005_none_e5b2fc3deddef89d\NetProj.exe
+ 2006-11-02 12:36 . 2006-11-02 12:36 51712 c:\windows\winsxs\x86_microsoft-windows-networkprojection_31bf3856ad364e35_6.0.6002.18005_none_e5b2fc3deddef89d\CRPPresentation.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 15360 c:\windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473\bridgeunattend.exe
+ 2008-06-01 17:48 . 2008-01-19 03:33 61952 c:\windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473\bridgemigplugin.dll
+ 2006-11-02 08:56 . 2006-11-02 09:46 24064 c:\windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473\brdgcfg.dll
+ 2009-09-21 03:31 . 2009-08-14 17:01 98376 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\FWPKCLNT.SYS
+ 2009-09-21 03:30 . 2009-08-15 21:29 85504 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\FWPKCLNT.SYS
+ 2009-09-21 03:30 . 2009-08-14 16:00 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd\netevent.dll
+ 2009-09-21 03:30 . 2009-08-14 15:53 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c\netevent.dll
+ 2009-09-21 03:30 . 2009-08-14 16:24 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c\netevent.dll
+ 2009-09-21 03:30 . 2009-08-14 16:29 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0\netevent.dll
+ 2009-09-21 03:30 . 2009-08-15 23:56 15360 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b\netevent.dll
+ 2009-09-21 03:30 . 2009-08-14 16:40 15360 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f\netevent.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 21504 c:\windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.0.6002.18005_none_6250416df465f2b1\netbtugc.exe
+ 2008-06-01 17:47 . 2008-01-19 03:33 17408 c:\windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6002.18005_none_d31a09b83321829f\iashost.exe
+ 2008-06-01 17:47 . 2008-01-19 03:34 18944 c:\windows\winsxs\x86_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.0.6002.18005_none_faec53b03fa80e64\ias.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 69632 c:\windows\winsxs\x86_microsoft-windows-n..essprotection-agent_31bf3856ad364e35_6.0.6002.18005_none_0883ae29eaa2c24f\QCLIPROV.DLL
+ 2008-06-01 17:47 . 2008-01-19 03:36 61440 c:\windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6002.18005_none_45f9f0dde92709b8\winipsec.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 13824 c:\windows\winsxs\x86_microsoft-windows-msmq-admin_31bf3856ad364e35_6.0.6002.18005_none_b9397aaa3a8e3002\mqcertui.dll
+ 2008-06-01 17:49 . 2008-01-19 03:29 58880 c:\windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6002.18005_none_c92df35a758f4008\msobjs.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 41472 c:\windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6002.18005_none_c92df35a758f4008\auditpol.exe
+ 2008-06-01 17:46 . 2008-01-19 03:34 54272 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\usmt2xtr.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 87552 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\MXEAgent.dll
+ 2009-09-21 03:29 . 2009-06-10 09:53 53248 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\rrinstaller.exe
+ 2009-09-21 03:29 . 2009-06-10 09:54 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\mfps.dll
+ 2009-09-21 03:29 . 2009-06-10 09:53 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\mfpmp.exe
+ 2009-09-21 03:29 . 2009-04-11 06:27 53248 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\rrinstaller.exe
+ 2009-09-21 03:29 . 2009-04-11 06:28 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\mfps.dll
+ 2009-09-21 03:29 . 2009-04-11 06:27 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\mfpmp.exe
+ 2009-09-21 03:29 . 2009-06-10 10:10 53248 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\rrinstaller.exe
+ 2009-09-21 03:29 . 2009-06-10 11:56 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\mfps.dll
+ 2009-09-21 03:29 . 2009-06-10 10:10 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\mfpmp.exe
+ 2008-06-01 17:48 . 2008-01-19 03:33 53248 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\rrinstaller.exe
+ 2008-06-01 17:49 . 2008-01-19 03:34 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\mfps.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\mfpmp.exe
+ 2009-09-21 03:29 . 2009-06-10 10:01 52736 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\rrinstaller.exe
+ 2009-09-21 03:29 . 2009-06-10 12:00 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\mfps.dll
+ 2009-09-21 03:29 . 2009-06-10 10:01 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\mfpmp.exe
+ 2009-09-21 03:29 . 2009-06-10 10:14 52736 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\rrinstaller.exe
+ 2009-09-21 03:29 . 2009-06-10 12:07 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\mfps.dll
+ 2009-09-21 03:29 . 2009-06-10 10:15 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\mfpmp.exe
+ 2008-06-01 17:49 . 2008-01-19 03:35 87552 c:\windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6002.18005_none_eb13e63d87485b7f\msoert2.dll
+ 2006-11-02 07:28 . 2006-11-02 07:28 39424 c:\windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6002.18005_none_eb13e63d87485b7f\ACCTRES.dll
+ 2006-11-02 07:28 . 2006-11-02 08:48 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.18005_none_7b9ca37655ae6fb5\INETRES.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 81408 c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6002.18005_none_f343a6944cd6fe47\oeimport.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 24064 c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6002.18005_none_f343a6944cd6fe47\DirectDB.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 98304 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TapiMigPlugin.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 31232 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TableTextServiceMig.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 72704 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\SxsMigPlugin.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 89088 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\nlscoremig.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 59904 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\msdtcstp.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 22528 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\imtcmig.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 31744 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\imscmig.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 35328 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\imjpmig.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 87552 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\icfupgd.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 87552 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\CscMig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 55808 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\commig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 56320 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\cmmigr.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 73216 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\BthMigPlugin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 61952 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\bridgemigplugin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 60928 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\bitsmig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 89088 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\adammigrate.dll
+ 2009-09-21 03:31 . 2009-08-14 13:51 30720 c:\windows\winsxs\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416\tcpipreg.sys
+ 2009-09-21 03:31 . 2009-08-14 13:48 30720 c:\windows\winsxs\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5\tcpipreg.sys
+ 2006-11-02 12:36 . 2006-11-02 12:36 10752 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\wamregps.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 26624 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\rsca.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 59392 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iissyspr.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 30720 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisrstas.exe
+ 2008-06-01 17:47 . 2008-01-19 03:33 14848 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisreset.exe
+ 2008-06-01 17:47 . 2008-01-19 03:34 89088 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisreg.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 27136 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\ahadmin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 51712 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\admwprox.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 32256 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\wamreg.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 19968 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\iscomlog.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 55296 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\isatq.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 16384 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\infoadmn.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 13824 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\inetinfo.exe
+ 2008-06-01 17:47 . 2008-01-19 03:34 20480 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\iisadmin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 75776 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\coadmin.dll
+ 2008-06-01 17:46 . 2008-01-19 03:36 16896 c:\windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6002.18005_none_830c4d13af27c916\svcext.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 22528 c:\windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6002.18005_none_830c4d13af27c916\InetMgr6.exe
+ 2008-06-01 17:47 . 2008-01-19 03:34 75776 c:\windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6002.18005_none_830c4d13af27c916\IISUiObj.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 62976 c:\windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6002.18005_none_830c4d13af27c916\certobj.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.18005_none_d195813326668869\w3dt.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 12800 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.18005_none_d195813326668869\hwebcore.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 39424 c:\windows\winsxs\x86_microsoft-windows-iis-cgi_31bf3856ad364e35_6.0.6002.18005_none_58939dd85fe6ae05\cgi.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 69120 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2e305b9b14ba\iesetup.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2e305b9b14ba\iernonce.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2e305b9b14ba\ie4uinit.exe
+ 2006-11-02 08:36 . 2006-11-02 09:46 16384 c:\windows\winsxs\x86_microsoft-windows-ie-runoncessetup_31bf3856ad364e35_6.0.6002.18005_none_8ada417dc83b84b1\iessetup.dll
+ 2006-11-02 08:49 . 2006-11-02 09:45 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_314d791517204c15\ieUnatt.exe
+ 2008-06-01 17:49 . 2008-01-19 03:33 12800 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_6.0.6002.18005_none_fe396815d7e3cf11\msfeedssync.exe
+ 2008-06-01 17:48 . 2008-01-19 03:33 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6002.18005_none_b01d9ad903e7b4d8\admparse.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 32256 c:\windows\winsxs\x86_microsoft-windows-icm-base_31bf3856ad364e35_6.0.6002.18005_none_24b3636086850491\WcsPlugInService.dll
+ 2008-06-01 17:46 . 2008-01-19 03:33 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18005_none_1732cf8206b3dc2f\tzupd.exe
+ 2008-06-01 17:46 . 2008-01-19 01:55 23040 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18005_none_13ce8bde797c36f2\tunnel.sys
+ 2008-06-01 17:46 . 2008-01-19 01:55 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18005_none_13ce8bde797c36f2\TUNMP.SYS
