Constant Popups

Rename your copy of hijackthis.exe to seek.exe and post a fresh log run in Normal Mode. It's possible that a nasty is interfering with the normal working of HJT in order to hide itself and renaming the .exe will get around this.

Also, run HJT and click on Open the Misc Tools section.

• Click Open Uninstall Manager…
• Click Save list… and save it to your Desktop.
• Copy and paste the file uninstall_list.txt into your next reply.

Here is the new log after renaming to seek.exe.

Running processes:

…….
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Hijackthis\HijackThis.exe

According to your latest log, you haven't renamed hijackthis.exe, or at least the copy that you used to create this log.
If you rename HJT you will be able to save the uninstall list, if you don't - you won't.

Your log doesn't appear to show a third-party software firewall installed - if you have one, and i've missed it, please ignore this.
If you are relying the firewall that comes with Service Pack 2, then you need to install one. While the SP2 firewall is better than nothing, it doesn't monitor outgoing traffic, so anything malicious on your computer can 'phone home' at will.

There are a few free firewalls available.
Zone Alarm: Available here.
Kerio: Available here.
Outpost: Available here.

It is important to note that you should only have one firewall installed at a time, but you can download them all to your Desktop and install each in turn to see which one you prefer.

Understanding and Using Firewalls: http://www.bleepingcomputer.com/tutorials/tutorial60.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download VundoFix.exe by Atribune from here and save it to your desktop.

• Close all open programs and windows as this may require a reboot.
• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will shutdown your computer, click OK.
• Turn your computer back on.
• Post the contents of C:\vundofix.txt and a new HijackThis log.

Note: It is possible that VundoFix encountered a file it could not remove - in this case, VundoFix will run on reboot - simply repeat the above instructions.

I have a proxy and a hardware firewall at work, cisco firewall. At home I have ipcop firewall

I run my PC behind a router with NAT enabled which is OK, but it doesn't monitor outgoing connections - anything nasty on my PC would be able to phone home at will. That's why I have ZA as well. As long as your setup allows you to keep an eye on what's phoning home, that's fine.

Download Combofix by sUBs from here and save it to your Desktop.

• Double click combo.exe to run it and follow the prompts.
• When the tool has finished, it will produce a log C:\ComboFix.txt - copy and paste it into your next reply.
• Post a fresh HJT log as well.
• Let me know how the PC is behaving.

Please Note:

• Do not mouse click in the combofix window while it is running - this may cause your system to hang/crash.
• Disable Script Blocking if you have NAV installed as it will interfere with the normal working of this tool.
• Trojan Hunter has been reported to detect this tool as Worm.Qiv.100 - please ignore this, it's a false-positive.

