Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93081 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved] Windows Police Pro and Blue Screen of Death


  • This topic is locked This topic is locked
60 replies to this topic

#16 Raktor

Raktor

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPip
  • 3,114 posts

Posted 23 September 2009 - 11:03 PM

MBR Rootkit Detector:

Please download The MBR Rootkit Detector by GMER
Be sure to download it to the root of your drive, e.g. C:\MBR.exe


Once the download has finished, click Start > Run. Copy and paste the following into the run box, then click OK:
\mbr
A log will be generated called MBR.txt. Post it in your next reply.
Posted Image
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation. Posted Image
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.

    Advertisements

Register to Remove


#17 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 23 September 2009 - 11:21 PM

Good morning. I downloaded MBR Rootkit by GMER to my stick (E: drive) and plug it into the infected computer. I went into task mgr and hit new task and browse to open E:\mbr.exe. It opens and instantly shuts down. Your message says to download it to the root of my drive c:\mbr.exe. How do I do that within task manager? Thanks

#18 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 23 September 2009 - 11:32 PM

I've been researching dos commands. I never got into that are you familiar with those? I got into the dos prompt all the way back to C:\ and typed in cd e: to get to my e: drive where I was going to try and copy over the mbr.exe file to the c drive and launch from there. I went to E:\ and immediately popped back into C:\>. I don't know if i'm doing this correctly or the malware made the change back. Don't know if this is relevant but I'm trying alternatives. Thanks

#19 Raktor

Raktor

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPip
  • 3,114 posts

Posted 23 September 2009 - 11:34 PM

Fred: What happens if you try to start explorer.exe from the task manager?
Posted Image
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation. Posted Image
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.

#20 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 23 September 2009 - 11:37 PM

I didn't realize it but I did get a report from mbr.txt

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.6 by Gmer, http://www.gmer.net

device: opened successfully
user: error reading MBR
kernel: MBR read successfully
BIOS signateure not found


that's it.

#21 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 23 September 2009 - 11:59 PM

I got mbr.exe copied over to the c:\ drive by dos commands and ran it. Exact same report as before. Was hoping for a little luck.

#22 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 24 September 2009 - 12:02 AM

Tried explorer.exe from task mgr and get a box with x in red dot "Windows cannot access the specified device, pather, or file You may not have the appropriate permissions to access the item Ok (box) "

#23 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 24 September 2009 - 12:09 AM

If I go to task manager and hit cmd I get a box that across the top is C:\WINDOWS\system32\cmd In the black box area is Microsoft Windows XP [Version 5.1.2600] copyright .... C:\Documents and Settings\Owner>_ (flashing dos prompt) This is where I also typed in explorer.exe and it came back with Acces is denied. Got it all the way back to C:\> and typed in the same and got the same. Sorry for all the blow by blow but I'm trying to get you the best I can.

#24 Raktor

Raktor

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPip
  • 3,114 posts

Posted 24 September 2009 - 12:36 AM

Using the command prompt, navigate to the directory that has Win32kdiag in it, and type
win32kdiag.exe -f -r

Basic navigation tips:
To change from C: to E:, just type e:
To list directories in your current directory, type dir
To change directories, type cd theDirectory
Posted Image
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation. Posted Image
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.

#25 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 24 September 2009 - 05:00 PM

Raktor, just and update, I'm still at work but will try this when I get home.

    Advertisements

Register to Remove


#26 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 24 September 2009 - 10:28 PM