+ 2008-06-01 17:47 . 2008-01-19 03:34 12288 c:\windows\winsxs\x86_microsoft-windows-i..httptracingbinaries_31bf3856ad364e35_6.0.6002.18005_none_3172619518138603\iisetw.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 58368 c:\windows\winsxs\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.0.6002.18005_none_fd148db3f8a0d120\IMTCDIC.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46 22016 c:\windows\winsxs\x86_microsoft-windows-hid-user_31bf3856ad364e35_6.0.6002.18005_none_d897c17984907383\hid.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898\lpk.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898\fontsub.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898\dciman32.dll
+ 2009-08-05 00:34 . 2009-04-11 06:28 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898\atmlib.dll
+ 2006-11-02 08:32 . 2006-11-02 09:44 20480 c:\windows\winsxs\x86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.0.6002.18005_none_02b21d8f327e1d66\comp.exe
+ 2008-06-01 17:47 . 2008-01-19 03:33 56320 c:\windows\winsxs\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6002.18005_none_22622b2203060735\wermgr.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 30208 c:\windows\winsxs\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6002.18005_none_22622b2203060735\werdiagcontroller.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 62976 c:\windows\winsxs\x86_microsoft-windows-errorreportingconsole_31bf3856ad364e35_6.0.6002.18005_none_57f8aa83200752e7\wercplsupport.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 16384 c:\windows\winsxs\x86_microsoft-windows-ehome-ehssetup_31bf3856ad364e35_6.0.6002.18005_none_93ad31c3b3bd535a\ehssetup.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 57344 c:\windows\winsxs\x86_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.0.6002.18005_none_8c3560ecfb3fdb56\eapsvc.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 41472 c:\windows\winsxs\x86_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.0.6002.18005_none_65ff0438c08bf3b7\eappprxy.dll
+ 2008-06-01 17:47 . 2008-01-05 07:21 12198 c:\windows\winsxs\x86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746\gatherWiredInfo.vbs
+ 2008-06-01 17:48 . 2008-01-19 03:34 45568 c:\windows\winsxs\x86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746\dot3dlg.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 45056 c:\windows\winsxs\x86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746\dot3api.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 25088 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.18005_none_e3cdf5e97f7b2eb7\dnscacheugc.exe
+ 2006-11-02 09:03 . 2006-11-02 09:46 11264 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.0.6002.18005_none_c438e5b15de80145\d3d8thk.dll
+ 2006-11-02 08:56 . 2006-11-02 09:46 10240 c:\windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6002.18005_none_d945a2ac2bb19ac6\dhcpcmonitor.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 81920 c:\windows\winsxs\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6002.18005_none_8f8f0d20ba53c683\dwmredir.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 39936 c:\windows\winsxs\x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e35_6.0.6002.18005_none_e1fa5d993d1f2640\dwmapi.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.18005_none_6770865eab1bf87f\msyuv.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46 49664 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.18005_none_6770865eab1bf87f\iyuv_32.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 11776 c:\windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6002.18005_none_3c77bb369c52cd10\padrs804.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 11264 c:\windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6002.18005_none_3c77bb369c52cd10\padrs404.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 14336 c:\windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.0.6002.18005_none_ef1cb7f16f3c7508\IMJPDADM.EXE
+ 2008-06-01 17:47 . 2008-01-19 03:34 35328 c:\windows\winsxs\x86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.0.6002.18005_none_1051bfce8308a832\imjpmig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 17408 c:\windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6002.18005_none_78ed24422a0dc451\cfgmgr32.dll
+ 2008-06-01 17:47 . 2008-01-19 01:27 12800 c:\windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6002.18005_none_273dbf533b731283\fs_rec.sys
+ 2008-06-01 17:48 . 2008-01-19 03:33 17408 c:\windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.0.6002.18005_none_9ec0c3c7a573ff4b\convert.exe
+ 2006-11-02 08:31 . 2006-11-02 09:46 31232 c:\windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.0.6002.18005_none_9ec0c3c7a573ff4b\cnvfat.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 38912 c:\windows\winsxs\x86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6002.18005_none_4ede66c2b66f93f3\xolehlp.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46 41984 c:\windows\winsxs\x86_microsoft-windows-certutil_31bf3856ad364e35_6.0.6002.18005_none_b77080f9307e5e18\certenc.dll
+ 2006-11-02 08:45 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6002.18005_none_1948307cbc8d5ac3\netrap.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 52736 c:\windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6002.18005_none_1948307cbc8d5ac3\expand.exe
+ 2008-06-01 17:48 . 2008-01-19 03:36 46592 c:\windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6002.18005_none_6b24103689ec6965\setbcdlocale.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 28160 c:\windows\winsxs\x86_microsoft-windows-azman_31bf3856ad364e35_6.0.6002.18005_none_58429241afdb27e5\AzSqlExt.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 20992 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dswave.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 84480 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmscript.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 38400 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmloader.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 62976 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmcompos.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 30208 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmband.dll
+ 2006-11-02 08:39 . 2006-11-02 09:45 14336 c:\windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defd\pcaui.exe
+ 2006-11-02 08:39 . 2006-11-02 09:46 38912 c:\windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defd\acppage.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 13824 c:\windows\winsxs\x86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_7cc3af8dde4f2233\apilogen.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 24064 c:\windows\winsxs\x86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_7cc3af8dde4f2233\amxread.dll
+ 2006-11-02 08:29 . 2006-11-02 09:45 20992 c:\windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_d6fc7cca49dba20f\sdbinst.exe
+ 2006-11-02 08:29 . 2006-11-02 09:46 24576 c:\windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_d6fc7cca49dba20f\aelupsvc.dll
+ 2009-09-02 06:02 . 2009-08-29 00:19 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798\Apphlpdm.dll
+ 2009-09-02 06:02 . 2009-08-29 00:14 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f\Apphlpdm.dll
+ 2009-09-02 06:02 . 2009-08-28 12:24 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d\Apphlpdm.dll
+ 2009-09-02 06:02 . 2009-08-28 12:39 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f\Apphlpdm.dll
+ 2009-09-02 06:02 . 2009-08-29 03:32 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa\Apphlpdm.dll
+ 2009-09-02 06:02 . 2009-08-29 03:40 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee\Apphlpdm.dll
+ 2008-06-01 17:46 . 2008-01-19 03:42 52792 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\volmgr.sys
+ 2008-06-01 17:46 . 2008-01-19 03:42 56888 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\VIAAGP.SYS
+ 2008-06-01 17:46 . 2008-01-19 03:42 60984 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\ULIAGPKX.SYS
+ 2008-06-01 17:46 . 2008-01-19 03:41 15288 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\swenum.sys
+ 2008-06-01 17:46 . 2006-11-02 05:49 22632 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\streamci.dll
+ 2008-06-01 17:49 . 2008-01-19 03:42 55864 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\SISAGP.SYS
+ 2008-06-01 17:49 . 2008-01-19 03:41 31288 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\mssmbios.sys
+ 2008-06-01 17:49 . 2008-01-19 03:41 16440 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\msisadrv.sys
+ 2008-06-01 17:49 . 2008-01-19 03:42 49720 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\isapnp.sys
+ 2008-06-01 17:48 . 2008-01-19 03:42 57400 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AMDAGP.SYS
+ 2008-06-01 17:48 . 2008-01-19 03:42 56376 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
+ 2008-06-01 17:49 . 2008-01-19 03:41 35384 c:\windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7ca\kbdclass.sys
+ 2008-06-01 17:47 . 2008-01-19 01:49 54784 c:\windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7ca\i8042prt.sys
+ 2008-06-01 17:47 . 2008-01-19 01:53 25472 c:\windows\winsxs\x86_input.inf_31bf3856ad364e35_6.0.6002.18005_none_225b12d31d3f7b27\hidparse.sys
+ 2008-06-01 17:47 . 2008-01-19 01:53 21504 c:\windows\winsxs\x86_input.inf_31bf3856ad364e35_6.0.6002.18005_none_225b12d31d3f7b27\hidir.sys
+ 2008-06-01 17:48 . 2006-11-02 04:24 13568 c:\windows\winsxs\x86_brmfcsto.inf_31bf3856ad364e35_6.0.6002.18005_none_25dcd6df44d8819b\BrFiltLo.sys
+ 2008-06-01 17:47 . 2008-01-19 01:32 11264 c:\windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6002.18005_none_24743d0fcb299a94\wmiacpi.sys
+ 2008-06-01 17:48 . 2008-01-19 03:41 20792 c:\windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6002.18005_none_24743d0fcb299a94\compbatt.sys
+ 2008-06-01 17:48 . 2008-01-19 03:41 28216 c:\windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6002.18005_none_24743d0fcb299a94\battc.sys
+ 2008-06-01 17:48 . 2008-01-19 01:53 53376 c:\windows\winsxs\x86_1394.inf_31bf3856ad364e35_6.0.6002.18005_none_fd1acfab0309bd5e\1394bus.sys
+ 2007-08-26 20:57 . 2009-09-21 13:18 67008 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2009-09-21 23:42 67966 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2007-12-22 18:05 . 2009-09-21 23:42 19834 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-348156697-1617906385-725782946-1002_UserData.bin
+ 2008-06-01 17:46 . 2008-01-19 01:53 55296 c:\windows\System32\drivers\USBSTOR.SYS
- 2007-08-26 21:25 . 2007-08-26 21:25 55296 c:\windows\System32\drivers\USBSTOR.SYS
- 2007-08-26 09:43 . 2009-08-31 16:27 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2007-08-26 09:43 . 2009-09-21 23:56 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2007-08-26 09:43 . 2009-09-21 23:56 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2007-08-26 09:43 . 2009-08-31 16:27 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-06-01 17:48 . 2008-01-19 01:53 5632 c:\windows\winsxs\x86_wdmaudio.inf_31bf3856ad364e35_6.0.6002.18005_none_6252d21f1747740d\drmkaud.sys
+ 2008-06-01 17:46 . 2008-01-19 01:53 5888 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbd.sys
+ 2008-06-01 17:47 . 2006-11-02 05:46 8704 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\hccoin.dll
+ 2008-06-01 17:48 . 2008-01-19 02:14 9216 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\serscan.sys
+ 2008-06-01 17:48 . 2008-01-19 03:33 6656 c:\windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.0.6002.18005_none_f5822ffe8bc8ab63\CertEnrollCtrl.exe
+ 2006-11-02 07:15 . 2006-11-02 07:15 2048 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\WmiApRes.dll
+ 2006-11-02 07:14 . 2006-11-02 07:14 6144 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\WinMgmtR.dll
+ 2008-06-01 17:47 . 2008-01-19 01:39 1536 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmCl.dll