Combo fix log, too big to put in one post "dhohn" - 2007-05-25 14:58:56 Service Pack 2 ComboFix 07-05.26.V - Running from: "C:\Documents and Settings\dhohn\Desktop\" (((((((((((((((((((((((((((((((((((((((((((((((((( V Log ))))))))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\system32\vycdd.ini C:\WINDOWS\system32\vycdd.ini2 C:\WINDOWS\system32\ddcyv.dll * * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * ((((((((((((((((((((((((((((((( Files Created from 1-11-07 to 05/25/07 )))))))))))))))))))))))))))))))))) 05/25/07 12:14 PM C:\WINDOWS\system32\drivers\22,080 sshrmd.sys 05/25/07 12:14 PM C:\WINDOWS\system32\drivers\21,056 sskbfd.sys 05/25/07 12:14 PM C:\WINDOWS\system32\drivers\20,544 SSFS0509.sys 05/25/07 12:14 PM C:\WINDOWS\system32\drivers\144,960 ssidrv.sys 05/25/07 12:14 PM C:\WINDOWS\system32\233,024 WRLogonNtf.dll 05/25/07 12:14 PM C:\DOCUME~1\LOCALS~1\APPLIC~1\ Webroot 05/25/07 12:13 PM C:\WINDOWS\system32\26,688 wrlzma.dll 05/25/07 12:13 PM C:\WINDOWS\system32\10,240 ssiefr.EXE 05/25/07 12:13 PM C:\WINDOWS\271,936 WRUninstall.dll 05/25/07 12:13 PM C:\Program Files\ Webroot 05/25/07 12:13 PM C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Webroot 05/25/07 12:12 PM C:\DOCUME~1\dhohn\APPLIC~1\ Webroot 05/25/07 12:08 PM C:\DOCUME~1\dhohn\APPLIC~1\ U3 05/25/07 08:04 AM C:\ Config.Msi 05/25/07 03:04 PM C:\ QooBox 05/25/07 02:57 PM C:\64 ComboFix.txt.bat 05/25/07 01:37 PM C:\WINDOWS\system32\4,212 zllictbl.dat 05/25/07 01:37 PM C:\WINDOWS\system32\11,264 SpOrder.dll 05/25/07 01:37 PM C:\WINDOWS\75,512 zllsputility.exe 05/25/07 01:36 PM C:\WINDOWS\system32\83,696 zlcomm.dll 05/25/07 01:36 PM C:\WINDOWS\system32\796,312 libeay32_0.9.6l.dll 05/25/07 01:36 PM C:\WINDOWS\system32\71,408 zlcommdb.dll 05/25/07 01:36 PM C:\WINDOWS\system32\71,408 vsregexp.dll 05/25/07 01:36 PM C:\WINDOWS\system32\46,832 vswmi.dll 05/25/07 01:36 PM C:\WINDOWS\system32\276,208 vspubapi.dll 05/25/07 01:36 PM C:\WINDOWS\system32\104,176 vsmonapi.dll 05/25/07 01:36 PM C:\WINDOWS\system32\100,080 vsxml.dll 05/25/07 01:36 PM C:\WINDOWS\system32\1,087,216 zpeng24.dll 05/25/07 01:36 PM C:\WINDOWS\system32\ ZoneLabs 05/25/07 01:36 PM C:\Program Files\ Zone Labs 05/25/07 01:34 PM C:\WINDOWS\system32\472,816 vsutil.dll (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-05-25 20:07:54 106,558 —-a-w C:\WINDOWS\system32\nvModes.dat 2007-05-25 18:41:01 4,212 —h–w C:\WINDOWS\system32\zllictbl.dat 2007-05-25 17:33:00 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\U3 2007-05-25 17:13:57 ——– d—–w C:\Program Files\Webroot 2007-05-25 17:12:10 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Webroot 2007-05-25 14:29:18 ——– d—–w C:\Program Files\Radmin 2007-05-25 13:11:25 ——– d—–w C:\Program Files\Broadcom 2007-05-25 13:10:54 ——– d–h–w C:\Program Files\InstallShield Installation Information 2007-05-25 13:10:49 ——– d—–w C:\Program Files\Wave Systems Corp 2007-05-25 00:17:20 ——– d—–w C:\Program Files\Sunbelt Software 2007-05-24 22:09:22 ——– d—–w C:\Program Files\MSXML 4.0 2007-05-24 19:22:26 4,678 —-a-w C:\WINDOWS\system32\tmp.reg 2007-05-24 14:26:09 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Wave Systems Corp 2007-05-24 00:16:46 ——– d—–w C:\Program Files\OpenVPN 2007-05-23 21:45:45 77,312 —-a-w C:\WINDOWS\ua2.dll 2007-05-23 18:00:21 664 —-a-w C:\WINDOWS\system32\d3d9caps.dat 2007-05-21 13:14:37 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\uTorrent 2007-05-21 13:13:06 ——– d—–w C:\Program Files\Winternals 2007-05-16 14:23:43 ——– d—–w C:\Program Files\UltraVNC 2007-05-16 13:42:18 ——– d—–w C:\Program Files\Lavasoft 2007-05-16 13:42:01 ——– d—–w C:\Program Files\Common Files\Wise Installation Wizard 2007-05-09 15:16:16 ——– d—–w C:\Program Files\Beyond Compare 2007-05-09 14:41:29 ——– d—–w C:\Program Files\Seagate Software 2007-05-09 14:41:05 ——– d—–w C:\Program Files\Common Files\Crystal Decisions 2007-05-09 14:41:03 ——– d—–w C:\Program Files\McAfee 2007-05-09 13:52:42 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Tip Shared 2007-05-04 18:26:14 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Real 2007-05-04 18:25:12 ——– d—–w C:\Program Files\Common Files\xing shared 2007-05-04 18:25:06 ——– d—–w C:\Program Files\Common Files\Real 2007-05-04 18:24:41 ——– d—–w C:\Program Files\Real 2007-05-04 13:32:15 ——– d—–w C:\Program Files\CCleaner 2007-05-03 20:00:38 ——– d—–w C:\Program Files\Common Files\LogiShrd 2007-05-03 19:34:57 ——– d—–w C:\Program Files\WiredRed 2007-05-03 14:27:24 ——– d—–w C:\Program Files\Bonjour 2007-05-03 14:21:27 ——– d—–w C:\Program Files\Common Files\Macrovision Shared 2007-05-02 19:49:33 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Scooter Software 2007-05-02 17:53:53 ——– d—–w C:\Program Files\DC++ 2007-05-02 01:29:41 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Apple Computer 2007-05-02 01:29:36 ——– d—–w C:\Program Files\iTunes 2007-05-02 01:29:27 ——– d—–w C:\Program Files\iPod 2007-05-02 01:29:07 ——– d—–w C:\Program Files\QuickTime 2007-05-02 01:28:04 ——– d—–w C:\Program Files\Apple Software Update 2007-05-01 16:18:57 ——– d—–w C:\Program Files\UnH Solutions 2007-05-01 13:34:49 ——– d—–w C:\Program Files\uTorrent 2007-04-30 17:06:50 ——– d—–w C:\Program Files\Google 2007-04-30 15:46:56 ——– d—–w C:\Program Files\Common Files\Bluebeam Software 2007-04-30 15:46:55 ——– d—–w C:\Program Files\Bluebeam Software 2007-04-30 12:34:38 ——– d—–w C:\Program Files\CMAK 2007-04-29 14:50:41 1,156 —-a-w C:\WINDOWS\mozver.dat 2007-04-27 19:49:44 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Telelogic 2007-04-27 19:48:11 ——– d—–w C:\Program Files\Telelogic 2007-04-27 15:20:36 ——– d—–w C:\Program Files\SplashData 2007-04-27 15:20:27 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\InstallShield 2007-04-26 20:36:44 ——– d—–w C:\Program Files\Cisco Systems 2007-04-26 20:35:39 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\SystemTools 2007-04-26 20:35:06 ——– d—–w C:\Program Files\Hyena 2007-04-26 15:40:07 ——– d—–w C:\Program Files\Common Files\Logitech 2007-04-26 15:17:53 ——– d—–w C:\Program Files\Avaya Solutions 2007-04-26 14:22:39 ——– d—–w C:\Program Files\Common Files\Deterministic Networks 2007-04-26 14:08:59 ——– d—–w C:\Program Files\Hummingbird 2007-04-26 14:08:59 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Hummingbird 2007-04-26 14:00:28 ——– d—–w C:\Program Files\Terminal Services Client 2007-04-26 13:59:33 ——– d—–w C:\Program Files\BDE5Setup 2007-04-26 13:59:26 ——– d—–w C:\Program Files\Borland 2007-04-26 13:39:55 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\ICAClient 2007-04-26 13:38:17 ——– d—–w C:\Program Files\Citrix 2007-04-26 13:32:24 ——– d—–w C:\Program Files\Common Files\Cisco Systems 2007-04-26 13:31:50 ——– d—–w C:\Program Files\Common Files\McAfee 2007-04-25 23:23:17 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Research In Motion 2007-04-25 23:22:11 ——– d—–w C:\Program Files\Common Files\Research In Motion 2007-04-25 23:22:04 ——– d—–w C:\Program Files\Research In Motion 2007-04-25 20:36:31 ——– d—–w C:\Program Files\lotus 2007-04-25 20:16:27 ——– d—–w C:\Program Files\Microsoft Works 2007-04-25 20:14:12 ——– d—–w C:\Program Files\Common Files\L&H 2007-04-25 20:13:59 ——– d—–w C:\Program Files\Microsoft ActiveSync 2007-04-25 20:13:18 ——– d—–w C:\Program Files\Microsoft.NET 2007-04-20 02:13:59 ——– d—–w C:\Program Files\Dell Support 2007-04-20 02:13:48 ——– d—–w C:\Program Files\Common Files\SureThing Shared 2007-04-20 02:13:47 ——– d—–w C:\Program Files\Roxio 2007-04-20 02:13:44 ——– d—–w C:\Program Files\Sonic 2007-04-20 02:13:44 ——– d—–w C:\Program Files\Common Files\InstallShield 2007-04-20 02:13:40 ——– d—–w C:\Program Files\Common Files\Sonic Shared 2007-04-20 02:12:38 ——– d—–w C:\Program Files\BAE 2007-04-20 02:12:32 ——– d—–w C:\Program Files\Digital Line Detect 2007-04-20 02:12:26 ——– d—–w C:\Program Files\NetWaiting 2007-04-20 02:12:20 ——– d—–w C:\Program Files\Modem Helper 2007-04-20 02:12:04 ——– d—–w C:\Program Files\Dell 2007-04-20 02:11:49 ——– d—–w C:\Program Files\CyberLink 2007-04-20 02:06:34 ——– d—–w C:\Program Files\CONEXANT 2007-04-20 02:06:27 ——– d—–w C:\Program Files\Sigmatel 2007-04-20 02:03:26 ——– d—–w C:\Program Files\BlueTooth 2007-04-20 02:02:47 ——– d—–w C:\Program Files\Toshiba 2007-04-20 02:01:17 ——– d—–w C:\Program Files\Messenger 2007-04-20 01:46:38 ——– d—–w C:\Program Files\Apoint 2007-04-18 16:12:23 2,854,400 —-a-w C:\WINDOWS\system32\msi.dll 2007-03-17 13:43:01 292,864 —-a-w C:\WINDOWS\system32\winsrv.dll 2007-03-16 23:10:46 604,928 —-a-w C:\WINDOWS\system32\drivers\BCMWL5.SYS 2007-03-16 23:10:46 44,032 —-a-w C:\WINDOWS\system32\wltrynt.dll 2007-03-16 23:10:46 20,480 —-a-w C:\WINDOWS\system32\WLTRYSVC.EXE 2007-03-16 23:10:46 1,392,640 —-a-w C:\WINDOWS\system32\WLTRAY.EXE 2007-03-16 23:10:44 86,016 —-a-w C:\WINDOWS\system32\preflib.dll 2007-03-16 23:10:44 2,129,920 —-a-w C:\WINDOWS\system32\WLBCGCBPRO731.DLL 2007-03-16 23:10:42 69,632 —-a-w C:\WINDOWS\system32\bcmwlpkt.dll 2007-03-16 23:10:42 33,664 —-a-w C:\WINDOWS\system32\drivers\BCMWLNPF.SYS 2007-03-16 23:10:42 253,952 —-a-w C:\WINDOWS\system32\bcmwlu00.exe 2007-03-16 23:10:42 1,253,376 —-a-w C:\WINDOWS\system32\BCMWLTRY.EXE 2007-03-16 23:10:38 770,048 —-a-w C:\WINDOWS\system32\BCMLogon.dll 2007-03-16 23:10:38 757,760 —-a-w C:\WINDOWS\system32\bcm1xsup.dll 2007-03-09 06:02:00 75,512 —-a-w C:\WINDOWS\zllsputility.exe 2007-03-09 06:01:42 1,087,216 —-a-w C:\WINDOWS\system32\zpeng24.dll 2007-03-08 15:36:28 577,536 —-a-w C:\WINDOWS\system32\user32.dll 2007-03-08 15:36:28 40,960 —-a-w C:\WINDOWS\system32\mf3216.dll 2007-03-08 15:36:28 281,600 —-a-w C:\WINDOWS\system32\gdi32.dll 2007-03-08 13:47:48 1,843,584 —-a-w C:\WINDOWS\system32\win32k.sys 2007-03-02 00:54:22 21,056 —-a-w C:\WINDOWS\system32\drivers\sskbfd.sys 2007-03-02 00:54:18 144,960 —-a-w C:\WINDOWS\system32\drivers\ssidrv.sys 2007-03-02 00:54:16 22,080 —-a-w C:\WINDOWS\system32\drivers\sshrmd.sys 2007-03-02 00:54:16 20,544 —-a-w C:\WINDOWS\system32\drivers\SSFS0509.sys 2007-02-26 23:26:42 409,600 —-a-w C:\WINDOWS\system32\Bluebeam Jasper Library.dll 2007-02-13 21:22:54 947,472 —-a-w C:\WINDOWS\system32\msjava.dll 2007-02-09 11:10:35 574,464 —-a-w C:\WINDOWS\system32\drivers\ntfs.sys 2007-02-08 19:09:14 3,301,376 —-a-r C:\WINDOWS\system32\BGP854.dll 2007-02-06 22:44:36 1,964,064 —-a-w C:\WINDOWS\system32\drivers\LVMVdrv.sys 2007-02-06 22:42:40 1,691,808 —-a-w C:\WINDOWS\system32\drivers\Lvckap.sys 2007-02-05 20:17:02 185,344 —-a-w C:\WINDOWS\system32\upnphost.dll 2007-02-03 15:29:20 129,824 —-a-w C:\WINDOWS\system32\lvci1051.dll 2007-01-28 19:23:36 61,312 —-a-w C:\WINDOWS\system32\drivers\oz776.sys 2007-01-17 23:11:58 643,170 —-a-w C:\WINDOWS\system32\BBPdfPortMon.DLL 2007-01-09 20:23:22 98,304 —-a-w C:\WINDOWS\system32\InstallPrinter6.dll 2006-11-30 13:50:00 72,264 —-a-w C:\WINDOWS\system32\drivers\mfeavfk.sys 2006-11-30 13:50:00 64,360 —-a-w C:\WINDOWS\system32\drivers\mfeapfk.sys 2006-11-30 13:50:00 52,136 —-a-w C:\WINDOWS\system32\drivers\mfetdik.sys 2006-11-30 13:50:00 34,152 —-a-w C:\WINDOWS\system32\drivers\mfebopk.sys 2006-11-30 13:50:00 168,776 —-a-w C:\WINDOWS\system32\drivers\mfehidk.sys 2006-11-17 08:06:00 1,495,552 —-a-w C:\WINDOWS\system32\epoPGPsdk.dll 2006-11-13 06:02:58 36,352 ——w C:\WINDOWS\system32\tsgqec.dll 2006-11-13 06:02:58 288,768 ——w C:\WINDOWS\system32\rhttpaa.dll 2006-11-13 06:02:58 116,736 ——w C:\WINDOWS\system32\aaclient.dll 2006-11-13 06:02:58 1,866,240 —-a-w C:\WINDOWS\system32\mstscax.dll 2006-11-08 05:06:13 679,424 —-a-w C:\WINDOWS\system32\inetcomm.dll 2006-11-07 23:02:04 22,272 —-a-w C:\WINDOWS\system32\drivers\RimUsb.sys 2006-11-07 08:06:47 600,576 —-a-w C:\WINDOWS\system32\mstsc.exe 2006-11-04 19:14:00 1,245,696 —-a-w C:\WINDOWS\system32\msxml4.dll 2006-11-01 19:17:45 927,504 —-a-w C:\WINDOWS\system32\mfc40u.dll 2006-10-30 09:06:10 753,664 —-a-w C:\WINDOWS\system32\Crpe32_res_fr.dll 2006-10-30 09:06:10 745,472 —-a-w C:\WINDOWS\system32\Crpe32_res_es.dll 2006-10-30 09:06:10 745,472 —-a-w C:\WINDOWS\system32\Crpe32_res_de.dll 2006-10-30 09:06:10 720,896 —-a-w C:\WINDOWS\system32\Crpe32_res_jp.dll 2006-10-30 09:06:10 671,801 —-a-w C:\WINDOWS\system32\exlate32.dll 2006-10-30 09:06:10 664,576 —-a-w C:\WINDOWS\system32\crviewer.dll 2006-10-30 09:06:10 618,496 —-a-w C:\WINDOWS\system32\crpaig80.dll 2006-10-30 09:06:10 5,152,826 —-a-w C:\WINDOWS\system32\craxdrt.dll 2006-10-30 09:06:10 5,042,233 —-a-w C:\WINDOWS\system32\crpe32.dll 2006-10-30 09:06:10 45,056 —-a-w C:\WINDOWS\system32\u2fhtml85.dll 2006-10-30 09:06:10 36,864 —-a-w C:\WINDOWS\system32\p3sodjp.dll 2006-10-30 09:06:10 36,864 —-a-w C:\WINDOWS\system32\p3sodfr.dll 2006-10-30 09:06:10 36,864 —-a-w C:\WINDOWS\system32\p3sodes.dll 2006-10-30 09:06:10 36,864 —-a-w C:\WINDOWS\system32\p3sodde.dll 2006-10-30 09:06:10 286,720 —-a-w C:\WINDOWS\system32\p2sodbc.dll 2006-10-30 09:06:10 28,672 —-a-w C:\WINDOWS\system32\u2fcr.dll 2006-10-30 09:06:10 28,672 —-a-w C:\WINDOWS\system32\u2ddisk.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fxljp.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fxlfr.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fxles.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fxlde.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fhtfr.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fhtes.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\x3fhtde.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\crxlat32.dll 2006-10-30 09:06:10 24,576 —-a-w C:\WINDOWS\system32\crheapalloc.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fwkjp.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fwdfr.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fwdes.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fwdde.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3frtjp.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3frtfr.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3frtes.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3frtde.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fhtjp.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fcrjp.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fcrfr.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fcres.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3fcrde.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3ddkjp.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3ddkfr.