Raktor, I got it. Running from: win32kdiag.exe Log file at : C:\Documents and Settings\Owner\Desktop\Win32kDiag.txt Removing all found mount points. Attempting to reset file permissions. WARNING: Could not get backup privileges! Searching 'C:\WINDOWS'... Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213 Found mount point : C:\WINDOWS\$hf_mig$\KB922760\KB922760 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB922760\KB922760 Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496 Found mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454 Found mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090 Found mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768 Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168 Found mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566 Found mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143 Found mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653 Found mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615 Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460 Found mount point : C:\WINDOWS\$hf_mig$\KB944533\KB944533 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB944533\KB944533 Found mount point : C:\WINDOWS\$hf_mig$\KB947864\KB947864 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\$hf_mig$\KB947864\KB947864 Cannot access: C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.txt Attempting to restore permissions of : C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.txt [1] 2007-02-09 18:25:52 241 C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.txt () [1] 2006-08-25 15:20:07 203 C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.txt () [1] 2004-11-15 19:54:55 443 C:\WINDOWS\$NtUninstallKB834707$\spuninst\spuninst.txt () [1] 2004-11-15 19:55:24 87 C:\WINDOWS\$NtUninstallKB884018$\spuninst\spuninst.txt () [1] 2006-08-25 15:20:04 0 C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.txt () [1] 2006-08-25 15:18:56 1703 C:\WINDOWS\$NtUninstallKB896344$\spuninst\spuninst.txt () [1] 2009-02-22 23:17:14 370 C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.txt () [1] 2006-08-25 15:20:32 267 C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.txt () [1] 2007-02-09 18:24:07 273 C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.txt () [1] 2007-02-09 18:24:47 317 C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.txt () [1] 2006-08-25 13:51:01 320 C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.txt () [1] 2006-08-25 13:50:07 221 C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:10 618 C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.txt () [1] 2006-08-25 15:19:07 3753 C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.txt () [1] 2006-08-25 13:50:49 4891 C:\WINDOWS\$NtUninstallKB918899_0$\spuninst\spuninst.txt () [1] 2006-09-13 09:53:22 320 C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.txt () [1] 2006-11-18 00:16:10 633 C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.txt () [1] 2006-08-25 13:51:27 320 C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.txt () [1] 2006-08-25 13:51:05 308 C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.txt () [1] 2006-08-25 13:51:10 562 C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.txt () [1] 2006-09-13 09:53:41 494 C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.txt () [1] 2006-09-13 09:53:33 870 C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.txt () [1] 2006-08-25 13:51:15 373 C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.txt () [1] 2007-08-15 23:11:21 370 C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.txt () [1] 2006-08-25 13:50:40 320 C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.txt () [1] 2006-09-13 09:53:14 696 C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.txt () [1] 2006-08-25 13:51:23 312 C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.txt () [1] 2006-11-18 00:16:01 3566 C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.txt () [1] 2006-10-11 13:52:05 514 C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.txt () [1] 2006-10-11 13:49:26 263 C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.txt () [1] 2006-10-11 13:51:56 353 C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.txt () [1] 2009-04-16 21:48:50 1352 C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.txt () [1] 2006-12-30 01:00:48 309 C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.txt () [1] 2006-12-30 01:00:11 1285 C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.txt () [1] 2006-11-18 00:16:43 484 C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.txt () [1] 2006-10-11 13:52:13 312 C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.txt () [1] 2006-11-18 00:16:38 750 C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.txt () [1] 2006-10-11 13:51:48 309 C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:24 488 C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.txt () [1] 2006-12-30 01:01:05 419 C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.txt () [1] 2006-12-30 01:01:15 3753 C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.txt () [1] 2006-09-26 21:09:48 331 C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.txt () [1] 2009-08-26 00:21:19 1322 C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.txt () [1] 2007-04-04 20:29:08 1069 C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.txt () [1] 2007-02-12 14:45:47 724 C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.txt () [1] 2006-12-30 01:00:19 399 C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:14 360 C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:45 1163 C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:39 370 C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.txt () [1] 2007-05-25 21:19:12 347 C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.txt () [1] 2007-02-15 23:40:33 3849 C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:31 660 C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.txt () [1] 2007-02-15 23:40:19 360 C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.txt () [1] 2007-06-14 22:11:45 1377 C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.txt () [1] 2007-03-15 17:22:04 1332 C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.txt () [1] 2007-03-15 17:23:00 301 C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.txt () [1] 2007-02-01 09:41:29 475 C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.txt () [1] 2007-04-13 17:06:34 360 C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.txt () [1] 2007-05-08 19:57:34 358 C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.txt () [1] 2007-04-13 17:06:41 370 C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.txt () [1] 2007-05-08 19:57:50 3662 C:\WINDOWS\$NtUninstallKB931768$\spuninst\spuninst.txt () [1] 2007-04-13 17:07:25 1332 C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.txt () [1] 2007-02-15 23:41:19 220 C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.txt () [1] 2007-04-13 17:06:20 403 C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.txt () [1] 2007-08-29 03:03:53 270 C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.txt () [1] 2007-06-14 22:11:55 3753 C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.txt () [1] 2007-10-10 00:42:01 417 C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.txt () [1] 2007-06-14 22:09:52 370 C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.txt () [1] 2007-06-14 22:11:41 370 C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.txt () [1] 2007-08-15 23:11:29 360 C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.txt () [1] 2007-07-17 12:51:18 368 C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.txt () [1] 2007-08-15 23:09:12 317 C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.txt () [1] 2007-08-15 23:10:00 3753 C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.txt () [1] 2007-08-15 23:10:09 376 C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.txt () [1] 2008-09-09 21:17:35 122 C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.txt () [1] 2007-08-15 23:11:25 361 C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.txt () [1] 2007-08-15 23:11:17 355 C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.txt () [1] 2007-10-10 00:41:51 3753 C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.txt () [1] 2007-09-04 21:55:44 308 C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.txt () [1] 2007-10-10 00:40:32 370 C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.txt () [1] 2007-12-11 22:14:00 360 C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.txt () [1] 2007-12-11 22:14:31 301 C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.txt () [1] 2008-01-09 00:32:08 363 C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.txt () [1] 2008-04-10 20:46:34 360 C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.txt () [1] 2007-12-11 22:13:51 3662 C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.txt () [1] 2007-12-11 22:14:34 270 C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.txt () [1] 2007-12-11 22:15:53 365 C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.txt () [1] 2008-02-13 04:00:54 370 C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.txt () [1] 2007-11-14 23:42:50 400 C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.txt () [1] 2008-01-09 00:32:01 360 C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.txt () [1] 2008-04-10 20:44:20 613 C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.txt () [1] 2008-02-13 04:01:16 3753 C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.txt () [1] 2007-12-11 22:13:40 272 C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.txt () [1] 2008-04-10 20:44:05 608 C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.txt () [1] 2008-02-13 04:01:32 368 C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.txt () [1] 2007-12-22 00:16:51 122 C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.txt () [1] 2008-08-14 23:52:45 376 C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.txt () [1] 2008-04-10 20:46:55 3753 C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.txt () [1] 2008-04-10 20:46:24 355 C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.txt () [1] 2008-04-10 20:47:15 122 C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.txt () [1] 2008-05-13 21:20:47 4362 C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.txt () [1] 2008-06-10 23:47:30 3975 C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.txt () [1] 2008-06-10 23:47:17 122 C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.txt () [1] 2008-06-10 23:47:42 478 C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.txt () [1] 2008-08-14 23:52:35 442 C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.txt () [1] 2008-08-14 23:50:42 484 C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.txt () [1] 2008-08-14 23:50:55 402 C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.txt () [1] 2008-06-10 23:47:09 485 C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.txt () [1] 2008-06-19 21:33:35 607 C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.txt () [1] 2008-06-10 23:47:48 470 C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.txt () [1] 2008-07-24 00:00:25 1921 C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.txt () [1] 2009-04-16 21:50:56 2259 C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.txt () [1] 2008-12-10 02:04:52 723 C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.txt () [1] 2008-08-14 23:50:48 493 C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.txt () [1] 2008-08-14 23:52:51 463 C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.txt () [1] 2008-08-14 23:50:27 4197 C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.txt () [1] 2008-08-14 23:52:40 122 C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.txt () [1] 2008-09-09 21:17:00 232 C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.txt () [1] 2008-10-15 21:11:04 470 C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.txt () [1] 2008-12-10 02:04:12 477 C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.txt () [1] 2008-11-12 22:10:10 470 C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.txt () [1] 2008-12-10 02:04:46 384 C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.txt () [1] 2008-10-15 21:08:40 4197 