+ 2009-09-21 03:30 . 2009-08-14 13:52 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\TCPSVCS.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:52 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\HOSTNAME.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:49 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\TCPSVCS.EXE
+ 2009-09-21 03:30 . 2009-08-14 13:49 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\HOSTNAME.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\TCPSVCS.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\HOSTNAME.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:11 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\TCPSVCS.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:11 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\HOSTNAME.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:16 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\TCPSVCS.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:16 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\HOSTNAME.EXE
+ 2009-09-21 03:30 . 2009-08-15 21:31 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\TCPSVCS.EXE
+ 2009-09-21 03:30 . 2009-08-15 21:31 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\HOSTNAME.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:25 9728 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\TCPSVCS.EXE
+ 2009-09-21 03:30 . 2009-08-14 14:25 8704 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\HOSTNAME.EXE
+ 2006-11-02 12:35 . 2006-11-02 12:35 2048 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\IPSEventLogMsg.dll
+ 2006-11-02 08:58 . 2006-11-02 09:39 3072 c:\windows\winsxs\x86_microsoft-windows-t..-platform-libraries_31bf3856ad364e35_6.0.6002.18005_none_ec5c63f1986ff65e\icmp.dll
+ 2006-11-02 08:45 . 2006-11-02 09:46 9728 c:\windows\winsxs\x86_microsoft-windows-smbserver_31bf3856ad364e35_6.0.6002.18005_none_fae06204e7fd48dd\sscore.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 9728 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscproxystub.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 8192 c:\windows\winsxs\x86_microsoft-windows-riched32_31bf3856ad364e35_6.0.6002.18005_none_9eec2ce27fbd701c\riched32.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45 7680 c:\windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\plasrv.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 8960 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WOWEXEC.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 2864 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WOWDEB.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 2112 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WINSPOOL.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 2864 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WINSOCK.DLL
+ 2006-11-02 07:10 . 2006-11-02 07:10 5120 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WINNLS.DLL
+ 2006-11-02 08:35 . 2006-11-02 08:35 6656 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\win.com
+ 2006-11-02 07:10 . 2006-11-02 07:10 9216 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WIFEMAN.DLL
+ 2006-11-02 07:10 . 2006-11-02 07:10 2176 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\vga.drv
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ver.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 4048 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\TIMER.DRV
+ 2006-11-02 07:10 . 2006-11-02 07:10 3360 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\system.drv
+ 2006-11-02 07:10 . 2006-11-02 07:10 1744 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\sound.drv
+ 2006-11-02 07:10 . 2006-11-02 07:10 5120 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\SHELL.DLL
+ 2006-11-02 07:10 . 2006-11-02 07:10 2842 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\redir.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 7052 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\nlsfunc.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 2032 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\mouse.drv
+ 2006-11-02 06:25 . 2006-09-18 21:43 9936 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\lzexpand.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 2000 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\keyboard.drv
+ 2006-11-02 07:09 . 2006-11-02 07:09 4768 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\HIMEM.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 8424 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\exe2bin.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 9029 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ANSI.SYS
+ 2006-11-02 07:38 . 2006-11-02 07:38 2048 c:\windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473\bridgeres.dll
+ 2006-11-02 07:43 . 2006-09-19 11:41 9560 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\office_48.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 4280 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\office_32.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 2456 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\office_24.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 9560 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\house_48.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 4280 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\house_32.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 2456 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\house_24.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 9560 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\bench_48.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 4280 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\bench_32.bin
+ 2006-11-02 07:43 . 2006-09-19 11:41 2456 c:\windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6002.18005_none_d76ee3df0b2c9479\bench_24.bin
+ 2006-11-02 08:22 . 2006-11-02 08:22 4096 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons002a.dll
+ 2006-11-02 08:26 . 2006-11-02 09:41 2048 c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6002.18005_none_8a59754e93f83a6b\msxml6r.dll
+ 2006-11-02 08:26 . 2006-11-02 09:41 2048 c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6002.18005_none_8a59b9a693f7ed88\msxml3r.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 9216 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\migres.dll
+ 2009-09-21 03:29 . 2009-06-10 09:53 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\mferror.dll
+ 2009-09-21 03:29 . 2009-04-11 04:54 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\mferror.dll
+ 2009-09-21 03:29 . 2009-06-10 10:10 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\mferror.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\mferror.dll
+ 2009-09-21 03:29 . 2009-06-10 08:43 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\mferror.dll
+ 2009-09-21 03:29 . 2009-06-10 08:50 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\mferror.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 9728 c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18005_none_a83603ce59ed0382\lsass.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 9216 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\w3ctrlps.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 8192 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisrstap.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 7680 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\rpcref.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 9728 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\infoctrs.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 2048 c:\windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6002.18005_none_830c4d13af27c916\iismui.dll
+ 2006-11-02 06:58 . 2006-11-02 06:58 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18005_none_1732cf8206b3dc2f\tzres.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 6656 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6002.18005_none_36156175d71bfd77\McrMgr.dll
+ 2006-11-02 12:36 . 2006-11-02 12:36 2048 c:\windows\winsxs\x86_microsoft-windows-dfsr-core-clientonly_31bf3856ad364e35_6.0.6002.18005_none_b86505b69725e0c7\dfsrres.dll
+ 2006-11-02 09:16 . 2006-11-02 09:44 5120 c:\windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6002.18005_none_273dbf533b731283\wmi.dll
+ 2006-11-02 07:21 . 2006-11-02 09:41 2048 c:\windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6002.18005_none_1948307cbc8d5ac3\netmsg.dll
+ 2006-11-02 08:39 . 2006-11-02 09:45 7680 c:\windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defd\pcalua.exe
+ 2006-11-02 08:39 . 2006-11-02 09:45 8192 c:\windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defd\pcaelv.exe
+ 2006-11-02 07:11 . 2006-11-02 07:11 2048 c:\windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defd\acprgwiz.dll
+ 2009-09-02 06:02 . 2009-08-29 00:24 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d\AcRes.dll
+ 2006-11-02 07:11 . 2006-11-02 07:11 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4\AcRes.dll
+ 2006-11-02 07:11 . 2006-11-02 07:11 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18005_none_0e0db135ef6e3719\AcRes.dll
+ 2009-09-02 06:02 . 2009-08-28 10:09 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442\AcRes.dll
+ 2008-05-28 00:34 . 2008-03-08 01:58 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24\AcRes.dll
+ 2009-09-02 06:02 . 2009-08-28 23:11 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af\AcRes.dll
+ 2009-09-02 06:02 . 2009-08-28 23:15 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3\AcRes.dll
+ 2008-06-01 17:49 . 2006-11-02 05:39 6656 c:\windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7ca\kbd106.dll
+ 2008-06-01 17:48 . 2006-11-02 04:24 5248 c:\windows\winsxs\x86_brmfcsto.inf_31bf3856ad364e35_6.0.6002.18005_none_25dcd6df44d8819b\BrFiltUp.sys
+ 2008-01-25 23:35 . 2009-09-21 07:13 2542 c:\windows\System32\WDI\ERCQueuedResolutions.dat
+ 2009-09-21 13:15 . 2009-09-21 23:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-08-31 16:11 . 2009-08-31 16:11 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-09-21 13:15 . 2009-09-21 23:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-08-31 16:11 . 2009-08-31 16:11 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-06-01 17:47 . 2008-01-05 07:21 688128 c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6002.18005_none_83a8694719af9b52\System.Speech.dll
+ 2008-06-01 17:47 . 2006-11-02 05:46 151552 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtp.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 338944 c:\windows\winsxs\x86_wdmaudio.inf_31bf3856ad364e35_6.0.6002.18005_none_6252d21f1747740d\SysFxUI.dll
+ 2008-06-01 17:48 . 2008-01-19 02:53 130048 c:\windows\winsxs\x86_wdmaudio.inf_31bf3856ad364e35_6.0.6002.18005_none_6252d21f1747740d\drmk.sys
+ 2006-11-02 12:34 . 2006-11-02 12:34 653928 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MsMpRes.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 215096 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MsMpCom.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 272952 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpSvc.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 134200 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpSigDwn.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 671288 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpRtMon.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 319544 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpCmdRun.exe
+ 2008-06-01 17:49 . 2008-01-19 03:38 312888 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpClient.dll
+ 2008-06-01 17:48 . 2008-01-19 03:14 207872 c:\windows\winsxs\x86_ntprint.inf_31bf3856ad364e35_6.0.6002.18005_none_3cec160db7d4ac84\I386\PCLXL.DLL