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3ddkes.dll 2006-10-30 09:06:10 20,480 —-a-w C:\WINDOWS\system32\x3ddkde.dll 2006-10-30 09:06:10 18,944 —-a-w C:\WINDOWS\system32\implode.dll 2006-10-30 09:06:10 167,936 —-a-w C:\WINDOWS\system32\U2l_Avi.Dll 2006-10-30 09:06:10 100,352 —-a-w C:\WINDOWS\system32\pg32conv.dll 2006-10-30 09:06:10 1,179,648 —-a-w C:\WINDOWS\system32\sscsdk80.dll 2006-10-20 15:28:04 26,368 —-a-r C:\WINDOWS\system32\drivers\RimSerial.sys 2006-10-19 13:56:32 713,216 —-a-w C:\WINDOWS\system32\sxs.dll 2006-10-16 16:15:00 122,880 —-a-w C:\WINDOWS\system32\oledlg.dll 2006-10-14 08:13:25 981,760 —-a-w C:\WINDOWS\system32\mfc42u.dll 2006-10-13 12:35:12 65,536 —-a-w C:\WINDOWS\system32\nwwks.dll 2006-10-13 12:35:12 64,000 —-a-w C:\WINDOWS\system32\nwapi32.dll 2006-10-13 12:35:12 142,336 —-a-w C:\WINDOWS\system32\nwprovau.dll 2006-10-13 10:23:15 163,584 —-a-w C:\WINDOWS\system32\drivers\nwrdr.sys 2006-10-11 16:24:45 58,880 —-a-w C:\WINDOWS\system32\pnrpnsp.dll 2006-10-11 16:24:45 313,344 —-a-w C:\WINDOWS\system32\p2pgraph.dll 2006-10-11 16:24:45 153,088 —-a-w C:\WINDOWS\system32\p2p.dll 2006-10-11 16:24:45 116,224 —-a-w C:\WINDOWS\system32\p2pnetsh.dll 2006-10-11 16:24:45 104,960 —-a-w C:\WINDOWS\system32\p2pgasvc.dll 2006-10-11 14:24:46 553,984 —-a-w C:\WINDOWS\system32\p2psvc.dll 2006-10-04 17:24:36 7,464,960 —-a-w C:\WINDOWS\system32\AqSys65.dll 2006-10-04 17:24:20 1,394,688 —-a-w C:\WINDOWS\system32\NcPopup65.dll 2006-10-04 17:24:18 1,026,560 —-a-w C:\WINDOWS\system32\ChPopup65.dll 2006-10-04 17:24:14 935,936 —-a-w C:\WINDOWS\system32\CaPopup65.dll 2006-10-04 00:47:52 109,360 —-a-w C:\WINDOWS\system32\GEARAspi.dll 2006-09-19 19:44:04 15,664 —-a-w C:\WINDOWS\system32\drivers\GEARAspiWDM.sys 2006-09-13 05:01:56 1,084,416 —-a-w C:\WINDOWS\system32\msxml3.dll 2006-09-08 13:30:44 4,096 —-a-w C:\WINDOWS\system32\detoured.dll 2006-09-05 16:03:16 3,968 —-a-w C:\WINDOWS\system32\drivers\AvgAsCln.sys 2006-08-25 15:45:58 617,472 —-a-w C:\WINDOWS\system32\comctl32.dll 2006-08-22 09:05:26 498,742 —-a-w C:\WINDOWS\system32\dxmasf.dll 2006-08-21 14:52:08 246,814 —-a-w C:\WINDOWS\system32\strmdll.dll 2006-08-21 12:21:06 16,896 —-a-w C:\WINDOWS\system32\fltlib.dll 2006-08-21 09:14:58 23,040 —-a-w C:\WINDOWS\system32\fltmc.exe 2006-08-21 09:14:58 128,896 —-a-w C:\WINDOWS\system32\drivers\fltmgr.sys 2006-08-17 12:28:27 721,920 —-a-w C:\WINDOWS\system32\lsasrv.dll 2006-08-17 12:28:27 132,096 —-a-w C:\WINDOWS\system32\wkssvc.dll 2006-08-16 11:58:05 100,352 —-a-w C:\WINDOWS\system32\6to4svc.dll 2006-08-16 09:37:30 225,664 —-a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2006-08-14 10:34:41 332,928 —-a-w C:\WINDOWS\system32\drivers\srv.sys 2006-07-25 18:18:46 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Help 2006-07-24 20:55:48 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\IsolatedStorage 2006-07-24 20:44:09 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Symantec 2006-07-24 18:18:17 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\KeePass 2006-07-24 17:37:02 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Lavasoft 2006-07-24 15:48:18 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Google 2006-07-24 15:21:37 ——– d—–w C:\DOCUME~1\dhohn\APPLIC~1\Sonic 2006-07-21 08:24:43 72,704 —-a-w C:\WINDOWS\system32\hlink.dll 2006-07-13 08:48:58 202,240 —-a-w C:\WINDOWS\system32\drivers\rmcast.sys 2006-06-26 15:09:20 323,624 —-a-w C:\WINDOWS\system32\wiaaut.dll 2006-06-22 05:06:30 1,435,648 —-a-w C:\WINDOWS\system32\query.dll 2006-06-22 05:06:29 69,120 —-a-w C:\WINDOWS\system32\ciodm.dll 2006-06-20 08:50:27 453,248 —-a-w C:\WINDOWS\system32\drivers\mrxsmb.sys 2006-06-14 09:00:45 82,944 —-a-w C:\WINDOWS\system32\drivers\wdmaud.sys 2006-06-14 08:47:46 6,400 —-a-w C:\WINDOWS\system32\drivers\splitter.sys 2006-06-14 08:47:45 172,416 —-a-w C:\WINDOWS\system32\drivers\kmixer.sys 2006-06-13 17:29:28 47,488 —-a-w C:\WINDOWS\system32\drivers\tosporte.sys 2006-06-13 16:22:58 111,232 —-a-w C:\WINDOWS\system32\drivers\TosRfbd.sys 2006-06-10 02:40:00 40,192 —-a-w C:\WINDOWS\system32\drivers\tosrfusb.sys 2006-05-29 18:11:20 60,672 —-a-w C:\WINDOWS\system32\drivers\TosRfhid.sys 2006-05-09 15:50:00 75,736 —-a-w C:\WINDOWS\system32\cdm.dll 2006-05-09 15:50:00 465,368 —-a-w C:\WINDOWS\system32\wuapi.dll 2006-05-09 15:50:00 41,432 —-a-w C:\WINDOWS\system32\wups.dll 2006-05-09 15:50:00 198,616 —-a-w C:\WINDOWS\system32\iuengine.dll 2006-05-09 15:50:00 194,520 —-a-w C:\WINDOWS\system32\wuaueng1.dll 2006-05-09 15:50:00 18,392 —-a-w C:\WINDOWS\system32\wups2.dll 2006-05-09 15:50:00 174,040 —-a-w C:\WINDOWS\system32\wuweb.dll 2006-05-09 15:50:00 172,504 —-a-w C:\WINDOWS\system32\wuauclt1.exe 2006-05-09 15:50:00 127,448 —-a-w C:\WINDOWS\system32\wucltui.dll 2006-05-09 15:50:00 124,376 —-a-w C:\WINDOWS\system32\wuauclt.exe 2006-05-09 15:50:00 1,347,544 —-a-w C:\WINDOWS\system32\wuaueng.dll 2006-05-05 09:47:57 174,592 —-a-w C:\WINDOWS\system32\drivers\rdbss.sys 2006-04-27 22:49:30 288,417 —-a-w C:\WINDOWS\system32\SrchSTS.exe 2006-04-20 11:51:50 359,808 —-a-w C:\WINDOWS\system32\drivers\tcpip.sys 2006-03-24 21:34:30 1,156,648 —-a-w C:\WINDOWS\system32\drivers\sthda.sys 2006-03-24 21:32:56 112,128 —-a-w C:\WINDOWS\system32\staco.dll 2006-03-24 21:31:50 208,896 —-a-w C:\WINDOWS\system32\stacapi.dll 2006-03-24 21:30:44 282,624 —-a-w C:\WINDOWS\stsystra.exe 2006-03-24 04:37:50 49,152 —-a-w C:\WINDOWS\system32\wdigest.dll 2006-03-22 21:52:58 1,052,672 —-a-w C:\WINDOWS\system32\stlang.dll 2006-03-20 20:52:58 49,664 —-a-w C:\WINDOWS\system32\drivers\tosdbt.sys 2006-03-17 00:38:01 28,672 ——w C:\WINDOWS\system32\verclsid.exe 2006-03-17 00:33:10 262,784 —-a-w C:\WINDOWS\system32\drivers\http.sys 2006-03-16 15:45:12 37,632 —-a-w C:\WINDOWS\system32\drivers\tosrfbnp.sys 2006-03-15 15:52:40 52,864 —-a-w C:\WINDOWS\system32\drivers\TosRfSnd.sys 2006-03-01 19:42:42 956,416 —-a-w C:\WINDOWS\system32\msdtctm.dll 2006-03-01 19:42:42 91,136 —-a-w C:\WINDOWS\system32\mtxoci.dll 2006-03-01 19:42:42 66,560 —-a-w C:\WINDOWS\system32\mtxclu.dll 2006-03-01 19:42:42 426,496 —-a-w C:\WINDOWS\system32\msdtcprx.dll 2006-03-01 19:42:42 161,280 —-a-w C:\WINDOWS\system32\msdtcuiu.dll 2006-03-01 19:42:42 11,776 —-a-w C:\WINDOWS\system32\xolehlp.dll 2006-02-28 17:41:34 61,440 —-a-w C:\WINDOWS\system32\dns-sd.exe 2006-02-28 17:41:22 53,248 —-a-w C:\WINDOWS\system32\dnssd.dll 2006-02-15 00:22:26 142,464 —-a-w C:\WINDOWS\system32\drivers\aec.sys 2006-01-19 13:14:00 86,016 —-a-w C:\WINDOWS\system32\nvmctray.dll 2006-01-19 13:14:00 835,584 —-a-w C:\WINDOWS\system32\nvmobls.dll 2006-01-19 13:14:00 81,920 —-a-w C:\WINDOWS\system32\nvwddi.dll 2006-01-19 13:14:00 761,856 —-a-w C:\WINDOWS\system32\nvcplui.exe 2006-01-19 13:14:00 73,728 —-a-w C:\WINDOWS\system32\nvhotkey.dll 2006-01-19 13:14:00 7,401,472 —-a-w C:\WINDOWS\system32\nvcpl.dll 2006-01-19 13:14:00 5,406,720 —-a-w C:\WINDOWS\system32\nvoglnt.dll 2006-01-19 13:14:00 466,944 —-a-w C:\WINDOWS\system32\nvshell.dll 2006-01-19 13:14:00 45,056 —-a-w C:\WINDOWS\system32\nvmccsrs.dll 2006-01-19 13:14:00 442,368 —-a-w C:\WINDOWS\system32\nvappbar.exe 2006-01-19 13:14:00 438,272 —-a-w C:\WINDOWS\system32\nvmccssr.dll 2006-01-19 13:14:00 425,984 —-a-w C:\WINDOWS\system32\keystone.exe 2006-01-19 13:14:00 35,328 —-a-w C:\WINDOWS\system32\nvcodins.dll 2006-01-19 13:14:00 35,328 —-a-w C:\WINDOWS\system32\nvcod.dll 2006-01-19 13:14:00 335,872 —-a-w C:\WINDOWS\system32\nvwrses.dll 2006-01-19 13:14:00 327,680 —-a-w C:\WINDOWS\system32\nvwrsfr.dll 2006-01-19 13:14:00 323,584 —-a-w C:\WINDOWS\system32\nvwrsit.dll 2006-01-19 13:14:00 319,488 —-a-w C:\WINDOWS\system32\nvwrsptb.dll 2006-01-19 13:14:00 315,392 —-a-w C:\WINDOWS\system32\nvwrsru.dll 2006-01-19 13:14:00 311,296 —-a-w C:\WINDOWS\system32\nvwrsde.dll 2006-01-19 13:14:00 311,296 —-a-w C:\WINDOWS\system32\nvexpbar.dll 2006-01-19 13:14:00 3,948,544 —-a-w C:\WINDOWS\system32\nvgames.dll 2006-01-19 13:14:00 3,947,520 —-a-w C:\WINDOWS\system32\nv4_disp.dll 2006-01-19 13:14:00 3,595,296 —-a-w C:\WINDOWS\system32\drivers\nv4_mini.sys 2006-01-19 13:14:00 3,198,976 —-a-w C:\WINDOWS\system32\nvdisps.dll 2006-01-19 13:14:00 278,528 —-a-w C:\WINDOWS\system32\nvrsit.dll 2006-01-19 13:14:00 278,528 —-a-w C:\WINDOWS\system32\nvrsfr.dll 2006-01-19 13:14:00 278,528 —-a-w C:\WINDOWS\system32\nvrses.dll 2006-01-19 13:14:00 274,432 —-a-w C:\WINDOWS\system32\nvrsde.dll 2006-01-19 13:14:00 266,240 —-a-w C:\WINDOWS\system32\nvrsru.dll 2006-01-19 13:14:00 262,144 —-a-w C:\WINDOWS\system32\nvrsptb.dll 2006-01-19 13:14:00 262,144 —-a-w C:\WINDOWS\system32\nvrsja.dll 2006-01-19 13:14:00 258,048 —-a-w C:\WINDOWS\system32\nvrsko.dll 2006-01-19 13:14:00 229,376 —-a-w C:\WINDOWS\system32\nvmccs.dll 2006-01-19 13:14:00 221,184 —-a-w C:\WINDOWS\system32\nvrszhc.dll 2006-01-19 13:14:00 212,992 —-a-w C:\WINDOWS\system32\nvwrsja.dll 2006-01-19 13:14:00 2,850,816 —-a-w C:\WINDOWS\system32\nvvitvs.dll 2006-01-19 13:14:00 2,793,472 —-a-w C:\WINDOWS\system32\nvvitvsr.dll 2006-01-19 13:14:00 2,764,800 —-a-w C:\WINDOWS\system32\nvdispsr.dll 2006-01-19 13:14:00 2,727,936 —-a-w C:\WINDOWS\system32\nvmoblsr.dll 2006-01-19 13:14:00 196,608 —-a-w C:\WINDOWS\system32\nvwrsko.dll 2006-01-19 13:14:00 184,320 —-a-w C:\WINDOWS\system32\nvmccss.dll 2006-01-19 13:14:00 180,224 —-a-w C:\WINDOWS\system32\nvudisp.exe 2006-01-19 13:14:00 167,936 —-a-w C:\WINDOWS\system32\nvwrszht.dll 2006-01-19 13:14:00 163,840 —-a-w C:\WINDOWS\system32\nvwrszhc.dll 2006-01-19 13:14:00 143,428 —-a-w C:\WINDOWS\system32\nvsvc32.exe 2006-01-19 13:14:00 122,880 —-a-w C:\WINDOWS\system32\nvrszht.dll 2006-01-19 13:14:00 106,496 —-a-w C:\WINDOWS\system32\nvapi.dll 2006-01-19 13:14:00 1,662,976 —-a-w C:\WINDOWS\system32\nvwdmcpl.dll 2006-01-19 13:14:00 1,593,344 —-a-w C:\WINDOWS\system32\nvgamesr.dll 2006-01-19 13:14:00 1,519,616 —-a-w C:\WINDOWS\system32\nwiz.exe 2006-01-19 13:14:00 1,466,368 —-a-w C:\WINDOWS\system32\nview.dll 2006-01-19 13:14:00 1,339,392 —-a-w C:\WINDOWS\system32\nvdspsch.exe 2006-01-19 13:14:00 1,261,568 —-a-w C:\WINDOWS\system32\nvcpluir.dll 2006-01-19 13:14:00 1,019,904 —-a-w C:\WINDOWS\system32\nvwimg.dll 2006-01-04 03:35:05 68,096 —-a-w C:\WINDOWS\system32\webclnt.dll 2005-12-05 15:54:04 61,440 —-a-w C:\WINDOWS\system32\KPower.dll 2005-12-05 15:54:04 307,200 —-a-w C:\WINDOWS\system32\BMAPI.dll 2005-12-01 05:40:56 936,960 —-a-w C:\WINDOWS\system32\drivers\HSX_DPV.sys 2005-12-01 05:40:12 192,512 —-a-w C:\WINDOWS\system32\drivers\HSXHWAZL.sys 2005-12-01 05:40:08 669,696 —-a-w C:\WINDOWS\system32\drivers\HSX_CNXT.sys 2005-11-17 21:18:00 1,871,872 —-a-w C:\WINDOWS\system32\TosBtExt.dll 2005-11-16 03:41:26 114,688 —-a-w C:\WINDOWS\system32\Uci32103.dll 2005-11-14 17:00:00 383,488 —-a-w C:\WINDOWS\system32\midas.dll 2005-11-10 14:25:14 142,720 —-a-w C:\WINDOWS\system32\drivers\b57xp32.sys 2005-10-25 23:39:41 27,264 —-a-w C:\WINDOWS\system32\drivers\usbehci.sys 2005-10-25 23:39:41 143,104 —-a-w C:\WINDOWS\system32\drivers\usbport.sys 2005-10-20 22:20:03 1,082,368 —-a-w C:\WINDOWS\system32\esent.dll 2005-10-17 21:14:46 118,272 —-a-w C:\WINDOWS\system32\t2embed.dll 2005-10-17 21:14:45 80,896 —-a-w C:\WINDOWS\system32\fontsub.dll 2005-10-05 02:57:08 12,544 —-a-w C:\WINDOWS\system32\drivers\mdmxsdk.sys 2005-10-05 02:56:44 86,016 —-a-w C:\WINDOWS\system32\mdmxsdk.dll 2005-09-28 23:57:18 113,847 —-a-r C:\WINDOWS\system32\drivers\Apfiltr.sys 2005-09-23 12:28:52 74,240 —-a-w C:\WINDOWS\system32\mscories.dll 2005-09-23 12:28:52 270,848 —-a-w C:\WINDOWS\system32\mscoree.dll 2005-09-23 12:28:52 150,016 —-a-w C:\WINDOWS\system32\mscorier.dll 2005-09-23 12:28:38 83,456 —-a-w C:\WINDOWS\system32\dfshim.dll 2005-09-12 08:30:00 89,264 —-a-w C:\WINDOWS\system32\drivers\DRVMCDB.SYS 2005-09-10 01:53:41 2,067,968 —-a-w C:\WINDOWS\system32\cdosys.dll 2005-09-09 19:47:10 9,344 —-a-w C:\WINDOWS\system32\drivers\Tosrfec.sys 2005-09-08 10:20:00 94,263 —-a-w C:\WINDOWS\DLA.EXE 2005-09-08 10:20:00 61,500 —-a-w C:\WINDOWS\system32\DLAAPI_W.DLL 2005-09-02 04:19:00 548,864 —-a-w C:\WINDOWS\system32\tosBtShell.dll 2005-09-02 02:44:00 110,592 —-a-w C:\WINDOWS\system32\TosBtAcc.dll 2005-09-01 19:23:14 376,832 —-a-r C:\WINDOWS\system32\LVUI2RC.dll 2005-09-01 19:20:51 22,528 —-a-r C:\WINDOWS\system32\drivers\LVUSBSta.sys 2005-09-01 19:19:26 212,992 —-a-r C:\WINDOWS\system32\LVUI2.dll 2005-09-01 19:18:05 204,800 —-a-r C:\WINDOWS\system32\LVCodec2.dll 2005-09-01 18:11:52 53,248 —-a-w C:\WINDOWS\system32\lvccinst.dll 2005-09-01 18:11:52 16,768 —-a-w C:\WINDOWS\system32\drivers\LVPrcMon.sys 2005-09-01 18:08:38 233,536 —-a-r C:\WINDOWS\Instexec.exe 2005-09-01 18:04:44 77,824 —-a-w C:\WINDOWS\system32\LVCOMCX.dll 2005-09-01 18:04:44 262,144 —-a-w C:\WINDOWS\system32\LVMAENUM.dll 2005-09-01 18:04:44 221,184 —-a-w C:\WINDOWS\system32\LVCOMSX.EXE 2005-09-01 18:03:54 233,536 —-a-r C:\WINDOWS\system32\InstExec.exe 2005-09-01 01:41:53 19,968 —-a-w C:\WINDOWS\system32\linkinfo.dll 2005-08-30 19:15:58 106,496 —-a-w C:\WINDOWS\system32\TosBtSDDB.dll 2005-08-30 19:15:18 147,456 —-a-w C:\WINDOWS\system32\TosBtAPI.dll 2005-08-30 03:54:26 1,287,168 —-a-w C:\WINDOWS\system32\quartz.dll 2005-08-25 17:16:52 5,628 —-a-w C:\WINDOWS\system32\drivers\DLACDBHM.SYS 2005-08-25 17:16:16 22,684 —-a-w C:\WINDOWS\system32\drivers\DLARTL_N.SYS 2005-08-23 18:54:12 102,400 —-a-w C:\WINDOWS\system32\TosBtCapApi.dll 2005-08-23 03:35:42 123,392 —-a-w C:\WINDOWS\system32\umpnpmgr.dll 2005-08-22 18:29:46 197,632 —-a-w C:\WINDOWS\system32\netman.dll 2005-08-17 15:00:44 131,072 —-a-w C:\WINDOWS\system32\TosAvdtAPI.dll 2005-08-17 14:59:56 90,112 —-a-w C:\WINDOWS\system32\TosAvctAPI.dll 2005-08-17 14:58:44 53,248 —-a-w C:\WINDOWS\system32\TosAvAPI.dll 2005-08-12 22:50:46 16,128 —-a-w C:\WINDOWS\system32\drivers\APPDRV.SYS 2005-08-12 10:20:00 40,544 —-a-w C:\WINDOWS\system32\drivers\DRVNDDM.SYS 2005-08-11 21:05:24 110,592 —-a-w C:\WINDOWS\system32\TosSndPlug.dll 2005-08-01 21:45:08 64,896 —-a-w C:\WINDOWS\system32\drivers\tosrfcom.sys 2005-07-26 04:39:49 397,824 —-a-w C:\WINDOWS\system32\rpcss.dll 2005-07-26 04:39:49 37,888 —-a-w C:\WINDOWS\system32\olecnv32.dll 2005-07-26 04:39:49 101,376 —-a-w C:\WINDOWS\system32\txflog.dll 2005-07-26 04:39:48 74,752 —-a-w C:\WINDOWS\system32\olecli32.dll 2005-07-26 04:39:48 1,285,120 —-a-w C:\WINDOWS\system32\ole32.dll 2005-07-26 04:39:45 540,160 —-a-w C:\WINDOWS\system32\comuid.dll 2005-07-26 04:39:45 243,200 —-a-w