C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.txt () [1] 2008-10-15 21:11:17 122 C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.txt () [1] 2009-04-16 21:51:21 5346 C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.txt () [1] 2008-12-10 02:04:03 463 C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.txt () [1] 2008-10-15 21:11:23 457 C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.txt () [1] 2008-10-15 21:10:51 1788 C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.txt () [1] 2009-09-08 22:11:47 512 C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.txt () [1] 2008-10-15 21:11:11 457 C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.txt () [1] 2008-11-12 22:10:23 574 C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.txt () [1] 2008-12-10 02:04:28 4197 C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.txt () [1] 2009-08-13 01:29:47 1923 C:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.txt () [1] 2008-10-24 21:54:01 484 C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.txt () [1] 2009-01-20 06:43:55 457 C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.txt () [1] 2009-03-11 03:01:10 470 C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.txt () [1] 2009-04-16 21:55:16 839 C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.txt () [1] 2009-03-11 03:00:25 313 C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.txt () [1] 2009-03-11 03:01:17 484 C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.txt () [1] 2008-12-18 16:32:56 415 C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.txt () [1] 2009-02-10 21:18:22 122 C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.txt () [1] 2009-04-16 21:50:47 477 C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.txt () [1] 2009-08-13 01:35:13 641 C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.txt () [1] 2009-08-26 00:21:39 227 C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.txt () [1] 2009-07-15 03:01:34 832 C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.txt () [1] 2009-04-16 21:55:07 470 C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.txt () [1] 2009-06-12 06:29:43 484 C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.txt () [1] 2009-04-16 21:49:07 4691 C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.txt () [1] 2009-02-25 02:12:29 421 C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.txt () [1] 2009-06-12 06:24:14 470 C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.txt () [1] 2009-09-08 22:11:41 325 C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.txt () [1] 2009-06-12 06:29:24 4691 C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.txt () [1] 2009-06-12 06:29:04 122 C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.txt () [1] 2009-06-12 06:25:00 618 C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.txt () [1] 2009-08-26 00:20:14 222 C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.txt () [1] 2009-08-13 01:34:09 484 C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.txt () [1] 2009-07-15 03:07:30 470 C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.txt () [1] 2009-08-13 01:34:17 470 C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.txt () [1] 2009-09-08 22:11:09 365 C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.txt () [1] 2009-07-30 03:02:00 4691 C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.txt () [1] 2009-07-15 03:07:39 122 C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.txt () [1] 2009-08-13 01:33:30 469 C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.txt () [1] 2009-08-13 01:33:39 449 C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.txt () [1] 2009-08-13 01:33:47 506 C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.txt () [1] 2009-08-13 01:29:33 484 C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.txt () [1] 2009-08-13 01:34:01 512 C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.txt () [1] 2007-02-12 14:45:05 170 C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.txt () [1] 2009-08-25 03:03:24 300 C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.txt () [1] 2006-08-25 15:20:19 1385 C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.txt () [1] 2007-02-12 14:42:39 7855 C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.txt () [1] 2007-02-12 14:44:20 3653 C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.txt () [1] 2007-02-12 14:41:54 430 C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.txt () Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP111.tmp\ZAP111.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP111.tmp\ZAP111.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP179.tmp\ZAP179.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP179.tmp\ZAP179.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP182.tmp\ZAP182.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP182.tmp\ZAP182.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29F.tmp\ZAP29F.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29F.tmp\ZAP29F.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E8.tmp\ZAP2E8.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E8.tmp\ZAP2E8.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP398.tmp\ZAP398.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP398.tmp\ZAP398.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP49C.tmp\ZAP49C.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP49C.tmp\ZAP49C.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4B2.tmp\ZAP4B2.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4B2.tmp\ZAP4B2.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP51.tmp\ZAP51.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP51.tmp\ZAP51.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC1.tmp\ZAPC1.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC1.tmp\ZAPC1.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDA.tmp\ZAPDA.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDA.tmp\ZAPDA.tmp Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE6.tmp\ZAPE6.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE6.tmp\ZAPE6.tmp Found mount point : C:\WINDOWS\assembly\tmp\tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\assembly\tmp\tmp Found mount point : C:\WINDOWS\Config\Config Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Config\Config Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Connection Wizard\Connection Wizard Found mount point : C:\WINDOWS\Debug\UserMode\UserMode Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Debug\UserMode\UserMode Found mount point : C:\WINDOWS\Downloaded Program Files\ODCTOOLS\ODCTOOLS Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Downloaded Program Files\ODCTOOLS\ODCTOOLS Cannot access: C:\WINDOWS\explorer.exe Attempting to restore permissions of : C:\WINDOWS\explorer.exe Found mount point : C:\WINDOWS\ftpcache\ftpcache Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\ftpcache\ftpcache Cannot access: C:\WINDOWS\Help\printing.chw Attempting to restore permissions of : C:\WINDOWS\Help\printing.chw [1] 2006-11-26 18:43:38 70538 C:\WINDOWS\Help\printing.chw () Found mount point : C:\WINDOWS\Ideas From the Deep\Ideas From the Deep Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Ideas From the Deep\Ideas From the Deep Cannot access: C:\WINDOWS\ime\chsime\applets\PINTLCSA.DLL Attempting to restore permissions of : C:\WINDOWS\ime\chsime\applets\PINTLCSA.DLL [1] 2004-08-04 05:00:00 175104 C:\WINDOWS\ime\chsime\applets\PINTLCSA.DLL () [1] 2008-04-13 17:10:34 175104 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\pintlcsa.dll () [1] 2004-08-04 05:00:00 175104 C:\WINDOWS\system32\dllcache\pintlcsa.dll () Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets Found mount point : C:\WINDOWS\ime\imejp\applets\applets Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\ime\imejp\applets\applets Found mount point : C:\WINDOWS\ime\imejp98\imejp98 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\ime\imejp98\imejp98 Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts Found mount point : C:\WINDOWS\inf\IEM\0409\0409 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\inf\IEM\0409\0409 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\50512592984F2284DAAF236CED4E1F41\8.0.6\8.0.6 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\50512592984F2284DAAF236CED4E1F41\8.0.6\8.0.6 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\52CB9D6ECBD08634E8A4D7EE0866C19D\8.0.148\8.0.148 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\52CB9D6ECBD08634E8A4D7EE0866C19D\8.0.148\8.0.148 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\AC1F0757D610CA645B68DC4746E5BF25\8.0.211\8.0.211 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\AC1F0757D610CA645B68DC4746E5BF25\8.0.211\8.0.211 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729 Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\FC62732BFB866A144ABE271FF278EF50\8.0.63\8.0.63 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\FC62732BFB866A144ABE271FF278EF50\8.0.63\8.0.63 Found mount point : C:\WINDOWS\java\classes\classes Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\java\classes\classes Found mount point : C:\WINDOWS\java\trustlib\trustlib Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\java\trustlib\trustlib Cannot access: C:\WINDOWS\KB923694.log Attempting to restore permissions of : C:\WINDOWS\KB923694.log [1] 2006-12-30 01:00:16 23181 C:\WINDOWS\KB923694.log () Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files Cannot access: C:\WINDOWS\Minidump\Mini121606-03.dmp Attempting to restore permissions of : C:\WINDOWS\Minidump\Mini121606-03.dmp [1] 2006-12-16 22:08:21 69584 C:\WINDOWS\Minidump\Mini121606-03.dmp () Found mount point : C:\WINDOWS\msapps\msinfo\msinfo Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\msapps\msinfo\msinfo Found mount point : C:\WINDOWS\msdownld.tmp\msdownld.tmp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\msdownld.tmp\msdownld.tmp Found mount point : C:\WINDOWS\mui\mui Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\mui\mui Found mount point : C:\WINDOWS\Options\CABS\CABS Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Options\CABS\CABS Found mount point : C:\WINDOWS\Options\Install\Install Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Options\Install\Install Found mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES Found mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp Cannot access: C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf Attempting to restore permissions of : C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf [1] 2009-09-20 23:47:15 27788 C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf () Found mount point : C:\WINDOWS\Profiles\All Users\Adobe\Webbuy\Webbuy Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Profiles\All Users\Adobe\Webbuy\Webbuy Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Registration\CRMLog\CRMLog Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded Cannot access: C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\spmsg.