+ 2008-06-01 17:48 . 2008-01-19 03:34 403968 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\FirewallAPI.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 372224 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\WMIMigrationPlugin.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 204800 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\framedynos.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 202240 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\framedyn.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 357888 c:\windows\winsxs\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6002.18005_none_0566a709205437e7\wbemcomn.dll
+ 2009-09-21 03:29 . 2009-07-11 19:10 513536 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\wlansvc.dll
+ 2009-09-21 03:29 . 2009-07-11 19:10 302592 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:10 293376 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\wlanmsm.dll
+ 2009-09-21 03:29 . 2009-07-11 19:01 513536 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\wlansvc.dll
+ 2009-09-21 03:29 . 2009-07-11 19:01 302592 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:01 293376 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\wlanmsm.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 302592 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:17 513536 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\wlansvc.dll
+ 2009-09-21 03:29 . 2009-07-11 19:17 302592 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:17 293376 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\wlanmsm.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 513024 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlansvc.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 302592 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 293376 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlanmsm.dll
+ 2009-09-21 03:29 . 2009-07-11 19:24 502784 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\wlansvc.dll
+ 2009-09-21 03:29 . 2009-07-11 19:24 299520 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:24 289280 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\wlanmsm.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 502272 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\wlansvc.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 297984 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\wlansec.dll
+ 2009-09-21 03:29 . 2009-07-11 19:32 290816 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\wlanmsm.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45 516096 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wab.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34 198144 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\sti.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 175616 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmWmiPl.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 123904 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmAuto.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 188928 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WSManMigrationPlugin.dll
+ 2008-06-01 17:47 . 2008-01-05 07:36 195122 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\winrm.vbs
+ 2008-06-01 17:49 . 2008-01-19 03:34 143872 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\modemmigplugin.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 205312 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\mdminst.dll
+ 2009-09-21 03:30 . 2009-08-15 23:58 167424 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\tcpipcfg.dll
+ 2009-09-21 03:31 . 2009-08-15 21:30 816640 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\tcpip.sys
+ 2009-09-21 03:30 . 2009-08-14 16:42 167424 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\tcpipcfg.dll
+ 2009-09-21 03:31 . 2009-08-14 14:24 813568 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\tcpip.sys
+ 2009-09-21 03:31 . 2009-08-14 13:51 106496 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\netiohlp.dll
+ 2009-09-21 03:31 . 2009-08-14 13:48 105984 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\netiohlp.dll
+ 2009-09-21 03:31 . 2009-08-14 16:24 105472 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\netiohlp.dll
+ 2009-09-21 03:31 . 2009-08-14 16:29 104960 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\netiohlp.dll
+ 2009-09-21 03:31 . 2009-08-15 23:56 103936 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\netiohlp.dll
+ 2009-09-21 03:31 . 2009-08-14 16:40 103936 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\netiohlp.dll
+ 2009-09-21 03:31 . 2009-08-14 16:33 905784 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80\tcpip.sys
+ 2009-09-21 03:31 . 2009-08-14 16:27 904776 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f\tcpip.sys
+ 2009-09-21 03:31 . 2009-08-14 17:01 900168 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys
+ 2009-09-21 03:31 . 2009-08-14 17:07 897608 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3\tcpip.sys
+ 2008-06-01 17:49 . 2008-01-19 03:35 484352 c:\windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6002.18005_none_199d015da1ba0131\MSPVWCTL.DLL
+ 2008-06-01 17:49 . 2008-01-19 03:34 983040 c:\windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6002.18005_none_199d015da1ba0131\JNTFiltr.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 672768 c:\windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6002.18005_none_199d015da1ba0131\InkSeg.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 114688 c:\windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.0.6002.18005_none_137a8ed274a4186a\TipBand.dll
+ 2009-08-28 18:06 . 2009-04-11 06:28 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18005_none_31d980c8c2ca01c9\aaclient.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 276992 c:\windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.0.6002.18005_none_cc7c00e534312d1f\InkDiv.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 159744 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\IpsOptInSrv.exe
+ 2008-06-01 17:49 . 2008-01-19 03:33 198656 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\InputPersonalization.exe
+ 2008-06-01 17:48 . 2008-01-19 03:33 318464 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\rstrui.exe
+ 2008-06-01 17:47 . 2008-01-19 03:36 402432 c:\windows\winsxs\x86_microsoft-windows-speechengine_31bf3856ad364e35_6.0.6002.18005_none_f0a9964297040c1c\srloc.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 416768 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\win32ui.dll
+ 2008-06-01 17:47 . 2008-01-19 03:31 266752 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\W32UIRes.dll
+ 2008-06-01 17:48 . 2008-01-19 03:42 195640 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\Setup.exe
+ 2008-06-01 17:48 . 2008-01-19 03:36 121856 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\diagnostic.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 167424 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\ActionQueue.dll
+ 2009-09-21 03:31 . 2009-06-06 12:55 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18\jscript.dll
+ 2009-09-21 03:31 . 2009-06-06 05:01 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8\jscript.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 104960 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18005_none_26f5355863ea5f18\sdrsvc.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 730624 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18005_none_26f5355863ea5f18\sdengin2.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 116736 c:\windows\winsxs\x86_microsoft-windows-rasbase-rassstp_31bf3856ad364e35_6.0.6002.18005_none_9bbd28fee50e4840\sstpsvc.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 456704 c:\windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.0.6002.18005_none_9df537379e15bb5c\wvc.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 120320 c:\windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.0.6002.18005_none_9df537379e15bb5c\perfmon.exe
+ 2008-06-01 17:48 . 2008-01-19 03:36 202240 c:\windows\winsxs\x86_microsoft-windows-peertopeerbase_31bf3856ad364e35_6.0.6002.18005_none_6dc3b4192328b522\P2P.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 109056 c:\windows\winsxs\x86_microsoft-windows-packagemanager_31bf3856ad364e35_6.0.6002.18005_none_eec33d27f06610f3\SSShim.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 163840 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabFile.dll
+ 2008-06-01 17:46 . 2008-01-19 03:33 337408 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\tracerpt.exe
+ 2008-06-01 17:48 . 2008-01-19 03:36 300032 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\puiobj.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 276480 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\compstui.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 256192 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\winhelp.exe
+ 2008-06-01 17:49 . 2008-01-19 03:33 520704 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ntvdm.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 108464 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\netapi.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 221600 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\lanman.drv
+ 2009-09-21 03:31 . 2009-08-14 16:23 438272 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\IKEEXT.DLL
+ 2009-09-21 03:30 . 2009-08-14 16:22 595456 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\FWPUCLNT.DLL
+ 2009-09-21 03:30 . 2009-08-14 16:21 328704 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\BFE.DLL
+ 2009-09-21 03:31 . 2009-08-15 23:54 416768 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\IKEEXT.DLL
+ 2009-09-21 03:30 . 2009-08-15 23:54 543232 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\FWPUCLNT.DLL
+ 2009-09-21 03:30 . 2009-08-15 23:53 317440 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\BFE.DLL
+ 2009-09-21 03:31 . 2009-08-14 17:01 220232 c:\windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78\netio.sys
+ 2009-09-21 03:31 . 2009-08-16 00:32 214104 c:\windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7\netio.sys
+ 2009-09-21 03:31 . 2009-08-14 17:16 213592 c:\windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b\netio.sys
+ 2008-06-01 17:49 . 2008-01-19 03:35 129024 c:\windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6002.18005_none_a9b2a4d31930d864\ndismigplugin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 172544 c:\windows\winsxs\x86_microsoft-windows-n..essprotection-agent_31bf3856ad364e35_6.0.6002.18005_none_0883ae29eaa2c24f\QAGENT.DLL
+ 2008-06-01 17:48 . 2008-01-19 03:36 272896 c:\windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6002.18005_none_45f9f0dde92709b8\polstore.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 122880 c:\windows\winsxs\x86_microsoft-windows-msmq-installer_31bf3856ad364e35_6.0.6002.18005_none_7cfd1e3efd565efd\mqmigplugin.dll
+ 2006-11-02 06:52 . 2006-11-02 09:40 145920 c:\windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6002.18005_none_c92df35a758f4008\msaudite.dll
+ 2008-06-01 17:49 . 2008-01-19 03:33 258560 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\mighost.exe
+ 2008-06-01 17:48 . 2008-01-19 03:34 479232 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\docagent.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 248832 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\csiagent.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 159232 c:\windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820\cmi2migxml.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 205824 c:\windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6002.18005_none_eb13e63d87485b7f\msoeacct.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 397312 c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6002.18005_none_f343a6944cd6fe47\WinMail.exe