C:\WINDOWS\system32\es.dll 2005-07-26 04:39:44 97,792 —-a-w C:\WINDOWS\system32\comrepl.dll 2005-07-26 04:39:44 1,267,200 —-a-w C:\WINDOWS\system32\comsvcs.dll 2005-07-26 04:39:43 625,152 —-a-w C:\WINDOWS\system32\catsrvut.dll 2005-07-26 04:39:43 60,416 —-a-w C:\WINDOWS\system32\colbact.dll 2005-07-26 04:39:43 498,688 —-a-w C:\WINDOWS\system32\clbcatq.dll 2005-07-26 04:39:43 110,080 —-a-w C:\WINDOWS\system32\clbcatex.dll 2005-07-26 04:39:42 225,792 —-a-w C:\WINDOWS\system32\catsrv.dll 2005-07-23 02:35:00 65,536 —-a-w C:\WINDOWS\system32\TosHidAPI.dll 2005-07-23 02:30:20 65,536 —-a-w C:\WINDOWS\system32\TosCommAPI.dll 2005-07-23 02:29:22 98,304 —-a-w C:\WINDOWS\system32\TosBdAPI.dll 2005-07-19 22:31:02 53,248 —-a-r C:\WINDOWS\system32\InstMed.exe 2005-07-16 01:28:54 282,624 —-a-w C:\WINDOWS\system32\LCWizard.dll 2005-07-11 23:58:56 3,712 —-a-w C:\WINDOWS\system32\drivers\Toshidpt.sys 2005-07-08 16:27:56 249,344 —-a-w C:\WINDOWS\system32\tapisrv.dll 2005-06-29 01:46:00 74,240 —-a-w C:\WINDOWS\system32\mscms.dll 2005-06-29 01:46:00 254,976 —-a-w C:\WINDOWS\system32\icm32.dll 2005-06-28 15:21:34 22,752 —-a-w C:\WINDOWS\system32\spupdsvc.exe 2005-06-15 17:49:30 295,936 —-a-w C:\WINDOWS\system32\kerberos.dll 2005-06-11 03:02:00 12,800 —-a-w C:\WINDOWS\system32\vncdrv.dll 2005-06-10 23:53:32 57,856 —-a-w C:\WINDOWS\system32\spoolsv.exe 2005-06-10 04:09:46 139,528 —-a-w C:\WINDOWS\system32\drivers\rdpwd.sys 2005-05-27 14:23:38 2,180,096 —-a-w C:\WINDOWS\system32\drivers\lvsvf2.sys 2005-05-27 02:04:27 41,472 —-a-w C:\WINDOWS\system32\hhsetup.dll 2005-05-27 02:04:27 155,136 —-a-w C:\WINDOWS\system32\itircl.dll 2005-05-27 02:04:27 137,216 —-a-w C:\WINDOWS\system32\itss.dll 2005-05-26 23:22:01 10,752 —-a-w C:\WINDOWS\hh.exe 2005-05-10 23:45:48 75,776 —-a-w C:\WINDOWS\system32\telnet.exe 2005-05-04 17:45:36 884,736 —-a-w C:\WINDOWS\system32\msimsg.dll 2005-05-04 17:45:36 78,848 —-a-w C:\WINDOWS\system32\msiexec.exe 2005-05-04 17:45:36 271,360 —-a-w C:\WINDOWS\system32\msihnd.dll 2005-05-04 17:45:36 15,360 —-a-w C:\WINDOWS\system32\msisip.dll 2005-04-26 15:18:24 45,056 —-a-w C:\WINDOWS\system32\tbtmon98Language.dll 2005-03-30 18:56:12 151,552 —-a-w C:\WINDOWS\system32\pxwma.dll 2005-03-28 11:41:42 73,777 —-a-w C:\WINDOWS\system32\nwnsp32.dll 2005-03-25 02:40:32 812,544 —-a-w C:\WINDOWS\system32\ws03res.dll 2005-03-25 02:40:30 99,840 —-a-w C:\WINDOWS\system32\dsuiwiz.dll 2005-03-25 02:40:30 963,072 —-a-w C:\WINDOWS\system32\dhcpsnap.dll 2005-03-25 02:40:30 93,184 —-a-w C:\WINDOWS\system32\dfscore.dll 2005-03-25 02:40:30 90,624 —-a-w C:\WINDOWS\system32\domadmin.dll 2005-03-25 02:40:30 88,576 —-a-w C:\WINDOWS\system32\winsevnt.dll 2005-03-25 02:40:30 88,576 —-a-w C:\WINDOWS\system32\licmgr.exe 2005-03-25 02:40:30 873,472 —-a-w C:\WINDOWS\system32\dnsmgr.dll 2005-03-25 02:40:30 87,040 —-a-w C:\WINDOWS\system32\tsuserex.dll 2005-03-25 02:40:30 858,624 —-a-w C:\WINDOWS\system32\rsadmin.dll 2005-03-25 02:40:30 85,504 —-a-w C:\WINDOWS\system32\certadm.dll 2005-03-25 02:40:30 777,728 —-a-w C:\WINDOWS\system32\adprop.dll 2005-03-25 02:40:30 67,584 —-a-w C:\WINDOWS\system32\certxds.dll 2005-03-25 02:40:30 651,776 —-a-w C:\WINDOWS\system32\winssnap.dll 2005-03-25 02:40:30 633,856 —-a-w C:\WINDOWS\system32\dsadmin.dll 2005-03-25 02:40:30 60,121 —-a-w C:\WINDOWS\system32\iisftp.vbs 2005-03-25 02:40:30 6,656 —-a-w C:\WINDOWS\system32\rsservps.dll 2005-03-25 02:40:30 598,016 —-a-w C:\WINDOWS\system32\certutil.exe 2005-03-25 02:40:30 59,904 —-a-w C:\WINDOWS\system32\ntfrsapi.dll 2005-03-25 02:40:30 55,808 —-a-w C:\WINDOWS\system32\ntdsbsrv.dll 2005-03-25 02:40:30 547,840 —-a-w C:\WINDOWS\system32\rsjob.dll 2005-03-25 02:40:30 52,093 —-a-w C:\WINDOWS\system32\iiscnfg.vbs 2005-03-25 02:40:30 50,900 —-a-w C:\WINDOWS\system32\iisweb.vbs 2005-03-25 02:40:30 464,384 —-a-w C:\WINDOWS\system32\certmmc.dll 2005-03-25 02:40:30 414,720 —-a-w C:\WINDOWS\system32\rscommon.dll 2005-03-25 02:40:30 39,424 —-a-w C:\WINDOWS\system32\dsrm.exe 2005-03-25 02:40:30 37,376 —-a-w C:\WINDOWS\system32\rsshell.dll 2005-03-25 02:40:30 363,520 —-a-w C:\WINDOWS\system32\dfsgui.dll 2005-03-25 02:40:30 361,984 —-a-w C:\WINDOWS\system32\nlbmgr.exe 2005-03-25 02:40:30 35,328 —-a-w C:\WINDOWS\system32\dsmove.exe 2005-03-25 02:40:30 35,074 —-a-w C:\WINDOWS\system32\iisback.vbs 2005-03-25 02:40:30 34,604 —-a-w C:\WINDOWS\system32\iisvdir.vbs 2005-03-25 02:40:30 34,518 —-a-w C:\WINDOWS\system32\iisext.vbs 2005-03-25 02:40:30 329,728 —-a-w C:\WINDOWS\system32\uddi.mmc.dll 2005-03-25 02:40:30 322,560 —-a-w C:\WINDOWS\system32\azroleui.dll 2005-03-25 02:40:30 32,887 —-a-w C:\WINDOWS\system32\iisftpdr.vbs 2005-03-25 02:40:30 315,904 —-a-w C:\WINDOWS\system32\tapisnap.dll 2005-03-25 02:40:30 283,648 —-a-w C:\WINDOWS\system32\lrwizdll.dll 2005-03-25 02:40:30 283,136 —-a-w C:\WINDOWS\system32\tsadmin.exe 2005-03-25 02:40:30 271,360 —-a-w C:\WINDOWS\system32\ntdsutil.exe 2005-03-25 02:40:30 27,648 —-a-w C:\WINDOWS\system32\rigpsnap.dll 2005-03-25 02:40:30 263,168 —-a-w C:\WINDOWS\system32\msclus.dll 2005-03-25 02:40:30 254,976 —-a-w C:\WINDOWS\system32\certtmpl.dll 2005-03-25 02:40:30 252,928 —-a-w C:\WINDOWS\system32\winsmon.dll 2005-03-25 02:40:30 25,600 —-a-w C:\WINDOWS\system32\rssubps.dll 2005-03-25 02:40:30 24,064 —-a-w C:\WINDOWS\system32\rsengps.dll 2005-03-25 02:40:30 232,448 —-a-w C:\WINDOWS\system32\azroles.dll 2005-03-25 02:40:30 228,352 —-a-w C:\WINDOWS\system32\dsquery.exe 2005-03-25 02:40:30 222,208 —-a-w C:\WINDOWS\system32\dsget.exe 2005-03-25 02:40:30 22,528 —-a-w C:\WINDOWS\system32\rsconn.dll 2005-03-25 02:40:30 187,904 —-a-w C:\WINDOWS\system32\schmmgmt.dll 2005-03-25 02:40:30 181,760 —-a-w C:\WINDOWS\system32\dsmod.exe 2005-03-25 02:40:30 180,224 —-a-w C:\WINDOWS\system32\cluster.exe 2005-03-25 02:40:30 161,280 —-a-w C:\WINDOWS\system32\mstsmmc.dll 2005-03-25 02:40:30 147,456 —-a-w C:\WINDOWS\system32\dsadd.exe 2005-03-25 02:40:30 14,336 —-a-w C:\WINDOWS\system32\nntpapi.dll 2005-03-25 02:40:30 14,336 —-a-w C:\WINDOWS\system32\dfscmd.exe 2005-03-25 02:40:30 13,877 —-a-w C:\WINDOWS\system32\iisapp.vbs 2005-03-25 02:40:30 13,824 —-a-w C:\WINDOWS\system32\winsrpc.dll 2005-03-25 02:40:30 123,904 —-a-w C:\WINDOWS\system32\certreq.exe 2005-03-25 02:40:30 118,784 —-a-w C:\WINDOWS\system32\certpdef.dll 2005-03-25 02:40:30 117,248 —-a-w C:\WINDOWS\system32\imadmui.dll 2005-03-25 02:40:30 114,688 —-a-w C:\WINDOWS\system32\mstsmhst.dll 2005-03-24 23:13:02 87,552 —-a-w C:\WINDOWS\system32\rtrfiltr.dll 2005-03-24 23:12:58 169,984 —-a-w C:\WINDOWS\system32\rasuser.dll 2005-03-24 23:07:22 1,040,384 —-a-w C:\WINDOWS\system32\mprsnap.dll 2005-03-17 21:39:56 1,146,320 —-a-w C:\WINDOWS\system32\FM20.DLL 2005-03-13 20:54:00 6,656 —-a-w C:\WINDOWS\system32\DLPT2.sys 2005-03-11 17:47:58 49,152 —-a-w C:\WINDOWS\system32\TosBtHSPAPI.dll 2005-03-05 00:31:24 95,511 —-a-r C:\WINDOWS\system32\Vxdif.dll 2005-03-02 18:09:29 56,832 —-a-w C:\WINDOWS\system32\authz.dll 2005-02-23 17:05:34 49,152 —-a-w C:\WINDOWS\setpwrcg.exe 2005-02-10 18:17:50 172,056 —-a-w C:\WINDOWS\system32\CSGina.dll 2005-02-10 18:16:00 297,547 —-a-w C:\WINDOWS\system32\drivers\CVPNDRVA.sys 2005-02-10 18:10:22 163,840 —-a-w C:\WINDOWS\system32\vpnapi.dll 2005-02-08 16:37:52 7,626 —-a-w C:\WINDOWS\system32\GPCIEnum.sys 2005-02-08 15:27:00 5,185 —-a-w C:\WINDOWS\system32\drivers\CVirtA.sys 2005-01-28 18:44:28 96,768 —-a-w C:\WINDOWS\system32\logagent.exe 2005-01-28 18:44:28 96,768 —-a-w C:\WINDOWS\system32\drmstor.dll 2005-01-28 18:44:28 940,544 —-a-w C:\WINDOWS\system32\wmspdmoe.dll 2005-01-28 18:44:28 895,736 —-a-w C:\WINDOWS\system32\wmvdmod.dll 2005-01-28 18:44:28 86,016 —-a-w C:\WINDOWS\system32\wmpshell.dll 2005-01-28 18:44:28 8,192 —-a-w C:\WINDOWS\system32\asferror.dll 2005-01-28 18:44:28 774,904 —-a-w C:\WINDOWS\system32\wmsdmod.dll 2005-01-28 18:44:28 716,288 —-a-w C:\WINDOWS\system32\wmadmoe.dll 2005-01-28 18:44:28 66,560 —-a-w C:\WINDOWS\system32\wpdmtpus.dll 2005-01-28 18:44:28 61,952 —-a-w C:\WINDOWS\system32\wpdconns.dll 2005-01-28 18:44:28 6,656 —-a-w C:\WINDOWS\system32\laprxy.dll 2005-01-28 18:44:28 502,272 —-a-w C:\WINDOWS\system32\drmv2clt.dll 2005-01-28 18:44:28 484,352 —-a-w C:\WINDOWS\system32\Audiodev.dll 2005-01-28 18:44:28 47,104 —-a-w C:\WINDOWS\system32\uwdf.exe 2005-01-28 18:44:28 413,944 —-a-w C:\WINDOWS\system32\wmspdmod.dll 2005-01-28 18:44:28 396,528 —-a-w C:\WINDOWS\system32\wmadmod.dll 2005-01-28 18:44:28 38,912 —-a-w C:\WINDOWS\system32\wpd_ci.dll 2005-01-28 18:44:28 38,912 —-a-w C:\WINDOWS\system32\wdfmgr.exe 2005-01-28 18:44:28 364,784 —-a-w C:\WINDOWS\system32\MSSCP.dll 2005-01-28 18:44:28 335,872 —-a-w C:\WINDOWS\system32\WMDRMdev.dll 2005-01-28 18:44:28 331,776 —-a-w C:\WINDOWS\system32\wpdmtpdr.dll 2005-01-28 18:44:28 331,264 —-a-w C:\WINDOWS\system32\wpdsp.dll 2005-01-28 18:44:28 33,792 —-a-w C:\WINDOWS\system32\WMDMPS.dll 2005-01-28 18:44:28 315,904 —-a-w C:\WINDOWS\system32\MSWMDM.dll 2005-01-28 18:44:28 3,371,008 —-a-w C:\WINDOWS\system32\wmploc.dll 2005-01-28 18:44:28 294,912 —-a-w C:\WINDOWS\system32\blackbox.dll 2005-01-28 18:44:28 290,816 —-a-w C:\WINDOWS\system32\WMDRMNet.dll 2005-01-28 18:44:28 282,624 —-a-w C:\WINDOWS\system32\wmpdxm.dll 2005-01-28 18:44:28 28,160 —-a-w C:\WINDOWS\system32\WMDMLOG.dll 2005-01-28 18:44:28 258,296 —-a-w C:\WINDOWS\system32\drmclien.dll 2005-01-28 18:44:28 25,088 —-a-w C:\WINDOWS\system32\MsPMSNSv.dll 2005-01-28 18:44:28 224,768 —-a-w C:\WINDOWS\system32\wmasf.dll 2005-01-28 18:44:28 221,184 —-a-w C:\WINDOWS\system32\qasf.dll 2005-01-28 18:44:28 20,480 —-a-w C:\WINDOWS\system32\wmpui.dll 2005-01-28 18:44:28 20,480 —-a-w C:\WINDOWS\system32\wmpcore.dll 2005-01-28 18:44:28 20,480 —-a-w C:\WINDOWS\system32\wmpcd.dll 2005-01-28 18:44:28 189,440 —-a-w C:\WINDOWS\system32\wmerror.dll 2005-01-28 18:44:28 18,944 —-a-w C:\WINDOWS\system32\drivers\wpdusb.sys 2005-01-28 18:44:28 175,104 —-a-w C:\WINDOWS\system32\wmpsrcwp.dll 2005-01-28 18:44:28 173,568 —-a-w C:\WINDOWS\system32\MsPMSP.dll 2005-01-28 18:44:28 164,864 —-a-w C:\WINDOWS\system32\cewmdm.dll 2005-01-28 18:44:28 150,016 —-a-w C:\WINDOWS\system32\wmidx.dll 2005-01-28 18:44:28 15,872 —-a-w C:\WINDOWS\system32\wdfapi.dll 2005-01-28 18:44:28 142,336 —-a-w C:\WINDOWS\system32\msnetobj.dll 2005-01-28 18:44:28 135,168 —-a-w C:\WINDOWS\system32\wmpasf.dll 2005-01-28 18:44:28 114,176 —-a-w C:\WINDOWS\system32\wpdmtp.dll 2005-01-28 18:44:28 10,752 —-a-w C:\WINDOWS\system32\wpdtrace.dll 2005-01-28 18:44:28 1,594,880 —-a-w C:\WINDOWS\system32\wmpencen.dll 2005-01-28 18:44:28 1,512,448 —-a-w C:\WINDOWS\system32\WMVADVE.DLL 2005-01-28 18:44:28 1,218,808 —-a-w C:\WINDOWS\system32\wmvadvd.dll 2005-01-28 18:44:28 1,119,744 —-a-w C:\WINDOWS\system32\wmsdmoe2.dll 2005-01-28 18:44:28 1,027,072 —-a-w C:\WINDOWS\system32\wmnetmgr.dll 2005-01-28 18:44:28 1,003,008 —-a-w C:\WINDOWS\system32\wmvdmoe2.dll 2005-01-26 07:03:00 20,576 —-a-w C:\WINDOWS\system32\drivers\pxhelp20.sys 2005-01-25 20:45:50 35,107 —-a-w C:\WINDOWS\system32\drivers\VDiskBus.sys 2005-01-06 18:42:42 18,612 —-a-w C:\WINDOWS\system32\drivers\tosrfnds.sys 2004-12-20 16:47:32 724,992 —-a-w C:\WINDOWS\system32\r_server.exe 2004-12-07 19:32:34 96,768 —-a-w C:\WINDOWS\system32\srvsvc.dll 2004-11-17 17:41:24 347,136 —-a-w C:\WINDOWS\system32\hypertrm.dll 2004-11-03 17:07:24 159,028 —-a-w C:\WINDOWS\system32\dneinobj.dll 2004-11-03 17:07:24 146,888 —-a-w C:\WINDOWS\system32\drivers\dne2000.sys 2004-10-08 16:59:12 326,656 —-a-w C:\WINDOWS\system32\drivers\Camdrl.sys 2004-10-08 16:52:40 106,496 —-a-w C:\WINDOWS\system32\lvcoinst.dll 2004-09-29 22:28:37 134,912 —-a-w C:\WINDOWS\system32\drivers\ipnat.sys 2004-09-16 06:00:00 77,824 —-a-w C:\WINDOWS\system32\UMLoader.dll 2004-08-12 22:45:54 137,728 ——w C:\WINDOWS\system32\drivers\Hdaudbus.sys 2004-08-12 22:45:52 61,952 ——w C:\WINDOWS\system32\Hdaudpropshortcut.exe 2004-08-12 22:45:52 24,064 ——w C:\WINDOWS\system32\Hdaudprop.dll 2004-08-12 22:45:52 113,664 ——w C:\WINDOWS\system32\drivers\Hdaudio.sys 2004-08-12 22:45:42 5,120 ——w C:\WINDOWS\system32\Hdaudpropres.dll 2004-08-11 22:15:24 ——– d—–w C:\Program Files\microsoft frontpage 2004-08-11 22:15:00 0 —ha-w C:\MSDOS.SYS 2004-08-11 22:15:00 0 —ha-w C:\IO.SYS 2004-08-11 22:15:00 0 —-a-w C:\CONFIG.SYS 2004-08-11 22:15:00 0 —-a-w C:\AUTOEXEC.BAT 2004-08-11 22:13:20 ——– d–h–w C:\Program Files\WindowsUpdate 2004-08-11 22:12:58 ——– d—–w C:\Program Files\Common Files\MSSoap 2004-08-11 22:12:54 ——– d—–w C:\Program Files\Movie Maker 2004-08-11 22:12:16 21,640 —-a-w C:\WINDOWS\system32\emptyregdb.dat 2004-08-11 22:11:50 ——– d—–w C:\Program Files\Online Services 2004-08-11 22:11:36 ——– d—–w C:\Program Files\MSN Gaming Zone 2004-08-11 22:11:30 ——– d—–w C:\Program Files\Windows NT 2004-08-11 22:07:26 ——– d—–w C:\Program Files\Common Files\ODBC 2004-08-11 22:07:24 ——– d—–w C:\Program Files\Common Files\SpeechEngines 2004-08-11 15:31:24 4,627 —-a-w C:\WINDOWS\system32\oembios.dat 2004-08-11 15:31:24 13,107,200 —-a-w C:\WINDOWS\system32\oembios.bin 2004-08-04 10:00:00 994,304 —-a-w C:\WINDOWS\system32\msgina.dll 2004-08-04 10:00:00 99,840 —-a-w C:\WINDOWS\system32\mprmsg.dll 2004-08-04 10:00:00 99,328 —-a-w C:\WINDOWS\system32\winscard.dll 2004-08-04 10:00:00 984,576 —-a-w C:\WINDOWS\system32\syssetup.dll 2004-08-04 10:00:00 983,552 —-a-w C:\WINDOWS\system32\setupapi.dll 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\verifier.exe 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\slbiop.dll 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\rtm.dll 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\cscript.exe 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\ahui.exe 2004-08-04 10:00:00 97,965 —-a-w C:\WINDOWS\system32\eventquery.vbs 2004-08-04 10:00:00 97,280 —-a-w C:\WINDOWS\system32\loadperf.dll 2004-08-04 10:00:00 96,768 —-a-w C:\WINDOWS\system32\psbase.dll 2004-08-04 10:00:00 96,768 —-a-w C:\WINDOWS\system32\dpcdll.dll 2004-08-04 10:00:00 96,256 —-a-w C:\WINDOWS\system32\drivers\scsiport.sys 2004-08-04 10:00:00 95,744 —-a-w C:\WINDOWS\system32\scardsvr.exe 2004-08-04 10:00:00 95,744 —-a-w C:\WINDOWS\system32\mqsec.dll 2004-08-04 10:00:00 94,784 —-a-w C:\WINDOWS\twain.dll 2004-08-04 10:00:00 94,282 —-a-w C:\WINDOWS\system32\msencode.dll 2004-08-04 10:00:00 94,208 ——w C:\WINDOWS\system32\odbcint.dll 2004-08-04 10:00:00 937,984 —-a-w C:\WINDOWS\system32\winbrand.dll 2004-08-04 10:00:00 93,696 —-a-w C:\WINDOWS\system32\tscfgwmi.dll 