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\spmsg.dll [1] 2004-07-28 16:15:07 7168 C:\WINDOWS\$hf_mig$\KB834707\spmsg.dll (Microsoft Corporation) [1] 2004-11-30 15:46:32 7168 C:\WINDOWS\$hf_mig$\KB873333\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:51 7168 C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:51 7168 C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB887742\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB888113\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB890175\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:53:09 14048 C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll (Microsoft Corporation) [1] 2004-10-14 11:34:46 7168 C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB899588\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB899589\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll (Microsoft Corporation) [1] 2005-07-12 18:08:08 14048 C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll (Microsoft Corporation) [1] 2005-07-12 18:08:08 14048 C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll (Microsoft Corporation) [1] 2005-02-24 20:35:05 14048 C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB911567\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB912919\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB916281\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB917159\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB918899\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB920214\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB921398\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB921883\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB922582\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB922616\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB922819\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB923561\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB923694\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB923980\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB924191\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB924270\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB925486\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB925720\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB925902\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB926255\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:16:49 14048 C:\WINDOWS\$hf_mig$\KB926436\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB927779\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB927802\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB928255\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB928843\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB929123\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB929338\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB929969\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB930178\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB930916\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB931261\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB931784\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB931836\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB933360\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB935839\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB935840\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB936021\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB936357\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB938127\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB938464\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\$hf_mig$\KB938828\spmsg.dll (Microsoft Corporation) [1] 2006-01-19 12:29:19 14048 C:\WINDOWS\$hf_mig$\KB938829\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB942840\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB944338\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:33 14048 C:\WINDOWS\$hf_mig$\KB946627\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB946648\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:33 14048 C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB950759\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB951066\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB952004\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB952287\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB953838\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB953839\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB954211\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB954600\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB955069\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB955839\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB956390\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB956391\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB956572\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB956802\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB956803\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB956841\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB956844\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB957095\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB957097\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB958215\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB958470\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB958644\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB958687\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB958690\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB959426\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB960225\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB960714\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB960715\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB960803\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB960859\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 04:18:51 17272 C:\WINDOWS\$hf_mig$\KB961118\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB961371\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB961373\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB961501\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB963027\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB967715\spmsg.dll (Microsoft Corporation) [1] 2008-07-09 00:38:24 17272 C:\WINDOWS\$hf_mig$\KB968537\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB969897\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB969898\spmsg.dll (Microsoft Corporation) [1] 2007-11-30 05:39:22 17272 C:\WINDOWS\$hf_mig$\KB970238\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB971557\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB971633\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB971657\spmsg.dll (Microsoft Corporation) [1] 2007-03-05 18:22:36 14048 C:\WINDOWS\$hf_mig$\KB971961\spmsg.dll (Microsoft Corporation) [1] 2009-05-26 04:40:52 17272 C:\WINDOWS\$hf_mig$\KB972260\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB973346\spmsg.dll (Microsoft Corporation) [1] 2009-05-26 04:40:52 17272 C:\WINDOWS\$hf_mig$\KB973354\spmsg.dll (Microsoft Corporation) [1] 2009-05-26 04:40:52 17272 C:\WINDOWS\$hf_mig$\KB973507\spmsg.dll (Microsoft Corporation) [1] 2009-05-26 04:40:52 17272 C:\WINDOWS\$hf_mig$\KB973815\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\$hf_mig$\KB973869\spmsg.dll (Microsoft Corporation) [1] 2005-10-12 16:12:25 14048 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\spmsg.dll () [1] 2007-08-10 20:46:18 17272 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spmsg.dll (Microsoft Corporation) [1] 2008-07-08 06:02:01 17272 C:\WINDOWS\system32\spmsg.dll (Microsoft Corporation) [2] 2008-07-09 00:38:24 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP563\A0123105.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP563\A0123125.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP563\A0123130.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP572\A0129741.dll (Microsoft Corporation) [2] 2009-05-26 04:40:52 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130241.dll (Microsoft Corporation) [2] 2009-05-26 04:40:52 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130251.dll (Microsoft Corporation) [2] 2009-05-26 04:40:52 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130256.dll (Microsoft Corporation) [2] 2009-05-26 04:40:52 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130261.dll (Microsoft Corporation) [2] 2007-07-27 10:41:40 16760 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130268.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130273.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130278.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP579\A0130295.dll (Microsoft Corporation) [2] 2008-07-08 06:02:01 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP585\A0130935.dll (Microsoft Corporation) [2] 2007-11-30 05:39:22 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP587\A0131067.dll (Microsoft Corporation) [2] 2009-05-26 04:40:52 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP587\A0131085.dll (Microsoft Corporation) [2] 2007-11-30 04:18:51 17272 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP592\A0132591.dll (Microsoft Corporation) [2] 2007-07-27 10:41:40 16760 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP592\A0132596.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.ver Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.ver [1] 2004-09-29 15:22:10 952 C:\WINDOWS\$hf_mig$\KB834707\update\update.ver () [1] 2005-01-14 11:34:43 1217 C:\WINDOWS\$hf_mig$\KB873333\update\update.ver () [1] 2004-11-17 12:05:42 300 C:\WINDOWS\$hf_mig$\KB873339\update\update.ver () [1] 2004-10-27 20:40:28 1406 C:\WINDOWS\$hf_mig$\KB885835\update\update.ver () [1] 2004-10-29 10:03:55 389 C:\WINDOWS\$hf_mig$\KB885836\update\update.ver () [1] 2004-10-21 11:36:54 200 C:\WINDOWS\$hf_mig$\KB886185\update\update.ver () [1] 2004-10-14 17:07:00 204 C:\WINDOWS\$hf_mig$\KB887472\update\update.ver () [1] 2004-11-03 12:44:08 198 C:\WINDOWS\$hf_mig$\KB887742\update\update.ver () [1] 2004-11-16 15:21:26 288 C:\WINDOWS\$hf_mig$\KB888113\update\update.ver () [1] 2004-12-07 13:15:46 291 C:\WINDOWS\$hf_mig$\KB888302\update\update.ver () [1] 2005-05-17 11:27:42 575 C:\WINDOWS\$hf_mig$\KB890046\update\update.ver () [1] 2004-12-02 15:30:26 294 C:\WINDOWS\$hf_mig$\KB890175\update\update.ver () [1] 2005-03-19 22:59:36 2259 C:\WINDOWS\$hf_mig$\KB890859\update\update.ver () [1] 2005-01-10 18:59:08 297 C:\WINDOWS\$hf_mig$\KB891781\update\update.ver () [1] 2005-07-08 16:31:10 576 C:\WINDOWS\$hf_mig$\KB893756\update\update.ver () [1] 2005-05-06 16:13:22 1217 C:\WINDOWS\$hf_mig$\KB894391\update\update.ver () [1] 2005-05-26 19:40:02 1377 C:\WINDOWS\$hf_mig$\KB896358\update\update.ver () [1] 2005-06-11 12:35:21 388 C:\WINDOWS\$hf_mig$\KB896423\update\update.ver () [1] 2005-10-05 21:15:37 753 C:\WINDOWS\$hf_mig$\KB896424\update\update.ver () [1] 2005-05-10 20:04:17 291 C:\WINDOWS\$hf_mig$\KB896428\update\update.ver () [1] 2005-05-17 12:27:01 517 C:\WINDOWS\$hf_mig$\KB898461\update\update.ver () [1] 2005-06-30 13:52:16 300 C:\WINDOWS\$hf_mig$\KB899587\update\update.ver () [1] 2005-06-30 14:26:41 300 C:\WINDOWS\$hf_mig$\KB899588\update\update.ver () [1] 2005-08-11 11:39:04 291 C:\WINDOWS\$hf_mig$\KB899589\update\update.ver () [1] 2005-06-30 08:52:02 291 C:\WINDOWS\$hf_mig$\KB899591\update\update.ver () [1] 2006-02-15 21:40:34 184 C:\WINDOWS\$hf_mig$\KB900485\update\update.ver () [1] 2005-09-27 18:37:38 1503 C:\WINDOWS\$hf_mig$\KB900725\update\update.ver () [1] 2005-09-09 19:34:10 297 C:\WINDOWS\$hf_mig$\KB901017\update\update.ver () [1] 2005-06-28 19:19:18 561 C:\WINDOWS\$hf_mig$\KB901214\update\update.ver () [1] 2005-07-26 01:23:48 6208 C:\WINDOWS\$hf_mig$\KB902400\update\update.ver () [1] 2005-10-28 15:29:07 297 C:\WINDOWS\$hf_mig$\KB904706\update\update.ver () [1] 2006-03-23 22:14:55 202 C:\WINDOWS\$hf_mig$\KB904942\update\update.ver () [1] 2005-08-22 12:20:34 294 C:\WINDOWS\$hf_mig$\KB905414\update\update.ver () [1] 2005-08-22 21:13:42 300 C:\WINDOWS\$hf_mig$\KB905749\update\update.ver () [1] 2005-10-18 15:12:58 573 C:\WINDOWS\$hf_mig$\KB908519\update\update.ver () [1] 2006-04-18 01:11:04 918 C:\WINDOWS\$hf_mig$\KB908531\update\update.ver () [1] 2005-12-01 17:25:02 287 C:\WINDOWS\$hf_mig$\KB910437\update\update.ver () [1] 2006-06-22 06:45:11 988 C:\WINDOWS\$hf_mig$\KB911280\update\update.ver () [1] 2006-03-22 22:29:14 288 C:\WINDOWS\$hf_mig$\KB911562\update\update.ver () [1] 2006-03-17 03:00:51 752 C:\WINDOWS\$hf_mig$\KB911567\update\update.ver () [1] 2006-01-03 23:30:06 374 C:\WINDOWS\$hf_mig$\KB911927\update\update.ver () [1] 2006-01-02 16:23:39 370 C:\WINDOWS\$hf_mig$\KB912919\update\update.ver () [1] 2006-03-01 13:54:22 1647 C:\WINDOWS\$hf_mig$\KB913580\update\update.ver () [1] 2006-05-19 09:48:04 1865 C:\WINDOWS\$hf_mig$\KB914388\update\update.ver () [1] 2006-05-05 07:58:57 640 C:\WINDOWS\$hf_mig$\KB914389\update\update.ver () [1] 2006-05-29 10:14:04 3722 C:\WINDOWS\$hf_mig$\KB916281\update\update.ver () [1] 2006-03-17 15:05:22 198 C:\WINDOWS\$hf_mig$\KB916595\update\update.ver () [1] 2006-04-22 05:59:34 279 C:\WINDOWS\$hf_mig$\KB917159\update\update.ver () [1] 2006-05-18 00:59:13 291 C:\WINDOWS\$hf_mig$\KB917344\update\update.ver () [1] 2006-07-05 05:25:17 294 C:\WINDOWS\$hf_mig$\KB917422\update\update.ver () [1] 2006-04-20 07:59:30 285 C:\WINDOWS\$hf_mig$\KB917953\update\update.ver () [1] 2006-11-27 08:32:39 394 C:\WINDOWS\$hf_mig$\KB918118\update\update.ver () [1] 2006-06-01 13:54:58 388 C:\WINDOWS\$hf_mig$\KB918439\update\update.ver () [1] 2006-07-28 05:31:14 3722 C:\WINDOWS\$hf_mig$\KB918899\update\update.ver () [1] 2006-07-13 07:17:10 288 C:\WINDOWS\$hf_mig$\KB919007\update\update.ver () [1] 2006-07-27 07:06:02 206 C:\WINDOWS\$hf_mig$\KB920214\update\update.ver () [1] 2006-07-21 02:06:30 282 C:\WINDOWS\$hf_mig$\KB920670\update\update.ver () [1] 2006-06-26 12:51:13 558 C:\WINDOWS\$hf_mig$\KB920683\update\update.ver () [1] 2006-06-21 22:59:10 552 C:\WINDOWS\$hf_mig$\KB920685\update\update.ver () [1] 2006-07-05 14:45:15 568 C:\WINDOWS\$hf_mig$\KB920872\update\update.ver () [1] 2006-07-13 07:31:05 646 C:\WINDOWS\$hf_mig$\KB921398\update\update.ver () [1] 2007-06-20 17:14:09 206 C:\WINDOWS\$hf_mig$\KB921503\update\update.ver () [1] 2006-07-14 09:17:48 294 C:\WINDOWS\$hf_mig$\KB921883\update\update.ver () [1] 2006-08-21 06:08:34 564 C:\WINDOWS\$hf_mig$\KB922582\update\update.ver () [1] 2006-07-14 08:57:45 288 C:\WINDOWS\$hf_mig$\KB922616\update\update.ver () [1] 2006-08-16 05:34:19 1503 C:\WINDOWS\$hf_mig$\KB922819\update\update.ver () [1] 2006-08-14 08:31:32 279 C:\WINDOWS\$hf_mig$\KB923414\update\update.ver () [1] 2009-03-27 01:27:00 1575 C:\WINDOWS\$hf_mig$\KB923561\update\update.ver () [1] 2006-11-07 22:29:38 938 C:\WINDOWS\$hf_mig$\KB923694\update\update.ver () [1] 2006-10-13 06:00:11 752 C:\WINDOWS\$hf_mig$\KB923980\update\update.ver () [1] 2006-09-12 22:30:46 291 C:\WINDOWS\$hf_mig$\KB924191\update\update.ver () [1] 2006-10-12 07:55:40 574 C:\WINDOWS\$hf_mig$\KB924270\update\update.ver () [1] 2006-09-18 07:48:36 196 C:\WINDOWS\$hf_mig$\KB925486\update\update.ver () [1] 2006-10-04 07:34:56 934 C:\WINDOWS\$hf_mig$\KB925720\update\update.ver () [1] 2007-03-08 09:12:31 752 C:\WINDOWS\$hf_mig$\KB925902\update\update.ver () [1] 2006-11-07 12:26:14 202 C:\WINDOWS\$hf_mig$\KB926436\update\update.ver () [1] 2006-12-26 07:07:23 756 C:\WINDOWS\$hf_mig$\KB927779\update\update.ver () [1] 2006-12-19 12:29:10 206 C:\WINDOWS\$hf_mig$\KB927802\update\update.ver () [1] 2007-04-23 08:53:00 202 C:\WINDOWS\$hf_mig$\KB927891\update\update.ver () [1] 2006-12-19 17:01:53 484 C:\WINDOWS\$hf_mig$\KB928255\update\update.ver () [1] 2007-01-23 12:45:54 202 C:\WINDOWS\$hf_mig$\KB928843\update\update.ver () [1] 2007-05-16 09:07:55 938 C:\WINDOWS\$hf_mig$\KB929123\update\update.ver () [1] 2006-12-19 12:50:17 778 C:\WINDOWS\$hf_mig$\KB929338\update\update.ver () [1] 2006-12-19 12:27:40 196 C:\WINDOWS\$hf_mig$\KB929969\update\update.ver () [1] 2007-03-17 07:02:22 202 C:\WINDOWS\$hf_mig$\KB930178\update\update.ver () [1] 2007-02-12 21:11:42 198 C:\WINDOWS\$hf_mig$\KB930916\update\update.ver () [1] 2007-02-05 13:39:08 206 C:\WINDOWS\$hf_mig$\KB931261\update\update.ver () [1] 2007-02-28 09:27:56 778 C:\WINDOWS\$hf_mig$\KB931784\update\update.ver () [1] 2007-01-29 07:30:28 204 C:\WINDOWS\$hf_mig$\KB931836\update\update.ver () [1] 2007-07-18 15:30:58 204 C:\WINDOWS\$hf_mig$\KB933360\update\update.ver () [1] 2007-07-09 12:15:47 390 C:\WINDOWS\$hf_mig$\KB933729\update\update.ver () [1] 2007-04-16 09:31:32 206 C:\WINDOWS\$hf_mig$\KB935839\update\update.ver () [1] 2007-04-25 13:46:38 206 C:\WINDOWS\$hf_mig$\KB935840\update\update.ver () [1] 2007-06-25 23:28:36 204 C:\WINDOWS\$hf_mig$\KB936021\update\update.ver () [1] 2007-04-23 17:08:58 202 C:\WINDOWS\$hf_mig$\KB936357\update\update.ver () [1] 2007-06-26 08:42:14 196 C:\WINDOWS\$hf_mig$\KB938127\update\update.ver () [1] 2008-04-16 00:46:26 18 C:\WINDOWS\$hf_mig$\KB938464\update\update.ver () [1] 2007-06-13 06:37:12 208 C:\WINDOWS\$hf_mig$\KB938828\update\update.ver () [1] 2007-06-19 06:55:06 200 C:\WINDOWS\$hf_mig$\KB938829\update\update.ver () [1] 2007-08-21 12:32:08 206 C:\WINDOWS\$hf_mig$\KB941202\update\update.ver () [1] 2007-10-30 05:43:08 204 C:\WINDOWS\$hf_mig$\KB941568\update\update.ver () [1] 2007-10-31 04:55:08 200 C:\WINDOWS\$hf_mig$\KB941644\update\update.ver () [1] 2008-03-20 14:26:12 204 C:\WINDOWS\$hf_mig$\KB941693\update\update.ver () [1] 2007-11-14 03:26:34 204 C:\WINDOWS\$hf_mig$\KB942763\update\update.ver () [1] 2007-11-14 01:14:17 204 C:\WINDOWS\$hf_mig$\KB942840\update\update.ver () [1] 2007-12-04 12:04:03 206 C:\WINDOWS\$hf_mig$\KB943055\update\update.ver () [1] 2007-11-08 00:44:42 202 C:\WINDOWS\$hf_mig$\KB943485\update\update.ver () [1] 2007-12-18 08:37:12 392 C:\WINDOWS\$hf_mig$\KB944338\update\update.ver () [1] 2007-11-13 10:53:57 188 C:\WINDOWS\$hf_mig$\KB944653\update\update.ver () [1] 2008-03-03 00:48:27 388 C:\WINDOWS\$hf_mig$\KB945553\update\update.ver () [1] 2007-12-18 19:48:03 202 C:\WINDOWS\$hf_mig$\KB946026\update\update.ver () [1] 2007-12-19 08:41:16 18 C:\WINDOWS\$hf_mig$\KB946627\update\update.ver () [1] 2008-05-02 08:31:12 378 C:\WINDOWS\$hf_mig$\KB946648\update\update.ver () [1] 2008-02-28 22:53:32 200 C:\WINDOWS\$hf_mig$\KB948590\update\update.ver () [1] 2008-02-29 05:30:18 18 C:\WINDOWS\$hf_mig$\KB948881\update\update.ver () [1] 2008-03-27 21:40:30 3004 C:\WINDOWS\$hf_mig$\KB950749\update\update.ver () [1] 2008-04-21 03:22:30 4084 C:\WINDOWS\$hf_mig$\KB950759\update\update.ver () [1] 2008-04-24 13:52:58 18 C:\WINDOWS\$hf_mig$\KB950760\update\update.ver () [1] 2008-05-08 15:12:27 386 C:\WINDOWS\$hf_mig$\KB950762\update\update.ver () [1] 2008-07-07 14:06:47 370 C:\WINDOWS\$hf_mig$\KB950974\update\update.ver () [1] 2008-04-11 12:49:58 394 C:\WINDOWS\$hf_mig$\KB951066\update\update.ver () [1] 2008-07-15 02:44:22 390 C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.ver () [1] 2008-04-14 10:24:46 390 C:\WINDOWS\$hf_mig$\KB951376\update\update.ver () [1] 2008-06-16 13:19:39 390 C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.ver () [1] 2008-05-06 23:10:01 390 C:\WINDOWS\$hf_mig$\KB951698\update\update.ver () [1] 2008-06-21 04:00:36 2032 C:\WINDOWS\$hf_mig$\KB951748\update\update.ver () [1] 2008-06-12 09:32:03 2242 C:\WINDOWS\$hf_mig$\KB952004\update\update.ver () [1] 2008-05-01 09:02:38 386 C:\WINDOWS\$hf_mig$\KB952287\update\update.ver () [1] 2008-06-24 10:10:59 378 C:\WINDOWS\$hf_mig$\KB952954\update\update.ver () [1] 2008-07-03 18:10:10 4456 C:\WINDOWS\$hf_mig$\KB953838\update\update.ver () [1] 2008-06-24 01:08:06 18 C:\WINDOWS\$hf_mig$\KB953839\update\update.ver () [1] 2008-09-15 09:21:31 477 C:\WINDOWS\$hf_mig$\KB954211\update\update.ver () [1] 2008-10-03 04:41:31 390 C:\WINDOWS\$hf_mig$\KB954600\update\update.ver () [1] 2008-09-09 21:34:13 390 C:\WINDOWS\$hf_mig$\KB955069\update\update.ver () [1] 2008-10-23 13:03:27 390 C:\WINDOWS\$hf_mig$\KB955839\update\update.ver () [1] 2008-08-20 01:01:25 4456 C:\WINDOWS\$hf_mig$\KB956390\update\update.ver () [1] 2008-10-03 21:08:44 18 C:\WINDOWS\$hf_mig$\KB956391\update\update.ver () [1] 2009-03-07 01:19:28 5402 C:\WINDOWS\$hf_mig$\KB956572\update\update.ver () [1] 2008-10-23 06:31:27 382 C:\WINDOWS\$hf_mig$\KB956802\update\update.ver () [1] 2008-08-14 10:02:17 374 C:\WINDOWS\$hf_mig$\KB956803\update\update.ver () [1] 2008-08-14 21:57:30 1538 C:\WINDOWS\$hf_mig$\KB956841\update\update.ver () [1] 2009-06-23 15:01:39 390 C:\WINDOWS\$hf_mig$\KB956844\update\update.ver () [1] 2008-09-08 08:18:27 374 C:\WINDOWS\$hf_mig$\KB957095\update\update.ver () [1] 2008-10-24 08:32:56 386 C:\WINDOWS\$hf_mig$\KB957097\update\update.ver () [1] 2008-10-16 14:29:36 4456 C:\WINDOWS\$hf_mig$\KB958215\update\update.ver () [1] 2009-06-05 03:53:09 2680 C:\WINDOWS\$hf_mig$\KB958470\update\update.ver () [1] 2008-10-15 10:55:30 394 C:\WINDOWS\$hf_mig$\KB958644\update\update.ver () [1] 2008-12-11 10:55:55 374 C:\WINDOWS\$hf_mig$\KB958687\update\update.ver () [1] 2009-02-09 08:16:17 477 C:\WINDOWS\$hf_mig$\KB958690\update\update.ver () [1] 2009-03-21 10:31:50 762 C:\WINDOWS\$hf_mig$\KB959426\update\update.ver () [1] 2008-12-05 05:42:04 394 C:\WINDOWS\$hf_mig$\KB960225\update\update.ver () [1] 2008-12-13 01:46:33 390 C:\WINDOWS\$hf_mig$\KB960714\update\update.ver () [1] 2009-01-16 02:06:20 18 C:\WINDOWS\$hf_mig$\KB960715\update\update.ver () [1] 2008-12-16 07:05:08 390 C:\WINDOWS\$hf_mig$\KB960803\update\update.ver () [1] 2009-07-01 02:37:39 754 C:\WINDOWS\$hf_mig$\KB960859\update\update.ver () [1] 2009-01-10 01:13:20 162 C:\WINDOWS\$hf_mig$\KB961118\update\update.ver () [1] 2009-06-16 08:18:25 758 C:\WINDOWS\$hf_mig$\KB961371\update\update.ver () [1] 2008-12-20 18:01:33 390 C:\WINDOWS\$hf_mig$\KB961373\update\update.ver () [1] 2009-05-07 09:02:50 394 C:\WINDOWS\$hf_mig$\KB961501\update\update.ver () [1] 2009-03-02 21:01:54 5188 C:\WINDOWS\$hf_mig$\KB963027\update\update.ver () [1] 2009-02-10 14:02:35 488 C:\WINDOWS\$hf_mig$\KB967715\update\update.ver () [1] 2009-04-19 13:45:54 477 C:\WINDOWS\$hf_mig$\KB968537\update\update.ver () [1] 2009-04-29 00:37:09 5188 C:\WINDOWS\$hf_mig$\KB969897\update\update.ver () [1] 2009-05-09 03:49:08 18 C:\WINDOWS\$hf_mig$\KB969898\update\update.ver () [1] 2009-04-15 09:01:48 562 C:\WINDOWS\$hf_mig$\KB970238\update\update.ver () [1] 2009-06-10 08:10:46 390 C:\WINDOWS\$hf_mig$\KB971557\update\update.ver () [1] 2009-06-03 12:48:45 390 C:\WINDOWS\$hf_mig$\KB971633\update\update.ver () [1] 2009-06-09 23:52:12 386 C:\WINDOWS\$hf_mig$\KB971657\update\update.ver () [1] 2009-08-21 15:48:06 204 C:\WINDOWS\$hf_mig$\KB971961\update\update.ver () [1] 2009-07-18 14:57:58 5188 C:\WINDOWS\$hf_mig$\KB972260\update\update.ver () [1] 2009-07-07 11:27:14 18 C:\WINDOWS\$hf_mig$\KB973346\update\update.ver () [1] 2009-07-10 08:21:50 382 C:\WINDOWS\$hf_mig$\KB973354\update\update.ver () [1] 2009-07-17 15:05:01 370 C:\WINDOWS\$hf_mig$\KB973507\update\update.ver () [1] 2009-08-05 02:35:50 394 C:\WINDOWS\$hf_mig$\KB973815\update\update.ver () [1] 2009-07-27 17:33:18 390 C:\WINDOWS\$hf_mig$\KB973869\update\update.ver () [1] 2006-10-10 14:33:15 366 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.ver () [1] 2008-04-14 08:51:58 291076 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\update\update.ver () Found mount point : C:\WINDOWS\SoftwareDistribution\Download\7e2110c803604799bad6cc14ba892658\7e2110c803604799bad6cc14ba892658 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\7e2110c803604799bad6cc14ba892658\7e2110c803604799bad6cc14ba892658 Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\10\policy\policy Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\10\policy\policy Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\msft\msft Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\msft\msft Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\policy\msft\msft Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\policy\msft\msft Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\msft\msft Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\msft\msft Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\policy\msft\msft Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\policy\msft\msft Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\60\msft\msft Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\60\msft\msft Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\70\70 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\70\70 Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dpwsockx.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dpwsockx.dll [1] 2008-04-13 17:11:52 57344 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dpwsockx.dll () [1] 2004-08-04 05:00:00 57344 C:\WINDOWS\system32\dllcache\dpwsockx.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 57344 C:\WINDOWS\system32\dpwsockx.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\drdyisp.htm Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\drdyisp.htm [1] 2004-08-04 05:00:00 5462 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\drdyisp.htm () [1] 2004-08-04 05:00:00 5462 C:\WINDOWS\system32\oobe\setup\drdyisp.htm () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\update1p.chm Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\update1p.chm [1] 2004-08-04 05:00:00 62317 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\update1p.chm () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\usbport.inf Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\usbport.inf [1] 2004-08-04 05:00:00 23708 C:\WINDOWS\inf\usbport.inf () [1] 2008-04-13 09:31:42 23708 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\usbport.inf () [1] 2004-08-04 05:00:00 23708 C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\usbport.inf () [1] 2004-08-04 05:00:00 23708 C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\usbport.inf () [1] 2004-08-04 05:00:00 23708 C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\usbport.inf () [1] 2004-08-04 05:00:00 23708 C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\usbport.inf () [1] 2004-08-04 05:00:00 23708 C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\usbport.inf () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\usbvideo.inf Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\usbvideo.inf [1] 2004-08-04 05:00:00 11985 C:\WINDOWS\inf\usbvideo.inf () [1] 2008-04-13 09:31:43 9026 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ic\usbvideo.inf () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedkcs32.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedkcs32.dll [1] 2008-04-13 17:11:54 323584 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedkcs32.dll () [1] 2004-08-04 05:00:00 323584 C:\WINDOWS\system32\dllcache\iedkcs32.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 323584 C:\WINDOWS\system32\iedkcs32.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedw.exe Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedw.exe [1] 2006-05-09 04:41:31 18432 C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\iedw.exe (Microsoft Corporation) [1] 2006-06-23 01:48:30 18432 C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iedw.exe (Microsoft Corporation) [1] 2006-06-23 01:35:52 18432 C:\WINDOWS\$NtUninstallKB918899$\iedw.exe (Microsoft Corporation) [1] 2006-05-09 04:00:37 18432 C:\WINDOWS\$NtUninstallKB918899_0$\iedw.exe (Microsoft Corporation) [1] 2006-06-23 01:48:30 18432 C:\WINDOWS\$NtUninstallKB922760$\iedw.exe (Microsoft Corporation) [1] 2006-09-13 02:10:27 18432 C:\WINDOWS\$NtUninstallKB925454$\iedw.exe (Microsoft Corporation) [1] 2006-10-23 04:02:37 18432 C:\WINDOWS\$NtUninstallKB928090$\iedw.exe (Microsoft Corporation) [1] 2007-01-04 04:03:40 18432 C:\WINDOWS\$NtUninstallKB931768$\iedw.exe (Microsoft Corporation) [1] 2007-02-19 03:10:50 18432 C:\WINDOWS\$NtUninstallKB933566$\iedw.exe (Microsoft Corporation) [1] 2007-04-18 03:42:17 18432 C:\WINDOWS\$NtUninstallKB937143$\iedw.exe (Microsoft Corporation) [1] 2007-06-14 03:32:36 18432 C:\WINDOWS\$NtUninstallKB939653$\iedw.exe (Microsoft Corporation) [1] 2007-08-21 03:19:39 18432 C:\WINDOWS\$NtUninstallKB942615$\iedw.exe (Microsoft Corporation) [1] 2007-10-10 03:48:23 18432 C:\WINDOWS\$NtUninstallKB944533$\iedw.exe (Microsoft Corporation) [1] 2007-12-06 03:05:52 18432 C:\WINDOWS\$NtUninstallKB947864$\iedw.exe (Microsoft Corporation) [1] 2008-02-15 02:07:53 18432 C:\WINDOWS\$NtUninstallKB950759$\iedw.exe (Microsoft Corporation) [1] 2008-04-17 03:46:59 18432 C:\WINDOWS\$NtUninstallKB953838$\iedw.exe (Microsoft Corporation) [1] 2008-06-23 02:53:58 18432 C:\WINDOWS\$NtUninstallKB956390$\iedw.exe (Microsoft Corporation) [1] 2008-08-19 02:38:57 18432 C:\WINDOWS\$NtUninstallKB958215$\iedw.exe (Microsoft Corporation) [1] 2008-10-15 07:18:21 18432 C:\WINDOWS\$NtUninstallKB963027$\iedw.exe (Microsoft Corporation) [1] 2009-02-19 02:50:07 18432 C:\WINDOWS\$NtUninstallKB969897$\iedw.exe (Microsoft Corporation) [1] 2009-04-27 02:29:21 18432 C:\WINDOWS\$NtUninstallKB972260$\iedw.exe (Microsoft Corporation) [1] 2008-04-13 17:12:22 18432 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedw.exe () [1] 2009-06-22 04:40:41 18432 C:\WINDOWS\system32\dllcache\iedw.exe (Microsoft Corporation) [2] 2009-04-27 02:29:21 18432 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP572\A0129758.exe (Microsoft Corporation) [2] 2009-04-27 02:29:21 18432 C:\System Volume Information\_restore{145A78D9-30F3-4441-A76F-9F54405CDEA6}\RP572\A0129774.exe (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iernonce.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iernonce.dll [1] 2008-04-13 17:11:54 48640 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iernonce.dll () [1] 2004-08-04 05:00:00 48640 C:\WINDOWS\system32\dllcache\iernonce.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 48640 C:\WINDOWS\system32\iernonce.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iesetup.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iesetup.dll [1] 2008-04-13 17:11:54 62976 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iesetup.dll () [1] 2004-08-04 05:00:00 62976 C:\WINDOWS\system32\dllcache\iesetup.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 62976 C:\WINDOWS\system32\iesetup.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetcpl.cpl Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetcpl.cpl [1] 2008-04-13 17:12:41 360960 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetcpl.cpl () [1] 2004-08-04 05:00:00 358400 C:\WINDOWS\system32\dllcache\inetcpl.cpl () [2] 2004-08-04 05:00:00 110592 C:\WINDOWS\system32\dllcache\inetcplc.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 358400 C:\WINDOWS\system32\inetcpl.cpl () [2] 2004-08-04 05:00:00 110592 C:\WINDOWS\system32\inetcplc.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetmib1.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetmib1.dll [1] 2008-04-13 17:11:55 32768 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetmib1.dll () [1] 2004-08-04 05:00:00 33280 C:\WINDOWS\system32\dllcache\inetmib1.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 33280 C:\WINDOWS\system32\inetmib1.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetpp.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetpp.dll [1] 2008-04-13 17:11:55 75264 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetpp.dll () [1] 2004-08-04 05:00:00 75264 C:\WINDOWS\system32\dllcache\inetpp.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 75264 C:\WINDOWS\system32\inetpp.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetwiz.exe Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetwiz.exe [1] 2008-04-13 17:12:22 20480 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetwiz.exe () [1] 2004-08-04 05:00:00 20480 C:\WINDOWS\system32\dllcache\inetwiz.exe (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\infrared.chm Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\infrared.chm [1] 2004-08-04 05:00:00 81568 C:\WINDOWS\Help\infrared.chm () [1] 2004-08-04 05:00:00 81568 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\infrared.chm () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\initpki.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\initpki.dll [1] 2008-04-13 17:11:55 147456 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\initpki.dll () [1] 2004-08-04 05:00:00 147456 C:\WINDOWS\system32\dllcache\initpki.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 147456 C:\WINDOWS\system32\initpki.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\input.chm Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\input.chm [1] 2004-08-04 05:00:00 34703 C:\WINDOWS\Help\input.chm () [1] 2004-08-04 05:00:00 34703 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\input.chm () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\input.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\input.dll [1] 2008-04-13 17:11:55 123392 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\input.dll () [1] 2004-08-04 05:00:00 123392 C:\WINDOWS\system32\dllcache\input.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 123392 C:\WINDOWS\system32\input.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipnathlp.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipnathlp.dll [1] 2008-04-13 17:11:55 331264 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipnathlp.dll () [1] 2004-08-04 05:00:00 331264 C:\WINDOWS\system32\dllcache\ipnathlp.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 331264 C:\WINDOWS\system32\ipnathlp.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ippromon.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ippromon.dll [1] 2008-04-13 17:11:55 330752 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ippromon.dll () [1] 2004-08-04 05:00:00 330752 C:\WINDOWS\system32\dllcache\ippromon.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 330752 C:\WINDOWS\system32\ippromon.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsec.sys Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsec.sys [1] 2008-04-13 12:19:42 75264 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsec.sys () [1] 2004-08-04 05:00:00 74752 C:\WINDOWS\system32\dllcache\ipsec.sys (Microsoft Corporation) [1] 2004-08-04 05:00:00 74752 C:\WINDOWS\system32\drivers\ipsec.sys (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipselpid.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipselpid.dll [1] 2008-04-13 17:09:24 24064 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipselpid.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsink.ax Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsink.ax [1] 2008-04-13 17:12:42 16384 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsink.ax () [1] 2004-08-04 01:56:58 16384 C:\WINDOWS\system32\dllcache\ipsink.ax () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6mon.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6mon.dll [1] 2008-04-13 17:11:55 59904 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6mon.dll () [1] 2004-08-04 05:00:00 59904 C:\WINDOWS\system32\dllcache\ipv6mon.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 59904 C:\WINDOWS\system32\ipv6mon.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6p.chm Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6p.chm [1] 2004-08-04 05:00:00 154065 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6p.chm () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxroute.exe Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxroute.exe [1] 2008-04-13 17:12:23 23552 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxroute.exe () [1] 2004-08-04 05:00:00 23552 C:\WINDOWS\system32\dllcache\ipxroute.exe (Microsoft Corporation) [1] 2004-08-04 05:00:00 23552 C:\WINDOWS\system32\ipxroute.exe (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxwan.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxwan.dll [1] 2008-04-13 17:11:55 22016 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxwan.dll () [1] 2004-08-04 05:00:00 20992 C:\WINDOWS\system32\dllcache\ipxwan.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 20992 C:\WINDOWS\system32\ipxwan.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir41_32.ax Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir41_32.ax [1] 2008-04-13 17:12:42 848384 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir41_32.ax () [1] 2004-08-04 05:00:00 848384 C:\WINDOWS\system32\ir41_32.ax () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_32.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_32.dll [1] 2008-04-13 17:11:55 755200 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_32.dll () [1] 2004-08-04 05:00:00 755200 C:\WINDOWS\system32\ir50_32.dll (Intel Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_qc.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_qc.dll [1] 2008-04-13 17:11:55 200192 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_qc.dll () [1] 2004-08-04 05:00:00 200192 C:\WINDOWS\system32\ir50_qc.dll (Intel Corporation.) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_qcx.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_qcx.dll [1] 2008-04-13 17:11:55 183808 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ir50_qcx.dll () [1] 2004-08-04 05:00:00 183808 C:\WINDOWS\system32\ir50_qcx.dll (Intel Corporation.) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\irbus.sys Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\irbus.sys [1] 2008-04-13 11:45:36 46592 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\irbus.sys () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isapnp.sys Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isapnp.sys [1] 2008-04-13 11:36:41 37248 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isapnp.sys () [1] 2001-08-17 14:58:02 35840 C:\WINDOWS\system32\dllcache\isapnp.sys (Microsoft Corporation) [1] 2001-08-17 14:58:02 35840 C:\WINDOWS\system32\drivers\isapnp.sys (Microsoft Corporation) [1] 2004-08-04 05:00:00 35840 C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\isapnp.sys (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isdpc.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isdpc.dll [1] 2008-04-13 17:10:32 105984 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isdpc.