+ 2008-06-01 17:49 . 2008-01-19 03:34 241664 c:\windows\winsxs\x86_microsoft-windows-m..o-multi-dimensional_31bf3856ad364e35_6.0.6002.18005_none_209263eba313e2b7\msadomd.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 253952 c:\windows\winsxs\x86_microsoft-windows-m..ac-ado-ddl-security_31bf3856ad364e35_6.0.6002.18005_none_b41a0fe83d844f87\msadox.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 127488 c:\windows\winsxs\x86_microsoft-windows-m..-management-console_31bf3856ad364e35_6.0.6002.18005_none_115ec41c72c40a06\mmcshext.dll
+ 2008-06-01 17:49 . 2008-01-19 03:34 301056 c:\windows\winsxs\x86_microsoft-windows-m..-management-console_31bf3856ad364e35_6.0.6002.18005_none_115ec41c72c40a06\mmcbase.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 171520 c:\windows\winsxs\x86_microsoft-windows-m..-management-console_31bf3856ad364e35_6.0.6002.18005_none_115ec41c72c40a06\cic.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 372224 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\WMIMigrationPlugin.dll
+ 2008-06-01 17:46 . 2008-01-19 03:36 201216 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\StorMigPlugin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 115200 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\RasMigPlugin.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 135680 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\NlbMigPlugin.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 129024 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\ndismigplugin.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 153600 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\msctfmig.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 122880 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\mqmigplugin.dll
+ 2008-06-01 17:49 . 2008-01-19 03:36 143872 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\ModemMigPlugin.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 209408 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\iismig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 284672 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\drmmgrtn.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 122880 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\DhcpSrvMigPlugin.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 120832 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\CntrtextMig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 150016 c:\windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\adfsmig.dll
+ 2009-09-21 03:29 . 2009-07-11 17:07 127488 c:\windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d\L2SecHC.dll
+ 2009-09-21 03:29 . 2009-07-11 17:03 127488 c:\windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e\L2SecHC.dll
+ 2009-09-21 03:29 . 2009-07-11 19:14 127488 c:\windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10\L2SecHC.dll
+ 2009-09-21 03:29 . 2009-07-11 19:29 127488 c:\windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701\L2SecHC.dll
+ 2009-09-21 03:29 . 2009-07-11 19:18 124928 c:\windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112\L2SecHC.dll
+ 2009-09-21 03:29 . 2009-07-11 19:26 123904 c:\windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4\L2SecHC.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 798208 c:\windows\winsxs\x86_microsoft-windows-imageanalysis_31bf3856ad364e35_6.0.6002.18005_none_4a4790c62744fde7\dbghelp.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 202240 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisutil.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 228864 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iissetup.exe
+ 2008-06-01 17:47 . 2008-01-19 03:34 153600 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisRtl.dll
+ 2008-06-01 17:47 . 2008-01-19 02:09 193024 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iisres.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 209408 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\iismig.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 182784 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298\aspnetca.exe
+ 2008-06-01 17:49 . 2008-01-19 03:34 268288 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\metadata.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 226816 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\infocomm.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 991744 c:\windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2\iiscfg.dll
+ 2008-06-01 17:46 . 2008-01-19 03:36 140800 c:\windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6002.18005_none_830c4d13af27c916\uihelper.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18005_none_668de5abab40d495\ieui.dll
+ 2008-06-01 17:47 . 2008-01-19 03:36 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6002.18005_none_498f236589a5fb8f\sqmapi.dll
+ 2006-11-02 07:27 . 2006-11-02 09:39 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6002.18005_none_b01d9ad903e7b4d8\ieakui.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 215040 c:\windows\winsxs\x86_microsoft-windows-icm-base_31bf3856ad364e35_6.0.6002.18005_none_24b3636086850491\icm32.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 140288 c:\windows\winsxs\x86_microsoft-windows-i..httptracingbinaries_31bf3856ad364e35_6.0.6002.18005_none_3172619518138603\iisfreb.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 123392 c:\windows\winsxs\x86_microsoft-windows-f..temutilitylibraries_31bf3856ad364e35_6.0.6002.18005_none_eb81d0e3eccf24e4\ifsutil.dll
+ 2009-09-21 03:25 . 2009-07-21 12:27 171008 c:\windows\winsxs\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6002.22181_none_d867f28696ca3d06\ehkeyctl.dll
+ 2009-09-21 03:25 . 2009-07-21 12:26 171008 c:\windows\winsxs\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6002.18072_none_d7ea25f17da39aa2\ehkeyctl.dll
+ 2009-09-21 03:25 . 2009-07-22 00:24 171008 c:\windows\winsxs\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6001.22476_none_d69151fc99974aa4\ehkeyctl.dll
+ 2009-09-21 03:25 . 2009-07-21 14:45 171008 c:\windows\winsxs\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6001.18295_none_d5f11329808acc3e\ehkeyctl.dll
+ 2009-09-21 03:25 . 2009-07-21 14:39 171008 c:\windows\winsxs\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6000.21090_none_d48f47fe9c868fa6\ehkeyctl.dll
+ 2009-09-21 03:25 . 2009-07-21 14:56 171008 c:\windows\winsxs\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6000.16891_none_d406d35b8367d5f1\ehkeyctl.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 142848 c:\windows\winsxs\x86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746\dot3ui.dll
+ 2008-06-01 17:47 . 2008-01-19 03:34 153088 c:\windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6002.18005_none_273dbf533b731283\imagehlp.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 229888 c:\windows\winsxs\x86_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_6.0.6002.18005_none_4d0199377378c581\mycomput.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 487936 c:\windows\winsxs\x86_microsoft-windows-c..fe-catsrvut-comsvcs_31bf3856ad364e35_6.0.6002.18005_none_74adde399cffc649\catsrvut.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 317440 c:\windows\winsxs\x86_microsoft-windows-authorizationmanagerui_31bf3856ad364e35_6.0.6002.18005_none_23c56fa8fcc74482\azroleui.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 185856 c:\windows\winsxs\x86_microsoft-windows-audio-volumecontrol_31bf3856ad364e35_6.0.6002.18005_none_c813ea73049bcaf0\SndVolSSO.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 173568 c:\windows\winsxs\x86_microsoft-windows-audio-dsound_31bf3856ad364e35_6.0.6002.18005_none_5a8737643f04aa4c\dsdmo.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 105472 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmstyle.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 178688 c:\windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmime.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 169984 c:\windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.0.6002.18005_none_788b3d32e1c18b26\EncDump.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 274944 c:\windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.0.6002.18005_none_788b3d32e1c18b26\AUDIOKSE.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 397312 c:\windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.0.6002.18005_none_788b3d32e1c18b26\AudioEng.dll
+ 2008-06-01 17:48 . 2008-01-19 03:34 282624 c:\windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defd\CompatUI.dll
+ 2009-09-02 06:02 . 2009-08-29 02:46 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-29 02:46 542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\AcLayers.dll
+ 2009-09-02 06:02 . 2009-08-29 02:30 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-29 02:30 542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\AcLayers.dll
+ 2008-06-01 17:48 . 2008-01-19 03:33 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18005_none_0e11b25def6a9c75\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-28 12:24 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-28 12:24 541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\AcLayers.dll
+ 2009-09-02 06:02 . 2009-08-28 12:39 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-28 12:38 541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\AcLayers.dll
+ 2009-09-02 06:02 . 2009-08-29 03:31 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-29 03:31 537600 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\AcLayers.dll
+ 2009-09-02 06:02 . 2009-08-29 03:40 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-29 03:40 537600 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\AcLayers.dll
+ 2009-09-02 06:02 . 2009-08-29 02:46 458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952\AcSpecfc.dll
+ 2009-09-02 06:02 . 2009-08-29 02:30 458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9\AcSpecfc.dll
+ 2009-09-02 06:02 . 2009-08-28 12:24 459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047\AcSpecfc.dll
+ 2009-09-02 06:02 . 2009-08-28 12:38 459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729\AcSpecfc.dll
+ 2009-09-02 06:02 . 2009-08-29 03:31 450560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4\AcSpecfc.dll
+ 2009-09-02 06:02 . 2009-08-29 03:40 449024 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8\AcSpecfc.dll
+ 2006-11-02 08:29 . 2006-11-02 09:46 111104 c:\windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_d6fc7cca49dba20f\shimeng.dll
+ 2008-06-01 17:49 . 2008-01-19 03:43 109112 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\NV_AGP.SYS
+ 2008-06-01 17:48 . 2008-01-19 03:34 616448 c:\windows\winsxs\x86_ds-ui-ext_31bf3856ad364e35_6.0.6002.18005_none_7238a4a9fcb67295\dsuiext.dll
+ 2008-06-01 17:47 . 2008-01-05 07:21 688128 c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6002.18005_none_0bd8244b7da9c221\System.Speech.dll
+ 2007-12-28 00:02 . 2009-09-01 23:30 254112 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2007-12-31 04:14 . 2009-09-21 14:55 269860 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2006-11-02 10:33 . 2009-06-19 12:58 604012 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-09-20 22:27 604012 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-06-19 12:58 105040 c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2009-09-20 22:27 105040 c:\windows\System32\perfc009.dat
+ 2009-09-21 03:31 . 2009-06-06 05:01 726528 c:\windows\System32\jscript.dll
- 2009-03-31 16:09 . 2009-03-08 11:33 726528 c:\windows\System32\jscript.dll
+ 2007-08-26 09:43 . 2009-09-21 23:56 163840 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-06-01 17:48 . 2008-01-19 03:34 171008 c:\windows\ehome\ehkeyctl.dll
+ 2009-09-21 03:25 . 2009-07-21 14:45 171008 c:\windows\ehome\ehkeyctl.dll
+ 2009-09-02 06:02 . 2009-08-28 12:39 173056 c:\windows\AppPatch\AcXtrnal.dll
- 2008-12-12 00:28 . 2008-11-01 03:44 173056 c:\windows\AppPatch\AcXtrnal.dll
+ 2009-09-02 06:02 . 2009-08-28 12:38 459776 c:\windows\AppPatch\AcSpecfc.dll