2004-08-04 10:00:00 92,672 —-a-w C:\WINDOWS\system32\wlnotify.dll 2004-08-04 10:00:00 92,672 —-a-w C:\WINDOWS\system32\dskquota.dll 2004-08-04 10:00:00 92,224 —-a-w C:\WINDOWS\system32\krnl386.exe 2004-08-04 10:00:00 92,168 —-a-w C:\WINDOWS\system32\rdpdd.dll 2004-08-04 10:00:00 92,032 —-a-w C:\WINDOWS\system32\drivers\ksecdd.sys 2004-08-04 10:00:00 91,776 —-a-w C:\WINDOWS\system32\drivers\ndiswan.sys 2004-08-04 10:00:00 91,648 —-a-w C:\WINDOWS\system32\xactsrv.dll 2004-08-04 10:00:00 91,136 —-a-w C:\WINDOWS\system32\ntprint.dll 2004-08-04 10:00:00 90,624 —-a-w C:\WINDOWS\system32\trkwks.dll 2004-08-04 10:00:00 90,624 —-a-w C:\WINDOWS\system32\mydocs.dll 2004-08-04 10:00:00 90,112 —-a-w C:\WINDOWS\system32\rsvpsp.dll 2004-08-04 10:00:00 90,112 —-a-w C:\WINDOWS\system32\mycomput.dll 2004-08-04 10:00:00 9,936 —-a-w C:\WINDOWS\system32\lzexpand.dll 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\sprestrt.exe 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\sfc.exe 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\rsvpperf.dll 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\reset.exe 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\label.exe 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\gpkrsrc.dll 2004-08-04 10:00:00 9,600 —-a-w C:\WINDOWS\system32\drivers\ndistapi.sys 2004-08-04 10:00:00 9,344 —-a-w C:\WINDOWS\system32\vga.dll 2004-08-04 10:00:00 9,344 —-a-w C:\WINDOWS\system32\framebuf.dll 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\wshatm.dll 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\winfax.dll 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\wifeman.dll 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\subst.exe 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\scrnsave.scr 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\proxycfg.exe 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\print.exe 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\lprmonui.dll 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\iissuba.dll 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\finger.exe 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\find.exe 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\diskcomp.com 2004-08-04 10:00:00 9,029 —-a-w C:\WINDOWS\system32\ansi.sys 2004-08-04 10:00:00 9,008 —-a-w C:\WINDOWS\system32\ver.dll 2004-08-04 10:00:00 89,600 —-a-w C:\WINDOWS\system32\smlogsvc.exe 2004-08-04 10:00:00 89,600 —-a-w C:\WINDOWS\system32\langwrbk.dll 2004-08-04 10:00:00 89,088 —-a-w C:\WINDOWS\system32\rasauto.dll 2004-08-04 10:00:00 89,088 —-a-w C:\WINDOWS\system32\mqlogmgr.dll 2004-08-04 10:00:00 882 —-a-w C:\WINDOWS\system32\share.exe 2004-08-04 10:00:00 882 —-a-w C:\WINDOWS\system32\fastopen.exe 2004-08-04 10:00:00 88,448 —-a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys 2004-08-04 10:00:00 875,008 —-a-w C:\WINDOWS\system32\netplwiz.dll 2004-08-04 10:00:00 87,552 —-a-w C:\WINDOWS\system32\fldrclnr.dll 2004-08-04 10:00:00 87,176 —-a-w C:\WINDOWS\system32\rdpwsx.dll 2004-08-04 10:00:00 87,040 —-a-w C:\WINDOWS\system32\mprapi.dll 2004-08-04 10:00:00 86,528 —-a-w C:\WINDOWS\system32\iassam.dll 2004-08-04 10:00:00 86,073 —-a-w C:\WINDOWS\system32\usrfaxa.dll 2004-08-04 10:00:00 86,016 —-a-w C:\WINDOWS\system32\netsh.exe 2004-08-04 10:00:00 86,016 —-a-w C:\WINDOWS\system32\msapsspc.dll 2004-08-04 10:00:00 858,624 —-a-w C:\WINDOWS\system32\tapi3.dll 2004-08-04 10:00:00 85,504 —-a-w C:\WINDOWS\system32\makecab.exe 2004-08-04 10:00:00 85,504 —-a-w C:\WINDOWS\system32\diantz.exe 2004-08-04 10:00:00 85,504 —-a-w C:\WINDOWS\system32\catsrvps.dll 2004-08-04 10:00:00 85,020 —-a-w C:\WINDOWS\system32\dgsetup.dll 2004-08-04 10:00:00 847,872 —-a-w C:\WINDOWS\system32\dbgeng.dll 2004-08-04 10:00:00 84,992 —-a-w C:\WINDOWS\system32\avifil32.dll 2004-08-04 10:00:00 84,480 —-a-w C:\WINDOWS\system32\mciavi32.dll 2004-08-04 10:00:00 84,480 —-a-w C:\WINDOWS\system32\cabview.dll 2004-08-04 10:00:00 831,519 —-a-w C:\WINDOWS\system32\mswdat10.dll 2004-08-04 10:00:00 83,968 —-a-w C:\WINDOWS\system32\ipxmontr.dll 2004-08-04 10:00:00 83,456 —-a-w C:\WINDOWS\system32\olepro32.dll 2004-08-04 10:00:00 83,456 —-a-w C:\WINDOWS\system32\dpvsetup.exe 2004-08-04 10:00:00 825,344 —-a-w C:\WINDOWS\system32\d3dim700.dll 2004-08-04 10:00:00 82,944 —-a-w C:\WINDOWS\system32\ws2_32.dll 2004-08-04 10:00:00 82,944 —-a-w C:\WINDOWS\system32\olecli.dll 2004-08-04 10:00:00 82,432 —-a-w C:\WINDOWS\system32\ufat.dll 2004-08-04 10:00:00 82,432 —-a-w C:\WINDOWS\system32\dmscript.dll 2004-08-04 10:00:00 82,432 —-a-w C:\WINDOWS\system32\dfrgfat.exe 2004-08-04 10:00:00 817 —-a-w C:\WINDOWS\system32\mscdexnt.exe 2004-08-04 10:00:00 815,104 —-a-w C:\WINDOWS\system32\mmc.exe 2004-08-04 10:00:00 81,920 —-a-w C:\WINDOWS\system32\isign32.dll 2004-08-04 10:00:00 81,920 —-a-w C:\WINDOWS\system32\ils.dll 2004-08-04 10:00:00 81,920 —-a-w C:\WINDOWS\system32\ieencode.dll 2004-08-04 10:00:00 81,408 —-a-w C:\WINDOWS\system32\wscsvc.dll 2004-08-04 10:00:00 81,408 —-a-w C:\WINDOWS\system32\fsusd.dll 2004-08-04 10:00:00 80,896 —-a-w C:\WINDOWS\system32\netui0.dll 2004-08-04 10:00:00 80,384 —-a-w C:\WINDOWS\system32\iccvid.dll 2004-08-04 10:00:00 80,384 —-a-w C:\WINDOWS\system32\faultrep.dll 2004-08-04 10:00:00 80,384 —-a-w C:\WINDOWS\system32\charmap.exe 2004-08-04 10:00:00 80,384 —-a-w C:\WINDOWS\system32\autodisc.dll 2004-08-04 10:00:00 80,128 —-a-w C:\WINDOWS\system32\drivers\parport.sys 2004-08-04 10:00:00 8,832 —-a-w C:\WINDOWS\system32\drivers\rasacd.sys 2004-08-04 10:00:00 8,704 —-a-w C:\WINDOWS\system32\fxsperf.dll 2004-08-04 10:00:00 8,704 —-a-w C:\WINDOWS\system32\eventvwr.exe 2004-08-04 10:00:00 8,704 —-a-w C:\WINDOWS\system32\dciman32.dll 2004-08-04 10:00:00 8,704 —-a-w C:\WINDOWS\system32\batt.dll 2004-08-04 10:00:00 8,424 —-a-w C:\WINDOWS\system32\exe2bin.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\winhlp32.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\tsbyuv.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\smbinst.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\qosname.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\psnppagn.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\ntlsapi.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mqperf.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mountvol.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mciole16.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mag_hook.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\lpr.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\kbdhept.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\igmpagnt.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\d3d8thk.dll 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\control.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\cidaemon.exe 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\bitsprx2.dll 2004-08-04 10:00:00 799,744 —-a-w C:\WINDOWS\system32\drivers\dmboot.sys 2004-08-04 10:00:00 792,064 —-a-w C:\WINDOWS\system32\comres.dll 2004-08-04 10:00:00 79,744 —-a-w C:\WINDOWS\system32\drivers\videoprt.sys 2004-08-04 10:00:00 78,848 —-a-w C:\WINDOWS\system32\tapiui.dll 2004-08-04 10:00:00 78,336 —-a-w C:\WINDOWS\system32\tlntsess.exe 2004-08-04 10:00:00 78,336 —-a-w C:\WINDOWS\system32\browsewm.dll 2004-08-04 10:00:00 77,891 —-a-w C:\WINDOWS\system32\usrmlnka.exe 2004-08-04 10:00:00 77,890 —-a-w C:\WINDOWS\system32\usrdpa.dll 2004-08-04 10:00:00 77,883 —-a-w C:\WINDOWS\system32\usrrtosa.dll 2004-08-04 10:00:00 77,824 —-a-w C:\WINDOWS\system32\shrpubw.exe 2004-08-04 10:00:00 77,824 —-a-w C:\WINDOWS\system32\eventtriggers.exe 2004-08-04 10:00:00 77,824 —-a-w C:\WINDOWS\system32\cliconfg.dll 2004-08-04 10:00:00 77,312 —-a-w C:\WINDOWS\system32\sdbinst.exe 2004-08-04 10:00:00 77,312 —-a-w C:\WINDOWS\system32\rtcshare.exe 2004-08-04 10:00:00 77,312 —-a-w C:\WINDOWS\system32\browser.dll 2004-08-04 10:00:00 764,928 —-a-w C:\WINDOWS\system32\winntbbu.dll 2004-08-04 10:00:00 76,800 —-a-w C:\WINDOWS\system32\nslookup.exe 2004-08-04 10:00:00 76,800 —-a-w C:\WINDOWS\system32\gcdef.dll 2004-08-04 10:00:00 755,200 —-a-w C:\WINDOWS\system32\ir50_32.dll 2004-08-04 10:00:00 75,776 —-a-w C:\WINDOWS\system32\wiascr.dll 2004-08-04 10:00:00 75,776 —-a-w C:\WINDOWS\system32\strmfilt.dll 2004-08-04 10:00:00 75,264 —-a-w C:\WINDOWS\system32\locator.exe 2004-08-04 10:00:00 75,264 —-a-w C:\WINDOWS\system32\inetpp.dll 2004-08-04 10:00:00 741 —-a-w C:\WINDOWS\system32\noise.dat 2004-08-04 10:00:00 74,752 —-a-w C:\WINDOWS\system32\spoolss.dll 2004-08-04 10:00:00 74,752 —-a-w C:\WINDOWS\system32\drivers\ipsec.sys 2004-08-04 10:00:00 74,752 —-a-w C:\WINDOWS\system32\cryptdlg.dll 2004-08-04 10:00:00 74,240 —-a-w C:\WINDOWS\system32\unimdmat.dll 2004-08-04 10:00:00 74,240 —-a-w C:\WINDOWS\system32\dhcpsapi.dll 2004-08-04 10:00:00 733,696 —-a-w C:\WINDOWS\system32\qedwipes.dll 2004-08-04 10:00:00 73,802 —-a-w C:\WINDOWS\system32\msrclr40.dll 2004-08-04 10:00:00 73,728 —-a-w C:\WINDOWS\system32\icwdial.dll 2004-08-04 10:00:00 73,728 —-a-w C:\WINDOWS\system32\fdeploy.dll 2004-08-04 10:00:00 73,728 —-a-w C:\WINDOWS\system32\csseqchk.dll 2004-08-04 10:00:00 73,472 —-a-w C:\WINDOWS\system32\drivers\sr.sys 2004-08-04 10:00:00 73,216 —-a-w C:\WINDOWS\system32\tlntsvr.exe 2004-08-04 10:00:00 73,216 —-a-w C:\WINDOWS\system32\avwav.dll 2004-08-04 10:00:00 723,456 —-a-w C:\WINDOWS\system32\userenv.dll 2004-08-04 10:00:00 72,960 —-a-w C:\WINDOWS\system32\drivers\mqac.sys 2004-08-04 10:00:00 72,704 —-a-w C:\WINDOWS\system32\msw3prt.dll 2004-08-04 10:00:00 72,704 —-a-w C:\WINDOWS\system32\magnify.exe 2004-08-04 10:00:00 72,192 —-a-w C:\WINDOWS\system32\tasklist.exe 2004-08-04 10:00:00 72,192 —-a-w C:\WINDOWS\system32\taskkill.exe 2004-08-04 10:00:00 72,192 —-a-w C:\WINDOWS\system32\sprio800.dll 2004-08-04 10:00:00 72,192 —-a-w C:\WINDOWS\system32\fxscom.dll 2004-08-04 10:00:00 713,728 —-a-w C:\WINDOWS\system32\opengl32.dll 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\ssdpsrv.dll 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\msacm32.dll 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\dsdmoprp.dll 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\blastcln.exe 2004-08-04 10:00:00 71,552 —-a-w C:\WINDOWS\system32\drivers\bridge.sys 2004-08-04 10:00:00 71,040 —-a-w C:\WINDOWS\system32\drivers\dxg.sys 2004-08-04 10:00:00 708,096 —-a-w C:\WINDOWS\system32\ntdll.dll 2004-08-04 10:00:00 707 —-a-w C:\WINDOWS\_default.pif 2004-08-04 10:00:00 704,512 —-a-w C:\WINDOWS\system32\ss3dfo.scr 2004-08-04 10:00:00 701,440 —-a-w C:\WINDOWS\system32\msxml2.dll 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\sprio600.dll 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\mmcbase.dll 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\ifsutil.dll 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\amstream.dll 2004-08-04 10:00:00 70,144 —-a-w C:\WINDOWS\system32\sigverif.exe 2004-08-04 10:00:00 7,936 —-a-w C:\WINDOWS\system32\drivers\fs_rec.sys 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\vcdex.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\ncxpnt.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\mll_mtf.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\mciole32.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\kbdsmsno.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\kbdsmsfi.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\kbdcan.dll 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\hostname.exe 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\drivers\mcd.sys 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\ckcnv.exe 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\chcp.com 2004-08-04 10:00:00 7,424 —-a-w C:\WINDOWS\system32\kd1394.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\wshnetbs.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\tlntsvrp.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\recover.exe 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\msr2cenu.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\mscat32.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdukx.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdno1.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdnec.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdfi1.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdcz.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\hccoin.dll 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\forcedos.exe 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\diskcopy.com 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\bitsprx3.dll 2004-08-04 10:00:00 7,052 —-a-w C:\WINDOWS\system32\nlsfunc.exe 2004-08-04 10:00:00 7,040 —-a-w C:\WINDOWS\system32\kdcom.dll 2004-08-04 10:00:00 69,886 —-a-w C:\WINDOWS\system32\edit.com 2004-08-04 10:00:00 69,700 —-a-w C:\WINDOWS\system32\usrshuta.exe 2004-08-04 10:00:00 69,699 —-a-w C:\WINDOWS\system32\usrcoina.dll 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\spnike.dll 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\scarddlg.dll 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\raschap.dll 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\odbcconf.exe 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\msr2c.dll 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\msconf.dll 2004-08-04 10:00:00 69,584 —-a-w C:\WINDOWS\system32\avicap.dll 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\olethk32.dll 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\notepad.exe 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\MSCTFP.dll 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\mprddm.dll 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\ipxpromn.dll 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\drivers\psched.sys 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\NOTEPAD.EXE 2004-08-04 10:00:00 68,768 —-a-w C:\WINDOWS\system32\mmsystem.dll 2004-08-04 10:00:00 68,608 —-a-w C:\WINDOWS\system32\digest.dll 2004-08-04 10:00:00 68,096 —-a-w C:\WINDOWS\system32\systeminfo.exe 2004-08-04 10:00:00 68,096 —-a-w C:\WINDOWS\system32\shgina.dll 2004-08-04 10:00:00 68,096 —-a-w C:\WINDOWS\system32\adsmsext.dll 2004-08-04 10:00:00 679,936 —-a-w C:\WINDOWS\system32\sstext3d.scr 2004-08-04 10:00:00 673,088 —-a-w C:\WINDOWS\system32\mlang.dat 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\sti.dll 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\srclient.dll 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\osuninst.dll 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\openfiles.exe 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\drivers\sdbus.sys 2004-08-04 10:00:00 67,072 —-a-w C:\WINDOWS\system32\rdshost.exe 2004-08-04 10:00:00 67,072 —-a-w C:\WINDOWS\system32\ntdsapi.dll 2004-08-04 10:00:00 660,992 —-a-w C:\WINDOWS\system32\mqqm.dll 2004-08-04 10:00:00 66,560 —-a-w C:\WINDOWS\system32\ipxsap.dll 2004-08-04 10:00:00 66,560 —-a-w C:\WINDOWS\system32\console.dll 2004-08-04 10:00:00 66,176 —-a-w C:\WINDOWS\system32\drivers\udfs.sys 2004-08-04 10:00:00 657,920 —-a-w C:\WINDOWS\system32\rasdlg.dll 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\wshext.dll 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\wextract.exe 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\shimeng.dll 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\odbccu32.dll 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\jgsh400.dll 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\icwphbk.dll 2004-08-04 10:00:00 65,536 ——w C:\WINDOWS\system32\odbccr32.dll 2004-08-04 10:00:00 65,024 —-a-w C:\WINDOWS\system32\msaudite.dll 2004-08-04 10:00:00 65,024 —-a-w C:\WINDOWS\system32\asycfilt.dll 2004-08-04 10:00:00 640,000 —-a-w C:\WINDOWS\system32\dbghelp.dll 2004-08-04 10:00:00 64,896 —-a-w C:\WINDOWS\system32\drivers\serial.sys 2004-08-04 10:00:00 64,512 —-a-w C:\WINDOWS\system32\acctres.dll 2004-08-04 10:00:00 64,000 —-a-w C:\WINDOWS\system32\samlib.dll 2004-08-04 10:00:00 64,000 —-a-w C:\WINDOWS\system32\cleanmgr.exe 2004-08-04 10:00:00 64,000 —-a-w C:\WINDOWS\system32\avicap32.dll 2004-08-04 10:00:00 63,744 —-a-w C:\WINDOWS\system32\drivers\mf.sys 2004-08-04 10:00:00 63,744 —-a-w C:\WINDOWS\system32\drivers\cdfs.sys 2004-08-04 10:00:00 63,488 —-a-w C:\WINDOWS\system32\cryptnet.dll 2004-08-04 10:00:00 63,488 —-a-w C:\WINDOWS\system32\cmstp.exe 2004-08-04 10:00:00 63,488 —-a-w C:\WINDOWS\system32\browselc.dll 2004-08-04 10:00:00 63,232 —-a-w C:\WINDOWS\system32\drivers\nwlnknb.sys 2004-08-04 10:00:00 622,080 —-a-w C:\WINDOWS\system32\netcfgx.dll 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\rsopprov.exe 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\pautoenr.dll 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\iesetup.dll 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\dsauth.dll 2004-08-04 10:00:00 62,464 —-a-w C:\WINDOWS\system32\rdpclip.exe 2004-08-04 10:00:00 62,464 —-a-w C:\WINDOWS\system32\iasnap.dll 2004-08-04 10:00:00 62,464 —-a-w C:\WINDOWS\system32\dpnmodem.dll 2004-08-04 10:00:00 619,008 —-a-w C:\WINDOWS\system32\dx7vb.dll 2004-08-04 10:00:00 616,960 —-a-w C:\WINDOWS\system32\advapi32.dll 2004-08-04 10:00:00 614,912 —-a-w C:\WINDOWS\system32\h323msp.dll 2004-08-04 10:00:00 614,429 —-a-w C:\WINDOWS\system32\mswstr10.dll 2004-08-04 10:00:00 610,304 —-a-w C:\WINDOWS\system32\sspipes.scr 2004-08-04 10:00:00 61,952 —-a-w C:\WINDOWS\system32\dpnwsock.dll 2004-08-04 10:00:00 61,824 —-a-w C:\WINDOWS\system32\drivers\nic1394.sys 2004-08-04 10:00:00 61,508 —-a-w C:\WINDOWS\system32\usrprbda.exe 2004-08-04 10:00:00 61,500 —-a-w C:\WINDOWS\system32\usrcntra.dll 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\tlntadmn.exe 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\rasman.dll 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\dmcompos.dll 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\admparse.dll 2004-08-04 10:00:00 61,440 ——w C:\WINDOWS\system32\msvcrt40.dll 2004-08-04 10:00:00 61,168 —-a-w C:\WINDOWS\system32\msacm.dll 2004-08-04 10:00:00 605,696 —-a-w C:\WINDOWS\system32\getuname.dll 2004-08-04 10:00:00 602,624 —-a-w C:\WINDOWS\system32\autoconv.exe 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\ocmanage.dll 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\mqgentr.dll 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\miglibnt.dll 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\dpnhupnp.dll 2004-08-04 10:00:00 60,800 —-a-w C:\WINDOWS\system32\drivers\arp1394.sys 2004-08-04 10:00:00 60,416 —-a-w C:\WINDOWS\system32\remotepg.dll 2004-08-04 10:00:00 60,416 —-a-w C:\WINDOWS\system32\msratelc.dll 2004-08-04 10:00:00 60,416 —-a-w C:\WINDOWS\system32\fwcfg.dll 2004-08-04 10:00:00 60,416 —-a-w C:\WINDOWS\system32\cryptsvc.dll 2004-08-04 10:00:00 6,784 —-a-w C:\WINDOWS\system32\drivers\parvdm.sys 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\wuauserv.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\sensapi.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\routetab.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\msswchx.exe 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\msidle.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdycl.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdsl1.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdsl.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdsg.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdpl.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdla.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdinmal.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdinben.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdhu.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdhela3.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdcz2.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdcz1.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdcr.dll 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\KBDAL.DLL 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\fxsres.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\svcpack.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\nwevent.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\msdtc.exe 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\lpq.exe 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdusx.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdusr.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdusl.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdtuq.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdtuf.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdsw.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdsp.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdsf.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdpo.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdno.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdne.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdmlt48.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdmlt47.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdmac.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdlv1.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdlv.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdinbe1.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdic.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdhela2.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdgr1.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdgr.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdgkl.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfr.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfo.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfi.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfc.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdest.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdes.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdda.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdca.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdbr.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdbene.dll 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdbe.dll 2004-08-04 10:00:00 597,504 —-a-w C:\WINDOWS\system32\crypt32.dll 2004-08-04 10:00:00 596,992 —-a-w C:\WINDOWS\system32\wsecedit.dll 2004-08-04 10:00:00 590,336 —-a-w C:\WINDOWS\system32\d3dramp.dll 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\regsvc.dll 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\mpr.dll 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\ipv6mon.dll 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\drivers\atmarpc.sys 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\devenum.dll 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\cabinet.dll 2004-08-04 10:00:00 59,392 —-a-w C:\WINDOWS\system32\logman.exe 2004-08-04 10:00:00 59,392 —-a-w C:\WINDOWS\system32\iassvcs.dll 2004-08-04 10:00:00 589,312 —-a-w C:\WINDOWS\system32\wiashext.dll 2004-08-04 10:00:00 588,800 —-a-w C:\WINDOWS\system32\autochk.exe 2004-08-04 10:00:00 586,240 —-a-w C:\WINDOWS\system32\mlang.dll 2004-08-04 10:00:00 581,120 —-a-w C:\WINDOWS\system32\rpcrt4.dll 2004-08-04 10:00:00 580,608 —-a-w C:\WINDOWS\system32\autofmt.exe 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\resutils.dll 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\rastapi.dll 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\msdtclog.dll 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\licwmi.dll 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\atl.dll 2004-08-04 10:00:00 58,368 —-a-w C:\WINDOWS\system32\packager.exe 2004-08-04 10:00:00 58,368 —-a-w C:\WINDOWS\system32\driverquery.exe 2004-08-04 10:00:00 58,112 —-a-w C:\WINDOWS\system32\drivers\vdmindvd.sys 2004-08-04 10:00:00 57,856 —-a-w C:\WINDOWS\system32\synceng.dll 2004-08-04 10:00:00 57,856 —-a-w C:\WINDOWS\system32\ntlanui.dll 2004-08-04 10:00:00 57,856 —-a-w C:\WINDOWS\system32\clusapi.dll 2004-08-04 10:00:00 57,344 —-a-w C:\WINDOWS\system32\msasn1.dll 2004-08-04 10:00:00 57,344 —-a-w C:\WINDOWS\system32\gpupdate.exe 2004-08-04 10:00:00 57,344 —-a-w C:\WINDOWS\system32\dpwsockx.dll 2004-08-04 10:00:00 566,784 —-a-w C:\WINDOWS\system32\gpedit.dll 2004-08-04 10:00:00 565,760 —-a-w C:\WINDOWS\system32\msvcp50.dll 2004-08-04 10:00:00 562,176 —-a-w C:\WINDOWS\system32\qedit.dll 2004-08-04 10:00:00 562,176 —-a-w C:\WINDOWS\system32\fxsst.dll 2004-08-04 10:00:00 560,640 —-a-w C:\WINDOWS\system32\printui.dll 2004-08-04 10:00:00 56,832 —-a-w C:\WINDOWS\system32\sol.exe 2004-08-04 10:00:00 56,832 —-a-w C:\WINDOWS\system32\rasphone.exe 2004-08-04 10:00:00 56,832 —-a-w C:\WINDOWS\system32\mshtmler.dll 2004-08-04 10:00:00 56,320 —-a-w C:\WINDOWS\system32\servdeps.dll 2004-08-04 10:00:00 56,320 —-a-w C:\WINDOWS\system32\fsutil.exe 2004-08-04 10:00:00 56,320 —-a-w C:\WINDOWS\system32\cipher.exe 2004-08-04 10:00:00 553,472 ——w C:\WINDOWS\system32\oleaut32.dll 2004-08-04 10:00:00 552,989 —-a-w C:\WINDOWS\system32\msrepl40.dll 2004-08-04 10:00:00 55,936 —-a-w C:\WINDOWS\system32\drivers\nwlnkspx.sys 2004-08-04 10:00:00 55,936 —-a-w C:\WINDOWS\system32\drivers\atmlane.sys 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\wmiscmgr.dll 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\secur32.dll 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\ipconfig.exe 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\eventlog.dll 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\sendmail.dll 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\getmac.exe 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\fxsevent.dll 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\freecell.exe 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\dvdplay.exe 2004-08-04 10:00:00 549,376 —-a-w C:\WINDOWS\system32\shdoclc.dll 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\system32\npptools.dll 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\system32\msvcirt.dll 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\system32\icmui.dll 2004-08-04 10:00:00 54,272 —-a-w C:\WINDOWS\system32\stclient.dll 2004-08-04 10:00:00 54,272 —-a-w C:\WINDOWS\system32\ixsso.dll 2004-08-04 10:00:00 54,272 —-a-w C:\WINDOWS\system32\dataclen.dll 2004-08-04 10:00:00 538,624 —-a-w C:\WINDOWS\system32\spider.exe 2004-08-04 10:00:00 53,840 —-a-w C:\WINDOWS\system32\dosx.exe 2004-08-04 10:00:00 53,760 —-a-w C:\WINDOWS\system32\winsta.dll 2004-08-04 10:00:00 53,760 —-a-w C:\WINDOWS\system32\narrator.exe 2004-08-04 10:00:00 53,760 —-a-w C:\WINDOWS\system32\cryptext.dll 2004-08-04 10:00:00 53,520 —-a-w C:\WINDOWS\system32\dpserial.dll 2004-08-04 10:00:00 53,305 —-a-w C:\WINDOWS\system32\usrlbva.dll 2004-08-04 10:00:00 53,279 —-a-w C:\WINDOWS\system32\msjter40.dll 2004-08-04 10:00:00 53,279 ——w C:\WINDOWS\system32\odbcji32.dll 2004-08-04 10:00:00 53,248 —-a-w C:\WINDOWS\system32\ipv6.exe 2004-08-04 10:00:00 52,736 —-a-w C:\WINDOWS\system32\basesrv.dll 2004-08-04 10:00:00 52,352 —-a-w C:\WINDOWS\system32\drivers\volsnap.sys 2004-08-04 10:00:00 52,224 —-a-w C:\WINDOWS\system32\tsappcmp.dll 2004-08-04 10:00:00 52,224 —-a-w C:\WINDOWS\system32\dmutil.dll 2004-08-04 10:00:00 517,632 —-a-w C:\WINDOWS\system32\mqsnap.dll 2004-08-04 10:00:00 514,560 —-a-w C:\WINDOWS\system32\logonui.exe 2004-08-04 10:00:00 512,512 —-a-w C:\WINDOWS\system32\cryptui.dll 2004-08-04 10:00:00 512,029 —-a-w C:\WINDOWS\system32\msexch40.dll 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\wzcsapi.dll 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\vdmredir.dll 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\msident.dll 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\migpwd.exe 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\drivers\tosdvd.sys 2004-08-04 10:00:00 51,456 —-a-w C:\WINDOWS\system32\vga256.dll 2004-08-04 10:00:00 51,328 —-a-w C:\WINDOWS\system32\drivers\rasl2tp.sys 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\wmerrenu.dll 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\syncapp.exe 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\dssec.dll 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\dfrgres.dll 2004-08-04 10:00:00 506,368 —-a-w C:\WINDOWS\system32\msxml.dll 2004-08-04 10:00:00 502,272 —-a-w C:\WINDOWS\system32\winlogon.exe 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\twain_32.dll 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\wstdecod.dll 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\smss.exe 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\mmcshext.dll 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\camocx.dll 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\btpanui.dll 2004-08-04 10:00:00 50,620 —-a-w C:\WINDOWS\system32\command.com 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\xmlprovi.dll 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\utilman.exe 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\reg.exe 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\proquota.exe 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\mdhcp.dll 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\loghours.dll 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\eventcreate.exe 2004-08-04 10:00:00 5,888 —-a-w C:\WINDOWS\system32\drivers\rootmdm.sys 2004-08-04 10:00:00 5,888 —-a-w C:\WINDOWS\system32\drivers\dmload.sys 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\write.exe 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\wmi.