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isenpid.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isenpid.dll [1] 2008-04-13 17:10:55 24064 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isenpid.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isign32.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isign32.dll [1] 2008-04-13 17:11:55 81920 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isign32.dll () [1] 2004-08-04 05:00:00 81920 C:\WINDOWS\system32\dllcache\isign32.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 81920 C:\WINDOWS\system32\isign32.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ispwait.htm Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ispwait.htm [1] 2004-08-04 05:00:00 1143 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ispwait.htm () [1] 2004-08-04 05:00:00 1143 C:\WINDOWS\system32\oobe\setup\ispwait.htm () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isrdbg32.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isrdbg32.dll [1] 2008-04-13 17:11:55 32768 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\isrdbg32.dll () [1] 2004-08-04 05:00:00 32768 C:\WINDOWS\system32\dllcache\isrdbg32.dll (Intel Corporation) [1] 2004-08-04 05:00:00 32768 C:\WINDOWS\system32\isrdbg32.dll (Intel Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\jgpl400.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\jgpl400.dll [1] 2006-06-01 12:39:42 27648 C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll (Johnson-Grace Company) [1] 2008-04-13 17:11:55 27648 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\jgpl400.dll () [1] 2006-06-01 11:47:07 27648 C:\WINDOWS\system32\dllcache\jgpl400.dll (Johnson-Grace Company) [1] 2006-06-01 11:47:07 27648 C:\WINDOWS\system32\jgpl400.dll (Johnson-Grace Company) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knperdpc.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knperdpc.dll [1] 2008-04-13 17:09:56 102912 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knperdpc.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knperpid.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knperpid.dll [1] 2008-04-13 17:09:56 24064 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knperpid.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knprodpc.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knprodpc.dll [1] 2008-04-13 17:09:56 102912 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\knprodpc.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\kpropid.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\kpropid.dll [1] 2008-04-13 17:09:56 24576 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\kpropid.dll () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\krnlprov.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\krnlprov.dll [1] 2008-04-13 17:11:56 24576 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\krnlprov.dll () [1] 2004-08-04 05:00:00 24576 C:\WINDOWS\system32\dllcache\krnlprov.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 24576 C:\WINDOWS\system32\wbem\krnlprov.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ks.sys Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ks.sys [1] 2008-04-13 12:16:36 141056 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ks.sys () [1] 2004-08-04 00:15:22 140928 C:\WINDOWS\system32\dllcache\ks.sys (Microsoft Corporation) [1] 2004-08-04 00:15:22 140928 C:\WINDOWS\system32\drivers\ks.sys (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ksecdd.sys Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ksecdd.sys [1] 2004-08-04 05:00:00 92032 C:\WINDOWS\I386\KSECDD.SYS (Microsoft Corporation) [1] 2008-04-13 11:31:43 92288 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ksecdd.sys () [1] 2004-08-04 05:00:00 92032 C:\WINDOWS\system32\dllcache\ksecdd.sys (Microsoft Corporation) [1] 2004-08-04 05:00:00 92032 C:\WINDOWS\system32\drivers\ksecdd.sys (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpinst.exe Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpinst.exe [1] 2004-08-04 05:00:00 196665 C:\WINDOWS\ime\imjp8_1\imjpinst.exe () [1] 2004-08-04 05:00:00 196665 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpinst.exe () [1] 2004-08-04 05:00:00 196665 C:\WINDOWS\system32\dllcache\imjpinst.exe () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lclmm.xml Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lclmm.xml [1] 2004-07-17 11:42:30 2343 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lclmm.xml () [1] 2006-10-21 09:47:20 2558 C:\WINDOWS\srchasst\mui\0409\lclmm.xml () Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\licmgr10.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\licmgr10.dll [1] 2008-04-13 17:11:56 22016 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\licmgr10.dll () [1] 2004-08-04 05:00:00 22016 C:\WINDOWS\system32\dllcache\licmgr10.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 22016 C:\WINDOWS\system32\licmgr10.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lprmon.dll Attempting to restore permissions of : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lprmon.dll [1] 2008-04-13 17:11:56 18944 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lprmon.dll () [1] 2004-08-04 05:00:00 18944 C:\WINDOWS\system32\dllcache\lprmon.dll (Microsoft Corporation) Found mount point : C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5a0d771158cfd69be5ddd26d8f58c73b\5a0d771158cfd69be5ddd26d8f58c73b Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5a0d771158cfd69be5ddd26d8f58c73b\5a0d771158cfd69be5ddd26d8f58c73b Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel Cannot access: C:\WINDOWS\system32\dllcache\rootmdm.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\rootmdm.sys [1] 2004-08-04 05:00:00 5888 C:\WINDOWS\system32\dllcache\rootmdm.sys () [1] 2004-08-04 05:00:00 5888 C:\WINDOWS\system32\drivers\rootmdm.sys (Microsoft Corporation) Cannot access: C:\WINDOWS\system32\dllcache\smbali.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smbali.sys [1] 2008-04-13 11:36:34 5888 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smbali.sys (Microsoft Corporation) [1] 2004-08-04 00:07:38 6016 C:\WINDOWS\system32\dllcache\smbali.sys () Cannot access: C:\WINDOWS\system32\dllcache\smbbatt.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smbbatt.sys [1] 2008-04-13 11:36:33 16000 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smbbatt.sys (Microsoft Corporation) [1] 2004-08-04 00:07:36 16128 C:\WINDOWS\system32\dllcache\smbbatt.sys () Cannot access: C:\WINDOWS\system32\dllcache\smbclass.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smbclass.sys [1] 2008-04-13 11:36:33 6912 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smbclass.sys (Microsoft Corporation) [1] 2004-08-04 00:07:36 6912 C:\WINDOWS\system32\dllcache\smbclass.sys () Cannot access: C:\WINDOWS\system32\dllcache\smbhc.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smbhc.sys [2] 2008-04-13 11:36:33 16000 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smbbatt.sys (Microsoft Corporation) [1] 2001-08-17 14:57:56 6784 C:\WINDOWS\system32\dllcache\smbhc.sys () Cannot access: C:\WINDOWS\system32\dllcache\smc8000n.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smc8000n.sys [1] 2001-08-17 13:12:46 24576 C:\WINDOWS\system32\dllcache\smc8000n.sys () Cannot access: C:\WINDOWS\system32\dllcache\smcpwr2n.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smcpwr2n.sys [1] 2001-08-17 13:12:48 25034 C:\WINDOWS\system32\dllcache\smcpwr2n.sys () Cannot access: C:\WINDOWS\system32\dllcache\smi2smir.exe Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smi2smir.exe [1] 2008-04-13 17:12:35 236544 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smi2smir.exe (Microsoft Corporation) [1] 2004-08-04 05:00:00 236544 C:\WINDOWS\system32\dllcache\smi2smir.exe () Cannot access: C:\WINDOWS\system32\dllcache\smidispb.dll Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smidispb.dll [1] 2001-08-17 15:56:04 147200 C:\WINDOWS\system32\dllcache\smidispb.dll () Cannot access: C:\WINDOWS\system32\dllcache\smierrsm.dll Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smierrsm.dll [1] 2004-08-04 05:00:00 15872 C:\WINDOWS\system32\dllcache\smierrsm.dll () Cannot access: C:\WINDOWS\system32\dllcache\smierrsy.dll Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smierrsy.dll [1] 2004-08-04 05:00:00 5632 C:\WINDOWS\system32\dllcache\smierrsy.dll () Cannot access: C:\WINDOWS\system32\dllcache\smiminib.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smiminib.sys [1] 2001-08-17 13:51:00 58368 C:\WINDOWS\system32\dllcache\smiminib.sys () Cannot access: C:\WINDOWS\system32\dllcache\smimsgif.dll Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smimsgif.dll [1] 2004-08-04 05:00:00 5632 C:\WINDOWS\system32\dllcache\smimsgif.dll () Cannot access: C:\WINDOWS\system32\dllcache\smlogcfg.dll Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\smlogcfg.dll [1] 2008-04-13 17:12:06 362496 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smlogcfg.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 363008 C:\WINDOWS\system32\dllcache\smlogcfg.dll () [1] 2004-08-04 05:00:00 363008 C:\WINDOWS\system32\smlogcfg.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\system32\dllcache\snmptrap.exe Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\snmptrap.exe [1] 2008-04-13 17:12:36 8704 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\snmptrap.exe (Microsoft Corporation) [1] 2004-08-04 05:00:00 8704 C:\WINDOWS\system32\dllcache\snmptrap.exe () Cannot access: C:\WINDOWS\system32\dllcache\spxupchk.dll Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\spxupchk.dll [1] 2001-08-17 23:36:32 24660 C:\WINDOWS\system32\dllcache\spxupchk.dll () Cannot access: C:\WINDOWS\system32\dllcache\stlnata.sys Attempting to restore permissions of : C:\WINDOWS\system32\dllcache\stlnata.sys [1] 2001-08-17 13:18:18 285760 C:\WINDOWS\system32\dllcache\stlnata.sys () Cannot access: C:\WINDOWS\system32\drivers\secdrv.sys Attempting to restore permissions of : C:\WINDOWS\system32\drivers\secdrv.sys [1] 2007-11-13 01:47:45 20480 C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [1] 2004-08-04 05:00:00 27440 C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys () [1] 2007-11-13 03:25:53 20480 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [1] 2007-11-13 03:25:53 20480 C:\WINDOWS\system32\drivers\secdrv.sys () Cannot access: C:\WINDOWS\system32\eventlog.dll Attempting to restore permissions of : C:\WINDOWS\system32\eventlog.dll [1] 2008-04-13 17:11:53 56320 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\eventlog.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 55808 C:\WINDOWS\system32\dllcache\eventlog.dll (Microsoft Corporation) [1] 2004-08-04 05:00:00 61952 C:\WINDOWS\system32\eventlog.dll () [2] 2004-08-04 05:00:00 55808 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation) Cannot access: C:\WINDOWS\system32\hkcmd.exe Attempting to restore permissions of : C:\WINDOWS\system32\hkcmd.exe Cannot access: C:\WINDOWS\system32\igfxtray.exe Attempting to restore permissions of : C:\WINDOWS\system32\igfxtray.exe Cannot access: C:\WINDOWS\system32\romanime.ime Attempting to restore permissions of : C:\WINDOWS\system32\romanime.ime [1] 2008-04-13 17:11:33 26112 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\romanime.ime () [1] 2004-08-04 05:00:00 26112 C:\WINDOWS\system32\dllcache\romanime.ime () [1] 2004-08-04 05:00:00 26112 C:\WINDOWS\system32\romanime.ime () Found mount point : C:\WINDOWS\twain_32\kodak\kds_aio5000\install\install Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\twain_32\kodak\kds_aio5000\install\install Found mount point : C:\WINDOWS\twain_32\kodak\kds_aioesp\lib\lib Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\twain_32\kodak\kds_aioesp\lib\lib Found mount point : C:\WINDOWS\WBEM\WBEM Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\WBEM\WBEM Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp Found mount point : C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2 Mount point destination : \Device\__max++>\^ Removing mount point : C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2 Finished! I feel like I actually got somewhere, hope it helps. Fred

#27 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 24 September 2009 - 10:32 PM

Forgot something, while I was finding "desktop" to load the txt file I found "delself.bat" here; c:\documents and settings\owner\desktop\delself.bat I looked it up and it sounds like it's one of the bad guys. I have not done anything with it and have left the computer alone hoping you'll catch this while i'm on. Fred

#28 Raktor

Raktor

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPip
  • 3,114 posts

Posted 24 September 2009 - 11:20 PM

Ok, time for a check. Can you boot into Safe Mode? Can you boot into Normal Mode? Can you get to the desktop in either of these?
Posted Image
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation. Posted Image
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.

#29 fredII

fredII

    Authentic Member

  • Authentic Member
  • PipPip
  • 79 posts

Posted 24 September 2009 - 11:41 PM

Just tried reboot "normally" and I'm getting some error boxes which disappear when I click ok and I am now in my desktop! I havent tried anything yet, but I'm not BSOD. I did get an Adobe box that said application failed to initialize properly (0xc0000142), Click on ok to terminate. I just clicked the x in the upper right hand corner and it disappeared. Fred

#30 Raktor

Raktor

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPip
  • 3,114 posts

Posted 24 September 2009 - 11:44 PM

Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

then

Please read through the instructions to familiarize yourself with what to expect when the tool runs.

Please download Combofix from either of the links below, and save it to your desktop.
You must rename it before saving it. Save it as Combo-Fix.exe.

Posted Image

Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link:How to Disable your Security Programs
  • Double click on Combo-Fix.exe & follow the prompts. Close all browsers/windows first.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
Posted Image
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation. Posted Image
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users