- 2008-12-12 00:28 . 2008-11-01 03:44 541696 c:\windows\AppPatch\AcLayers.dll
+ 2009-09-02 06:02 . 2009-08-28 12:38 541696 c:\windows\AppPatch\AcLayers.dll
+ 2008-06-01 17:47 . 2008-01-19 03:37 1312256 c:\windows\winsxs\x86_wdmaudio.inf_31bf3856ad364e35_6.0.6002.18005_none_6252d21f1747740d\WMALFXGFXDSP.dll
+ 2008-06-01 17:49 . 2008-01-19 03:38 1008184 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MSASCui.exe
+ 2008-06-01 17:49 . 2008-01-05 07:37 2730536 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpEngine.dll
+ 2006-11-02 12:41 . 2006-11-02 12:41 1327104 c:\windows\winsxs\x86_networking-mpssvc-admin.resources_31bf3856ad364e35_6.0.6002.18005_en-us_42db948893eb62ef\AuthFWSnapIn.Resources.dll
+ 2006-11-02 07:28 . 2006-11-02 07:28 1098752 c:\windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6002.18005_none_570ee68146eaef3c\wab32res.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1217536 c:\windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6002.18005_none_199d015da1ba0131\NBDoc.DLL
+ 2006-11-02 12:35 . 2006-11-02 12:35 1149440 c:\windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.0.6002.18005_none_137a8ed274a4186a\TipRes.dll
+ 2008-06-01 17:47 . 2008-01-19 03:33 1254400 c:\windows\winsxs\x86_microsoft-windows-tabletpc-inkball_31bf3856ad364e35_6.0.6002.18005_none_cbf1f985670d2173\inkball.exe
+ 2006-11-02 12:35 . 2006-11-02 12:35 2073600 c:\windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6002.18005_none_d2fbc584d9efb14a\TouchX.dll
+ 2006-11-02 07:01 . 2006-11-02 09:43 2928640 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\W32UIImg.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 8384512 c:\windows\winsxs\x86_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.0.6002.18005_none_0816f786fb93afde\PurblePlace2.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 4305408 c:\windows\winsxs\x86_microsoft-windows-s..oxgames-minesweeper_31bf3856ad364e35_6.0.6002.18005_none_a44c9668365113ed\MineSweeper.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 1486848 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabRes.dll
+ 2008-06-01 17:48 . 2008-01-19 03:36 1502208 c:\windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\pla.dll
+ 2009-09-21 03:29 . 2009-08-10 07:23 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755\OESpamFilter.dat
+ 2009-09-21 03:29 . 2009-08-10 07:23 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec\OESpamFilter.dat
+ 2009-09-21 03:29 . 2009-08-10 07:22 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5\OESpamFilter.dat
+ 2009-09-21 03:29 . 2009-08-10 07:23 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c\OESpamFilter.dat
+ 2009-09-21 03:29 . 2009-08-10 07:22 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7\OESpamFilter.dat
+ 2009-09-21 03:29 . 2009-08-10 07:23 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab\OESpamFilter.dat
+ 2006-11-02 08:21 . 2006-11-02 08:21 5071872 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsModels0011.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6917120 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0c1a.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 7042560 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons081a.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 5031936 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0816.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 5090816 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0416.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 4616192 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0414.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1972736 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons004e.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 4093440 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons004c.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1702912 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons004b.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 3419136 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons004a.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1558016 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0049.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1411072 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0047.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1808896 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0046.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1793536 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0045.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 4045824 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons003e.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1782272 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0039.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6224896 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0027.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 5791232 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0026.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 7964672 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0024.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 5499904 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0022.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 2136064 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0021.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1236992 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0020.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6346240 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons001d.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6585856 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons001b.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6014976 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons001a.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6781440 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0019.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 3331072 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0018.dll
+ 2006-11-02 08:21 . 2006-11-02 08:21 4981248 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0013.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 2466816 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0011.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 4175872 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0010.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 5654528 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons000f.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1722368 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons000d.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 6237696 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons000c.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 9892864 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons000a.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 1452544 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0003.dll
+ 2006-11-02 08:22 . 2006-11-02 08:22 4164096 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0002.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0c1a.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData081a.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4495360 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0816.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4495360 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0416.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4495360 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0414.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData004e.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData004c.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData004b.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData004a.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0049.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0047.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0046.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0045.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1801216 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData003e.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0039.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1801216 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData002a.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1966592 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0027.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0026.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0024.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1801216 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0022.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1801216 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0021.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3104768 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0020.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4495360 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData001d.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData001b.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData001a.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4497408 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0019.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0018.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 3466752 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0013.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 2657280 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0011.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4495360 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0010.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData000f.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 2342912 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData000d.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 2643456 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData000c.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 9847296 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData000a.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 4875776 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0009.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 2243072 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0007.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0003.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1965056 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0002.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 2599936 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0001.dll
+ 2008-06-01 17:49 . 2008-01-19 03:35 1523712 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsData0000.dll
+ 2009-09-21 03:29 . 2009-06-10 11:45 2386944 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957\WMVCORE.DLL
+ 2009-09-21 03:29 . 2009-06-10 11:41 2386944 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab\WMVCORE.DLL
+ 2009-09-21 03:29 . 2009-06-10 11:59 2386944 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3\WMVCORE.DLL
+ 2009-09-21 03:29 . 2009-06-10 12:11 2386944 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24\WMVCORE.DLL
+ 2009-09-21 03:29 . 2009-06-10 12:06 2436096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401\WMVCORE.DLL
+ 2009-09-21 03:29 . 2009-06-10 12:16 2433536 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa\WMVCORE.DLL
+ 2009-09-21 03:29 . 2009-06-10 11:45 2868224 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\mf.dll
+ 2009-09-21 03:29 . 2009-06-10 11:41 2868224 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\mf.dll
+ 2009-09-21 03:29 . 2009-06-10 11:59 2868224 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\mf.dll
+ 2009-09-21 03:29 . 2009-06-10 12:11 2868224 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\mf.dll