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\winver.exe 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\tapiperf.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\softpub.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\skdll.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\security.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\perfnw.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\mll_qic.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdus.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbduk.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdro.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdpl1.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdmon.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdmaori.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdlt1.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdlt.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdkyr.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdit142.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdit.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdir.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhu1.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhe319.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhe220.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhe.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdgae.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdazel.dll 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\cisvc.exe 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\winnls.dll 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\shell.dll 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\sfc.dll 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\lodctr.exe 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\kbddv.dll 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\dcomcnfg.exe 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\bootvrfy.exe 2004-08-04 10:00:00 49,680 —-a-w C:\WINDOWS\twunk_16.exe 2004-08-04 10:00:00 49,664 —-a-w C:\WINDOWS\system32\w32tm.exe 2004-08-04 10:00:00 49,664 —-a-w C:\WINDOWS\system32\regapi.dll 2004-08-04 10:00:00 49,664 —-a-w C:\WINDOWS\system32\drivers\classpnp.sys 2004-08-04 10:00:00 49,536 —-a-w C:\WINDOWS\system32\drivers\cdrom.sys 2004-08-04 10:00:00 49,211 —-a-w C:\WINDOWS\system32\usrvpa.dll 2004-08-04 10:00:00 49,211 —-a-w C:\WINDOWS\system32\usrsdpia.dll 2004-08-04 10:00:00 49,209 —-a-w C:\WINDOWS\system32\usrv80a.dll 2004-08-04 10:00:00 49,179 —-a-w C:\WINDOWS\system32\sqlwoa.dll 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\rsmui.exe 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\rsm.exe 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\powercfg.exe 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\mprdim.dll 2004-08-04 10:00:00 488,448 —-a-w C:\WINDOWS\system32\ntmsmgr.dll 2004-08-04 10:00:00 487 —-a-w C:\WINDOWS\system32\login.cmd 2004-08-04 10:00:00 48,640 —-a-w C:\WINDOWS\system32\mqupgrd.dll 2004-08-04 10:00:00 48,384 —-a-w C:\WINDOWS\system32\drivers\raspptp.sys 2004-08-04 10:00:00 48,128 —-a-w C:\WINDOWS\system32\msprivs.dll 2004-08-04 10:00:00 48,128 —-a-w C:\WINDOWS\system32\inetres.dll 2004-08-04 10:00:00 48,128 —-a-w C:\WINDOWS\system32\docprop2.dll 2004-08-04 10:00:00 471,552 —-a-w C:\WINDOWS\system32\mqutil.dll 2004-08-04 10:00:00 47,952 —-a-w C:\WINDOWS\system32\jobexec.dll 2004-08-04 10:00:00 47,872 —-a-w C:\WINDOWS\system32\user.exe 2004-08-04 10:00:00 47,616 —-a-w C:\WINDOWS\system32\iyuv_32.dll 2004-08-04 10:00:00 47,616 —-a-w C:\WINDOWS\system32\d3dxof.dll 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\ssmypics.scr 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\mqdscli.dll 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\mprui.dll 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\cnbjmon.dll 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\cmdl32.exe 2004-08-04 10:00:00 463,360 —-a-w C:\WINDOWS\system32\wiadefui.dll 2004-08-04 10:00:00 46,592 —-a-w C:\WINDOWS\system32\pmspl.dll 2004-08-04 10:00:00 46,258 —-a-w C:\WINDOWS\system32\mib.bin 2004-08-04 10:00:00 46,080 —-a-w C:\WINDOWS\system32\docprop.dll 2004-08-04 10:00:00 457,728 —-a-w C:\WINDOWS\system32\certmgr.dll 2004-08-04 10:00:00 452,096 —-a-w C:\WINDOWS\system32\fxsapi.dll 2004-08-04 10:00:00 450,560 —-a-w C:\WINDOWS\system32\infosoft.dll 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\tcpmonui.dll 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\tcpmon.dll 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\safrslv.dll 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\jgsd400.dll 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\extrac32.exe 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\drwtsn32.exe 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll 2004-08-04 10:00:00 45,116 —-a-w C:\WINDOWS\system32\usrvoica.dll 2004-08-04 10:00:00 45,083 —-a-w C:\WINDOWS\system32\dispex.dll 2004-08-04 10:00:00 442,368 —-a-w C:\WINDOWS\system32\sqlsrv32.dll 2004-08-04 10:00:00 44,544 —-a-w C:\WINDOWS\system32\tscupgrd.exe 2004-08-04 10:00:00 44,544 —-a-w C:\WINDOWS\system32\jgaw400.dll 2004-08-04 10:00:00 44,544 —-a-w C:\WINDOWS\system32\hticons.dll 2004-08-04 10:00:00 44,544 —-a-w C:\WINDOWS\system32\alg.exe 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\twext.dll 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\rtutils.dll 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\msxml3r.dll 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\ipsec6.exe 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\dimap.dll 2004-08-04 10:00:00 438,784 —-a-w C:\WINDOWS\system32\xpob2res.dll 2004-08-04 10:00:00 438,272 —-a-w C:\WINDOWS\system32\shimgvw.dll 2004-08-04 10:00:00 436,224 —-a-w C:\WINDOWS\system32\d3dim.dll 2004-08-04 10:00:00 435,712 —-a-w C:\WINDOWS\system32\shellstyle.dll 2004-08-04 10:00:00 435,200 —-a-w C:\WINDOWS\system32\ntmssvc.dll 2004-08-04 10:00:00 433,664 —-a-w C:\WINDOWS\system32\wiaacmgr.exe 2004-08-04 10:00:00 430,592 —-a-w C:\WINDOWS\system32\vssapi.dll 2004-08-04 10:00:00 43,520 —-a-w C:\WINDOWS\system32\safrcdlg.dll 2004-08-04 10:00:00 43,520 —-a-w C:\WINDOWS\system32\racpldlg.dll 2004-08-04 10:00:00 43,520 —-a-w C:\WINDOWS\system32\pstorec.dll 2004-08-04 10:00:00 43,520 —-a-w C:\WINDOWS\system32\ntlanman.dll 2004-08-04 10:00:00 423,936 —-a-w C:\WINDOWS\system32\licdll.dll 2004-08-04 10:00:00 421,919 —-a-w C:\WINDOWS\system32\msrd2x40.dll 2004-08-04 10:00:00 42,809 —-a-w C:\WINDOWS\system32\key01.sys 2004-08-04 10:00:00 42,768 —-a-w C:\WINDOWS\system32\dpwsock.dll 2004-08-04 10:00:00 42,537 —-a-w C:\WINDOWS\system32\keyboard.sys 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\wsnmp32.dll 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\shmgrate.exe 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\net.exe 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\ftp.exe 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\drivers\p3.sys 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\audiosrv.dll 2004-08-04 10:00:00 42,240 —-a-w C:\WINDOWS\system32\drivers\mountmgr.sys 2004-08-04 10:00:00 419,840 —-a-w C:\WINDOWS\system32\ntvdm.exe 2004-08-04 10:00:00 417,792 —-a-w C:\WINDOWS\system32\vbscript.dll 2004-08-04 10:00:00 415,744 —-a-w C:\WINDOWS\system32\samsrv.dll 2004-08-04 10:00:00 414,208 —-a-w C:\WINDOWS\system32\setupdll.dll 2004-08-04 10:00:00 413,696 —-a-w C:\WINDOWS\system32\msvcp60.dll 2004-08-04 10:00:00 41,984 —-a-w C:\WINDOWS\system32\msports.dll 2004-08-04 10:00:00 41,984 —-a-w C:\WINDOWS\system32\htui.dll 2004-08-04 10:00:00 41,856 —-a-w C:\WINDOWS\system32\drivers\imapi.sys 2004-08-04 10:00:00 41,472 —-a-w C:\WINDOWS\system32\iasads.dll 2004-08-04 10:00:00 41,472 —-a-w C:\WINDOWS\system32\drivers\raspppoe.sys 2004-08-04 10:00:00 41,019 —-a-w C:\WINDOWS\system32\usrsvpia.dll 2004-08-04 10:00:00 407,040 —-a-w C:\WINDOWS\system32\netlogon.dll 2004-08-04 10:00:00 406,528 —-a-w C:\WINDOWS\system32\usp10.dll 2004-08-04 10:00:00 400,384 —-a-w C:\WINDOWS\system32\fxsxp32.dll 2004-08-04 10:00:00 40,960 —-a-w C:\WINDOWS\system32\ntmsapi.dll 2004-08-04 10:00:00 40,448 —-a-w C:\WINDOWS\system32\webhits.dll 2004-08-04 10:00:00 40,448 —-a-w C:\WINDOWS\system32\osuninst.exe 2004-08-04 10:00:00 40,320 —-a-w C:\WINDOWS\system32\drivers\nmnt.sys 2004-08-04 10:00:00 4,768 —-a-w C:\WINDOWS\system32\himem.sys 2004-08-04 10:00:00 4,736 —-a-w C:\WINDOWS\system32\drivers\usbd.sys 2004-08-04 10:00:00 4,656 —-a-w C:\WINDOWS\system32\ds16gt.dll 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\vjoy.dll 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\regwiz.exe 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\mssip32.dll 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\msimg32.dll 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\mqsvc.exe 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\mchgrcoi.dll 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\dllhst3g.exe 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\bootok.exe 2004-08-04 10:00:00 4,569 —-a-w C:\WINDOWS\system32\secupd.dat 2004-08-04 10:00:00 4,352 —-a-w C:\WINDOWS\system32\drivers\wmilib.sys 2004-08-04 10:00:00 4,224 —-a-w C:\WINDOWS\system32\drivers\rdpcdd.sys 2004-08-04 10:00:00 4,224 —-a-w C:\WINDOWS\system32\drivers\mnmdd.sys 2004-08-04 10:00:00 4,224 —-a-w C:\WINDOWS\system32\drivers\beep.sys 2004-08-04 10:00:00 4,208 —-a-w C:\WINDOWS\system32\storage.dll 2004-08-04 10:00:00 4,126 —-a-w C:\WINDOWS\system32\msdxmlc.dll 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\unlodctr.exe 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\rdpcfgex.dll 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\nddeapir.exe 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\mtxex.dll 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\iprtprio.dll 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\dsprpres.dll 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\actmovie.exe 2004-08-04 10:00:00 399,872 —-a-w C:\WINDOWS\system32\lmrt.dll 2004-08-04 10:00:00 397,824 —-a-w C:\WINDOWS\system32\regwizc.dll 2004-08-04 10:00:00 397,312 —-a-w C:\WINDOWS\system32\fxstiff.dll 2004-08-04 10:00:00 394,240 —-a-w C:\WINDOWS\system32\diactfrm.dll 2004-08-04 10:00:00 393,216 —-a-w C:\WINDOWS\system32\ssflwbox.scr 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\rshx32.dll 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\perfctrs.dll 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\ipxrtmgr.dll 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\cmutil.dll 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\cmmon32.exe 2004-08-04 10:00:00 39,744 —-a-w C:\WINDOWS\system32\ole2.dll 2004-08-04 10:00:00 39,424 —-a-w C:\WINDOWS\system32\grpconv.exe 2004-08-04 10:00:00 39,424 —-a-w C:\WINDOWS\system32\esentutl.exe 2004-08-04 10:00:00 39,424 —-a-w C:\WINDOWS\system32\ddeml.dll 2004-08-04 10:00:00 39,274 —-a-w C:\WINDOWS\system32\mem.exe 2004-08-04 10:00:00 388,608 —-a-w C:\WINDOWS\system32\cmd.exe 2004-08-04 10:00:00 385,536 —-a-w C:\WINDOWS\system32\themeui.dll 2004-08-04 10:00:00 385,024 —-a-w C:\WINDOWS\system32\qdvd.dll 2004-08-04 10:00:00 384,512 —-a-w C:\WINDOWS\system32\mp4sdmod.dll 2004-08-04 10:00:00 384,000 —-a-w C:\WINDOWS\system32\ipsmsnap.dll 2004-08-04 10:00:00 382,976 —-a-w C:\WINDOWS\system32\fontext.dll 2004-08-04 10:00:00 382,464 —-a-w C:\WINDOWS\system32\qmgr.dll 2004-08-04 10:00:00 380,957 —-a-w C:\WINDOWS\system32\expsrv.dll 2004-08-04 10:00:00 38,912 —-a-w C:\WINDOWS\system32\sens.dll 2004-08-04 10:00:00 38,912 —-a-w C:\WINDOWS\system32\dfrgsnap.dll 2004-08-04 10:00:00 38,912 —-a-w C:\WINDOWS\system32\cfgbkend.dll 2004-08-04 10:00:00 38,016 —-a-w C:\WINDOWS\system32\drivers\ndproxy.sys 2004-08-04 10:00:00 378,368 —-a-w C:\WINDOWS\system32\wzcdlg.dll 2004-08-04 10:00:00 375,296 —-a-w C:\WINDOWS\system32\dpnet.dll 2004-08-04 10:00:00 370,176 —-a-w C:\WINDOWS\system32\dhcpmon.dll 2004-08-04 10:00:00 37,916 —-a-w C:\WINDOWS\system32\msxml2r.dll 2004-08-04 10:00:00 37,376 —-a-w C:\WINDOWS\system32\drivers\amdk7.sys 2004-08-04 10:00:00 367,616 —-a-w C:\WINDOWS\system32\dsound.dll 2004-08-04 10:00:00 363,008 —-a-w C:\WINDOWS\system32\smlogcfg.dll 2004-08-04 10:00:00 362,496 —-a-w C:\WINDOWS\system32\jet500.dll 2004-08-04 10:00:00 36,992 —-a-w C:\WINDOWS\system32\drivers\amdk6.sys 2004-08-04 10:00:00 36,921 —-a-w C:\WINDOWS\system32\imeshare.dll 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\syskey.exe 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\ntsdexts.dll 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\ntmsevt.dll 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\netstat.exe 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\mscpxl32.dLL 2004-08-04 10:00:00 36,480 —-a-w C:\WINDOWS\system32\drivers\crusoe.sys 2004-08-04 10:00:00 36,352 —-a-w C:\WINDOWS\system32\typeperf.exe 2004-08-04 10:00:00 36,352 —-a-w C:\WINDOWS\system32\ncobjapi.dll 2004-08-04 10:00:00 36,352 —-a-w C:\WINDOWS\system32\drivers\disk.sys 2004-08-04 10:00:00 36,224 —-a-w C:\WINDOWS\system32\drivers\hidclass.sys 2004-08-04 10:00:00 36,096 —-a-w C:\WINDOWS\system32\drivers\intelppm.sys 2004-08-04 10:00:00 359,936 —-a-w C:\WINDOWS\system32\wzcsvc.dll 2004-08-04 10:00:00 359,936 —-a-w C:\WINDOWS\system32\cards.dll 2004-08-04 10:00:00 358,976 —-a-w C:\WINDOWS\system32\msjetoledb40.dll 2004-08-04 10:00:00 358,400 —-a-w C:\WINDOWS\system32\termmgr.dll 2004-08-04 10:00:00 352,256 —-a-w C:\WINDOWS\system32\drivers\atmuni.sys 2004-08-04 10:00:00 351,232 —-a-w C:\WINDOWS\system32\winhttp.dll