+ 2009-09-21 03:29 . 2009-06-10 12:00 2855424 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\mf.dll
+ 2009-09-21 03:29 . 2009-06-10 12:07 2855424 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\mf.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 2836992 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6002.18005_none_5a6a3a92226bedf8\MSOERES.dll
+ 2007-08-26 21:27 . 2007-08-26 21:27 2455488 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18005_none_fd7d8f6368e05785\ieapfltr.dat
+ 2009-09-02 06:02 . 2009-08-29 00:34 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb\GameUXLegacyGDFs.dll
+ 2009-09-02 06:02 . 2009-08-29 02:47 1696256 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb\gameux.dll
+ 2009-09-02 06:02 . 2009-08-29 00:27 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492\GameUXLegacyGDFs.dll
+ 2009-09-02 06:02 . 2009-04-11 06:28 1696768 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492\gameux.dll
+ 2008-06-01 17:47 . 2008-01-19 01:46 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18005_none_43ebc81abe5eccc7\GameUXLegacyGDFs.dll
+ 2009-09-02 06:02 . 2009-04-11 06:28 1696768 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18005_none_43ebc81abe5eccc7\gameux.dll
+ 2009-09-02 06:02 . 2009-08-28 10:19 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0\GameUXLegacyGDFs.dll
+ 2009-09-02 06:02 . 2009-08-28 12:25 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0\gameux.dll
+ 2009-09-02 06:02 . 2009-08-28 10:15 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2\GameUXLegacyGDFs.dll
+ 2008-05-28 00:34 . 2008-03-08 04:21 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2\gameux.dll
+ 2009-09-02 06:02 . 2009-08-28 23:26 4247552 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d\GameUXLegacyGDFs.dll
+ 2009-09-02 06:02 . 2009-08-29 03:33 1686528 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d\gameux.dll
+ 2009-09-02 06:02 . 2009-08-28 23:31 4247552 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551\GameUXLegacyGDFs.dll
+ 2009-09-02 06:02 . 2009-08-29 03:41 1686528 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551\gameux.dll
+ 2009-09-02 06:02 . 2009-08-29 02:46 2159616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb\AcGenral.dll
+ 2009-09-02 06:02 . 2009-08-29 02:30 2159616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192\AcGenral.dll
+ 2009-09-02 06:02 . 2009-08-28 12:24 2157056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0\AcGenral.dll
+ 2009-09-02 06:02 . 2009-08-28 12:38 2153984 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2\AcGenral.dll
+ 2009-09-02 06:02 . 2009-08-29 03:31 2144768 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d\AcGenral.dll
+ 2009-09-02 06:02 . 2009-08-29 03:40 2143744 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251\AcGenral.dll
+ 2009-09-21 03:29 . 2009-06-10 12:11 2386944 c:\windows\System32\WMVCORE.DLL
- 2008-12-12 00:27 . 2008-06-23 01:59 2386944 c:\windows\System32\WMVCORE.DLL
+ 2006-11-02 10:22 . 2009-09-21 12:23 6553600 c:\windows\System32\SMI\Store\Machine\schema.dat
- 2006-11-02 10:22 . 2009-08-31 16:10 6553600 c:\windows\System32\SMI\Store\Machine\schema.dat
+ 2009-09-02 06:02 . 2009-08-28 12:38 2153984 c:\windows\AppPatch\AcGenral.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 28665856 c:\windows\winsxs\x86_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.0.6002.18005_none_0816f786fb93afde\PurblePlace.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 29001216 c:\windows\winsxs\x86_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.0.6002.18005_none_76c01ad97b89057a\Chess.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 12555776 c:\windows\winsxs\x86_microsoft-windows-s..inboxgames-shanghai_31bf3856ad364e35_6.0.6002.18005_none_c28f74c1ec4bc973\Mahjong.dll
+ 2006-11-02 08:21 . 2006-11-02 08:21 11722752 c:\windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6002.18005_none_9fc64d4627dda079\NlsLexicons0001.dll
+ 2006-11-02 07:33 . 2006-11-02 07:33 19991040 c:\windows\winsxs\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.0.6002.18005_none_fd148db3f8a0d120\MSHWCHTR.dll
+ 2006-11-02 10:24 . 2009-08-28 21:38 24689600 c:\windows\System32\mrt.exe
+ 2009-09-21 07:01 . 2009-09-21 07:01 15709696 c:\windows\Installer\1effc19.msp
+ 2009-05-30 09:28 . 2009-09-21 07:06 201096323 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AOLOverlayIcon]
@="{AB0C8BE3-041C-47d6-8195-E089D32B38DD}"
[HKEY_CLASSES_ROOT\CLSID\{AB0C8BE3-041C-47d6-8195-E089D32B38DD}]
2007-08-15 16:42 303104 ——w- c:\ddi\OverIcon.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"NSUFloatingUI"="c:\program files\Sony\Network Utility\LANUtil.exe" [2007-06-29 258048]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"AOL Fast Start"="c:\program files\AOL 9.1\AOL.EXE" [2008-11-06 50472]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-29 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-29 154136]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-29 133656]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2007-06-08 118784]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2007-06-12 317560]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-06-04 148888]
"VAIO Center Access Bar"="c:\program files\sony\VAIO Center Access Bar\VCAB.exe" [2007-06-21 53248]
"VWLASU"="c:\program files\Sony\VAIO PC Wireless LAN Wizard\AutoLaunchWLASU.exe" [2007-07-12 45056]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2007-01-10 115816]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"HostManager"="c:\program files\Common Files\AOL\1239025762\ee\AOLSoftware.exe" [2008-11-06 41264]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2009-08-31 1181064]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-06-25 4489216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2007-07-25 02:26 98304 —-a-w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=c:\windows\pss\QuickBooks Update Agent.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{7F3D9032-4FC3-49BE-AFFA-13D232162C23}"= UDP:c:\program files\Sony\LocationFreePlayer\LFPC3\LFPC3.exe:LocationFree Player
"{931F2317-C9AA-435F-8FC8-5DD8E8017078}"= TCP:c:\program files\Sony\LocationFreePlayer\LFPC3\LFPC3.exe:LocationFree Player
"{CECD2AC6-6D8D-47C3-80C1-FD11842631B2}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{C5DAF2DF-7AC0-4653-AEFD-55D13C2AB35F}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{EEA8D889-3A96-4B3F-A3A0-37E9773D46D7}"= Disabled:UDP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media
"{D32E8B6F-040D-403E-BFBE-E5BBD20213C2}"= Disabled:TCP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media
"{C21B099F-E6E7-460B-8E65-C31334581BFF}"= UDP:c:\program files\Common Files\AOL\ACS\AOLDial.exe:AOL Connectivity Service Dialer
"{36F82F7E-16B4-48A4-9C0E-A8974F9F91B5}"= TCP:c:\program files\Common Files\AOL\ACS\AOLDial.exe:AOL Connectivity Service Dialer
"{A22754D3-C61A-4B21-A120-B0BB5DE39D25}"= UDP:c:\program files\Common Files\AOL\ACS\AOLacsd.exe:AOL Connectivity Service
"{99619181-A42F-47D6-94A6-9063657BD30A}"= TCP:c:\program files\Common Files\AOL\ACS\AOLacsd.exe:AOL Connectivity Service
"{0F8A80C7-3C21-4F2A-898C-23586AD433FA}"= UDP:c:\program files\AOL 9.0\waol.exe:AOL
"{69AD39A5-A44E-4873-B2DD-4720EE7AAED1}"= TCP:c:\program files\AOL 9.0\waol.exe:AOL
"{26CD691B-0CBB-4C06-B12E-E1C3E58FC4BF}"= UDP:c:\program files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:AOL TopSpeed
"{EC96A18F-232A-46A0-9E50-42B636A551A7}"= TCP:c:\program files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:AOL TopSpeed
"{57F4D6CE-76AC-41BE-AB22-D13D27B259B5}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{488239E1-C878-4FF5-9F75-B85BF18FD810}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{607F0E11-2485-4790-8CBE-CB01B6D52B20}"= UDP:c:\program files\Common Files\AOL\System Information\sinf.exe:AOL System Information
"{618CB2DD-C5DF-4C58-AB06-85435BBEBB69}"= TCP:c:\program files\Common Files\AOL\System Information\sinf.exe:AOL System Information
"{DE8DA868-4CC7-41CD-883B-32B0A504387D}"= UDP:c:\program files\AOL 9.0a\waol.exe:AOL
"{46589029-8ADD-47C4-B66C-E23F612A9D1D}"= TCP:c:\program files\AOL 9.0a\waol.exe:AOL
"{BBD26E48-6FB8-46AF-B6AB-830CC660C519}"= UDP:c:\program files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:AOL TopSpeed
"{E2CD8AD3-7DF0-4116-8F3A-8DF3CB0F0930}"= TCP:c:\program files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:AOL TopSpeed
"{49C16BFF-C05E-4908-80A7-7BD5C6540B14}"= UDP:c:\program files\Common Files\AOL\ACS\AOLDial.exe:AOL Connectivity Service Dialer
"{EA724800-E224-47AC-860B-141696441380}"= TCP:c:\program files\Common Files\AOL\ACS\AOLDial.exe:AOL Connectivity Service Dialer
"{50B4B829-68CB-4733-B143-6A51A56C2E7B}"= UDP:c:\program files\Common Files\AOL\ACS\AOLacsd.exe:AOL Connectivity Service
"{733B6EC4-DAFA-405F-AADB-CFB71A8248EA}"= TCP:c:\program files\Common Files\AOL\ACS\AOLacsd.exe:AOL Connectivity Service
"{0C953E4E-E29D-4340-BB30-2C8E1337E95B}"= UDP:c:\program files\Common Files\AOL\1209246100\ee\aolsoftware.exe:AOL Shared Components
"{334FEE10-B5C6-42E5-9C15-60608F7A1993}"= TCP:c:\program files\Common Files\AOL\1209246100\ee\aolsoftware.exe:AOL Shared Components
"{40D8E8B4-0BAD-4FB2-A438-C3D1DA5E9419}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{5F9FBA93-1C54-4767-A1F5-49A75EE0495F}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{E997A802-8AC1-4469-8982-08805C07F447}"= UDP:c:\program files\Common Files\AOL\1209246100\ee\AOLDesktop.exe:AOL Desktop
"{FF262E72-9E6F-4983-8137-ED5FB73CB42C}"= TCP:c:\program files\Common Files\AOL\1209246100\ee\AOLDesktop.exe:AOL Desktop
"{357F1892-9B88-4F08-8DC4-6356DB504F7A}"= UDP:c:\program files\Common Files\AOL\1209868711\ee\aolsoftware.exe:AOL Shared Components
"{CB24AB05-6780-4334-A796-2E97A33C427D}"= TCP:c:\program files\Common Files\AOL\1209868711\ee\aolsoftware.exe:AOL Shared Components
"{79FEA2A2-E460-499E-B837-B7786DBB0A6F}"= UDP:c:\program files\AOL 9.0\waol.exe:AOL
"{48A53DEB-58E6-4BB0-85F1-6565256146C1}"= TCP:c:\program files\AOL 9.0\waol.exe:AOL
"{96FA14CE-9D1E-45E7-AE38-5D6453B1C710}"= UDP:c:\program files\Common Files\AOL\System Information\sinf.exe:AOL System Information
"{BCDC1B03-77AE-46E9-B16D-712352D844D5}"= TCP:c:\program files\Common Files\AOL\System Information\sinf.exe:AOL System Information
"{FF896714-A772-4036-BC8A-F79FD5A95C52}"= UDP:c:\program files\Common Files\AOL\1209868711\ee\AOLDesktop.exe:AOL Desktop
"{F2459660-AE70-471A-9974-E2C85667C5C9}"= TCP:c:\program files\Common Files\AOL\1209868711\ee\AOLDesktop.exe:AOL Desktop
"{6D91B633-F62C-4494-8A1C-0CD944ADD4A8}"= UDP:c:\program files\AOL 9.1\waol.exe:AOL
"{BB775011-F76A-427C-89C3-2CC0381C7D4E}"= TCP:c:\program files\AOL 9.1\waol.exe:AOL
"TCP Query User{CC936029-EE4E-414B-BC2C-3879B7592BBE}c:\\program files\\sos online wagering\\client.exe"= UDP:c:\program files\sos online wagering\client.exe:Application
"UDP Query User{6F91D6FD-720D-4CD8-AB95-6B33CB0DB9FA}c:\\program files\\sos online wagering\\client.exe"= TCP:c:\program files\sos online wagering\client.exe:Application
"{8A25B265-A9D5-43F3-B8A3-D66A268F8976}"= UDP:c:\program files\Common Files\AOL\1239025762\ee\aolsoftware.exe:AOL Shared Components
"{1F2A62EE-DB1D-4D3D-9E39-677813B13A19}"= TCP:c:\program files\Common Files\AOL\1239025762\ee\aolsoftware.exe:AOL Shared Components
"{0FD7A1BC-6F5C-41FD-84B9-00234C9E2C50}"= UDP:c:\program files\AOL 9.5\waol.exe:AOL
"{E11FCA7C-0FF4-41B4-A7DA-98333C762648}"= TCP:c:\program files\AOL 9.5\waol.exe:AOL
"{4C0A0F53-D9A5-488F-BB6C-3B45BEB371C3}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{F709BEF4-1263-45A3-88F2-BEA45EEBF94A}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{B12C0C10-20C4-4C45-AD1A-AA0B3E8DE2CA}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{01959B27-8671-45FD-9255-D1BE0F980045}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{C53197A2-B9A4-449A-B7F6-BE40FF9368E4}"= UDP:c:\program files\AOL 9.1\waol.exe:AOL
"{F335EC3F-B9E4-4286-9047-3FB2E933EB56}"= TCP:c:\program files\AOL 9.1\waol.exe:AOL