Let me know how the PC is behaving.

So, how goes it?

I contacted sUBs about the Combofix log as it is listing files outside of it's normal parameters. Did you make any changes to the time format on your PC during the scan? Also, would you run a second scan, but this time leave the PC alone whilst it runs - this may help to identify why the log was so big. Thanks.

I do notice something that is trying to access the internet it's bonjour service, not sure what it is.

I see you have iTunes installed: http://developer.apple.com/softwarelicensi…bonjourwin.html
You'd be amazed what you can learn if you ask Google.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Run HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

O2 - BHO: (no name) - {08274350-6355-400D-A6AB-6886546B44BF} - (no file)
O2 - BHO: (no name) - {BEDDE2A0-7FEF-4315-8881-E4A0ACE84F39} - C:\WINDOWS\system32\geebb.dll (file missing)

O20 - Winlogon Notify: ssqonno - C:\WINDOWS\
O20 - Winlogon Notify: winzxr32 - winzxr32.dll (file missing)

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked

I want you to run your PC as normal for a few days and when you are happy that everything is fine, do the following:

Update your anti-virus program,
Disable System Restore,
Boot into Safe Mode,
Scan your computer for viruses.
When you get the all clear, reboot into Normal Mode.
Re-enable System Restore,
Create a Restore Point.
This will give a clean Restore Point should you need it in the future.
A tutorial for System Restore is available here.

The reason for waiting is that if removing the malware has caused a problem, which it occasionally does, you can put your PC back to how it was before the fix. This will re-install the malware, but an infected PC is better than an expensive paperweight!

Some bedtime reading: This is a very good tutorial about keeping your computer safe and secure on the internet.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Maybe from our Parent company in CAnada.

If this is a company PC, licenses for both the Zone Alarm firewall and AVG Anti-Spyware will need to be purchased. Neither product is free for business use.