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

R0 PCTCore;PCTools KDS;c:\windows\System32\drivers\PCTCore.sys [7/13/2009 8:22 AM 206256]
R0 TfFsMon;TfFsMon;c:\windows\System32\drivers\TfFsMon.sys [7/13/2009 8:59 AM 51488]
R0 TfSysMon;TfSysMon;c:\windows\System32\drivers\TfSysMon.sys [7/13/2009 8:59 AM 39200]
R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\idsdefs\20080312.001\IDSvix86.sys [3/12/2008 3:43 PM 261680]
R1 pctgntdi;pctgntdi;c:\windows\System32\drivers\pctgntdi.sys [7/13/2009 8:22 AM 159600]
R2 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [8/26/2007 6:34 AM 200704]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [7/13/2009 8:22 AM 348752]
R3 pctplsg;pctplsg;c:\windows\System32\drivers\pctplsg.sys [7/13/2009 8:22 AM 64392]
R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [10/30/2007 8:55 PM 37936]
R3 TfNetMon;TfNetMon;c:\windows\System32\drivers\TfNetMon.sys [7/13/2009 8:59 AM 33056]
R3 ThreatFire;ThreatFire;c:\program files\Spyware Doctor\TFEngine\TFService.exe service –> c:\program files\Spyware Doctor\TFEngine\TFService.exe service [?]
R3 ti21sony;ti21sony;c:\windows\System32\drivers\ti21sony.sys [8/26/2007 5:18 PM 812544]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [8/26/2007 6:30 AM 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [8/26/2007 6:30 AM 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [8/26/2007 6:30 AM 1089536]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [8/26/2007 5:50 PM 292152]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [8/26/2007 5:51 PM 79736]

— Other Services/Drivers In Memory —

*NewlyCreated* - COMHOST
*Deregistered* - mchInjDrv

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-09-21 c:\windows\Tasks\User_Feed_Synchronization-{00E2891D-A372-4101-A235-17F44E0CC1D3}.job
- c:\windows\system32\msfeedssync.exe [2009-08-05 20:13]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.aol.com
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll
FF - ProfilePath - c:\users\kevinkim\AppData\Roaming\Mozilla\Firefox\Profiles\a0sdam60.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.aol.com/aolcom/search?invocationType=tb50ffTB50CLie7&query=
FF - prefs.js: browser.search.selectedEngine - Searchme
FF - prefs.js: browser.startup.homepage - hxxp://www.aol.com
FF - prefs.js: keyword.URL - hxxp://search.aol.com/aolcom/search?invocationType=tb50ffTB50CLab&query=
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-21 20:18
Windows 6.0.6001 Service Pack 1 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
"ImagePath"="\??\c:\windows\system32\drivers\downloads
[1].sys"

–
"ImagePath"="\??\c:\windows\system32\drivers\rootrepeal
[1].sys"


[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\downloads[1]]
"ImagePath"="\??\c:\windows\system32\drivers\downloads

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rootrepeal[1]]
"ImagePath"="\??\c:\windows\system32\drivers\rootrepeal
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(756)
c:\program files\Spyware Doctor\TFEngine\TFWAH.dll

- - - - - - - > 'lsass.exe'(672)
c:\program files\Spyware Doctor\TFEngine\TFWAH.dll
.
Completion time: 2009-09-22 20:25
ComboFix-quarantined-files.txt 2009-09-22 00:25
ComboFix2.txt 2009-08-31 17:19

Pre-Run: 104,129,798,144 bytes free
Post-Run: 104,092,217,344 bytes free

Current=1 Default=1 Failed=0 LastKnownGood=15 Sets=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
1134 — E O F — 2009-09-21 22:55
Post #14
Hi,

Please do the following:

  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Copy/paste the text inside the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')

FixCSet::

Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …

[external image: Posted Image]
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you.
  • Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.


NEXT

  • Please open your MalwareBytes AntiMalware Program
  • Click the Update Tab and search for updates
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <– very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.



NEXT

Run an on-line scan with Kaspersky

**Vista users - right click on the IE icon and run as administrator

Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:
  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply


In your next reply please include
  • ComboFix Log
  • MBAM Log
  • Kaspersky report


Also, please advise how your computer is running now and if there are any outstanding issues
Post #15
Catbyte, please help with the following:….Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. I'm don't how to do that and will probably do it wrong. I'll be back around noon to perform all the next steps once I have an idea how to proceed, thanks taylor

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI