What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Windows Security Alert

53 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Please help - can't do anything with my other computer: Hijack this file Logfile of HijackThis v1.99.1 Scan saved at 6:03:17 PM, on 9/20/2007 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Raxco\PerfectDisk\PDAgent.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\Explorer.exe C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE C:\Program Files\BellSouthWCC\McciTrayApp.exe C:\Program Files\BellSouth Internet Tools\blsloader.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\AT&T\Internet Security Wizard\ISW.exe C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\AIM6\aim6.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\RALINK\Common\RaUI.exe C:\Program Files\AIM6\aolsoftware.exe C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\AT&T\Internet Security Wizard\ISWComHandler.exe C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe C:\WINDOWS\System32\wuauclt.exe c:\program files\aim6\anotify.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\msiexec.exe C:\Program Files\Hijackthis\HijackThis.exe C:\WINDOWS\SoftwareDistribution\Download\Install\Q815021_WXP_SP2_x86_ENU.exe c:\f75a9f6cd0e212a698cdaf35766b3d6c\xpsp1hfm.exe c:\f75a9f6cd0e212a698cdaf35766b3d6c\sp1\update\update.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\System32\printer.exe O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h O4 - HKLM\..\Run: [RecoverFromReboot] C:\WINDOWS\Temp\RecoverFromReboot.exe O4 - HKLM\..\Run: [BellSouthWCC_McciTrayApp] C:\Program Files\BellSouthWCC\McciTrayApp.exe O4 - HKLM\..\Run: [blspcloader] "C:\Program Files\BellSouth Internet Tools\blsloader.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [{A1-13-30-07-ZN}] c:\windows\system32\kqdsrngm.exe CHD003 O4 - HKLM\..\Run: [SystemOptimizer] rundll32.exe "C:\WINDOWS\System32\snlydvkj.dll",forkonce O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN O4 - HKLM\..\Run: [AT&T Internet Security Suite] "C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe" O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe" O4 - HKLM\..\Run: [DoNotDelete] C:\WINDOWS\System32\explore.exe O4 - HKLM\..\Run: [avp] C:\WINDOWS\avp.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [WinAVX] C:\WINDOWS\System32\WinAvXX.exe O4 - HKCU\..\Run: [DoNotDelete] C:\WINDOWS\System32\explore.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM32\SHDOCVW.DLL O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: Win32 Classes - O16 - DPF: {50BD5CDA-4BA8-4048-8FAA-763F222E41D8} - ms-its:mhtml:file://c:\\nores.mht!http://adxrnet.net/code/chm/xpre.chm::/xpreload.ocx O20 - AppInit_DLLs: C:\WINDOWS\System32\hadjajr.ini O21 - SSODL: LRJlyr - {3B7A1308-91D0-B9A2-2CF9-AC9067530C56} - C:\WINDOWS\System32\yiwc.dll (file missing) O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: AT&T Internet Security Suite Service (RPSUpdaterR) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe O23 - Service: AT&T Internet Security Suite AT&T Firewall (RP_FWS) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Post #2
I ran combofix, then hijack this, sdfix, then hijack this again…I have gotten Control Panel back. Here are the problems when I reboot to windows:
No desktop icons
error message on startup is:
16 bit msdos subsystem, c:\windows\system32\kqdsrngm.exe, the ntvdm cpu has encountered an illegal instruction, CS:0543 IP:03ba OP:630740069, choose close to terminate the application.

here are the logs throughout the cycle



ComboFix 07-09-21.2 - "default" 2007-09-21 15:08:41.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.0.1252.1.1033.18.97 [GMT -4:00]
Script execution time was exceeded on script "C:\ComboFix\restore_pt.vbs".
Script execution was terminated.
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\check_LSA7.txt
C:\DOCUME~1\default\APPLIC~1.\n.ini
C:\DOCUME~1\default\APPLIC~1\n.ini
C:\DOCUME~1\default\DESKTOP\Find Spyware Remover.lnk
C:\DOCUME~1\default\DESKTOP\Free Online Dating.lnk
C:\DOCUME~1\default\DESKTOP\Go to Casino.lnk
C:\Program Files\network monitor
C:\Program Files\Ultimate Cleaner
C:\Program Files\web buying
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\Temp\fse
C:\Temp\fse\tmpZTF.log
C:\WINDOWS\Casino.ico
C:\WINDOWS\cookies.ini
C:\WINDOWS\Free Online Dating.ico
C:\WINDOWS\IA
C:\WINDOWS\Spyware Remover.ico
C:\WINDOWS\start.exe
C:\WINDOWS\system32_exception.nls
C:\WINDOWS\system32\A1
C:\WINDOWS\system32\ddccded.dll
C:\WINDOWS\system32\drivers\runtime2.sys
C:\WINDOWS\system32\f02WtR
C:\WINDOWS\system32\H2
C:\WINDOWS\system32\khfdcde.dll
C:\WINDOWS\system32\mp43.exe
C:\WINDOWS\system32\n.ini
C:\WINDOWS\SYSTEM32\opnop.dll
C:\WINDOWS\SYSTEM32\ponpo.bak1
C:\WINDOWS\SYSTEM32\ponpo.bak2
C:\WINDOWS\SYSTEM32\ponpo.ini
C:\WINDOWS\system32\windows.scr
C:\WINDOWS\system32\xxyvtst.dll
C:\WINDOWS\system32\yrucbto.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


——-\LEGACY_DOMAINSERVICE
——-\LEGACY_NETWORK_MONITOR
——-\LEGACY_RUNTIME
——-\LEGACY_RUNTIME2
——-\DomainService
——-\Network Monitor
——-\runtime


((((((((((((((((((((((((( Files Created from 2007-08-21 to 2007-09-21 )))))))))))))))))))))))))))))))
.

2007-09-21 15:06 51,200 –a—— C:\WINDOWS\NirCmd.exe
2007-09-21 14:55 7,680 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\secdrv.sys
2007-09-20 21:51 83,008 –a—— C:\WINDOWS\SYSTEM32\oaqcdxvn.dll
2007-09-20 21:30 3,080 –a—— C:\WINDOWS\SYSTEM32\tmp.reg
2007-09-20 21:25 53,248 –a—— C:\WINDOWS\SYSTEM32\Process.exe
2007-09-20 21:20 d–hs—- C:\FOUND.003
2007-09-20 18:09 49,424 –a—— C:\WINDOWS\SYSTEM32\clspack.exe
2007-09-20 17:59 218,624 –a—— C:\WINDOWS\SYSTEM32\srrstr.dll
2007-09-20 17:59 218,624 –a—— C:\WINDOWS\SYSTEM32\dllcache\srrstr.dll
2007-09-20 17:54 d——– C:\Program Files\MSXML 4.0
2007-09-20 17:50 26,112 –a—— C:\WINDOWS\SYSTEM32\xpsp1hfm.exe
2007-09-20 17:50 d–h—– C:\WINDOWS\$xpsp1hfm$
2007-09-19 20:31 51,200 –a—— C:\WINDOWS\SYSTEM32\dumphive.exe
2007-09-19 20:31 289,144 –a—— C:\WINDOWS\SYSTEM32\VCCLSID.exe
2007-09-19 20:31 288,417 –a—— C:\WINDOWS\SYSTEM32\SrchSTS.exe
2007-09-19 20:16 626,688 –a—— C:\WINDOWS\SYSTEM32\msvcr80.dll
2007-09-19 20:16 499,712 –a—— C:\WINDOWS\SYSTEM32\msvcp71.dll
2007-09-19 20:16 348,160 –a—— C:\WINDOWS\SYSTEM32\msvcr71.dll
2007-09-19 19:18 d–hs—- C:\FOUND.002
2007-09-18 21:20 d–hs—- C:\FOUND.001
2007-09-18 16:44 d——– C:\WINDOWS\SYSTEM32\bits
2007-09-18 16:40 79,176 –a—— C:\DOCUME~1\default\APPLIC~1\GDIPFONTCACHEV1.DAT
2007-09-17 19:11 48,384 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\rp_pkt32.sys
2007-09-17 19:10 d——– C:\Program Files\Common Files\Authentium
2007-09-17 19:09 d——– C:\Program Files\Raxco
2007-09-17 19:09 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Raxco
2007-09-17 19:08 d——– C:\Program Files\Common Files\Scanner
2007-09-17 19:08 d——– C:\Program Files\CA
2007-09-17 18:57 d——– C:\DOCUME~1\default\APPLIC~1\AT&T
2007-09-17 18:56 d——– C:\Program Files\AT&T
2007-09-17 18:53 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\AT&T
2007-09-17 18:51 d——– C:\DOCUME~1\default\APPLIC~1\InstallShield
2007-09-17 14:56 d–hs—- C:\FOUND.000
2007-09-16 19:45 d——– C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
2007-09-16 19:36 16,384 –a—— C:\WINDOWS\SYSTEM32\kqdsrngm.exe
2007-09-16 19:35 d——– C:\DOCUME~1\LOCALS~1\APPLIC~1\NetMon
2007-09-16 15:14 d——– C:\DOCUME~1\NETWOR~1\APPLIC~1\NetMon
2007-09-16 15:13 d——– C:\WINDOWS\SYSTEM32\GRB3
2007-09-16 15:13 d——– C:\WINDOWS\SYSTEM32\DLL2
2007-09-16 15:13 d——– C:\WINDOWS\SYSTEM32\chks2
2007-09-11 17:11 7,680 ——— C:\WINDOWS\SYSTEM32\dllcache\bitsprx2.dll
2007-09-11 17:11 7,680 ——— C:\WINDOWS\SYSTEM32\bitsprx2.dll
2007-09-11 17:11 7,168 ——— C:\WINDOWS\SYSTEM32\dllcache\bitsprx3.dll
2007-09-11 17:11 7,168 ——— C:\WINDOWS\SYSTEM32\bitsprx3.dll
2007-09-11 17:11 361,984 –a—— C:\WINDOWS\SYSTEM32\dllcache\qmgr.dll
2007-09-11 17:11 331,776 –a—— C:\WINDOWS\SYSTEM32\winhttp.dll
2007-09-11 17:11 17,408 –a—— C:\WINDOWS\SYSTEM32\qmgrprxy.dll
2007-09-11 17:11 17,408 –a—— C:\WINDOWS\SYSTEM32\dllcache\qmgrprxy.dll
2007-09-11 17:11 158,720 ——— C:\WINDOWS\SYSTEM32\xpob2res.dll
2007-09-11 17:07 549,720 –a—— C:\WINDOWS\SYSTEM32\wuapi.dll
2007-09-11 17:07 33,624 –a—— C:\WINDOWS\SYSTEM32\wups.dll
2007-09-11 17:07 325,976 –a—— C:\WINDOWS\SYSTEM32\wucltui.dll
2007-09-11 17:07 203,096 –a—— C:\WINDOWS\SYSTEM32\wuweb.dll
2007-09-11 17:07 186,136 –a—— C:\WINDOWS\SYSTEM32\wuaueng1.dll
2007-09-11 17:07 167,704 –a—— C:\WINDOWS\SYSTEM32\wuauclt1.exe
2007-09-07 17:52 36,697 –a—— C:\WINDOWS\SYSTEM32\OggDSuninst.exe
2007-08-28 21:47 57,344 –a—— C:\WINDOWS\SYSTEM32\Wnaspint.dll
2007-08-28 21:47 d——– C:\Program Files\VST
2007-08-28 21:47 d——– C:\Program Files\Acoustica Shared Effects
2007-08-28 21:47 d——– C:\DOCUME~1\default\APPLIC~1\Acoustica
2007-08-28 21:46 d——– C:\Program Files\Acoustica Mixcraft 3
2007-08-28 21:46 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Acoustica
2007-08-21 18:03 12,160 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\mouhid.sys
2007-08-21 18:03 12,160 –a—— C:\WINDOWS\SYSTEM32\dllcache\mouhid.sys
2007-08-21 15:46 d——– C:\DOCUME~1\default\APPLIC~1\MSN6
2007-08-21 15:46 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-08-08 21:05 ——— d——– C:\DOCUME~1\default\APPLIC~1\Viewpoint
2007-07-30 19:19 92504 –a—— C:\WINDOWS\SYSTEM32\dllcache\cdm.dll
2007-07-30 19:19 92504 –a—— C:\WINDOWS\SYSTEM32\cdm.dll
2007-07-30 19:19 53080 –a—— C:\WINDOWS\SYSTEM32\wuauclt.exe
2007-07-30 19:19 53080 –a—— C:\WINDOWS\SYSTEM32\dllcache\wuauclt.exe
2007-07-30 19:19 43352 –a—— C:\WINDOWS\SYSTEM32\wups2.dll
2007-07-30 19:19 1712984 –a—— C:\WINDOWS\SYSTEM32\wuaueng.dll
2007-07-30 19:19 1712984 –a—— C:\WINDOWS\SYSTEM32\dllcache\wuaueng.dll
2007-07-24 21:31 24576 –a—— C:\WINDOWS\SYSTEM32\msxml3a.dll
2007-07-24 21:31 ——— d——– C:\Program Files\BellSouth Internet Tools
2007-07-06 18:52 19760674 –a—— C:\BellSouthIW.reg
2000-06-29 12:18 271 —hs—- C:\Program Files\desktop.ini
2000-06-29 12:18 23357 —h—– C:\Program Files\folder.htt
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"@"="" []
"SystemTray"="SysTray.Exe" [2001-08-23 12:00 C:\WINDOWS\SYSTEM32\systray.exe]
"InstantAccess"="C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.exe" [2000-06-19 08:51]
"BellSouthWCC_McciTrayApp"="C:\Program Files\BellSouthWCC\McciTrayApp.exe" [2005-11-17 14:19]
"blspcloader"="C:\Program Files\BellSouth Internet Tools\blsloader.exe" [2007-07-24 21:31]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"{A1-13-30-07-ZN}"="c:\windows\system32\kqdsrngm.exe" [2007-09-16 19:36]
"ISW.exe"="C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" [2007-05-03 13:12]
"AT&T Internet Security Suite"="C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe" [2007-06-28 16:09]
"-FreedomNeedsReboot"="C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe" [2007-06-28 16:09]
"SearchIndexer"="C:\WINDOWS\System32\oaqcdxvn.dll" [2007-09-20 21:51]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 07:14]
"Aim6"="C:\Program Files\AIM6\aim6.exe" [2007-04-27 17:17]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-08 17:33]
"ctfmon.exe"="C:\WINDOWS\System32\ctfmon.exe" [2001-08-23 12:00]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MySpaceIM"=C:\Program Files\MySpace\IM\MySpaceIM.exe
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\Startup\
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-05-28 20:01:32]
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-05-28 20:01:32]
CompuServe 2000 Tray Icon.lnk - C:\CompuServe 2000\cstray.exe [2004-12-14 12:39:56]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04]
Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2007-07-06 17:09:37]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"LRJlyr"= {3B7A1308-91D0-B9A2-2CF9-AC9067530C56} - C:\WINDOWS\System32\yiwc.dll [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\WINDOWS\System32\hadjajr.ini

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"LoadPowerProfile"=Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
"SO5 Integrator Pass Two"=C:\WINDOWS\SOINTGR.EXE
"LXSUPMON"=C:\WINDOWS\SYSTEM32\lxsupmon.exe RUN
"Camera Detector"=C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
"OneTouch Monitor"=C:\Program Files\Visioneer OneTouch\OneTouchMon.exe
"RegisterDropHandler"=C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE

R2 VProt2k;BroadJump PPPoE Helper Protocol;C:\WINDOWS\System32\DRIVERS\VProt2k.SYS
S3 Radialpoint Security Services;AT&T Internet Security Suite;C:\WINDOWS\System32\dllhost.exe /Processid:{80098F68-1220-4F43-80A8-15C7395B8874}

*Newly Created Service* - ALG
*Newly Created Service* - IPNAT
.
Contents of the 'Scheduled Tasks' folder
"2007-09-21 19:23:14 C:\WINDOWS\Tasks\PCHealth Scheduler for Data Collection.job"
"2007-09-21 04:34:02 C:\WINDOWS\Tasks\Uninstall Expiration Reminder.job"
- C:\WINDOWS\System32\OOBE\oobebaln.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-21 15:30:42
Windows 5.1.2600 FAT NTAPI

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-21 15:33:34 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-09-21 15:33
.
— E O F —

Logfile of HijackThis v1.99.1
Scan saved at 4:20:15 PM, on 9/21/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE
C:\Program Files\BellSouthWCC\McciTrayApp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\AT&T\Internet Security Wizard\ISW.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\BellSouth Internet Tools\blsloader.exe
C:\Program Files\BellSouth Internet Tools\lvhpz.exe
C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O2 - BHO: BlspcHlpr Class - {15C9938F-CB96-496D-800A-B827F2E34EA1} - C:\Program Files\BellSouth Internet Tools\blspc.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [BellSouthWCC_McciTrayApp] C:\Program Files\BellSouthWCC\McciTrayApp.exe
O4 - HKLM\..\Run: [blspcloader] "C:\Program Files\BellSouth Internet Tools\blsloader.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [{A1-13-30-07-ZN}] c:\windows\system32\kqdsrngm.exe CHD003
O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN
O4 - HKLM\..\Run: [AT&T Internet Security Suite] "C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\System32\oaqcdxvn.dll",sitypnow
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\hadjajr.ini
O21 - SSODL: LRJlyr - {3B7A1308-91D0-B9A2-2CF9-AC9067530C56} - C:\WINDOWS\System32\yiwc.dll (file missing)
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: AT&T Internet Security Suite Service (RPSUpdaterR) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
O23 - Service: AT&T Internet Security Suite AT&T Firewall (RP_FWS) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe




SDFix: Version 1.106

Run by [removed] on Fri 09/21/2007 at 03:52 PM

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting…


Normal Mode:
Checking Files:

Trojan Files Found:

C:\wintemp.log - Deleted
C:\WINDOWS\system32\kr_done1 - Deleted



Removing Temp Files…

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

Remaining Services:
——————




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
—————

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Program Files\Common Files\Adobe\ESD\DLMCleanup.exe
C:\Program Files\America Online 9.0\waol.exe
C:\Program Files\America Online 9.0\aolphx.exe
C:\Program Files\America Online 9.0\aoltray.exe
C:\CompuServe 2000\csphx.exe
C:\CompuServe 2000\cstray.exe
C:\LOGO.SYS
C:\WINDOWS\SYSTEM32\config\SECURITY.tmp.LOG
C:\WINDOWS\SYSTEM32\config\SAM.tmp.LOG

Finished!


Logfile of HijackThis v1.99.1
Scan saved at 4:34:47 PM, on 9/21/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE
C:\Program Files\BellSouthWCC\McciTrayApp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\AT&T\Internet Security Wizard\ISW.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\BellSouth Internet Tools\blsloader.exe
C:\Program Files\BellSouth Internet Tools\lvhpz.exe
C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O2 - BHO: BlspcHlpr Class - {15C9938F-CB96-496D-800A-B827F2E34EA1} - C:\Program Files\BellSouth Internet Tools\blspc.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [BellSouthWCC_McciTrayApp] C:\Program Files\BellSouthWCC\McciTrayApp.exe
O4 - HKLM\..\Run: [blspcloader] "C:\Program Files\BellSouth Internet Tools\blsloader.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [{A1-13-30-07-ZN}] c:\windows\system32\kqdsrngm.exe CHD003
O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN
O4 - HKLM\..\Run: [AT&T Internet Security Suite] "C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\System32\oaqcdxvn.dll",sitypnow
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\hadjajr.ini
O21 - SSODL: LRJlyr - {3B7A1308-91D0-B9A2-2CF9-AC9067530C56} - C:\WINDOWS\System32\yiwc.dll (file missing)
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: AT&T Internet Security Suite Service (RPSUpdaterR) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
O23 - Service: AT&T Internet Security Suite AT&T Firewall (RP_FWS) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Post #3
Hi emach633 and welcome to the forums.

I see you've been looking at other fixes and tried some of them. I'll help you the rest of the way if you like, but you have to help us first.

You have absolutely no Service Packs applied on this computer. Meaning also you have no security updates.

The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here: http://www.microsoft.com/windowsxp/downloa…p1/default.mspx
Apply the update, reboot, and post a fresh Hijack This log.

Don't go to SP2 yet, SP2 has issues if there is malware still present. Just as far as 1a.
Post #4
Thank you for responding so quickly. I did not realize the XP SP1 update as I have just recently added this computer online for the kids to use.
I purposefully now have the computer offline and disabled ATT Internet Security (virus, firewall, and spyware) before the update and hijackthis scan. Here's the new log.

Logfile of HijackThis v1.99.1
Scan saved at 10:20:24 AM, on 9/22/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\msiexec.exe
C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE
C:\Program Files\BellSouthWCC\McciTrayApp.exe
C:\Program Files\BellSouth Internet Tools\blsloader.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\ntvdm.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\AT&T\Internet Security Wizard\ISW.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\AT&T\Internet Security Wizard\ISWComHandler.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: BlspcHlpr Class - {15C9938F-CB96-496D-800A-B827F2E34EA1} - C:\Program Files\BellSouth Internet Tools\blspc.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [BellSouthWCC_McciTrayApp] C:\Program Files\BellSouthWCC\McciTrayApp.exe
O4 - HKLM\..\Run: [blspcloader] "C:\Program Files\BellSouth Internet Tools\blsloader.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [{A1-13-30-07-ZN}] c:\windows\system32\kqdsrngm.exe CHD003
O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN
O4 - HKLM\..\Run: [AT&T Internet Security Suite] "C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\System32\oaqcdxvn.dll",sitypnow
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1190432300813
O21 - SSODL: LRJlyr - {3B7A1308-91D0-B9A2-2CF9-AC9067530C56} - C:\WINDOWS\System32\yiwc.dll (file missing)
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: AT&T Internet Security Suite Service (RPSUpdaterR) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
O23 - Service: AT&T Internet Security Suite AT&T Firewall (RP_FWS) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Post #5
STEP 1:

Run HijackThis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

O4 - HKLM\..\Run: [{A1-13-30-07-ZN}] c:\windows\system32\kqdsrngm.exe CHD003
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\System32\oaqcdxvn.dll",sitypnow
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O21 - SSODL: LRJlyr - {3B7A1308-91D0-B9A2-2CF9-AC9067530C56} - C:\WINDOWS\System32\yiwc.dll (file missing)

Then close all windows except this one and press Fix checked.


STEP 2:

1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

File::
C:\WINDOWS\SYSTEM32\oaqcdxvn.dll
C:\WINDOWS\SYSTEM32\kqdsrngm.exe
C:\WINDOWS\System32\yiwc.dll

Folder::
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\NetMon
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\NetMon
C:\WINDOWS\SYSTEM32\GRB3
C:\WINDOWS\SYSTEM32\DLL2
C:\WINDOWS\SYSTEM32\chks2



3. Save the above as CFScript.txt

4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

[external image: Posted Image]


5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
  • Combofix.txt

STEP 3:

Download the trial version of AVG Anti-Spyware from here and install it. When the program has been installed, and you click the Finish button, AVG Anti-Spyware will open.

If the program does not automatically update itself during installation, or you are unsure whether it has done so, please do the following:
  • Click the Update icon at the top and under Manual Update click the Start update button.
  • The program will either update or inform you that no update was available.
  • It is essential that you get the update - keep trying until successful. (Note: If you have problems getting the update, you can download an installer for the full database from here (save it on your desktop). Once you have downloaded the installer, make sure that AVG Anti-Spyware is closed and then double-click on avgas-signatures-full-current.exe to install the database).
Please set up the program as follows:
  • Click the Shield icon at the top and under Resident shield is… click active. This should now
    change to inactive.
  • Click the Update icon and untick the automatic update option.
  • Click on Scanner on the toolbar.
  • Click on the Settings tab.
  • Under How to act? - make sure that Quarantine is selected.
  • Under How to scan? - All checkboxes should be ticked.
  • Under Possibly unwanted software - All checkboxes should be ticked.
  • Under Reports - Select Do not automatically generate reports.
  • Under What to scan? - Select Scan every file.
Close all open windows.



Please download ATF Cleaner here by Atribune. This program is for XP and Windows 2000 only.
It does not require any installation and uses minimal system resources. It is set up to clean IE, FireFox and Opera, and detects the browsers you have and grays out the other(s).
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Recommend UNCHECKING COOKIES if you rely on system remembered passwords.
  • Click the Empty Selected button.

    If you use Firefox browser
  • Click Firefox at the top and choose: Select All EXCEPT FIREFOX SAVED PASSWORDS
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser
  • Click Opera at the top and choose: Select All EXCEPT COOKIES AND SAVED PASSWORDS
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your cookies and saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


We Now Need To Boot Into Safemode Now

Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine,
amount of memory, hard drives installed etc (BOOT SCREEEN).
At this point you should gently tap the F8 key repeatedly until you are presented with a Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.


Run AVG

  • Click on Scanner on the toolbar.
  • Click on Complete System Scan to start the scan process.
  • Let the program scan your computer.
  • When the scan has finished, follow the instructions below:
    • Make sure that Set all elements to: shows Quarantine
    • Important: Click on the Apply all Actions button This must done before saving the report
    • When the program has finished, it will display the message All actions have been applied.
    • Then click the Save Scan Report button.
    • Click the Save Report as button.
    • Save the report to your Desktop.
      [external image: Posted Image]
  • Right-click the AVG Tray Icon and select Exit.
  • Now copy the report back to this topic.

Restart into normal mode and post the AVG Log.


STEP 4:

Using Internet Explorer, click on Kaspersky Online Scanner * Click 'Accept' in the window that pops up.
* You will be prompted to install an ActiveX component from Kaspersky, Click on the information bar and select Install ActiveX Control if so. This may happen more than once. That is OK. You also may get a warning from your Windows Firewall. You can tell it to unblock.
* The program will launch and then start to download the latest definition files.
* Once the scanner is installed and the definitions downloaded, click 'Next'.
* Now click on 'Scan Settings'
* In the scan settings make sure that the following are selected:
o Scan using the following Anti-Virus database: 'Extended' (If available, otherwise 'Standard')
o Scan Options: 'Scan Archives' and 'Scan Mail Bases'
* Click 'OK'
* Now under 'Select a target to scan' select 'My Computer'
* The scan will take a while, so be patient and let it run. Once the scan is complete, it will display whether your system has been infected.
* Now click on the 'Save Report As…' button:
* Make sure it says Save as a text file - change it if not
* Save the file to your desktop.
Please post the Kaspersky report and a new HijackThis log.


So to sum up…I need the new Combofix log, AVG report, Kaspersky report, and a new HJT log. Also let me know how it's running.

NOTE:You may need to make multiple posts so the logs don't get cut off.
Post #6
Part 1 I'll have to make several post for Combofix

ComboFix 07-09-21.2 - "default" 2007-09-23 11:35:13.2 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.1.1252.1.1033.18.81 [GMT -4:00]
Script execution time was exceeded on script "C:\ComboFix\restore_pt.vbs".
Script execution was terminated.

FILE::
C:\WINDOWS\SYSTEM32\oaqcdxvn.dll
C:\WINDOWS\SYSTEM32\kqdsrngm.exe
C:\WINDOWS\System32\yiwc.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\NetMon
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\NetMon\domains.txt
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\NetMon\log.txt
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\NetMon
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\NetMon\domains.txt
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\NetMon\log.txt
C:\WINDOWS\SYSTEM32\chks2
C:\WINDOWS\SYSTEM32\chks2\MSI17bb.exe
C:\WINDOWS\SYSTEM32\DLL2
C:\WINDOWS\SYSTEM32\GRB3
C:\WINDOWS\SYSTEM32\GRB3\rwddr2SD.exe
C:\WINDOWS\SYSTEM32\kqdsrngm.exe
C:\WINDOWS\SYSTEM32\oaqcdxvn.dll

.
((((((((((((((((((((((((( Files Created from 2007-08-23 to 2007-09-23 )))))))))))))))))))))))))))))))
.

2007-09-22 09:36 115,200 –a—— C:\WINDOWS\SYSTEM32\dpcdll.dll
2007-09-22 09:30 545,792 –a—— C:\WINDOWS\SYSTEM32\wsecedit.dll
2007-09-22 09:30 231,936 –a—— C:\WINDOWS\SYSTEM32\tracerpt.exe
2007-09-21 15:51 d——– C:\WINDOWS\ERUNT
2007-09-21 15:31 d——– C:\WINDOWS\pss
2007-09-21 15:06 51,200 –a—— C:\WINDOWS\NirCmd.exe
2007-09-20 21:30 2,570 –a—— C:\WINDOWS\SYSTEM32\tmp.reg
2007-09-20 21:20 d–hs—- C:\FOUND.003
2007-09-20 18:23 316,928 –a—— C:\WINDOWS\SYSTEM32\zipfldr.dll
2007-09-20 18:17 68,608 –a—— C:\WINDOWS\SYSTEM32\locator.exe
2007-09-20 18:17 68,608 –a—— C:\WINDOWS\SYSTEM32\dllcache\locator.exe
2007-09-20 18:09 49,424 –a—— C:\WINDOWS\SYSTEM32\clspack.exe
2007-09-20 18:07 37,888 –a—— C:\WINDOWS\SYSTEM32\hhsetup.dll
2007-09-20 18:07 143,872 –a—— C:\WINDOWS\SYSTEM32\itircl.dll
2007-09-20 18:07 122,368 –a—— C:\WINDOWS\SYSTEM32\itss.dll
2007-09-20 18:07 10,752 –a—— C:\WINDOWS\hh.exe
2007-09-20 17:59 226,816 –a—— C:\WINDOWS\SYSTEM32\srrstr.dll
2007-09-20 17:54 d——– C:\Program Files\MSXML 4.0
2007-09-20 17:50 26,112 –a—— C:\WINDOWS\SYSTEM32\xpsp1hfm.exe
2007-09-20 17:50 125,440 –a—— C:\WINDOWS\SYSTEM32\shmedia.dll
2007-09-20 17:50 125,440 –a—— C:\WINDOWS\SYSTEM32\dllcache\shmedia.dll
2007-09-20 17:50 d–h—– C:\WINDOWS\$xpsp1hfm$
2007-09-19 20:16 626,688 –a—— C:\WINDOWS\SYSTEM32\msvcr80.dll
2007-09-19 20:16 499,712 –a—— C:\WINDOWS\SYSTEM32\msvcp71.dll
2007-09-19 20:16 348,160 –a—— C:\WINDOWS\SYSTEM32\msvcr71.dll
2007-09-19 19:18 d–hs—- C:\FOUND.002
2007-09-18 21:20 d–hs—- C:\FOUND.001
2007-09-18 16:44 d——– C:\WINDOWS\SYSTEM32\bits
2007-09-18 16:40 79,176 –a—— C:\DOCUME~1\default\APPLIC~1\GDIPFONTCACHEV1.DAT
2007-09-17 19:11 48,384 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\rp_pkt32.sys
2007-09-17 19:10 d——– C:\Program Files\Common Files\Authentium
2007-09-17 19:09 d——– C:\Program Files\Raxco
2007-09-17 19:09 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Raxco
2007-09-17 19:08 d——– C:\Program Files\Common Files\Scanner
2007-09-17 19:08 d——– C:\Program Files\CA
2007-09-17 18:57 d——– C:\DOCUME~1\default\APPLIC~1\AT&T
2007-09-17 18:56 d——– C:\Program Files\AT&T
2007-09-17 18:53 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\AT&T
2007-09-17 18:51 d——– C:\DOCUME~1\default\APPLIC~1\InstallShield
2007-09-17 14:56 d–hs—- C:\FOUND.000
2007-09-16 19:45 d——– C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
2007-09-11 17:11 7,680 ——— C:\WINDOWS\SYSTEM32\dllcache\bitsprx2.dll
2007-09-11 17:11 7,680 ——— C:\WINDOWS\SYSTEM32\bitsprx2.dll
2007-09-11 17:11 7,168 ——— C:\WINDOWS\SYSTEM32\dllcache\bitsprx3.dll
2007-09-11 17:11 7,168 ——— C:\WINDOWS\SYSTEM32\bitsprx3.dll
2007-09-11 17:11 361,984 –a—— C:\WINDOWS\SYSTEM32\dllcache\qmgr.dll
2007-09-11 17:11 331,776 –a—— C:\WINDOWS\SYSTEM32\winhttp.dll
2007-09-11 17:11 17,408 –a—— C:\WINDOWS\SYSTEM32\qmgrprxy.dll
2007-09-11 17:11 17,408 –a—— C:\WINDOWS\SYSTEM32\dllcache\qmgrprxy.dll
2007-09-11 17:11 158,720 ——— C:\WINDOWS\SYSTEM32\xpob2res.dll
2007-09-11 17:07 549,720 –a—— C:\WINDOWS\SYSTEM32\wuapi.dll
2007-09-11 17:07 33,624 –a—— C:\WINDOWS\SYSTEM32\wups.dll
2007-09-11 17:07 325,976 –a—— C:\WINDOWS\SYSTEM32\wucltui.dll
2007-09-11 17:07 203,096 –a—— C:\WINDOWS\SYSTEM32\wuweb.dll
2007-09-11 17:07 186,136 –a—— C:\WINDOWS\SYSTEM32\wuaueng1.dll
2007-09-11 17:07 167,704 –a—— C:\WINDOWS\SYSTEM32\wuauclt1.exe
2007-09-07 17:52 36,697 –a—— C:\WINDOWS\SYSTEM32\OggDSuninst.exe
2007-08-28 21:47 57,344 –a—— C:\WINDOWS\SYSTEM32\Wnaspint.dll
2007-08-28 21:47 d——– C:\Program Files\VST
2007-08-28 21:47 d——– C:\Program Files\Acoustica Shared Effects
2007-08-28 21:47 d——– C:\DOCUME~1\default\APPLIC~1\Acoustica
2007-08-28 21:46 d——– C:\Program Files\Acoustica Mixcraft 3
2007-08-28 21:46 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Acoustica

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-08-21 15:46 ——— d——– C:\DOCUME~1\default\APPLIC~1\MSN6
2007-08-21 15:46 ——— d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
2007-08-08 21:05 ——— d——– C:\DOCUME~1\default\APPLIC~1\Viewpoint
2007-07-30 19:19 92504 –a—— C:\WINDOWS\SYSTEM32\dllcache\cdm.dll
2007-07-30 19:19 92504 –a—— C:\WINDOWS\SYSTEM32\cdm.dll
2007-07-30 19:19 53080 –a—— C:\WINDOWS\SYSTEM32\wuauclt.exe
2007-07-30 19:19 53080 –a—— C:\WINDOWS\SYSTEM32\dllcache\wuauclt.exe
2007-07-30 19:19 43352 –a—— C:\WINDOWS\SYSTEM32\wups2.dll
2007-07-30 19:19 1712984 –a—— C:\WINDOWS\SYSTEM32\wuaueng.dll
2007-07-30 19:19 1712984 –a—— C:\WINDOWS\SYSTEM32\dllcache\wuaueng.dll
2007-07-30 19:18 207736 –a—— C:\WINDOWS\SYSTEM32\muweb.dll
2007-07-24 21:31 24576 –a—— C:\WINDOWS\SYSTEM32\msxml3a.dll
2007-07-24 21:31 ——— d——– C:\Program Files\BellSouth Internet Tools
2007-07-06 18:52 19760674 –a—— C:\BellSouthIW.reg
2000-06-29 12:18 271 —hs—- C:\Program Files\desktop.ini
2000-06-29 12:18 23357 —h—– C:\Program Files\folder.htt
.

((((((((((((((((((((((((((((( snapshot_2007-09-21_153222.25 )))))))))))))))))))))))))))))))))))))))))
.
—-a-w 1,004,032 2002-08-29 07:41:24 C:\WINDOWS\explorer.exe
—-a-w 266,752 2002-08-29 07:41:28 C:\WINDOWS\winhlp32.exe
—-a-w 134,144 2002-08-29 07:41:28 C:\WINDOWS\regedit.exe
——w 589,881 2003-01-13 18:57:58 C:\WINDOWS\SYSTEM32\jscript.dll
—-a-w 8,832 2002-08-29 07:40:44 C:\WINDOWS\SYSTEM32\framebuf.dll
—-a-w 212,480 2006-12-01 09:20:32 C:\WINDOWS\SYSTEM32\swxcacls.exe
—-a-w 565,760 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\autochk.exe
—-a-w 133,120 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sfc_os.dll
—-a-w 370,688 2006-11-29 21:21:30 C:\WINDOWS\SYSTEM32\swsc.exe
—-a-w 395,776 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\ntvdm.exe
—-a-w 165,376 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\w32time.dll
——w 14,640 2006-11-17 20:14:30 C:\WINDOWS\SYSTEM32\spmsg.dll
—-a-w 276,480 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\winsrv.dll
—-a-w 91,136 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\advpack.dll
—-a-w 516,608 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\winlogon.exe
—-a-w 99,328 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\win32spl.dll
—-a-w 1,813,632 2002-08-29 06:14:20 C:\WINDOWS\SYSTEM32\win32k.sys
—-a-w 380,445 2002-08-29 07:40:54 C:\WINDOWS\SYSTEM32\expsrv.dll
—-a-w 6,656 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\laprxy.dll
—-a-w 27,648 2002-08-29 05:08:24 C:\WINDOWS\SYSTEM32\pidgen.dll
—-a-w 22,016 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\userinit.exe
—-a-w 44,032 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\rdpclip.exe
—-a-w 113,152 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\idq.dll
—-a-w 239,616 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\adsnt.dll
—-a-w 442,398 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmadmoe.dll
—-a-w 8,192 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\autolfn.exe
—-a-w 323,072 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msvcrt.dll
—-a-w 504,320 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\logonui.exe
—-a-w 143,872 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msimtf.dll
—-a-w 598,016 2002-08-29 05:40:52 C:\WINDOWS\SYSTEM32\mstscax.dll
—-a-w 67,584 2002-08-29 07:41:02 C:\WINDOWS\SYSTEM32\msctfp.dll
—-a-w 253,952 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmpcd.dll
—-a-w 1,298,432 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmpcore.dll
—-a-w 938,496 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\syssetup.dll
—-a-w 229,888 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msieftp.dll
—-a-w 61,952 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\webclnt.dll
—-a-w 16,384 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\nddenb32.dll
—-a-w 39,424 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\net.exe
—-a-w 32,256 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mnmdd.dll
—-a-w 1,998,848 2002-08-29 07:39:24 C:\WINDOWS\SYSTEM32\wmploc.dll
—-a-w 204,288 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\ieaksie.dll
—-a-w 511,488 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\qedit.dll
—-a-w 786,432 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\dxdiag.exe
—-a-w 253,952 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmnetmgr.dll
—-a-w 53,248 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\packager.exe
—-a-w 56,320 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\remotepg.dll
—-a-w 253,440 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\ddraw.dll
—-a-w 263,168 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\devmgr.dll
—-a-w 76,288 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\dfrgfat.exe
—-a-w 24,576 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\logagent.exe
—-a-w 37,760 2007-09-23 14:40:06 C:\WINDOWS\SYSTEM32\perfc009.dat
—-a-w 305,318 2007-09-23 14:40:06 C:\WINDOWS\SYSTEM32\perfh009.dat
—-a-w 667,136 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\userenv.dll
—-a-w 986,112 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\danim.dll
—-a-w 219,648 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\logon.scr
—-a-w 22,528 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shfolder.dll
—-a-w 115,712 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\apphelp.dll
—-a-w 6,656 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\batt.dll
—-a-w 13,312 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\ctfmon.exe
—-a-w 9,216 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\dumprep.exe
—-a-w 59,392 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\6to4svc.dll
—-a-w 139,776 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\adsldpc.dll
—-a-w 62,464 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\adsmsext.dll
——w 187,904 2002-08-29 05:03:28 C:\WINDOWS\SYSTEM32\xpsp1res.dll
—-a-w 156,672 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\appmgmts.dll
—-a-w 5,120 2002-08-29 07:40:06 C:\WINDOWS\SYSTEM32\asferror.dll
—-a-w 14,366 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\asfsipc.dll
—-a-w 38,912 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\audiosrv.dll
—-a-w 1,021,952 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\browseui.dll
—-a-w 186,880 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\certcli.dll
—-a-w 124,928 2002-08-29 02:27:32 C:\WINDOWS\SYSTEM32\dssenh.dll
—-a-w 32,768 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cfgbkend.dll
—-a-w 54,272 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\clusapi.dll
—-a-w 324,608 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cmdial32.dll
—-a-w 41,472 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\cmdl32.exe
—-a-w 98,816 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\clipbrd.exe
—-a-w 158,720 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\credui.dll
—-a-w 1,180,672 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\d3d8.dll
—-a-w 489,984 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dbghelp.dll
—-a-w 20,480 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dbmsadsn.dll
—-a-w 24,576 2002-08-29 04:36:06 C:\WINDOWS\SYSTEM32\dbmsvinn.dll
—-a-w 61,440 2002-08-29 07:40:00 C:\WINDOWS\SYSTEM32\dbnetlib.dll
—-a-w 28,672 2002-08-29 04:34:36 C:\WINDOWS\SYSTEM32\dbnmpntw.dll
—-a-w 24,576 2002-08-29 04:36:06 C:\WINDOWS\SYSTEM32\dbmsrpcn.dll
—-a-w 70,656 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\defrag.exe
—-a-w 113,152 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dfrgui.dll
—-a-w 99,328 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\dfrgntfs.exe
—-a-w 35,328 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dfrgsnap.dll
—-a-w 25,600 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dfsshlex.dll
—-a-w 103,424 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dgnet.dll
—-a-w 55,296 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\digest.dll
—-a-w 151,552 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dinput.dll
—-a-w 168,960 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dinput8.dll
—-a-w 26,112 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmband.dll
—-a-w 57,344 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmcompos.dll
—-a-w 172,544 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmime.dll
—-a-w 31,744 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmloader.dll
—-a-w 77,312 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmscript.dll
—-a-w 110,080 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmstyle.dll
—-a-w 139,264 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dnsapi.dll
—-a-w 45,568 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\docprop2.dll
—-a-w 156,672 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dpnet.dll
—-a-w 29,696 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dpnhpast.dll
—-a-w 56,320 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dpnhupnp.dll
—-a-w 206,336 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dpvoice.dll
—-a-w 58,368 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\dpvsetup.exe
—-a-w 49,664 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dpwsockx.dll
—-a-w 266,240 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\drmclien.dll
—-a-w 76,830 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\drmstor.dll
—-a-w 180,224 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\dwwin.exe
—-a-w 602,112 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\drmv2clt.dll
—-a-w 16,384 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\ds32gt.dll
—-a-w 135,680 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dsprop.dll
—-a-w 498,205 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\dxmasf.dll
—-a-w 802,304 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\dxmrtp.dll
—-a-w 337,920 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\dxtmsft.dll
—-a-w 263,680 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\duser.dll
—-a-w 194,560 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\dxtrans.dll
—-a-w 19,456 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\ersvc.dll
—-a-w 58,880 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\pautoenr.dll
—-a-w 49,152 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\eventlog.dll
—-a-w 277,504 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\appmgr.dll
—-a-w 66,560 2002-08-29 07:40:54 C:\WINDOWS\SYSTEM32\faultrep.dll
—-a-w 82,432 2002-08-29 07:40:54 C:\WINDOWS\SYSTEM32\fldrclnr.dll
—-a-w 19,456 2002-08-29 07:41:24 C:\WINDOWS\SYSTEM32\fontview.exe
—-a-w 40,448 2002-08-29 07:41:24 C:\WINDOWS\SYSTEM32\ftp.exe
—-a-w 67,584 2002-08-29 07:40:54 C:\WINDOWS\SYSTEM32\fdeploy.dll
—-a-w 113,152 2002-08-29 07:41:24 C:\WINDOWS\SYSTEM32\gpresult.exe
—-a-w 560,128 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\user32.dll
—-a-w 134,144 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\ipv6mon.dll
—-a-w 857,600 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\netplwiz.dll
—-a-w 9,216 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\icaapi.dll
—-a-w 236,032 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\icm32.dll
—-a-w 28,672 2002-08-29 07:41:24 C:\WINDOWS\SYSTEM32\ie4uinit.exe
—-a-w 126,976 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\ieakeng.dll
—-a-w 294,912 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\iedkcs32.dll
—-a-w 231,424 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\iepeers.dll
—-a-w 73,728 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\ils.dll
—-a-w 123,904 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\imapi.exe
—-a-w 36,922 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\imeshare.dll
—-a-w 587,776 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\inetcomm.dll
—-a-w 114,176 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\input.dll
—-a-w 69,632 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\inseng.dll
—-a-w 306,176 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\netapi32.dll
—-a-w 594,944 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\catsrvut.dll
—-a-w 155,648 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\ipsecsvc.dll
—-a-w 60,928 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\ipv6.exe
—-a-w 91,648 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\iuctl.dll
—-a-w 49,664 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\ixsso.dll
—-a-w 302,080 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\untfs.dll
—-a-w 272,896 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\kerberos.dll
—-a-w 42,537 2002-08-29 01:23:06 C:\WINDOWS\SYSTEM32\keyboard.sys
—-a-w 367,616 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\licdll.dll
—-a-w 57,856 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\licwmi.dll
—-a-w 381,440 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\lmrt.dll
—-a-w 172,664 2002-07-16 22:55:02 C:\WINDOWS\SYSTEM32\xenroll.dll
—-a-w 10,240 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\localui.dll
—-a-w 163,840 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mindex.dll
—-a-w 196,096 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mobsync.dll
—-a-w 233,472 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mpg4dmod.dll
—-a-w 210,944 2002-08-29 07:39:42 C:\WINDOWS\SYSTEM32\moricons.dll
—-a-w 183,296 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\gptext.dll
—-a-w 130,048 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqad.dll
—-a-w 14,848 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqise.dll
—-a-w 613,888 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqqm.dll
—-a-w 164,864 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqrt.dll
—-a-w 89,088 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqsec.dll
—-a-w 478,720 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqsnap.dll
—-a-w 164,352 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqtrig.dll
—-a-w 116,736 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\mplay32.exe
—-a-w 65,536 2002-08-29 07:41:02 C:\WINDOWS\SYSTEM32\msconf.dll
—-a-w 68,096 2002-08-29 07:41:02 C:\WINDOWS\SYSTEM32\mscms.dll
—-a-w 126,976 2002-08-29 07:41:02 C:\WINDOWS\SYSTEM32\msdart.dll
—-a-w 2,833,920 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\mshtml.dll
—-a-w 440,320 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\mshtmled.dll
—-a-w 2,086,400 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msi.dll
—-a-w 64,512 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\msiexec.exe
—-a-w 368,710 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msisam11.dll
—-a-w 1,503,262 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msjet40.dll
—-a-w 4,608 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msimg32.dll
—-a-w 305,664 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msihnd.dll
—-a-w 56,320 2002-08-29 07:39:46 C:\WINDOWS\SYSTEM32\mshtmler.dll
—-a-w 213,023 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msltus40.dll
—-a-w 174,592 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msnetobj.dll
—-a-w 81,408 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msoert2.dll
—-a-w 348,191 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\mspbde40.dll
—-a-w 175,104 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\mspmsp.dll
—-a-w 552,991 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msrepl40.dll
—-a-w 10,240 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msrle32.dll
—-a-w 245,760 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msscp.dll
—-a-w 253,983 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\mstext40.dll
—-a-w 45,568 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\smss.exe
—-a-w 932,864 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\setupapi.dll
—-a-w 113,664 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msvfw32.dll
—-a-w 1,220,608 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msvidctl.dll
—-a-w 344,095 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msxbde40.dll
—-a-w 129,024 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\sessmgr.exe
—-a-w 42,496 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ncobjapi.dll
—-a-w 584,192 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\netcfgx.dll
—-a-w 154,112 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\netman.dll
—-a-w 238,080 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\newdev.dll
—-a-w 24,576 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\nmmkcert.dll
—-a-w 49,152 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\npptools.dll
—-a-w 112,128 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntmarta.dll
—-a-w 38,400 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntmsapi.dll
—-a-w 165,888 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntmsdba.dll
—-a-w 80,896 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntprint.dll
—-a-w 133,632 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\nwprovau.dll
—-a-w 469,504 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mqutil.dll
—-a-w 200,704 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbc32.dll
—-a-w 16,384 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbc32gt.dll
—-a-w 32,768 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\odbcad32.exe
—-a-w 122,880 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbcconf.dll
—-a-w 24,576 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbcbcp.dll
—-a-w 53,248 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\odbcconf.exe
—-a-w 94,208 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbccp32.dll
—-a-w 61,440 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbccr32.dll
—-a-w 61,440 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbccu32.dll
—-a-w 12,288 2002-08-29 07:39:36 C:\WINDOWS\SYSTEM32\odbcp32r.dll
—-a-w 147,456 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\odbctrac.dll
—-a-w 98,304 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\oleprn.dll
—-a-w 686,080 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\opengl32.dll
—-a-w 212,480 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\osk.exe
—-a-w 254,976 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\pdh.dll
——w 4,573 2002-04-10 22:18:00 C:\WINDOWS\SYSTEM32\secupd.dat
—-a-w 31,744 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\pid.dll
—-a-w 16,384 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\ping.exe
—-a-w 82,944 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\psbase.dll
—-a-w 184,832 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\qcap.dll
—-a-w 357,376 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\qdvd.dll
—-a-w 1,142,784 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\quartz.dll
—-a-w 193,536 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rasppp.dll
—-a-w 91,136 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rastls.dll
—-a-w 12,288 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\rdsaddin.exe
—-a-w 3,338 2002-08-29 01:24:16 C:\WINDOWS\SYSTEM32\redir.exe
—-a-w 36,352 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rshx32.dll
—-a-w 57,344 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\nwwks.dll
—-a-w 19,456 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\savedump.exe
——w 593,408 2004-03-10 17:59:50 C:\WINDOWS\SYSTEM32\xpsp2res.dll
—-a-w 74,240 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\rtcshare.exe
—-a-w 54,784 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\samlib.dll
—-a-w 12,800 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\runonce.exe
—-a-w 169,984 2002-08-29 02:27:34 C:\WINDOWS\SYSTEM32\sccbase.dll
—-a-w 159,232 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\schedsvc.dll
—-a-w 103,936 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\rsnotify.exe
—-a-w 8,192 2002-08-29 07:41:30 C:\WINDOWS\SYSTEM32\scrnsave.scr
—-a-w 6,144 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sensapi.dll
—-a-w 62,976 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shgina.dll
—-a-w 60,416 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shimeng.dll
—-a-w 401,920 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shlwapi.dll
—-a-w 116,224 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shsvcs.dll
—-a-w 11,776 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sigtab.dll
—-a-w 66,048 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\sigverif.exe
—-a-w 24,064 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\skeys.exe
—-a-w 22,528 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\slayerxp.dll
—-a-w 334,848 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\smlogcfg.dll
—-a-w 82,944 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\smlogsvc.exe
—-a-w 66,560 2002-08-29 07:41:14 C:\WINDOWS\SYSTEM32\spoolss.dll
—-a-w 158,720 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\srsvc.dll
—-a-w 667,648 2002-08-29 07:41:30 C:\WINDOWS\SYSTEM32\ss3dfo.scr
—-a-w 27,136 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\ssdpapi.dll
—-a-w 43,008 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\ssdpsrv.dll
—-a-w 364,544 2002-08-29 07:41:30 C:\WINDOWS\SYSTEM32\ssflwbox.scr
—-a-w 19,456 2002-08-29 07:41:30 C:\WINDOWS\SYSTEM32\ssmarque.scr
—-a-w 17,408 2002-08-29 07:41:30 C:\WINDOWS\SYSTEM32\ssmyst.scr
—-a-w 569,344 2002-08-29 07:41:32 C:\WINDOWS\SYSTEM32\sspipes.scr
—-a-w 13,312 2002-08-29 07:41:32 C:\WINDOWS\SYSTEM32\ssstars.scr
—-a-w 638,976 2002-08-29 07:41:32 C:\WINDOWS\SYSTEM32\sstext3d.scr
—-a-w 61,952 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\sti.dll
—-a-w 71,168 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\storprop.dll
—-a-w 54,272 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rastapi.dll
—-a-w 674,816 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\sxs.dll
—-a-w 233,984 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\tapisrv.dll
—-a-w 128,512 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\taskmgr.exe
—-a-w 67,584 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\tlntsvr.exe
—-a-w 57,856 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\tlntadmn.exe
—-a-w 113,664 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\schtasks.exe
—-a-w 73,728 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\tlntsess.exe
—-a-w 7,168 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\tlntsvrp.dll
—-a-w 384,000 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\themeui.dll
—-a-w 40,960 2002-08-29 05:40:46 C:\WINDOWS\SYSTEM32\tscupgrd.exe
—-a-w 22,016 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\udhisapi.dll
—-a-w 55,808 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rasman.dll
—-a-w 120,320 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\upnp.dll
—-a-w 231,424 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\upnpui.dll
—-a-w 455,680 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\urlmon.dll
—-a-w 339,456 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\usp10.dll
—-a-w 203,264 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\uxtheme.dll
—-a-w 479,261 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\vbscript.dll
—-a-w 124,928 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\webvw.dll
—-a-w 60,416 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\wextract.exe
—-a-w 119,808 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wiadss.dll
—-a-w 86,528 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wlnotify.dll
—-a-w 184,320 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmadmod.dll
—-a-w 51,200 2002-08-29 07:39:24 C:\WINDOWS\SYSTEM32\wmerrenu.dll
—-a-w 77,824 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmpshell.dll
—-a-w 77,824 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\wmpstub.exe
—-a-w 1,404,928 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmpui.dll
—-a-w 110,592 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmsdmod.dll
—-a-w 118,784 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmsdmoe.dll
—-a-w 311,327 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmv8dmod.dll
—-a-w 296,448 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmstream.dll
—-a-w 1,220,608 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wmvcore.dll
—-a-w 294,912 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wmvdmod.dll
—-a-w 446,464 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wmvdmoe.dll
—-a-w 247,808 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wow32.dll
—-a-w 13,312 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wship6.dll
—-a-w 631,808 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rasdlg.dll
—-a-w 9,216 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wuauserv.dll
—-a-w 56,832 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wzcdlg.dll
—-a-w 264,704 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wzcsvc.dll
—-a-w 86,016 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\xactsrv.dll
—-a-w 266,752 2002-08-29 07:41:02 C:\WINDOWS\SYSTEM32\msctf.dll
—-a-w 274,432 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wmasf.dll
—-a-w 307,712 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cscui.dll
—-a-w 471,040 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cryptui.dll
—-a-w 4,126 2002-08-29 07:39:46 C:\WINDOWS\SYSTEM32\msdxmlc.dll
—-a-w 512,031 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msexch40.dll
—-a-w 319,519 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msexcl40.dll
—-a-w 22,528 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\mslbui.dll
—-a-w 339,968 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\mspaint.exe
—-a-w 132,096 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msrating.dll
—-a-w 421,919 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msrd2x40.dll
—-a-w 250,368 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\mstask.dll
—-a-w 192,512 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\mswebdvd.dll
—-a-w 34,304 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\pngfilt.dll
—-a-w 2,042,240 2002-08-29 06:03:30 C:\WINDOWS\SYSTEM32\ntoskrnl.exe
—-a-w 1,947,904 2002-08-29 05:04:56 C:\WINDOWS\SYSTEM32\ntkrnlpa.exe
—-a-w 257,536 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\gdi32.dll
—-a-w 285,312 2007-09-22 14:15:48 C:\WINDOWS\SYSTEM32\FNTCACHE.DAT
—-a-w 117,760 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\stobject.dll
—-a-w 76,288 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\avifil32.dll
—-a-w 217,088 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rasapi32.dll
—-a-w 522,240 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\printui.dll
—-a-w 569,344 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\oleaut32.dll
—-a-w 654,336 2003-05-01 20:56:12 C:\WINDOWS\SYSTEM32\ntdll.dll
—-a-w 108,544 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msv1_0.dll
—-a-w 136,704 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\schannel.dll
—-a-w 11,776 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\lsass.exe
—-a-w 51,712 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\msasn1.dll
—-a-w 295,936 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\localspl.dll
—-a-w 930,304 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\kernel32.dll
—-a-w 126,976 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\imagehlp.dll
—-a-w 667,648 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\lsasrv.dll
—-a-w 99,840 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dhcpcsvc.dll
—-a-w 29,184 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\csrsrv.dll
—-a-w 258,048 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\comdlg32.dll
—-a-w 557,056 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\comctl32.dll
—-a-w 63,488 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\srclient.dll
—-a-w 19,456 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\licmgr10.dll
—-a-w 44,032 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\basesrv.dll
—-a-w 558,080 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\advapi32.dll
—-a-w 77,440 2002-08-29 05:05:04 C:\WINDOWS\SYSTEM32\HAL.DLL
—-a-w 23,552 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wzcsapi.dll
—-a-w 150,528 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\msdtcuiu.dll
——w 1,485,696 2007-04-24 15:32:06 C:\WINDOWS\SYSTEM32\LegitCheckControl.dll
—-a-w 17,408 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wtsapi32.dll
—-a-w 38,912 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wsnmp32.dll
—-a-w 226,816 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\es.dll
—-a-w 168,448 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wldap32.dll
—-a-w 62,976 2002-08-29 07:40:10 C:\WINDOWS\SYSTEM32\browselc.dll
—-a-w 133,632 2002-08-29 02:27:32 C:\WINDOWS\SYSTEM32\rsaenh.dll
—-a-w 439,808 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\ipnathlp.dll
—-a-w 64,512 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\mtxclu.dll
—-a-w 977,920 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\msdtctm.dll
—-a-w 48,128 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\winsta.dll
—-a-w 225,280 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\catsrv.dll
—-a-w 179,712 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cewmdm.dll
—-a-w 1,194,496 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\comsvcs.dll
—-a-w 171,520 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\winmm.dll
—-a-w 599,040 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wininet.dll
—-a-w 316,416 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wiaservc.dll
—-a-w 258,048 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\webcheck.dll
—-a-w 16,384 2002-08-29 05:32:22 C:\WINDOWS\SYSTEM32\watchdog.sys
—-a-w 135,680 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rdchost.dll
—-a-w 409,088 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\vssapi.dll
—-a-w 87,304 2002-08-29 07:46:44 C:\WINDOWS\SYSTEM32\rdpdd.dll
—-a-w 48,640 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\vdmredir.dll
—-a-w 14,848 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rdpsnd.dll
—-a-w 47,616 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\utilman.exe
—-a-w 106,496 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\url.dll
—-a-w 16,384 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\ups.exe
—-a-w 164,864 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\upnphost.dll
—-a-w 107,008 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\umpnpmgr.dll
—-a-w 32,256 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\umandlg.dll
—-a-w 88,064 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\tscfgwmi.dll
—-a-w 81,920 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\trkwks.dll
—-a-w 10,752 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\tracert.exe
—-a-w 200,192 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\termsrv.dll
—-a-w 71,168 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\telnet.exe
—-a-w 165,376 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\tapi32.dll
—-a-w 251,904 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\strmdll.dll
—-a-w 34,304 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\rcimlby.exe
—-a-w 130,560 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\sti_ci.dll
—-a-w 18,944 2002-08-29 07:41:30 C:\WINDOWS\SYSTEM32\ssbezier.scr
—-a-w 385,024 2002-08-07 22:25:02 C:\WINDOWS\SYSTEM32\sqlsrv32.dll
—-a-w 75,912 2002-08-29 07:46:44 C:\WINDOWS\SYSTEM32\rdpwsx.dll
—-a-w 534,016 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\spider.exe
—-a-w 44,032 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\regapi.dll
—-a-w 16,896 2002-08-29 07:41:14 C:\WINDOWS\SYSTEM32\snmpapi.dll
—-a-w 33,280 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\shmgrate.exe
—-a-w 9,728 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\mstinit.exe
—-a-w 420,864 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shimgvw.dll
—-a-w 388,608 2002-08-29 05:40:46 C:\WINDOWS\SYSTEM32\mstsc.exe
—-a-w 8,336,384 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shell32.dll
—-a-w 1,341,440 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\shdocvw.dll
—-a-w 1,157,632 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sfcfiles.dll
—-a-w 20,992 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\setup.exe
—-a-w 36,352 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sens.dll
—-a-w 52,224 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\secur32.dll
—-a-w 71,168 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\sdbinst.exe
—-a-w 297,984 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\scesrv.dll
—-a-w 174,592 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\scecli.dll
—-a-w 171,008 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sccsccp.dll
—-a-w 423,424 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\riched20.dll
—-a-w 48,128 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\reg.exe
—-a-w 13,824 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rassapi.dll
—-a-w 158,720 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\rasmans.dll
—-a-w 57,856 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\raschap.dll
—-a-w 1,349,120 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\query.dll
—-a-w 17,408 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\psapi.dll
—-a-w 109,568 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\offfilt.dll
—-a-w 64,512 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\ciodm.dll
—-a-w 328,704 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\oakley.dll
—-a-w 131,072 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msorcl32.dll
—-a-w 137,216 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntshrui.dll
—-a-w 392,704 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntmssvc.dll
—-a-w 38,400 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\ntlanman.dll
—-a-w 33,808 2002-08-29 01:22:26 C:\WINDOWS\SYSTEM32\ntio.sys
—-a-w 95,744 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\nlhtml.dll
—-a-w 1,622,528 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\netshell.dll
—-a-w 326,656 2002-08-29 07:48:26 C:\WINDOWS\SYSTEM32\netsetup.exe
—-a-w 399,360 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\netlogon.dll
—-a-w 105,984 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\netdde.exe
—-a-w 110,080 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\clbcatex.dll
—-a-w 115,200 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\net1.exe
—-a-w 1,122,304 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msxml3.dll
—-a-w 699,392 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msxml2.dll
—-a-w 401,462 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msvcp60.dll
—-a-w 182,784 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msutb.dll
—-a-w 241,725 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\msuni11.dll
—-a-w 496,128 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\mstime.dll
—-a-w 228,864 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msoeacct.dll
—-a-w 319,760 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msnsspc.dll
—-a-w 241,695 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msjtes40.dll
—-a-w 348,195 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\msjetoledb40.dll
—-a-w 12,288 2002-08-29 07:39:46 C:\WINDOWS\SYSTEM32\mscpx32r.dll
—-a-w 1,128,960 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\mmcndmgr.dll
—-a-w 7,040 2002-08-29 05:05:10 C:\WINDOWS\SYSTEM32\kd1394.dll
—-a-w 318,464 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\ippromon.dll
—-a-w 82,944 2002-08-29 07:40:58 C:\WINDOWS\SYSTEM32\iphlpapi.dll
—-a-w 51,712 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\ipconfig.exe
—-a-w 103,936 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\imm32.dll
—-a-w 30,208 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\imgutil.dll
—-a-w 59,392 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\iesetup.dll
—-a-w 240,640 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\hnetcfg.dll
—-a-w 178,688 2002-08-29 07:41:24 C:\WINDOWS\SYSTEM32\eudcedit.exe
—-a-w 165,376 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\els.dll
—-a-w 227,840 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\dsquery.dll
—-a-w 94,720 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\dmusic.dll
—-a-w 53,248 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cryptsvc.dll
—-a-w 70,144 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cryptdlg.dll
—-a-w 24,576 2002-08-29 07:41:22 C:\WINDOWS\SYSTEM32\conime.exe
—-a-w 238,592 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\compatui.dll
—-a-w 59,904 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\cabinet.dll
—-a-w 71,680 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\browsewm.dll
—-a-w 49,152 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\browser.dll
—-a-w 74,810 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\atl.dll
—-a-w 22,528 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\at.exe
—-a-w 41,984 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\alg.exe
—-a-w 91,648 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\ahui.exe
—-a-w 162,816 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\adsldp.dll
——w 1,677,312 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\wmvcore2.dll
——w 403,456 2002-08-29 05:09:00 C:\WINDOWS\SYSTEM32\winbrand.dll
——w 110,080 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sbeio.dll
——w 218,112 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\sbe.dll
——w 3,494,303 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\nv4_disp.dll
——w 172,032 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\mssap.dll
——w 504,832 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\msftedit.dll
——w 5,120 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\hccoin.dll
——w 18,944 2002-08-29 07:41:24 C:\WINDOWS\SYSTEM32\faxpatch.exe
——w 155,648 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\encdec.dll
——w 12,288 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\encapi.dll
——w 3,584 2002-08-29 05:14:26 C:\WINDOWS\SYSTEM32\dsprpres.dll
——w 921,475 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\ati3d2ag.dll
——w 844,675 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\ati3d1ag.dll
——w 202,496 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\ati2dvag.dll
——w 377,984 2002-08-29 07:40:48 C:\WINDOWS\SYSTEM32\ati2dvaa.dll
——w 10,752 2002-08-29 05:48:14 C:\WINDOWS\SYSTEM32\spiisupd.exe
——w 29,696 2002-08-29 07:41:20 C:\WINDOWS\SYSTEM32\asr_pfu.exe
—-a-w 971,264 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\msgina.dll
—-a-w 593,408 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\h323msp.dll
—-a-w 36,864 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\mf3216.dll
—-a-w 548,352 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\rtcdll.dll
—-a-w 499,200 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\comuid.dll
—-a-w 367,616 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\msdtcprx.dll
—-a-w 82,432 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\mtxoci.dll
—-a-w 1,183,744 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\ole32.dll
—-a-w 535,552 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\rpcrt4.dll
—-a-w 263,680 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\rpcss.dll
—-a-w 97,280 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\txflog.dll
—-a-w 499,712 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\clbcatq.dll
—-a-w 64,512 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\colbact.dll
—-a-w 48,384 2002-08-29 06:06:38 C:\WINDOWS\SYSTEM32\DRIVERS\rasl2tp.sys
—-a-w 66,048 2002-08-29 05:35:56 C:\WINDOWS\SYSTEM32\DRIVERS\psched.sys
—-a-w 30,592 2002-08-29 05:05:06 C:\WINDOWS\SYSTEM32\DRIVERS\processr.sys
—-a-w 134,272 2002-08-29 06:01:00 C:\WINDOWS\SYSTEM32\DRIVERS\portcls.sys
—-a-w 115,712 2002-08-29 05:09:12 C:\WINDOWS\SYSTEM32\DRIVERS\pcmcia.sys
—-a-w 23,680 2002-08-29 05:27:48 C:\WINDOWS\SYSTEM32\DRIVERS\pciidex.sys
—-a-w 62,976 2002-08-29 05:09:12 C:\WINDOWS\SYSTEM32\DRIVERS\pci.sys
—-a-w 76,032 2002-08-29 05:27:32 C:\WINDOWS\SYSTEM32\DRIVERS\parport.sys
—-a-w 37,504 2002-08-29 05:05:06 C:\WINDOWS\SYSTEM32\DRIVERS\p3.sys
—-a-w 561,920 2002-08-29 06:13:40 C:\WINDOWS\SYSTEM32\DRIVERS\ntfs.sys
—-a-w 38,272 2002-08-29 05:34:34 C:\WINDOWS\SYSTEM32\DRIVERS\nmnt.sys
—-a-w 57,984 2002-08-29 05:33:32 C:\WINDOWS\SYSTEM32\DRIVERS\nic1394.sys
—-a-w 157,056 2002-08-29 06:01:58 C:\WINDOWS\SYSTEM32\DRIVERS\netbt.sys
—-a-w 33,152 2002-08-29 05:35:46 C:\WINDOWS\SYSTEM32\DRIVERS\netbios.sys
—-a-w 87,552 2002-08-29 05:58:40 C:\WINDOWS\SYSTEM32\DRIVERS\ndiswan.sys
—-a-w 12,288 2002-08-29 05:35:42 C:\WINDOWS\SYSTEM32\DRIVERS\ndisuio.sys
—-a-w 167,552 2002-08-29 06:09:26 C:\WINDOWS\SYSTEM32\DRIVERS\ndis.sys
—-a-w 104,064 2002-08-29 06:12:54 C:\WINDOWS\SYSTEM32\DRIVERS\mup.sys
—-a-w 7,040 2002-08-29 05:27:12 C:\WINDOWS\SYSTEM32\DRIVERS\mskssrv.sys
—-a-w 392,576 2002-11-18 15:27:40 C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb.sys
—-a-w 22,016 2002-08-29 05:27:02 C:\WINDOWS\SYSTEM32\DRIVERS\mouclass.sys
—-a-w 131,712 2002-08-29 06:13:42 C:\WINDOWS\SYSTEM32\DRIVERS\ks.sys
—-a-w 159,360 2002-08-29 05:32:30 C:\WINDOWS\SYSTEM32\DRIVERS\kmixer.sys
—-a-w 23,424 2002-08-29 05:27:02 C:\WINDOWS\SYSTEM32\DRIVERS\kbdclass.sys
—-a-w 57,984 2002-08-29 06:07:22 C:\WINDOWS\SYSTEM32\DRIVERS\ipsec.sys
—-a-w 79,488 2002-08-29 05:36:14 C:\WINDOWS\SYSTEM32\DRIVERS\ipnat.sys
—-a-w 4,736 2002-08-29 05:27:48 C:\WINDOWS\SYSTEM32\DRIVERS\intelide.sys
—-a-w 39,808 2002-08-29 05:28:08 C:\WINDOWS\SYSTEM32\DRIVERS\imapi.sys
—-a-w 51,072 2002-08-29 06:06:38 C:\WINDOWS\SYSTEM32\DRIVERS\i8042prt.sys
—-a-w 34,560 2002-08-29 05:32:42 C:\WINDOWS\SYSTEM32\DRIVERS\hidclass.sys
—-a-w 9,856 2002-08-29 05:32:44 C:\WINDOWS\SYSTEM32\DRIVERS\gameenum.sys
—-a-w 19,712 2002-08-29 05:27:44 C:\WINDOWS\SYSTEM32\DRIVERS\flpydisk.sys
—-a-w 145,152 2002-08-29 06:12:46 C:\WINDOWS\SYSTEM32\DRIVERS\fastfat.sys
—-a-w 68,992 2002-08-29 07:40:44 C:\WINDOWS\SYSTEM32\DRIVERS\dxg.sys
—-a-w 57,856 2002-08-29 05:32:34 C:\WINDOWS\SYSTEM32\DRIVERS\drmk.sys
—-a-w 13,184 2002-08-29 05:27:56 C:\WINDOWS\SYSTEM32\DRIVERS\diskdump.sys
—-a-w 33,792 2002-08-29 05:27:58 C:\WINDOWS\SYSTEM32\DRIVERS\disk.sys
—-a-w 31,488 2002-08-29 05:05:08 C:\WINDOWS\SYSTEM32\DRIVERS\crusoe.sys
—-a-w 46,336 2002-08-29 06:08:44 C:\WINDOWS\SYSTEM32\DRIVERS\classpnp.sys
—-a-w 47,488 2002-08-29 05:27:56 C:\WINDOWS\SYSTEM32\DRIVERS\cdrom.sys
—-a-w 59,648 2002-08-29 05:58:52 C:\WINDOWS\SYSTEM32\DRIVERS\cdfs.sys
—-a-w 68,864 2002-08-29 05:34:42 C:\WINDOWS\SYSTEM32\DRIVERS\bridge.sys
—-a-w 53,888 2002-08-29 05:33:36 C:\WINDOWS\SYSTEM32\DRIVERS\atmlane.sys
—-a-w 86,912 2002-08-29 05:27:50 C:\WINDOWS\SYSTEM32\DRIVERS\atapi.sys
—-a-w 57,344 2002-08-29 05:33:30 C:\WINDOWS\SYSTEM32\DRIVERS\arp1394.sys
—-a-w 32,000 2002-08-29 05:05:06 C:\WINDOWS\SYSTEM32\DRIVERS\amdk6.sys
—-a-w 131,968 2002-08-29 06:01:14 C:\WINDOWS\SYSTEM32\DRIVERS\afd.sys
—-a-w 142,208 2002-08-29 03:16:38 C:\WINDOWS\SYSTEM32\DRIVERS\aec.sys
—-a-w 179,328 2002-08-29 05:09:06 C:\WINDOWS\SYSTEM32\DRIVERS\acpi.sys
—-a-w 156,544 2002-08-29 05:21:08 C:\WINDOWS\SYSTEM32\DRIVERS\nwrdr.sys
—-a-w 67,200 2002-08-29 05:45:22 C:\WINDOWS\SYSTEM32\DRIVERS\mqac.sys
——w 13,056 2002-08-29 05:28:36 C:\WINDOWS\SYSTEM32\DRIVERS\wacompen.sys
——w 19,328 2002-08-29 05:32:50 C:\WINDOWS\SYSTEM32\DRIVERS\usbehci.sys
——w 9,856 2002-08-29 05:35:44 C:\WINDOWS\SYSTEM32\DRIVERS\tunmp.sys
——w 5,504 2002-08-29 05:09:04 C:\WINDOWS\SYSTEM32\DRIVERS\smbali.sys
——w 891,711 2002-08-29 03:16:30 C:\WINDOWS\SYSTEM32\DRIVERS\nv4_mini.sys
——w 11,904 2002-08-29 05:28:36 C:\WINDOWS\SYSTEM32\DRIVERS\mutohpen.sys
——w 6,912 2002-08-29 05:32:42 C:\WINDOWS\SYSTEM32\DRIVERS\hidir.sys
——w 34,735 2002-08-29 03:16:30 C:\WINDOWS\SYSTEM32\DRIVERS\atinxsxx.sys
——w 29,455 2002-08-29 03:16:30 C:\WINDOWS\SYSTEM32\DRIVERS\atinxbxx.sys
——w 36,463 2002-08-29 03:16:28 C:\WINDOWS\SYSTEM32\DRIVERS\atintuxx.sys
——w 21,343 2002-08-29 03:16:28 C:\WINDOWS\SYSTEM32\DRIVERS\atinttxx.sys
——w 26,367 2002-08-29 03:16:28 C:\WINDOWS\SYSTEM32\DRIVERS\atinsnxx.sys
——w 63,663 2002-08-29 03:16:26 C:\WINDOWS\SYSTEM32\DRIVERS\atinrvxx.sys
——w 30,671 2002-08-29 03:16:26 C:\WINDOWS\SYSTEM32\DRIVERS\atinraxx.sys
——w 12,047 2002-08-29 03:16:26 C:\WINDOWS\SYSTEM32\DRIVERS\atinpdxx.sys
——w 11,615 2002-08-29 03:16:24 C:\WINDOWS\SYSTEM32\DRIVERS\atinmdxx.sys
——w 56,591 2002-08-29 03:16:24 C:\WINDOWS\SYSTEM32\DRIVERS\atinbtxx.sys
——w 450,176 2002-08-29 03:16:16 C:\WINDOWS\SYSTEM32\DRIVERS\ati2mtag.sys
——w 327,040 2002-08-29 03:16:18 C:\WINDOWS\SYSTEM32\DRIVERS\ati2mtaa.sys
——w 32,512 2002-08-29 05:05:08 C:\WINDOWS\SYSTEM32\DRIVERS\amdk7.sys
——w 17,792 2002-08-29 05:32:48 C:\WINDOWS\SYSTEM32\DRIVERS\irbus.sys
—-a-w 46,208 2002-10-01 21:52:30 C:\WINDOWS\SYSTEM32\DRIVERS\raspptp.sys
—-a-w 322,048 2002-12-20 16:36:00 C:\WINDOWS\SYSTEM32\DRIVERS\srv.sys
—-a-w 77,440 2002-08-29 06:00:48 C:\WINDOWS\SYSTEM32\DRIVERS\wdmaud.sys
—-a-w 70,912 2002-08-29 05:32:06 C:\WINDOWS\SYSTEM32\DRIVERS\videoprt.sys
—-a-w 19,712 2002-08-29 05:32:04 C:\WINDOWS\SYSTEM32\DRIVERS\vga.sys
—-a-w 19,328 2002-08-29 05:32:50 C:\WINDOWS\SYSTEM32\DRIVERS\usbuhci.sys
—-a-w 21,760 2002-08-29 05:32:52 C:\WINDOWS\SYSTEM32\DRIVERS\usbstor.sys
—-a-w 135,552 2002-08-29 05:32:52 C:\WINDOWS\SYSTEM32\DRIVERS\usbport.sys
—-a-w 15,232 2002-08-29 05:32:56 C:\WINDOWS\SYSTEM32\DRIVERS\usbintel.sys
—-a-w 51,968 2002-08-29 05:32:50 C:\WINDOWS\SYSTEM32\DRIVERS\usbhub.sys
—-a-w 64,000 2002-08-29 05:06:20 C:\WINDOWS\SYSTEM32\DRIVERS\udfs.sys
—-a-w 38,024 2002-08-29 07:46:42 C:\WINDOWS\SYSTEM32\DRIVERS\termdd.sys
—-a-w 196,288 2002-08-29 05:37:54 C:\WINDOWS\SYSTEM32\DRIVERS\tcpip6.sys
—-a-w 332,928 2002-08-29 05:58:12 C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys
—-a-w 13,824 2002-08-29 05:28:00 C:\WINDOWS\SYSTEM32\DRIVERS\tape.sys
—-a-w 56,832 2002-08-29 06:01:18 C:\WINDOWS\SYSTEM32\DRIVERS\sysaudio.sys
—-a-w 44,416 2002-08-29 05:32:34 C:\WINDOWS\SYSTEM32\DRIVERS\stream.sys
—-a-w 69,248 2002-08-29 05:17:58 C:\WINDOWS\SYSTEM32\DRIVERS\sr.sys
—-a-w 5,888 2002-08-29 05:32:28 C:\WINDOWS\SYSTEM32\DRIVERS\splitter.sys
—-a-w 24,448 2002-08-29 05:33:16 C:\WINDOWS\SYSTEM32\DRIVERS\sonydcam.sys
—-a-w 10,496 2002-08-29 05:27:58 C:\WINDOWS\SYSTEM32\DRIVERS\sfloppy.sys
—-a-w 62,464 2002-08-29 06:08:28 C:\WINDOWS\SYSTEM32\DRIVERS\serial.sys
—-a-w 90,240 2002-08-29 05:27:50 C:\WINDOWS\SYSTEM32\DRIVERS\scsiport.sys
—-a-w 56,576 2002-08-29 05:27:46 C:\WINDOWS\SYSTEM32\DRIVERS\redbook.sys
—-a-w 115,976 2002-08-29 07:46:44 C:\WINDOWS\SYSTEM32\DRIVERS\rdpwd.sys
—-a-w 182,400 2002-08-29 05:06:36 C:\WINDOWS\SYSTEM32\DRIVERS\rdpdr.sys
—-a-w 163,328 2002-08-29 05:58:50 C:\WINDOWS\SYSTEM32\DRIVERS\rdbss.sys
—-a-w 197,120 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\spool\drivers\w32x86\3\unidrvui.dll
—-a-w 252,416 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\spool\drivers\w32x86\3\unidrv.dll
—-a-w 96,256 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmiutils.dll
—-a-w 101,376 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmisvc.dll
—-a-w 38,912 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmipsess.dll
—-a-w 203,776 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\wbem\wmiprvse.exe
—-a-w 408,576 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmiprvsd.dll
—-a-w 122,368 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmiprov.dll
—-a-w 149,504 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmipcima.dll
—-a-w 138,752 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmidcprv.dll
—-a-w 55,808 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wmicookr.dll
—-a-w 111,104 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wbemupgd.dll
—-a-w 28,160 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wbemprox.dll
—-a-w 259,072 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wbemess.dll
—-a-w 480,256 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wbemcore.dll
—-a-w 215,040 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\wbemcomn.dll
—-a-w 80,896 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\wbem\stdprov.dll
—-a-w 138,240 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\wbem\repdrvfs.dll
—-a-w 60,416 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\wbem\ncprov.dll
—-a-w 104,960 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\wbem\mofd.dll
—-a-w 15,360 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\wbem\mofcomp.exe
—-a-w 565,248 2002-08-29 07:40:54 C:\WINDOWS\SYSTEM32\wbem\fastprox.dll
—-a-w 19,456 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\wbem\evntrprv.dll
—-a-w 235,520 2002-08-29 07:40:52 C:\WINDOWS\SYSTEM32\wbem\esscli.dll
—-a-w 1,267,712 2002-08-29 07:40:50 C:\WINDOWS\SYSTEM32\wbem\cimwin32.dll
—-a-w 329,216 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\wbem\wmic.exe
—-a-w 89,088 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\wbem\policman.dll
—-a-w 40,960 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\wbem\cmdevtgprov.dll
—-a-w 113,664 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\Setup\tsoc.dll
—-a-w 99,328 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\Setup\setupqry.dll
—-a-w 40,960 2002-08-29 07:39:36 C:\WINDOWS\SYSTEM32\Setup\ocmsn.dll
—-a-w 12,800 2002-08-29 07:41:10 C:\WINDOWS\SYSTEM32\Setup\ocgen.dll
—-a-w 71,168 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\Setup\netoc.dll
—-a-w 57,374 2002-08-29 07:41:04 C:\WINDOWS\SYSTEM32\Setup\msgrocm.dll
—-a-w 468,480 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\Setup\iis.dll
—-a-w 122,880 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\Setup\fxsocm.dll
—-a-w 32,828 2002-08-29 07:40:54 C:\WINDOWS\SYSTEM32\Setup\fp40ext.dll
—-a-w 152,576 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\Setup\msmqocm.dll
——w 26,112 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\Setup\tabletoc.dll
——w 126,976 2002-08-29 02:57:36 C:\WINDOWS\SYSTEM32\Setup\netfxocm.dll
——w 15,872 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\Setup\medctroc.dll
—-a-w 13,824 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\npp\nppagent.exe
—-a-w 54,272 2002-08-29 07:41:08 C:\WINDOWS\SYSTEM32\npp\ndisnpp.dll
—-a-w 322,048 2002-12-20 16:36:00 C:\WINDOWS\SYSTEM32\dllcache\srv.sys
—-a-w 364,544 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\callcont.dll
—-a-w 593,408 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\h323msp.dll
—-a-w 36,864 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\mf3216.dll
—-a-w 51,712 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\msasn1.dll
—-a-w 253,952 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\mst120.dll
—-a-w 73,728 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\nmcom.dll
—-a-w 136,704 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\schannel.dll
—-a-w 40,960 2004-03-30 01:48:36 C:\WINDOWS\SYSTEM32\dllcache\evtgprov.dll
——w 593,408 2004-03-10 17:59:50 C:\WINDOWS\SYSTEM32\dllcache\xpsp2res.dll
—-a-w 594,944 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\catsrvut.dll
—-a-w 110,080 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\clbcatex.dll
—-a-w 187,904 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\comadmin.dll
—-a-w 1,194,496 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\dllcache\comsvcs.dll
—-a-w 499,200 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\comuid.dll
—-a-w 226,816 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\dllcache\es.dll
—-a-w 367,616 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\msdtcprx.dll
—-a-w 977,920 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\dllcache\msdtctm.dll
—-a-w 150,528 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\msdtcuiu.dll
—-a-w 64,512 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\mtxclu.dll
—-a-w 82,432 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\mtxoci.dll
—-a-w 97,280 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\txflog.dll
—-a-w 225,280 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\catsrv.dll
—-a-w 499,712 2004-03-06 02:16:12 C:\WINDOWS\SYSTEM32\dllcache\clbcatq.dll
—-a-w 64,512 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\dllcache\colbact.dll
——w 187,392 2002-08-29 05:03:36 C:\WINDOWS\SYSTEM32\mui401\xpsp1res.dll
——w 189,952 2002-08-29 05:03:36 C:\WINDOWS\SYSTEM32\mui402\xpsp1res.dll
——w 161,792 2002-08-29 05:03:44 C:\WINDOWS\SYSTEM32\mui404\xpsp1res.dll
——w 189,440 2002-08-29 05:03:44 C:\WINDOWS\SYSTEM32\mui405\xpsp1res.dll
——w 192,512 2002-08-29 05:03:44 C:\WINDOWS\SYSTEM32\mui406\xpsp1res.dll
——w 200,192 2002-08-29 05:04:00 C:\WINDOWS\SYSTEM32\mui407\xpsp1res.dll
——w 198,144 2002-08-29 05:03:52 C:\WINDOWS\SYSTEM32\mui408\xpsp1res.dll
——w 186,880 2002-08-29 05:03:52 C:\WINDOWS\SYSTEM32\mui40b\xpsp1res.dll
——w 198,144 2002-08-29 05:04:00 C:\WINDOWS\SYSTEM32\mui40c\xpsp1res.dll
——w 182,272 2002-08-29 05:04:00 C:\WINDOWS\SYSTEM32\mui40d\xpsp1res.dll
——w 196,096 2002-08-29 05:04:06 C:\WINDOWS\SYSTEM32\mui40e\xpsp1res.dll
——w 195,584 2002-08-29 05:04:08 C:\WINDOWS\SYSTEM32\mui410\xpsp1res.dll
——w 171,520 2002-08-29 05:04:08 C:\WINDOWS\SYSTEM32\mui411\xpsp1res.dll
——w 168,448 2002-08-29 05:04:08 C:\WINDOWS\SYSTEM32\mui412\xpsp1res.dll
——w 196,608 2002-08-29 05:04:16 C:\WINDOWS\SYSTEM32\mui413\xpsp1res.dll
——w 189,952 2002-08-29 05:04:16 C:\WINDOWS\SYSTEM32\mui414\xpsp1res.dll
——w 195,072 2002-08-29 05:04:22 C:\WINDOWS\SYSTEM32\mui415\xpsp1res.dll
——w 193,024 2002-08-29 05:03:36 C:\WINDOWS\SYSTEM32\mui416\xpsp1res.dll
——w 190,976 2002-08-29 05:04:24 C:\WINDOWS\SYSTEM32\mui418\xpsp1res.dll
——w 193,024 2002-08-29 05:04:24 C:\WINDOWS\SYSTEM32\mui419\xpsp1res.dll
——w 189,440 2002-08-29 05:04:00 C:\WINDOWS\SYSTEM32\mui41a\xpsp1res.dll
——w 193,024 2002-08-29 05:04:30 C:\WINDOWS\SYSTEM32\mui41b\xpsp1res.dll
——w 189,440 2002-08-29 05:04:32 C:\WINDOWS\SYSTEM32\mui41d\xpsp1res.dll
——w 188,928 2002-08-29 05:04:32 C:\WINDOWS\SYSTEM32\mui41e\xpsp1res.dll
——w 189,440 2002-08-29 05:04:38 C:\WINDOWS\SYSTEM32\mui41f\xpsp1res.dll
——w 193,024 2002-08-29 05:04:30 C:\WINDOWS\SYSTEM32\mui424\xpsp1res.dll
——w 187,392 2002-08-29 05:03:52 C:\WINDOWS\SYSTEM32\mui425\xpsp1res.dll
——w 189,440 2002-08-29 05:04:16 C:\WINDOWS\SYSTEM32\mui426\xpsp1res.dll
——w 190,464 2002-08-29 05:04:14 C:\WINDOWS\SYSTEM32\mui427\xpsp1res.dll
——w 161,792 2002-08-29 05:03:36 C:\WINDOWS\SYSTEM32\mui804\xpsp1res.dll
——w 195,072 2002-08-29 05:04:24 C:\WINDOWS\SYSTEM32\mui816\xpsp1res.dll
——w 196,608 2002-08-29 05:03:52 C:\WINDOWS\SYSTEM32\muic0a\xpsp1res.dll
—-a-w 49,664 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\oobe\oobebaln.exe
—-a-w 536,576 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\oobe\msobmain.dll
—-a-w 112,128 2002-08-29 07:41:06 C:\WINDOWS\SYSTEM32\oobe\msobcomm.dll
—-a-w 130,048 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\usmt\sysmod_a.dll
—-a-w 141,312 2002-08-29 07:41:18 C:\WINDOWS\SYSTEM32\usmt\sysmod.dll
—-a-w 158,720 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\usmt\script_a.dll
—-a-w 173,056 2002-08-29 07:41:12 C:\WINDOWS\SYSTEM32\usmt\script.dll
—-a-w 226,816 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\usmt\migwiz_a.exe
—-a-w 230,400 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\usmt\migwiz.exe
—-a-w 98,816 2002-08-29 07:41:26 C:\WINDOWS\SYSTEM32\usmt\migload.exe
—-a-w 170,496 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\usmt\migism_a.dll
—-a-w 179,200 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\usmt\migism.dll
—-a-w 17,408 2002-08-29 07:41:00 C:\WINDOWS\SYSTEM32\usmt\log.dll
—-a-w 100,352 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\usmt\guitrn_a.dll
—-a-w 114,688 2002-08-29 07:40:56 C:\WINDOWS\SYSTEM32\usmt\guitrn.dll
—-a-w 187,904 2004-03-06 02:16:10 C:\WINDOWS\SYSTEM32\Com\comadmin.dll
—-a-w 370,688 2002-08-29 07:41:28 C:\WINDOWS\SYSTEM32\Restore\rstrui.exe
—-a-w 29,696 2002-08-29 07:41:10 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\pchsvc.dll
—-a-w 97,792 2002-08-29 07:41:10 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\pchshell.dll
—-a-w 145,408 2002-08-29 07:41:26 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\msconfig.exe
—-a-w 703,488 2002-08-29 07:41:24 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpsvc.exe
——w 8,704 2002-08-29 07:41:24 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\hscupd.exe
—-a-w 741,376 2004-03-30 01:34:16 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpctr.exe
—-a-w 3,362 2007-09-22 03:52:20 C:\WINDOWS\SoftwareDistribution\EventCache\{94CB9C69-F0E9-40DE-8851-47D9F72C6DBC}.bin
—-a-w 1,485,696 2007-04-24 15:32:06 C:\WINDOWS\SoftwareDistribution\Download\d219c5aa727ee8fc0f9eb775006e580a\legitcheckcontrol.dll
—-a-w 14,640 2006-11-17 20:14:30 C:\WINDOWS\SoftwareDistribution\Download\d219c5aa727ee8fc0f9eb775006e580a\spmsg.dll
—-a-w 379,184 2006-11-17 20:14:30 C:\WINDOWS\SoftwareDistribution\Download\d219c5aa727ee8fc0f9eb775006e580a\update\updspapi.dll
—-a-w 70,528 2007-04-24 15:30:24 C:\WINDOWS\SoftwareDistribution\Download\d219c5aa727ee8fc0f9eb775006e580a\update\wgacustom.dll
—-a-w 742,192 2006-11-17 20:14:30 C:\WINDOWS\SoftwareDistribution\Download\d219c5aa727ee8fc0f9eb775006e580a\update\update.exe
—-a-w 163,328 2007-09-20 03:46:26 C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE
—-a-w 1,155,072 2007-09-21 19:51:48 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users000001\ntuser.dat
—-a-w 8,192 2007-09-21 19:51:48 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users000002\UsrClass.dat
—-a-w 163,328 2007-09-20 03:46:26 C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
—-a-w 1,155,072 2007-09-21 19:51:58 C:\WINDOWS\ERUNT\SDFIX\Users000001\ntuser.dat
—-a-w 8,192 2007-09-21 19:51:58 C:\WINDOWS\ERUNT\SDFIX\Users000002\UsrClass.dat
——w 4,608 2002-08-29 07:41:28 C:\WINDOWS\ehome\snchk.exe
——w 13,312 2002-08-29 07:41:26 C:\WINDOWS\ehome\medctrro.exe
——w 126,464 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329390_RTM$\shmedia.dll
——w 46,080 2002-09-21 16:44:06 C:\WINDOWS\$NtUninstallQ329390_RTM$\spuninst\spuninst.exe
——w 330,368 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329170_RTM$\srv.sys
——w 87,040 2002-12-17 17:32:14 C:\WINDOWS\$NtUninstallQ329170_RTM$\spuninst\spuninst.exe
——w 218,112 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallQ329441_RTM$\srrstr.dll
——w 100,352 2003-08-02 04:14:56 C:\WINDOWS\$NtUninstallQ329441_RTM$\spuninst\spuninst.exe
——w 674,304 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ815021_RTM$\ntdll.dll
——w 89,088 2003-03-21 20:56:52 C:\WINDOWS\$NtUninstallQ815021_RTM$\spuninst\spuninst.exe
——w 68,096 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ810833_RTM$\locator.exe
——w 87,040 2002-11-14 14:04:54 C:\WINDOWS\$NtUninstallQ810833_RTM$\spuninst\spuninst.exe
——w 407,680 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ810577_RTM$\mrxsmb.sys
——w 87,040 2002-11-14 14:04:54 C:\WINDOWS\$NtUninstallQ810577_RTM$\spuninst\spuninst.exe
——w 317,952 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329048_RTM$\zipfldr.dll
——w 46,080 2002-09-21 16:44:06 C:\WINDOWS\$NtUninstallQ329048_RTM$\spuninst\spuninst.exe
——w 46,464 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329834_RTM$\raspptp.sys
——w 46,080 2002-09-21 16:44:06 C:\WINDOWS\$NtUninstallQ329834_RTM$\spuninst\spuninst.exe
——w 250,880 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\gdi32.dll
——w 669,696 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\lsasrv.dll
——w 51,200 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\msasn1.dll
——w 967,680 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\msgina.dll
——w 133,632 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\schannel.dll
——w 49,152 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\browser.dll
——w 592,896 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\h323msp.dll
——w 453,632 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\ipnathlp.dll
——w 35,328 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\mf3216.dll
——w 309,760 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\netapi32.dll
——w 550,400 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\rtcdll.dll
——w 34,304 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\cmdevtgprov.dll
——w 360,448 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\callcont.dll
——w 249,856 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\mst120.dll
——w 69,632 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\nmcom.dll
——w 692,224 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\helpctr.exe
——w 34,304 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732_RTM$\evtgprov.dll
——w 140,800 2004-01-10 05:11:06 C:\WINDOWS\$NtUninstallKB835732_RTM$\spuninst\spuninst.exe
——w 583,168 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\catsrvut.dll
——w 1,139,200 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\comsvcs.dll
——w 224,768 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\es.dll
——w 360,960 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\msdtcprx.dll
——w 1,141,248 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\ole32.dll
——w 463,872 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\rpcrt4.dll
——w 259,072 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\rpcss.dll
——w 90,624 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\txflog.dll
——w 215,040 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\catsrv.dll
——w 468,480 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\clbcatq.dll
——w 56,832 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\colbact.dll
——w 100,864 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\clbcatex.dll
——w 495,616 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\comuid.dll
——w 869,376 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\msdtctm.dll
——w 151,040 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\msdtcuiu.dll
——w 61,440 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\mtxclu.dll
——w 83,968 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\mtxoci.dll
——w 186,880 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\comadmin.dll
——w 8,192 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\comrepl.exe
——w 6,656 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741_RTM$\migregdb.exe
——w 140,800 2004-01-10 05:11:06 C:\WINDOWS\$NtUninstallKB828741_RTM$\spuninst\spuninst.exe
——w 24,576 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\custdial.dll
——w 77,824 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\copymar.exe
——w 77,824 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\update.exe
——w 337,920 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll
——w 802,816 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dxmrtp.dll
——w 498,205 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll
——w 778,240 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe
——w 162,128 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe
——w 261,120 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\duser.dll
——w 153,600 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wuv3is.dll
——w 13,312 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wupdinfo.dll
——w 308,736 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstvgs.dll
——w 364,544 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstvca.dll
——w 74,240 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdvdopt.dll
——w 275,968 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll
——w 430,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
——w 95,232 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\win32spl.dll
——w 1,799,552 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\win32k.sys
——w 21,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
——w 662,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\userenv.dll
——w 561,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\user32.dll
——w 302,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\untfs.dll
——w 927,744 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\syssetup.dll
——w 45,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\smss.exe
——w 922,624 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\setupapi.dll
——w 130,048 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\sessmgr.exe
——w 19,456 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\savedump.exe
——w 54,784 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\samlib.dll
——w 35,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rshx32.dll
——w 53,760 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rastapi.dll
——w 55,808 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rasman.dll
——w 630,784 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rasdlg.dll
——w 214,528 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rasapi32.dll
——w 522,240 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\printui.dll
——w 569,344 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\oleaut32.dll
——w 133,632 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nwprovau.dll
——w 395,776 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntvdm.exe
——w 80,896 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntprint.dll
——w 651,264 2003-05-02 15:03:02 C:\WINDOWS\$NtServicePackUninstall$\ntdll.dll
——w 108,032 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msv1_0.dll
——w 969,216 2004-03-30 01:25:46 C:\WINDOWS\$NtServicePackUninstall$\msgina.dll
——w 11,776 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
——w 648,192 2004-03-29 21:25:44 C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll
——w 292,352 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\localspl.dll
——w 926,720 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll
——w 126,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\imagehlp.dll
——w 241,664 2004-03-30 01:25:40 C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll
——w 40,448 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ftp.exe
——w 98,816 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll
——w 29,184 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll
——w 258,048 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll
——w 557,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll
——w 45,056 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll
——w 565,760 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
——w 549,888 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll
——w 79,616 2001-08-18 02:24:46 C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys
——w 65,024 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys
——w 19,584 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\vga.sys
——w 18,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys
——w 21,760 2001-08-17 18:03:22 C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys
——w 123,264 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\usbport.sys
——w 15,104 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys
——w 50,688 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys
——w 63,872 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\udfs.sys
——w 37,896 2001-08-18 02:38:00 C:\WINDOWS\$NtServicePackUninstall$\termdd.sys
——w 180,032 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys
——w 327,168 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
——w 13,696 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tape.sys
——w 57,472 2001-08-18 02:24:44 C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys
——w 42,752 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\stream.sys
——w 70,400 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\sr.sys
——w 5,632 2001-08-17 18:00:46 C:\WINDOWS\$NtServicePackUninstall$\splitter.sys
——w 24,064 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys
——w 10,496 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys
——w 62,464 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\serial.sys
——w 89,984 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\scsiport.sys
——w 55,808 2001-08-17 17:51:42 C:\WINDOWS\$NtServicePackUninstall$\redbook.sys
——w 107,912 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys
——w 181,632 2001-08-17 17:50:48 C:\WINDOWS\$NtServicePackUninstall$\rdpdr.sys
——w 163,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys
——w 46,208 2002-10-01 22:43:52 C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys
——w 48,640 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rasl2tp.sys
——w 65,920 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\psched.sys
——w 30,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\processr.sys
——w 135,040 2001-08-18 02:24:38 C:\WINDOWS\$NtServicePackUninstall$\portcls.sys
——w 116,352 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pcmcia.sys
——w 23,680 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pciidex.sys
——w 62,464 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pci.sys
——w 76,160 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\parport.sys
——w 34,816 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\p3.sys
——w 533,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys
——w 37,760 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmnt.sys
——w 56,960 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nic1394.sys
——w 150,272 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netbt.sys
——w 33,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netbios.sys
——w 88,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ndiswan.sys
——w 12,160 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys
——w 161,536 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
——w 103,936 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mup.sys
——w 6,400 2001-08-17 17:48:48 C:\WINDOWS\$NtServicePackUninstall$\mskssrv.sys
——w 22,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mouclass.sys
——w 134,144 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ks.sys
——w 159,232 2001-08-17 18:00:54 C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys
——w 23,424 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys
——w 56,064 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys
——w 76,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys
——w 4,608 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\intelide.sys
——w 39,296 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\imapi.sys
——w 50,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys
——w 33,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys
——w 9,728 2001-08-17 18:02:32 C:\WINDOWS\$NtServicePackUninstall$\gameenum.sys
——w 19,712 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys
——w 144,768 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys
——w 68,224 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dxg.sys
——w 57,344 2001-08-17 18:01:20 C:\WINDOWS\$NtServicePackUninstall$\drmk.sys
——w 13,184 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys
——w 33,664 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\disk.sys
——w 31,360 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys
——w 44,928 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys
——w 47,488 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
——w 62,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys
——w 53,376 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\bridge.sys
——w 53,888 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys
——w 86,656 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
——w 54,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys
——w 32,000 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys
——w 130,688 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\afd.sys
——w 122,472 2001-07-23 21:25:14 C:\WINDOWS\$NtServicePackUninstall$\aec.sys
——w 179,200 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\acpi.sys
——w 45,124 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntdetect.com
——w 1,982,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe
——w 1,896,704 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe
——w 78,464 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\hal.dll
——w 316,928 2002-09-25 16:21:56 C:\WINDOWS\$NtServicePackUninstall$\zipfldr.dll
——w 165,744 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\xenroll.dll
——w 85,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\xactsrv.dll
——w 184,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wzcsvc.dll
——w 18,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wzcsapi.dll
——w 47,616 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wzcdlg.dll
——w 4,096 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wuauserv.dll
——w 16,896 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wtsapi32.dll
——w 38,912 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wsnmp32.dll
——w 13,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wship6.dll
——w 247,808 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wow32.dll
——w 446,464 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmvdmoe.dll
——w 294,912 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmvdmod.dll
——w 1,216,512 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmvcore.dll
——w 311,327 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmv8dmod.dll
——w 298,496 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmstream.dll
——w 118,784 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmsdmoe.dll
——w 110,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmsdmod.dll
——w 1,392,640 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmpui.dll
——w 77,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmpstub.exe
——w 77,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmpshell.dll
——w 1,998,848 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmploc.dll
——w 1,302,528 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmpcore.dll
——w 253,952 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmpcd.dll
——w 253,952 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmnetmgr.dll
——w 51,200 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmerrenu.dll
——w 274,432 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmasf.dll
——w 442,398 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmadmoe.dll
——w 184,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmadmod.dll
——w 86,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wlnotify.dll
——w 167,936 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wldap32.dll
——w 47,104 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\winsta.dll
——w 170,496 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\winmm.dll
——w 593,920 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wininet.dll
——w 314,368 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll
——w 118,272 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wiadss.dll
——w 60,416 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wextract.exe
——w 124,928 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\webvw.dll
——w 61,440 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\webclnt.dll
——w 258,560 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\webcheck.dll
——w 14,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\watchdog.sys
——w 165,376 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\w32time.dll
——w 409,088 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\vssapi.dll
——w 48,640 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\vdmredir.dll
——w 479,261 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\vbscript.dll
——w 202,752 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll
——w 46,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\utilman.exe
——w 339,456 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\usp10.dll
——w 452,096 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\urlmon.dll
——w 109,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\url.dll
——w 16,384 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ups.exe
——w 231,424 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\upnpui.dll
——w 162,816 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll
——w 115,200 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\upnp.dll
——w 105,472 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\umpnpmgr.dll
——w 31,744 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\umandlg.dll
——w 21,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\udhisapi.dll
——w 40,448 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\tscupgrd.exe
Post #7
Combofix part2 23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.dll ——w 80,384 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\trkwks.dll ——w 9,728 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tracert.exe ——w 383,488 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\themeui.dll ——w 197,632 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll ——w 70,144 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\telnet.exe ——w 128,512 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\taskmgr.exe ——w 233,984 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll ——w 163,328 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tapi32.dll ——w 647,680 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sxs.dll ——w 246,302 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\strmdll.dll ——w 70,656 2001-08-18 02:36:32 C:\WINDOWS\$NtServicePackUninstall$\storprop.dll ——w 117,760 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\stobject.dll ——w 132,096 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sti_ci.dll ——w 60,928 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sti.dll ——w 638,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sstext3d.scr ——w 13,312 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssstars.scr ——w 569,344 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sspipes.scr ——w 17,408 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssmyst.scr ——w 19,456 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssmarque.scr ——w 364,544 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssflwbox.scr ——w 39,936 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll ——w 26,624 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssdpapi.dll ——w 18,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssbezier.scr ——w 667,648 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ss3dfo.scr ——w 155,136 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll ——w 218,624 2002-11-14 19:42:34 C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll ——w 61,952 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\srclient.dll ——w 356,352 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.dll ——w 66,560 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\spoolss.dll ——w 534,016 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\spider.exe ——w 16,896 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\snmpapi.dll ——w 86,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\smlogsvc.exe ——w 332,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\smlogcfg.dll ——w 22,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\slayerxp.dll ——w 24,064 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\skeys.exe ——w 66,048 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sigverif.exe ——w 11,776 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sigtab.dll ——w 114,688 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll ——w 21,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shmgrate.exe ——w 397,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shlwapi.dll ——w 419,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shimgvw.dll ——w 54,784 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shimeng.dll ——w 62,464 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shgina.dll ——w 22,528 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shfolder.dll ——w 8,322,560 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shell32.dll ——w 1,338,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\shdocvw.dll ——w 1,562,112 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll ——w 132,608 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sfc_os.dll ——w 20,992 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\setup.exe ——w 6,144 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sensapi.dll ——w 35,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sens.dll ——w 52,224 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\secur32.dll ——w 37,888 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sdbinst.exe ——w 8,192 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\scrnsave.scr ——w 158,720 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll ——w 295,936 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\scesrv.dll ——w 174,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\scecli.dll ——w 171,008 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sccsccp.dll ——w 169,984 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sccbase.dll ——w 12,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\runonce.exe ——w 74,240 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rtcshare.exe ——w 550,400 2004-03-30 01:25:48 C:\WINDOWS\$NtServicePackUninstall$\rtcdll.dll ——w 131,584 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rsaenh.dll ——w 214,528 2004-03-06 02:05:16 C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll ——w 442,880 2004-03-06 02:05:14 C:\WINDOWS\$NtServicePackUninstall$\rpcrt4.dll ——w 426,496 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\riched20.dll ——w 56,320 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\remotepg.dll ——w 44,032 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\regapi.dll ——w 48,128 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\reg.exe ——w 3,338 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\redir.exe ——w 12,288 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdsaddin.exe ——w 73,864 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdpwsx.dll ——w 14,848 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdpsnd.dll ——w 87,048 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdpdd.dll ——w 41,984 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdpclip.exe ——w 134,656 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rdchost.dll ——w 34,304 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rcimlby.exe ——w 52,224 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rastls.dll ——w 13,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rassapi.dll ——w 193,536 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rasppp.dll ——w 159,744 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rasmans.dll ——w 34,304 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\raschap.dll ——w 1,337,856 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\query.dll ——w 1,135,616 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\quartz.dll ——w 511,488 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\qedit.dll ——w 356,352 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\qdvd.dll ——w 184,832 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\qcap.dll ——w 82,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\psbase.dll ——w 17,408 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\psapi.dll ——w 30,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pngfilt.dll ——w 14,848 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ping.exe ——w 31,744 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pid.dll ——w 250,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pdh.dll ——w 58,368 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pautoenr.dll ——w 52,224 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\packager.exe ——w 212,480 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\osk.exe ——w 685,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\opengl32.dll ——w 98,304 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\oleprn.dll ——w 1,105,408 2004-03-06 02:05:12 C:\WINDOWS\$NtServicePackUninstall$\ole32.dll ——w 102,400 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\offfilt.dll ——w 147,456 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbctrac.dll ——w 12,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbcp32r.dll ——w 61,440 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbccu32.dll ——w 61,440 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbccr32.dll ——w 94,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbccp32.dll ——w 53,248 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbcconf.exe ——w 122,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbcconf.dll ——w 24,576 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbcbcp.dll ——w 32,768 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbcad32.exe ——w 16,384 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbc32gt.dll ——w 200,704 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\odbc32.dll ——w 210,432 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\oakley.dll ——w 137,216 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntshrui.dll ——w 392,192 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll ——w 165,888 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntmsdba.dll ——w 37,376 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntmsapi.dll ——w 110,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntmarta.dll ——w 38,400 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntlanman.dll ——w 33,808 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ntio.sys ——w 49,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\npptools.dll ——w 24,576 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmmkcert.dll ——w 91,136 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nlhtml.dll ——w 238,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\newdev.dll ——w 1,618,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netshell.dll ——w 323,072 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netsetup.exe ——w 857,600 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netplwiz.dll ——w 147,968 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netman.dll ——w 397,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll ——w 105,984 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netdde.exe ——w 584,704 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netcfgx.dll ——w 301,568 2004-03-30 01:25:40 C:\WINDOWS\$NtServicePackUninstall$\netapi32.dll ——w 115,200 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\net1.exe ——w 39,424 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\net.exe ——w 16,384 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nddenb32.dll ——w 42,496 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ncobjapi.dll ——w 1,118,720 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msxml3.dll ——w 688,667 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msxml2.dll ——w 344,138 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msxbde40.dll ——w 243,712 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mswebdvd.dll ——w 979,968 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msvidctl.dll ——w 113,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msvfw32.dll ——w 322,560 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll ——w 401,462 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msvcp60.dll ——w 209,920 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msutb.dll ——w 241,725 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msuni11.dll ——w 503,296 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstscax.dll ——w 385,536 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstsc.exe ——w 9,728 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstinit.exe ——w 497,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstime.dll ——w 254,026 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstext40.dll ——w 249,856 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mstask.dll ——w 245,760 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msscp.dll ——w 9,728 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msrle32.dll ——w 553,034 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msrepl40.dll ——w 421,962 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msrd2x40.dll ——w 132,096 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msrating.dll ——w 175,104 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mspmsp.dll ——w 348,234 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mspbde40.dll ——w 339,968 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mspaint.exe ——w 131,072 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msorcl32.dll ——w 90,624 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msoert2.dll ——w 228,864 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msoeacct.dll ——w 116,272 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msnsspc.dll ——w 174,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msnetobj.dll ——w 213,066 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msltus40.dll ——w 46,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mslbui.dll ——w 241,695 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msjtes40.dll ——w 348,238 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msjetoledb40.dll ——w 1,503,260 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msjet40.dll ——w 368,710 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msisam11.dll ——w 156,672 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msimtf.dll ——w 4,608 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msimg32.dll ——w 304,640 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msihnd.dll ——w 63,488 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msiexec.exe ——w 232,448 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msieftp.dll ——w 2,044,928 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msi.dll ——w 56,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mshtmler.dll ——w 438,272 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mshtmled.dll ——w 2,793,984 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll ——w 319,562 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msexcl40.dll ——w 512,074 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msexch40.dll ——w 4,126 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdxmlc.dll ——w 126,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdart.dll ——w 65,536 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msctfp.dll ——w 293,888 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msctf.dll ——w 12,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mscpx32r.dll ——w 65,536 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msconf.dll ——w 68,096 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mscms.dll ——w 116,736 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mplay32.exe ——w 233,472 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mpg4dmod.dll ——w 185,344 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\moricons.dll ——w 196,096 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mobsync.dll ——w 32,384 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mnmdd.dll ——w 1,136,128 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mmcndmgr.dll ——w 163,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mindex.dll ——w 504,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\logonui.exe ——w 219,648 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\logon.scr ——w 24,576 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\logagent.exe ——w 10,240 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\localui.dll ——w 381,440 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\lmrt.dll ——w 57,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\licwmi.dll ——w 19,456 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\licmgr10.dll ——w 308,736 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\licdll.dll ——w 6,656 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\laprxy.dll ——w 42,537 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\keyboard.sys ——w 265,216 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\kerberos.dll ——w 44,160 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\kd1394.dll ——w 49,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ixsso.dll ——w 100,712 2002-05-23 14:52:40 C:\WINDOWS\$NtServicePackUninstall$\iuctl.dll ——w 122,368 2003-01-13 14:27:38 C:\WINDOWS\$NtServicePackUninstall$\itss.dll ——w 143,872 2003-01-13 14:27:38 C:\WINDOWS\$NtServicePackUninstall$\itircl.dll ——w 121,344 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ipv6mon.dll ——w 58,368 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ipv6.exe ——w 152,576 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll ——w 318,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ippromon.dll ——w 454,656 2004-03-30 01:25:44 C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll ——w 77,312 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\iphlpapi.dll ——w 49,664 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ipconfig.exe ——w 69,632 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\inseng.dll ——w 104,448 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\input.dll ——w 593,920 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\inetcomm.dll ——w 96,768 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\imm32.dll ——w 30,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\imgutil.dll ——w 36,921 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\imeshare.dll ——w 118,784 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\imapi.exe ——w 73,728 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\ils.dll ——w 59,392 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\iesetup.dll ——w 230,400 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\iepeers.dll ——w 294,912 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\iedkcs32.dll ——w 203,776 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ieaksie.dll ——w 126,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ieakeng.dll ——w 28,160 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ie4uinit.exe ——w 110,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\idq.dll ——w 236,032 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\icm32.dll ——w 8,704 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\icaapi.dll ——w 240,640 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll ——w 37,888 2003-01-13 14:27:38 C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll ——w 8,832 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\framebuf.dll ——w 18,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\fontview.exe ——w 84,992 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\fldrclnr.dll ——w 61,952 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\faultrep.dll ——w 379,152 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll ——w 47,616 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll ——w 178,688 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe ——w 17,408 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll ——w 173,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\els.dll ——w 194,560 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll ——w 30,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe ——w 122,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll ——w 227,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll ——w 131,072 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll ——w 16,384 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll ——w 589,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\drmv2clt.dll ——w 76,830 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\drmstor.dll ——w 258,048 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\drmclien.dll ——w 50,176 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll ——w 59,392 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe ——w 206,336 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll ——w 55,808 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll ——w 30,208 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll ——w 156,672 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll ——w 45,056 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll ——w 139,264 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll ——w 94,720 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll ——w 110,080 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll ——w 77,312 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll ——w 31,232 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll ——w 172,032 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmime.dll ——w 59,904 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll ——w 26,112 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dmband.dll ——w 168,960 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll ——w 151,552 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dinput.dll ——w 55,808 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\digest.dll ——w 103,424 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll ——w 25,088 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll ——w 124,928 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll ——w 41,984 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll ——w 85,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe ——w 73,216 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe ——w 263,680 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll ——w 109,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\defrag.exe ——w 267,264 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll ——w 28,672 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll ——w 65,536 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll ——w 24,576 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dbmsvinn.dll ——w 24,576 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll ——w 20,480 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dbmsadsn.dll ——w 486,400 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll ——w 986,112 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\danim.dll ——w 1,181,184 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll ——w 13,312 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe ——w 305,664 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cscui.dll ——w 470,016 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll ——w 51,200 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll ——w 70,144 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll ——w 161,792 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\credui.dll ——w 24,576 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\conime.exe ——w 238,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\compatui.dll ——w 41,472 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe ——w 314,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll ——w 53,248 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll ——w 98,816 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe ——w 62,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll ——w 32,768 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll ——w 179,712 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cewmdm.dll ——w 184,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\certcli.dll ——w 58,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll ——w 71,680 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll ——w 1,020,416 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\browseui.dll ——w 48,640 2004-03-30 01:25:40 C:\WINDOWS\$NtServicePackUninstall$\browser.dll ——w 62,976 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\browselc.dll ——w 6,656 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\batt.dll ——w 76,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll ——w 8,192 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe ——w 37,888 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll ——w 74,802 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\atl.dll ——w 22,528 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\at.exe ——w 14,366 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\asfsipc.dll ——w 5,120 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\asferror.dll ——w 104,448 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll ——w 40,960 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\alg.exe ——w 84,992 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ahui.exe ——w 91,136 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\advpack.dll ——w 239,616 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll ——w 62,464 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll ——w 139,264 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll ——w 160,768 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll ——w 35,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll ——w 130,560 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sysmod_a.dll ——w 141,312 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sysmod.dll ——w 167,424 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\script_a.dll ——w 186,368 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\script.dll ——w 226,816 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\migwiz_a.exe ——w 230,400 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe ——w 98,816 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\migload.exe ——w 179,200 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\migism_a.dll ——w 185,344 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\migism.dll ——w 16,896 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\log.dll ——w 100,864 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\guitrn_a.dll ——w 113,664 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\guitrn.dll ——w 49,664 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\oobebaln.exe ——w 532,480 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msobmain.dll ——w 107,008 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msobcomm.dll ——w 266,752 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\winhlp32.exe ——w 134,144 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\regedit.exe ——w 10,752 2002-09-22 00:13:26 C:\WINDOWS\$NtServicePackUninstall$\hh.exe ——w 1,000,960 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe ——w 229,376 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\unregmp2.exe ——w 213,075 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\sqlxmlx.dll ——w 450,560 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\sqloledb.dll ——w 413,696 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\oledb32.dll ——w 24,576 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msxactps.dll ——w 4,096 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaurl.dll ——w 16,384 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdatt.dll ——w 86,016 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdatl3.dll ——w 303,104 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdasql.dll ——w 4,096 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdasc.dll ——w 188,416 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaps.dll ——w 73,728 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaosp.dll ——w 221,184 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaora.dll ——w 4,096 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaer.dll ——w 4,096 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaenum.dll ——w 4,096 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdadc.dll ——w 99,840 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tsoc.dll ——w 96,768 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\setupqry.dll ——w 36,864 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ocmsn.dll ——w 11,776 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ocgen.dll ——w 71,168 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\netoc.dll ——w 24,606 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msgrocm.dll ——w 468,480 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\iis.dll ——w 122,368 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsocm.dll ——w 32,828 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\fp40ext.dll ——w 95,744 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmiutils.dll ——w 100,864 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmisvc.dll ——w 38,912 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmipsess.dll ——w 203,264 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe ——w 407,040 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmiprvsd.dll ——w 122,368 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmiprov.dll ——w 149,504 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmipcima.dll ——w 138,752 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmidcprv.dll ——w 55,808 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmicookr.dll ——w 106,496 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wbemupgd.dll ——w 28,160 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wbemprox.dll ——w 259,072 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wbemess.dll ——w 477,184 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wbemcore.dll ——w 214,528 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wbemcomn.dll ——w 80,896 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\stdprov.dll ——w 137,216 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\repdrvfs.dll ——w 60,928 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\ncprov.dll ——w 104,960 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mofd.dll ——w 14,336 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mofcomp.exe ——w 585,216 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fastprox.dll ——w 19,456 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll ——w 235,520 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\esscli.dll ——w 1,266,688 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll ——w 200,192 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wordpad.exe ——w 520,192 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmpvis.dll ——w 520,192 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmplayer.exe ——w 163,906 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmmutil.dll ——w 319,551 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmmres.dll ——w 110,657 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmmfilt.dll ——w 249,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wab32res.dll ——w 459,776 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wab32.dll ——w 442,880 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\w95upgnt.dll ——w 86,070 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\voicesub.dll ——w 426,038 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\voicepad.dll ——w 800,256 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\vgx.dll ——w 73,216 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\uniime.dll ——w 145,920 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\triedit.dll ——w 90,172 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\tmigrate.dll ——w 737,360 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\tintsetp.exe ——w 143,421 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\tintlphr.exe ——w 16,384 2001-05-23 01:15:10 C:\WINDOWS\$NtServicePackUninstall$\tcptsat.dll ——w 32,827 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\tcptest.exe ——w 794,686 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\srchui.dll ——w 256,000 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sptip.dll ——w 160,768 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\softkbd.dll ——w 36,864 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\snmpthrd.dll ——w 182,784 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\snmpsmir.dll ——w 345,600 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\snmpincl.dll ——w 246,784 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\snmpcl.dll ——w 29,696 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\snmp.exe ——w 226,304 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\smi2smir.exe ——w 16,437 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\shtml.exe ——w 20,536 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\shtml.dll ——w 221,184 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\setup_wm.exe ——w 66,560 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\setup50.exe ——w 696,320 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sapi.dll ——w 366,080 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rstrui.exe ——w 57,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\rrcm.dll ——w 114,762 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\pmigrate.dll ——w 131,126 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\pintlphr.exe ——w 90,175 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\pintlcsd.dll ——w 294,975 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\pintlcsa.dll ——w 29,184 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\pchsvc.dll ——w 97,792 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\pchshell.dll ——w 32,836 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\padrs804.dll ——w 32,836 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\padrs404.dll ——w 8,223 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\npwmsdrm.dll ——w 13,824 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nppagent.exe ——w 364,544 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\npdsplay.dll ——w 157,696 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\npdrmv2.dll ——w 180,224 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmwb.dll ——w 163,840 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmoldwb.dll ——w 143,360 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmft.dll ——w 77,824 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmchat.dll ——w 20,480 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmasnt.dll ——w 217,088 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nmas.dll ——w 55,808 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\ndisnpp.dll ——w 208,896 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\nac.dll ——w 84,992 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\muisetup.exe ——w 49,152 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mst123.dll ——w 1,174,528 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msoe.dll ——w 90,112 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msjro.dll ——w 348,238 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\msjetol1.dll ——w 57,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msimn.exe ——w 32,768 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdfmap.dll ——w 110,592 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdarem.dll ——w 180,224 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdaprst.dll ——w 145,408 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msconfig.exe ——w 238,592 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mscandui.dll ——w 53,248 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadrh15.dll ——w 180,224 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadox.dll ——w 49,152 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msador15.dll ——w 159,744 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadomd.dll ——w 487,424 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msado15.dll ——w 147,456 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadds.dll ——w 53,248 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadcs.dll ——w 131,072 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadco.dll ——w 57,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadcf.dll ——w 307,200 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msadce.dll ——w 4,639 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mplayer2.exe ——w 806,978 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\moviemk.exe ——w 77,824 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imscinst.exe ——w 102,452 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imlang.dll ——w 274,486 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjputyc.dll ——w 262,197 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjputy.exe ——w 233,524 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjprw.exe ——w 208,949 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpmig.exe ——w 196,662 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpinst.exe ——w 155,702 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpdsvr.exe ——w 307,254 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpdct.exe ——w 81,973 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpdct.dll ——w 716,853 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpcus.dll ——w 356,398 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjpcic.dll ——w 827,438 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imjp81k.dll ——w 86,016 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\imekrcic.dll ——w 91,136 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\iexplore.exe ——w 209,408 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\icwconn1.exe ——w 36,352 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\hmmapi.dll ——w 694,272 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe ——w 727,040 2004-02-05 22:14:58 C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe ——w 53,248 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\h323cc.dll ——w 395,264 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsxp32.dll ——w 186,368 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxswzrd.dll ——w 149,504 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsui.dll ——w 391,168 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxstiff.dll ——w 236,032 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxst30.dll ——w 249,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxssvc.exe ——w 559,616 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsst.dll ——w 6,656 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsres.dll ——w 7,168 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsperf.dll ——w 20,992 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsext32.dll ——w 24,064 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsdrv.dll ——w 216,064 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxscover.exe ——w 271,872 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxscomex.dll ——w 131,584 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsclnt.exe ——w 442,880 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\fxsapi.dll ——w 20,538 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpremadm.exe ——w 208,896 2001-05-23 01:15:10 C:\WINDOWS\$NtServicePackUninstall$\fpmmcsat.dll ——w 598,071 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpmmc.dll ——w 20,541 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpexedll.dll ——w 94,208 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpencode.dll ——w 94,208 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpcount.exe ——w 20,541 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpadmdll.dll ——w 24,632 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fpadmcgi.exe ——w 109,328 1998-05-16 00:55:30 C:\WINDOWS\$NtServicePackUninstall$\fp98swin.exe ——w 14,608 1998-05-16 00:55:30 C:\WINDOWS\$NtServicePackUninstall$\fp98sadm.exe ——w 872,557 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4awel.dll ——w 49,212 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4awebs.dll ——w 32,826 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4avss.dll ——w 41,020 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4avnb.dll ——w 618,605 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4autl.dll ——w 102,509 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4atxt.dll ——w 94,208 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4areg.dll ——w 147,513 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4apws.dll ——w 82,035 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4anscp.dll ——w 184,435 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\fp4amsft.dll ——w 294,912 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\dlimport.exe ——w 40,960 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll ——w 61,492 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\cplexe.exe ——w 995,328 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\conf.exe ——w 540,745 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\cintsetp.exe ——w 344,127 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\cintime.dll ——w 299,069 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\chtskf.dll ——w 131,134 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\chtskdic.dll ——w 204,861 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\chtmbx.dll ——w 188,480 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\cfgwiz.exe ——w 16,439 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\author.exe ——w 20,540 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\author.dll ——w 16,439 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\admin.exe ——w 20,540 2001-05-23 01:15:08 C:\WINDOWS\$NtServicePackUninstall$\admin.dll ——w 105,472 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll ——w 148,480 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\acverfyr.dll ——w 204,288 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll ——w 45,568 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\aclua.dll ——w 370,688 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll ——w 1,229,312 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll ——w 32,833 1999-03-20 00:34:52 C:\WINDOWS\$NtServicePackUninstall$\fpsrvwin.exe ——w 16,449 1999-03-20 01:07:48 C:\WINDOWS\$NtServicePackUninstall$\fpsrvadm.exe ——w 16,415 2001-08-02 01:58:12 C:\WINDOWS\$NtServicePackUninstall$\msmsgsin.exe ——w 1,077,277 2001-08-02 11:14:34 C:\WINDOWS\$NtServicePackUninstall$\msmsgs.exe ——w 147,487 2001-08-02 01:58:12 C:\WINDOWS\$NtServicePackUninstall$\msgslang.dll ——w 47,472 2001-08-02 02:08:36 C:\WINDOWS\$NtServicePackUninstall$\msgsc.dll ——w 545,792 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\wsecedit.dll ——w 330,752 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\wmic.exe ——w 344,576 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\w3svc.dll ——w 231,936 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tracerpt.exe ——w 7,168 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tlntsvrp.dll ——w 60,928 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tlntsvr.exe ——w 70,144 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tlntsess.exe ——w 52,224 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\tlntadmn.exe ——w 40,448 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\ssinc51.dll ——w 113,664 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\sctasks.exe ——w 103,424 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\rsnotify.exe ——w 89,600 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\policman.dll ——w 57,856 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nwwks.dll ——w 155,648 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\nwrdr.sys ——w 151,552 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msmqocm.dll ——w 467,456 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqutil.dll ——w 164,352 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqtrig.dll ——w 478,720 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqsnap.dll ——w 88,576 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqsec.dll ——w 164,864 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqrt.dll ——w 605,696 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqqm.dll ——w 14,848 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqise.dll ——w 129,024 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqad.dll ——w 66,944 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\mqac.sys ——w 34,304 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\md5filt.dll ——w 240,640 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\infocomm.dll ——w 73,216 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\iislog51.dll ——w 54,784 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\httpod51.dll ——w 240,640 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\httpext.dll ——w 178,688 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\gptext.dll ——w 111,616 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\gprslt.exe ——w 117,248 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\ftpsv251.dll ——w 67,072 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\fdeploy.dll ——w 42,496 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\coadmin.dll ——w 339,456 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\asp51.dll ——w 277,504 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\appmgr.dll ——w 155,648 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\appmgmts.dll ——w 249,344 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\adsiis51.dll ——w 113,664 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\schtasks.exe ——w 111,616 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\gpresult.exe ——w 90,112 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\popc.dll ——w 94,208 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msnspell.dll ——w 81,920 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msnmtllc.dll ——w 53,248 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\migrate.dll ——w 1,032,192 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msnmetal.dll ——w 90,112 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msn6.exe ——w 368,640 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msmom.dll ——w 65,536 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msdbx.dll ——w 245,760 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\logonmgr.dll ——w 161,184 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\dw.exe ——w 32,768 2001-08-23 12:00:00 C:\WINDOWS\$NtServicePackUninstall$\msnunin.exe ——w 196,096 2001-08-18 02:36:34 C:\WINDOWS\$NtServicePackUninstall$\unidrvui.dll ——w 251,904 2001-08-18 02:36:34 C:\WINDOWS\$NtServicePackUninstall$\unidrv.dll ——w 116,736 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll ——w 27,136 2001-08-23 16:00:00 C:\WINDOWS\$NtServicePackUninstall$\pidgen.dll ——w 391,936 2002-11-18 15:17:00 C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys ——w 80,384 2002-08-29 01:18:50 C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe ——w 13,312 2002-08-29 07:41:32 C:\WINDOWS\ServicePackFiles\i386\ssstars.scr ——w 189,952 2002-08-29 05:03:36 C:\WINDOWS\ServicePackFiles\i386\spra0402.dll ——w 5,504 2002-08-29 05:09:04 C:\WINDOWS\ServicePackFiles\i386\smbali.sys ——w 63,663 2002-08-29 03:16:26 C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys ——w 30,208 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\imgutil.dll ——w 23,680 2002-08-29 05:27:48 C:\WINDOWS\ServicePackFiles\i386\pciidex.sys ——w 111,104 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll ——w 19,712 2002-08-29 05:27:44 C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys ——w 30,592 2002-08-29 05:05:06 C:\WINDOWS\ServicePackFiles\i386\processr.sys ——w 155,648 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\encdec.dll ——w 32,768 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll ——w 29,696 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\snmp.exe ——w 57,856 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\raschap.dll ——w 423,424 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\riched20.dll ——w 131,712 2002-08-29 06:13:42 C:\WINDOWS\ServicePackFiles\i386\ks.sys ——w 57,344 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadcf.dll ——w 266,752 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe ——w 45,568 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\docprop2.dll ——w 208,896 2002-05-14 22:16:22 C:\WINDOWS\ServicePackFiles\i386\fpmmcsat.dll ——w 49,152 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll ——w 66,048 2002-08-29 05:35:56 C:\WINDOWS\ServicePackFiles\i386\psched.sys ——w 305,664 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msihnd.dll ——w 844,675 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll ——w 7,040 2002-08-29 05:05:10 C:\WINDOWS\ServicePackFiles\i386\kd1394.dll ——w 1,920,512 2002-08-29 05:04:56 C:\WINDOWS\ServicePackFiles\i386\ntkrpamp.exe ——w 179,328 2002-08-29 05:09:06 C:\WINDOWS\ServicePackFiles\i386\acpi.sys ——w 61,440 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbccr32.dll ——w 326,656 2002-08-29 07:48:26 C:\WINDOWS\ServicePackFiles\i386\netsetup.exe ——w 384,000 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\themeui.dll ——w 204,288 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll ——w 16,439 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\admin.exe ——w 253,952 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmnetmgr.dll ——w 19,712 2002-08-29 05:28:34 C:\WINDOWS\ServicePackFiles\i386\ramdisk.sys ——w 6,656 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\batt.dll ——w 534,016 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\spider.exe ——w 119,808 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wiadss.dll ——w 178,688 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\eudcedit.exe ——w 420,864 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll ——w 145,152 2002-08-29 06:12:46 C:\WINDOWS\ServicePackFiles\i386\fastfat.sys ——w 328,704 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\oakley.dll ——w 94,208 2002-06-27 20:38:40 C:\WINDOWS\ServicePackFiles\i386\msn6.exe ——w 66,560 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\faultrep.dll ——w 20,864 2002-08-29 03:16:22 C:\WINDOWS\ServicePackFiles\i386\lwadihid.sys ——w 4,608 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msimg32.dll ——w 49,664 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe ——w 77,824 2002-08-29 04:37:22 C:\WINDOWS\ServicePackFiles\i386\copymar.exe ——w 103,936 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\imm32.dll ——w 1,622,528 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netshell.dll ——w 130,048 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fxsclnt.exe ——w 156,672 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll ——w 240,640 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\httpext.dll ——w 133,120 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sfc_os.dll ——w 240,640 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll ——w 327,040 2002-08-29 03:16:18 C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys ——w 139,776 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll ——w 10,752 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\tracert.exe ——w 558,080 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\advapi32.dll ——w 20,540 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\author.dll ——w 73,728 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaosp.dll ——w 401,462 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msvcp60.dll ——w 70,656 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\defrag.exe ——w 56,320 2002-08-29 07:39:46 C:\WINDOWS\ServicePackFiles\i386\mshtmler.dll ——w 77,824 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmpshell.dll ——w 49,152 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mst123.dll ——w 238,080 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\newdev.dll ——w 23,424 2002-08-29 05:27:02 C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys ——w 20,992 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsext32.dll ——w 53,248 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadrh15.dll ——w 163,840 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mindex.dll ——w 168,448 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wldap32.dll ——w 20,541 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fpadmdll.dll ——w 118,784 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmsdmoe.dll ——w 74,810 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\atl.dll ——w 4,096 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdaurl.dll ——w 60,416 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wextract.exe ——w 193,536 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rasppp.dll ——w 44,032 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\basesrv.dll ——w 802,304 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\dxmrtp.dll ——w 158,720 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\srsvc.dll ——w 4,096 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaer.dll ——w 36,864 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\snmpthrd.dll ——w 277,504 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\appmgr.dll ——w 195,584 2002-08-29 05:04:08 C:\WINDOWS\ServicePackFiles\i386\spra0410.dll ——w 258,048 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\webcheck.dll ——w 95,744 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nlhtml.dll ——w 671,744 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll ——w 159,744 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadomd.dll ——w 263,168 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\devmgr.dll ——w 116,224 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll ——w 98,816 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\migload.exe ——w 238,592 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\compatui.dll ——w 195,072 2002-08-29 05:04:24 C:\WINDOWS\ServicePackFiles\i386\spra0816.dll ——w 631,808 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll ——w 4,864 2002-08-29 05:27:50 C:\WINDOWS\ServicePackFiles\i386\viaide.sys ——w 54,272 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rastapi.dll ——w 16,384 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\ping.exe ——w 64,512 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\msiexec.exe ——w 14,848 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cdm.dll ——w 126,976 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\ieakeng.dll ——w 4,736 2002-08-29 05:27:48 C:\WINDOWS\ServicePackFiles\i386\intelide.sys ——w 187,392 2002-08-29 05:03:36 C:\WINDOWS\ServicePackFiles\i386\spra0401.dll ——w 183,296 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\gptext.dll ——w 319,519 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msexcl40.dll ——w 70,912 2002-08-29 05:32:06 C:\WINDOWS\ServicePackFiles\i386\videoprt.sys ——w 163,897 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmmutil.dll ——w 99,840 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll ——w 241,152 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\infocomm.dll ——w 91,136 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\iexplore.exe ——w 172,032 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mssap.dll ——w 364,544 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\npdsplay.dll ——w 115,712 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\apphelp.dll ——w 276,480 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\winsrv.dll ——w 442,398 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmadmoe.dll ——w 236,032 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxst30.dll ——w 184,435 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4amsft.dll ——w 4,573 2002-04-10 22:18:00 C:\WINDOWS\ServicePackFiles\i386\secupd.dat ——w 968,192 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msgina.dll ——w 221,184 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaora.dll ——w 73,728 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\tlntsess.exe ——w 16,384 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbc32gt.dll ——w 117,248 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\ftpsv251.dll ——w 67,584 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\tlntsvr.exe ——w 802,304 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\vgx.dll ——w 113,664 2002-08-29 06:21:14 C:\WINDOWS\ServicePackFiles\i386\ipmntdpc.dll ——w 6,144 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sensapi.dll ——w 112,128 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msobcomm.dll ——w 1,404,928 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmpui.dll ——w 532,480 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaipp.dll ——w 226,816 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe ——w 38,912 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll ——w 16,439 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\author.exe ——w 168,960 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dinput8.dll ——w 171,520 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\winmm.dll ——w 249,856 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\adsiis51.dll ——w 399,360 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netlogon.dll ——w 115,200 2002-08-29 06:21:06 C:\WINDOWS\ServicePackFiles\i386\ipevldpc.dll ——w 2,833,920 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\mshtml.dll ——w 9,216 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll ——w 303,104 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdasql.dll ——w 231,936 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\tracerpt.exe ——w 370,688 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\rstrui.exe ——w 57,344 2002-08-29 04:37:42 C:\WINDOWS\ServicePackFiles\i386\msnmigr.dll ——w 80,896 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntprint.dll ——w 511,488 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\qedit.dll ——w 307,200 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadce.dll ——w 16,384 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\ds32gt.dll ——w 20,541 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fpexedll.dll ——w 4,096 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdadc.dll ——w 16,384 2002-08-29 05:32:22 C:\WINDOWS\ServicePackFiles\i386\watchdog.sys ——w 124,928 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\webvw.dll ——w 139,776 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe ——w 68,992 2002-08-29 07:40:44 C:\WINDOWS\ServicePackFiles\i386\dxg.sys ——w 24,576 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbcbcp.dll ——w 90,112 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msjro.dll ——w 1,503,262 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msjet40.dll ——w 148,352 2002-08-29 05:05:06 C:\WINDOWS\ServicePackFiles\i386\halmps.dll ——w 104,960 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mofd.dll ——w 165,376 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\els.dll ——w 94,208 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fpencode.dll ——w 164,864 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\upnphost.dll ——w 235,520 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\esscli.dll ——w 150,528 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\ptpusd.dll ——w 498,205 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\dxmasf.dll ——w 157,056 2002-08-29 06:01:58 C:\WINDOWS\ServicePackFiles\i386\netbt.sys ——w 214,016 2002-08-29 05:05:20 C:\WINDOWS\ServicePackFiles\i386\osloader.exe ——w 143,104 2002-08-29 05:28:00 C:\WINDOWS\ServicePackFiles\i386\tffsport.sys ——w 230,400 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\migwiz.exe ——w 110,592 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmsdmod.dll ——w 103,936 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\rsnotify.exe ——w 431,616 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\smtpsvc.dll ——w 77,824 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wmpstub.exe ——w 82,944 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\iphlpapi.dll ——w 21,760 2002-08-29 05:32:52 C:\WINDOWS\ServicePackFiles\i386\usbstor.sys ——w 14,848 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqise.dll ——w 146,560 2002-08-29 05:05:04 C:\WINDOWS\ServicePackFiles\i386\halapic.dll ——w 159,232 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll ——w 388,608 2002-08-29 05:40:46 C:\WINDOWS\ServicePackFiles\i386\mstsc.exe ——w 54,272 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\httpod51.dll ——w 180,224 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dwwin.exe ——w 798,782 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\srchui.dll ——w 196,608 2002-08-29 05:03:52 C:\WINDOWS\ServicePackFiles\i386\spra0c0a.dll ——w 99,328 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\setupqry.dll ——w 46,080 2002-08-29 05:33:22 C:\WINDOWS\ServicePackFiles\i386\61883.sys ——w 206,336 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll ——w 13,824 2002-08-29 05:28:00 C:\WINDOWS\ServicePackFiles\i386\tape.sys ——w 126,976 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\imagehlp.dll ——w 143,872 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\itircl.dll ——w 598,016 2002-08-29 05:40:52 C:\WINDOWS\ServicePackFiles\i386\mstscax.dll ——w 19,712 2002-08-29 05:32:04 C:\WINDOWS\ServicePackFiles\i386\vga.sys ——w 16,449 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe ——w 6,656 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\laprxy.dll ——w 548,864 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rtcdll.dll ——w 274,432 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmasf.dll ——w 15,360 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\mofcomp.exe ——w 6,656 2002-08-29 07:39:56 C:\WINDOWS\ServicePackFiles\i386\fxsres.dll ——w 24,576 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\logagent.exe ——w 367,616 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\licdll.dll ——w 71,680 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\browsewm.dll ——w 49,664 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\ixsso.dll ——w 197,120 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll ——w 49,664 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dpwsockx.dll ——w 169,984 2002-08-29 02:27:34 C:\WINDOWS\ServicePackFiles\i386\sccbase.dll ——w 40,448 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\ftp.exe ——w 28,160 2002-08-29 05:08:22 C:\WINDOWS\ServicePackFiles\i386\pidgen.dll ——w 34,735 2002-08-29 03:16:30 C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys ——w 17,408 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\qmgrprxy.dll ——w 217,088 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmas.dll ——w 29,696 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pchsvc.dll ——w 348,195 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msjetol1.dll ——w 77,312 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmscript.dll ——w 22,528 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\mslbui.dll ——w 260,608 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rpcss.dll ——w 247,808 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wow32.dll ——w 28,728 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fpsrvadm.exe ——w 61,440 2002-08-29 04:37:34 C:\WINDOWS\ServicePackFiles\i386\msdbx.dll ——w 115,200 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll ——w 147,456 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadds.dll ——w 63,488 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\srclient.dll ——w 130,048 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\ps5ui.dll ——w 364,544 2002-08-29 07:41:30 C:\WINDOWS\ServicePackFiles\i386\ssflwbox.scr ——w 131,072 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msorcl32.dll ——w 171,008 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sccsccp.dll ——w 180,224 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaprst.dll ——w 55,808 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rasman.dll ——w 91,648 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\ahui.exe ——w 57,344 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll ——w 109,568 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\offfilt.dll ——w 179,712 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cewmdm.dll ——w 184,320 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmadmod.dll ——w 188,416 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaps.dll ——w 4,096 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdasc.dll ——w 156,544 2002-08-29 05:21:08 C:\WINDOWS\ServicePackFiles\i386\nwrdr.sys ——w 34,304 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe ——w 38,528 2002-08-29 05:27:58 C:\WINDOWS\ServicePackFiles\i386\sbp2port.sys ——w 202,496 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll ——w 459,776 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wab32.dll ——w 51,200 2002-08-29 07:39:24 C:\WINDOWS\ServicePackFiles\i386\wmerrenu.dll ——w 236,032 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\icm32.dll ——w 166,912 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\iuengine.dll ——w 3,338 2002-08-29 01:24:16 C:\WINDOWS\ServicePackFiles\i386\redir.exe ——w 38,400 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntmsapi.dll ——w 54,784 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\samlib.dll ——w 126,976 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdart.dll ——w 8,192 2002-08-29 07:41:30 C:\WINDOWS\ServicePackFiles\i386\scrnsave.scr ——w 70,144 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll ——w 26,367 2002-08-29 03:16:28 C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys ——w 1,157,632 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll ——w 4,608 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\snchk.exe ——w 36,463 2002-08-29 03:16:28 C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys ——w 13,056 2002-08-29 05:28:36 C:\WINDOWS\ServicePackFiles\i386\wacompen.sys ——w 76,288 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\avifil32.dll ——w 203,264 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll ——w 203,112 2002-08-21 00:30:08 C:\WINDOWS\ServicePackFiles\i386\rtcimsp.dll ——w 1,818,624 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\acgenral.dll ——w 1,122,304 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msxml3.dll ——w 17,792 2002-08-29 05:32:48 C:\WINDOWS\ServicePackFiles\i386\irbus.sys ——w 55,296 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\digest.dll ——w 69,632 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmcom.dll ——w 561,920 2002-08-29 06:13:40 C:\WINDOWS\ServicePackFiles\i386\ntfs.sys ——w 113,664 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msvfw32.dll ——w 216,064 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fxscover.exe ——w 19,456 2002-08-29 07:41:30 C:\WINDOWS\ServicePackFiles\i386\ssmarque.scr ——w 32,256 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mnmdd.dll ——w 196,096 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mobsync.dll ——w 226,304 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\srrstr.dll ——w 156,672 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dpnet.dll ——w 584,192 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netcfgx.dll ——w 90,240 2002-08-29 05:27:50 C:\WINDOWS\ServicePackFiles\i386\scsiport.sys ——w 41,472 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe ——w 295,936 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\localspl.dll ——w 165,376 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\w32time.dll ——w 11,904 2002-08-29 05:28:36 C:\WINDOWS\ServicePackFiles\i386\mutohpen.sys ——w 62,464 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll ——w 250,368 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\gdi32.dll ——w 233,984 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll ——w 162,816 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\adsldp.dll ——w 31,744 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmloader.dll ——w 82,944 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\smlogsvc.exe ——w 212,480 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\osk.exe ——w 309,248 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netapi32.dll ——w 20,538 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fpremadm.exe ——w 57,856 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\licwmi.dll ——w 52,224 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\secur32.dll ——w 115,976 2002-08-29 07:46:44 C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys ——w 9,216 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\icaapi.dll ——w 53,248 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\odbcconf.exe ——w 53,888 2002-08-29 05:33:36 C:\WINDOWS\ServicePackFiles\i386\atmlane.sys ——w 38,024 2002-08-29 07:46:42 C:\WINDOWS\ServicePackFiles\i386\termdd.sys ——w 1,511,453 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe ——w 76,288 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe ——w 233,472 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mpg4dmod.dll ——w 68,096 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\mscms.dll ——w 185,856 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxswzrd.dll ——w 113,152 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll ——w 69,663 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\msmsgsin.exe ——w 77,824 2002-08-29 04:37:20 C:\WINDOWS\ServicePackFiles\i386\auupdate.exe ——w 557,568 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\crypt32.dll ——w 33,808 2002-08-29 01:22:26 C:\WINDOWS\ServicePackFiles\i386\ntio.sys ——w 173,056 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\script.dll ——w 17,408 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll ——w 1,128,960 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll ——w 408,576 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll ——w 1,180,672 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\d3d8.dll ——w 598,071 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fpmmc.dll ——w 239,616 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\adsnt.dll ——w 613,888 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqqm.dll ——w 10,752 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\hh.exe ——w 180,224 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadox.dll ——w 127,872 2002-08-29 05:05:04 C:\WINDOWS\ServicePackFiles\i386\halaacpi.dll ——w 49,152 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msador15.dll ——w 1,947,904 2002-08-29 05:04:56 C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe ——w 210,944 2002-08-29 07:39:42 C:\WINDOWS\ServicePackFiles\i386\moricons.dll ——w 15,744 2002-08-29 05:32:50 C:\WINDOWS\ServicePackFiles\i386\usbohci.sys ——w 179,200 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\migism.dll ——w 13,184 2002-08-29 05:09:06 C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys ——w 170,496 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\migism_a.dll ——w 130,560 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll ——w 560,128 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\user32.dll ——w 559,616 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsst.dll ——w 62,464 2002-08-29 06:08:28 C:\WINDOWS\ServicePackFiles\i386\serial.sys ——w 406,528 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\aclayers.dll ——w 12,288 2002-08-29 07:39:46 C:\WINDOWS\ServicePackFiles\i386\mscpx32r.dll ——w 27,136 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\ssdpapi.dll ——w 5,120 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\hccoin.dll ——w 40,960 2002-08-29 05:40:46 C:\WINDOWS\ServicePackFiles\i386\tscupgrd.exe ——w 22,016 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\userinit.exe ——w 77,824 2002-06-27 20:38:46 C:\WINDOWS\ServicePackFiles\i386\msnmtllc.dll ——w 113,152 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\gprslt.exe ——w 165,888 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntmsdba.dll ——w 123,904 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\imapi.exe ——w 259,072 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wbemess.dll
Post #8
Combofix part3 29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll ——w 921,475 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll ——w 29,696 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll ——w 42,537 2002-08-29 01:23:06 C:\WINDOWS\ServicePackFiles\i386\keyboard.sys ——w 530,432 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll ——w 151,552 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dinput.dll ——w 19,456 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\licmgr10.dll ——w 159,360 2002-08-29 05:32:30 C:\WINDOWS\ServicePackFiles\i386\kmixer.sys ——w 22,528 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\at.exe ——w 15,120 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fp98sadm.exe ——w 59,904 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cabinet.dll ——w 569,344 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\oleaut32.dll ——w 8,704 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\hscupd.exe ——w 80,896 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\stdprov.dll ——w 57,344 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\msimn.exe ——w 20,480 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmasnt.dll ——w 2,086,400 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msi.dll ——w 94,208 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbccp32.dll ——w 246,784 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\snmpcl.dll ——w 522,240 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\printui.dll ——w 184,832 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\qcap.dll ——w 443,392 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsapi.dll ——w 127,034 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4areg.dll ——w 42,496 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ncobjapi.dll ——w 172,664 2002-07-16 22:55:02 C:\WINDOWS\ServicePackFiles\i386\xenroll.dll ——w 24,448 2002-08-29 05:33:16 C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys ——w 1,172,992 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll ——w 59,392 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\iesetup.dll ——w 44,032 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\regapi.dll ——w 599,040 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wininet.dll ——w 57,856 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\tlntadmn.exe ——w 28,160 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll ——w 221,215 2002-08-29 04:36:24 C:\WINDOWS\ServicePackFiles\i386\msgslang.dll ——w 28,672 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\ie4uinit.exe ——w 587,776 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\inetcomm.dll ——w 182,784 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msutb.dll ——w 53,248 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadcs.dll ——w 249,856 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mst120.dll ——w 18,944 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\faxpatch.exe ——w 316,416 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll ——w 147,513 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4apws.dll ——w 112,128 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntmarta.dll ——w 9,216 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dumprep.exe ——w 489,984 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll ——w 158,720 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\script_a.dll ——w 29,455 2002-08-29 03:16:30 C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys ——w 35,328 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll ——w 12,288 2002-08-29 05:35:42 C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys ——w 66,560 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\spoolss.dll ——w 569,344 2002-08-29 07:41:32 C:\WINDOWS\ServicePackFiles\i386\sspipes.scr ——w 258,048 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll ——w 471,040 2002-07-12 00:47:56 C:\WINDOWS\ServicePackFiles\i386\sqloledb.dll ——w 41,020 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4avnb.dll ——w 48,128 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\winsta.dll ——w 296,448 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmstream.dll ——w 61,440 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbccu32.dll ——w 602,112 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\drmv2clt.dll ——w 44,032 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\rdpclip.exe ——w 545,792 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wsecedit.dll ——w 58,880 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll ——w 213,023 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msltus40.dll ——w 57,984 2002-08-29 05:33:32 C:\WINDOWS\ServicePackFiles\i386\nic1394.sys ——w 512,031 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msexch40.dll ——w 76,830 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\drmstor.dll ——w 217,088 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rasapi32.dll ——w 36,352 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rshx32.dll ——w 53,248 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\packager.exe ——w 120,320 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\upnp.dll ——w 69,248 2002-08-29 05:17:58 C:\WINDOWS\ServicePackFiles\i386\sr.sys ——w 210,304 2002-08-29 07:40:44 C:\WINDOWS\ServicePackFiles\i386\perm2dll.dll ——w 49,152 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\browser.dll ——w 110,648 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmmfilt.dll ——w 699,392 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msxml2.dll ——w 3,494,303 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\nv4_disp.dll ——w 62,464 2002-08-29 05:11:52 C:\WINDOWS\ServicePackFiles\i386\spgrmr.dll ——w 2,042,240 2002-08-29 06:03:30 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ——w 26,112 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\tabletoc.dll ——w 56,832 2002-08-29 05:32:32 C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys ——w 37,888 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll ——w 446,464 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wmvdmoe.dll ——w 71,168 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\sdbinst.exe ——w 28,160 2002-08-29 05:08:24 C:\WINDOWS\ServicePackFiles\i386\ipevlpid.dll ——w 24,064 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsdrv.dll ——w 266,752 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msctf.dll ——w 40,960 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dcap32.dll ——w 49,212 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4awebs.dll ——w 221,184 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe ——w 225,280 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\es.dll ——w 565,248 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fastprox.dll ——w 110,080 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sbeio.dll ——w 34,304 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pngfilt.dll ——w 420,992 2002-08-29 03:34:38 C:\WINDOWS\ServicePackFiles\i386\ltmdmntt.sys ——w 56,832 2002-08-29 06:01:18 C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys ——w 57,984 2002-08-29 06:07:22 C:\WINDOWS\ServicePackFiles\i386\ipsec.sys ——w 165,376 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\tapi32.dll ——w 253,440 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\ddraw.dll ——w 193,024 2002-08-29 05:03:36 C:\WINDOWS\ServicePackFiles\i386\spra0416.dll ——w 34,560 2002-08-29 05:32:42 C:\WINDOWS\ServicePackFiles\i386\hidclass.sys ——w 143,360 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmft.dll ——w 28,672 2002-08-29 04:37:44 C:\WINDOWS\ServicePackFiles\i386\msnntmig.dll ——w 24,064 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\skeys.exe ——w 1,267,712 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll ——w 86,016 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll ——w 686,080 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\opengl32.dll ——w 13,824 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rassapi.dll ——w 520,192 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmpvis.dll ——w 174,592 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\scecli.dll ——w 51,072 2002-08-29 06:06:38 C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys ——w 17,408 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\log.dll ——w 360,448 2002-06-27 20:38:38 C:\WINDOWS\ServicePackFiles\i386\msmom.dll ——w 255,488 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\acverfyr.dll ——w 251,904 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\strmdll.dll ——w 13,184 2002-08-29 05:27:56 C:\WINDOWS\ServicePackFiles\i386\diskdump.sys ——w 130,048 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sysmod_a.dll ——w 86,528 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll ——w 40,448 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\ssinc51.dll ——w 401,920 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll ——w 252,416 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\unidrv.dll ——w 786,432 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dxdiag.exe ——w 131,072 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msadco.dll ——w 22,016 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll ——w 552,991 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msrepl40.dll ——w 108,544 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msv1_0.dll ——w 200,192 2002-08-29 05:04:00 C:\WINDOWS\ServicePackFiles\i386\spra0407.dll ——w 115,200 2002-08-29 06:20:46 C:\WINDOWS\ServicePackFiles\i386\ipseldpc.dll ——w 180,224 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmwb.dll ——w 97,792 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pchshell.dll ——w 318,464 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\ippromon.dll ——w 86,912 2002-08-29 05:27:50 C:\WINDOWS\ServicePackFiles\i386\atapi.sys ——w 94,208 2002-08-29 04:37:44 C:\WINDOWS\ServicePackFiles\i386\msnspell.dll ——w 143,872 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msimtf.dll ——w 479,261 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\vbscript.dll ——w 10,240 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\localui.dll ——w 136,704 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\schannel.dll ——w 10,240 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msrle32.dll ——w 12,800 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\ocgen.dll ——w 20,536 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shtml.dll ——w 344,095 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msxbde40.dll ——w 1,220,608 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msvidctl.dll ——w 250,368 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fxssvc.exe ——w 58,368 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe ——w 113,152 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\idq.dll ——w 53,248 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll ——w 241,695 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msjtes40.dll ——w 48,640 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll ——w 38,912 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll ——w 193,024 2002-08-29 05:04:24 C:\WINDOWS\ServicePackFiles\i386\spra0419.dll ——w 1,891,840 2002-08-29 05:04:56 C:\WINDOWS\ServicePackFiles\i386\ntkrnlmp.exe ——w 8,223 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\npwmsdrm.dll ——w 67,584 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\setup50.exe ——w 229,888 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msieftp.dll ——w 455,168 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pscript5.dll ——w 135,680 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dsprop.dll ——w 86,016 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdatl3.dll ——w 30,671 2002-08-29 03:16:26 C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys ——w 60,416 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ncprov.dll ——w 33,152 2002-08-29 05:35:46 C:\WINDOWS\ServicePackFiles\i386\netbios.sys ——w 131,968 2002-08-29 06:01:14 C:\WINDOWS\ServicePackFiles\i386\afd.sys ——w 163,840 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll ——w 638,976 2002-08-29 07:41:32 C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr ——w 469,504 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqutil.dll ——w 64,512 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\ciodm.dll ——w 63,547 2002-08-29 02:59:32 C:\WINDOWS\ServicePackFiles\i386\sla30nd5.sys ——w 102,509 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4atxt.dll ——w 27,008 2002-08-29 05:31:58 C:\WINDOWS\ServicePackFiles\i386\perm3.sys ——w 15,232 2002-08-29 05:32:56 C:\WINDOWS\ServicePackFiles\i386\usbintel.sys ——w 249,344 2002-08-29 07:39:24 C:\WINDOWS\ServicePackFiles\i386\wab32res.dll ——w 667,136 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\userenv.dll ——w 26,112 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmband.dll ——w 188,928 2002-08-29 05:04:32 C:\WINDOWS\ServicePackFiles\i386\spra041e.dll ——w 66,048 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\sigverif.exe ——w 77,440 2002-08-29 06:00:48 C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys ——w 421,919 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msrd2x40.dll ——w 61,440 2002-08-29 07:40:00 C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll ——w 263,680 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\duser.dll ——w 62,976 2002-08-29 05:09:12 C:\WINDOWS\ServicePackFiles\i386\pci.sys ——w 806,969 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\moviemk.exe ——w 101,376 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll ——w 407,552 2002-08-29 05:59:54 C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys ——w 22,528 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shfolder.dll ——w 1,004,032 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\explorer.exe ——w 6,656 2002-08-29 05:09:04 C:\WINDOWS\ServicePackFiles\i386\smbclass.sys ——w 161,792 2002-08-29 05:03:36 C:\WINDOWS\ServicePackFiles\i386\spra0804.dll ——w 24,960 2002-08-29 05:50:02 C:\WINDOWS\ServicePackFiles\i386\usbprint.sys ——w 360,448 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\callcont.dll ——w 215,040 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll ——w 33,792 2002-08-29 05:27:58 C:\WINDOWS\ServicePackFiles\i386\disk.sys ——w 32,512 2002-08-29 05:05:08 C:\WINDOWS\ServicePackFiles\i386\amdk7.sys ——w 135,680 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rdchost.dll ——w 172,544 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmime.dll ——w 1,349,120 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\query.dll ——w 81,408 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msoert2.dll ——w 193,024 2002-08-29 05:04:30 C:\WINDOWS\ServicePackFiles\i386\spra0424.dll ——w 32,828 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp40ext.dll ——w 157,696 2002-08-29 05:06:18 C:\WINDOWS\ServicePackFiles\i386\oschoice.exe ——w 134,144 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\regedit.exe ——w 54,272 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\clusapi.dll ——w 208,896 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe ——w 149,504 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsui.dll ——w 380,445 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\expsrv.dll ——w 995,328 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\conf.exe ——w 557,056 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\comctl32.dll ——w 29,696 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\asr_pfu.exe ——w 504,832 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msftedit.dll ——w 132,096 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msrating.dll ——w 73,728 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\ils.dll ——w 56,320 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\remotepg.dll ——w 319,760 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msnsspc.dll ——w 74,240 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\rtcshare.exe ——w 78,336 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\irmon.dll ——w 24,576 2002-08-29 04:36:06 C:\WINDOWS\ServicePackFiles\i386\dbmsvinn.dll ——w 294,912 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wmvdmod.dll ——w 141,312 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sysmod.dll ——w 487,424 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msado15.dll ——w 36,224 2002-08-29 05:33:22 C:\WINDOWS\ServicePackFiles\i386\avc.sys ——w 4,096 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdaenum.dll ——w 189,440 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll ——w 87,552 2002-08-29 05:58:40 C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys ——w 41,984 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\alg.exe ——w 195,072 2002-08-29 05:04:22 C:\WINDOWS\ServicePackFiles\i386\spra0415.dll ——w 182,784 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\snmpsmir.dll ——w 294,912 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\iedkcs32.dll ——w 43,008 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll ——w 377,984 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll ——w 395,776 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\ntvdm.exe ——w 471,040 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cryptui.dll ——w 16,384 2002-08-29 05:33:24 C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys ——w 10,496 2002-08-29 05:27:58 C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys ——w 129,024 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\sessmgr.exe ——w 39,424 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\net.exe ——w 20,540 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\admin.dll ——w 11,776 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\lsass.exe ——w 245,760 2002-08-29 04:37:30 C:\WINDOWS\ServicePackFiles\i386\logonmgr.dll ——w 187,904 2002-08-29 05:03:28 C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll ——w 188,494 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fpcount.exe ——w 1,142,784 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\quartz.dll ——w 504,320 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\logonui.exe ——w 99,328 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\win32spl.dll ——w 73,216 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\iislog51.dll ——w 264,704 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll ——w 24,632 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fpadmcgi.exe ——w 128,512 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe ——w 12,800 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\runonce.exe ——w 59,392 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll ——w 139,264 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll ——w 190,464 2002-08-29 05:04:14 C:\WINDOWS\ServicePackFiles\i386\spra0427.dll ——w 50,560 2002-08-29 05:33:20 C:\WINDOWS\ServicePackFiles\i386\1394bus.sys ——w 31,744 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pid.dll ——w 516,608 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\winlogon.exe ——w 455,680 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\urlmon.dll ——w 114,176 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\input.dll ——w 158,720 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\credui.dll ——w 1,021,952 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\browseui.dll ——w 121,344 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\softkbd.dll ——w 3,584 2002-08-29 05:14:26 C:\WINDOWS\ServicePackFiles\i386\dsprpres.dll ——w 13,312 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\medctrro.exe ——w 11,615 2002-08-29 03:16:24 C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys ——w 19,328 2002-08-29 05:32:50 C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys ——w 157,696 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\npdrmv2.dll ——w 192,512 2002-08-29 05:03:44 C:\WINDOWS\ServicePackFiles\i386\spra0406.dll ——w 24,448 2002-08-29 05:28:32 C:\WINDOWS\ServicePackFiles\i386\memstpci.sys ——w 18,944 2002-08-29 07:41:30 C:\WINDOWS\ServicePackFiles\i386\ssbezier.scr ——w 8,192 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\autolfn.exe ——w 22,016 2002-08-29 05:27:02 C:\WINDOWS\ServicePackFiles\i386\mouclass.sys ——w 77,824 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmchat.dll ——w 930,304 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\kernel32.dll ——w 105,984 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\netdde.exe ——w 174,592 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msnetobj.dll ——w 190,976 2002-08-29 05:04:24 C:\WINDOWS\ServicePackFiles\i386\spra0418.dll ——w 339,968 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\mspaint.exe ——w 82,432 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll ——w 91,136 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\advpack.dll ——w 200,704 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wordpad.exe ——w 16,896 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\snmpapi.dll ——w 12,288 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\encapi.dll ——w 9,856 2002-08-29 05:35:44 C:\WINDOWS\ServicePackFiles\i386\tunmp.sys ——w 152,576 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msmqocm.dll ——w 135,552 2002-08-29 05:32:52 C:\WINDOWS\ServicePackFiles\i386\usbport.sys ——w 94,208 2002-08-29 04:37:46 C:\WINDOWS\ServicePackFiles\i386\popc.dll ——w 231,552 2002-08-29 03:00:48 C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys ——w 42,496 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\coadmin.dll ——w 115,712 2002-08-29 05:09:12 C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys ——w 337,920 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\dxtmsft.dll ——w 231,424 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\iepeers.dll ——w 14,366 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\asfsipc.dll ——w 26,752 2002-08-29 05:31:58 C:\WINDOWS\ServicePackFiles\i386\perm2.sys ——w 55,808 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll ——w 71,168 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\storprop.dll ——w 28,672 2002-08-29 04:34:36 C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll ——w 253,983 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mstext40.dll ——w 81,920 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\trkwks.dll ——w 189,440 2002-08-29 05:04:32 C:\WINDOWS\ServicePackFiles\i386\spra041d.dll ——w 33,280 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\shmgrate.exe ——w 162,120 2002-06-27 20:38:36 C:\WINDOWS\ServicePackFiles\i386\dw.exe ——w 47,616 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\utilman.exe ——w 47,580 2002-08-29 01:08:54 C:\WINDOWS\ServicePackFiles\i386\ntdetect.com ——w 182,400 2002-08-29 05:06:36 C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys ——w 16,384 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\ups.exe ——w 8,336,384 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shell32.dll ——w 109,152 2002-08-21 00:29:46 C:\WINDOWS\ServicePackFiles\i386\msgsc.dll ——w 7,040 2002-08-29 05:27:12 C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys ——w 114,688 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\guitrn.dll ——w 71,168 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netoc.dll ——w 106,496 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\url.dll ——w 19,456 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fontview.exe ——w 32,000 2002-08-29 05:05:06 C:\WINDOWS\ServicePackFiles\i386\amdk6.sys ——w 138,752 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll ——w 536,576 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msobmain.dll ——w 27,440 2002-03-26 00:02:14 C:\WINDOWS\ServicePackFiles\i386\secdrv.sys ——w 444,928 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll ——w 91,648 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\iuctl.dll ——w 137,088 2002-08-29 03:00:54 C:\WINDOWS\ServicePackFiles\i386\essm2e.sys ——w 155,648 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll ——w 14,208 2002-08-29 05:48:52 C:\WINDOWS\ServicePackFiles\i386\usbscan.sys ——w 12,288 2002-08-29 07:39:36 C:\WINDOWS\ServicePackFiles\i386\odbcp32r.dll ——w 61,952 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sti.dll ——w 5,888 2002-08-29 05:32:28 C:\WINDOWS\ServicePackFiles\i386\splitter.sys ——w 51,968 2002-08-29 05:32:50 C:\WINDOWS\ServicePackFiles\i386\usbhub.sys ——w 409,088 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\vssapi.dll ——w 932,864 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\setupapi.dll ——w 203,776 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\mscandui.dll ——w 110,592 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msdarem.dll ——w 24,576 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msxactps.dll ——w 132,695 2002-08-29 02:59:32 C:\WINDOWS\ServicePackFiles\i386\netwlan5.sys ——w 196,096 2002-08-29 05:04:06 C:\WINDOWS\ServicePackFiles\i386\spra040e.dll ——w 392,704 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll ——w 7,168 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsperf.dll ——w 76,032 2002-08-29 05:27:32 C:\WINDOWS\ServicePackFiles\i386\parport.sys ——w 226,304 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\smi2smir.exe ——w 8,832 2002-08-29 07:40:44 C:\WINDOWS\ServicePackFiles\i386\framebuf.dll ——w 91,136 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rastls.dll ——w 154,112 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netman.dll ——w 311,327 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmv8dmod.dll ——w 189,952 2002-08-29 05:04:16 C:\WINDOWS\ServicePackFiles\i386\spra0414.dll ——w 65,601 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe ——w 49,152 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\npptools.dll ——w 252,672 2002-08-29 07:40:44 C:\WINDOWS\ServicePackFiles\i386\perm3dd.dll ——w 668,672 2002-08-29 07:40:42 C:\WINDOWS\ServicePackFiles\i386\ntdll.dll ——w 9,728 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\mstinit.exe ——w 742,400 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\helpctr.exe ——w 56,576 2002-08-29 05:27:46 C:\WINDOWS\ServicePackFiles\i386\redbook.sys ——w 189,440 2002-08-29 05:04:16 C:\WINDOWS\ServicePackFiles\i386\spra0426.dll ——w 19,456 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\ersvc.dll ——w 98,304 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\oleprn.dll ——w 40,960 2002-08-29 07:39:36 C:\WINDOWS\ServicePackFiles\i386\ocmsn.dll ——w 36,922 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\imeshare.dll ——w 82,944 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\psbase.dll ——w 19,328 2002-08-29 05:32:50 C:\WINDOWS\ServicePackFiles\i386\usbehci.sys ——w 1,341,440 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll ——w 164,352 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqtrig.dll ——w 107,520 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll ——w 75,912 2002-08-29 07:46:44 C:\WINDOWS\ServicePackFiles\i386\rdpwsx.dll ——w 192,512 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mswebdvd.dll ——w 186,880 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\certcli.dll ——w 253,952 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmpcd.dll ——w 122,368 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\itss.dll ——w 59,648 2002-08-29 05:58:52 C:\WINDOWS\ServicePackFiles\i386\cdfs.sys ——w 36,352 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sens.dll ——w 13,312 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wship6.dll ——w 113,664 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\tsoc.dll ——w 339,456 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\asp51.dll ——w 4,126 2002-08-29 07:39:46 C:\WINDOWS\ServicePackFiles\i386\msdxmlc.dll ——w 395,264 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsxp32.dll ——w 84,480 2002-08-29 03:00:56 C:\WINDOWS\ServicePackFiles\i386\ac97via.sys ——w 189,440 2002-08-29 05:03:44 C:\WINDOWS\ServicePackFiles\i386\spra0405.dll ——w 17,408 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\psapi.dll ——w 12,288 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\rdsaddin.exe ——w 1,298,432 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmpcore.dll ——w 62,976 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shgina.dll ——w 266,240 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\drmclien.dll ——w 339,456 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\usp10.dll ——w 227,840 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\dsquery.dll ——w 32,827 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\tcptest.exe ——w 31,488 2002-08-29 05:05:08 C:\WINDOWS\ServicePackFiles\i386\crusoe.sys ——w 34,304 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\md5filt.dll ——w 71,168 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\telnet.exe ——w 891,711 2002-08-29 03:16:30 C:\WINDOWS\ServicePackFiles\i386\nv4_mini.sys ——w 68,864 2002-08-29 05:34:42 C:\WINDOWS\ServicePackFiles\i386\bridge.sys ——w 125,440 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\aclua.dll ——w 89,088 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqsec.dll ——w 133,632 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\nwprovau.dll ——w 36,864 2002-08-29 04:37:46 C:\WINDOWS\ServicePackFiles\i386\msnunin.exe ——w 24,576 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\conime.exe ——w 138,240 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\repdrvfs.dll ——w 348,191 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\mspbde40.dll ——w 115,200 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\net1.exe ——w 10,880 2002-08-29 03:00:48 C:\WINDOWS\ServicePackFiles\i386\admjoy.sys ——w 667,648 2002-08-29 07:41:30 C:\WINDOWS\ServicePackFiles\i386\ss3dfo.scr ——w 99,328 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe ——w 203,776 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe ——w 27,648 2002-08-29 05:08:24 C:\WINDOWS\ServicePackFiles\i386\ipselpid.dll ——w 62,976 2002-08-29 07:40:10 C:\WINDOWS\ServicePackFiles\i386\browselc.dll ——w 196,608 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sqlxmlx.dll ——w 4,992 2002-08-29 05:27:12 C:\WINDOWS\ServicePackFiles\i386\mstee.sys ——w 146,432 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\triedit.dll ——w 857,600 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll ——w 198,144 2002-08-29 05:03:52 C:\WINDOWS\ServicePackFiles\i386\spra0408.dll ——w 101,376 2002-08-29 05:05:06 C:\WINDOWS\ServicePackFiles\i386\hal.dll ——w 137,216 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll ——w 64,000 2002-08-29 05:06:20 C:\WINDOWS\ServicePackFiles\i386\udfs.sys ——w 9,856 2002-08-29 05:32:44 C:\WINDOWS\ServicePackFiles\i386\gameenum.sys ——w 339,456 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\w3svc.dll ——w 208,896 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nac.dll ——w 134,272 2002-08-29 06:01:00 C:\WINDOWS\ServicePackFiles\i386\portcls.sys ——w 334,848 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\smlogcfg.dll ——w 57,856 2002-08-29 05:32:34 C:\WINDOWS\ServicePackFiles\i386\drmk.sys ——w 32,768 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdfmap.dll ——w 14,976 2002-08-29 05:09:02 C:\WINDOWS\ServicePackFiles\i386\smbbatt.sys ——w 32,768 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe ——w 938,496 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\syssetup.dll ——w 228,864 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msoeacct.dll ——w 24,576 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nmmkcert.dll ——w 14,848 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rdpsnd.dll ——w 231,424 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\upnpui.dll ——w 15,872 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\medctroc.dll ——w 674,816 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sxs.dll ——w 65,536 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msconf.dll ——w 385,024 2002-08-07 22:25:02 C:\WINDOWS\ServicePackFiles\i386\sqlsrv32.dll ——w 194,560 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\dxtrans.dll ——w 44,416 2002-08-29 05:32:34 C:\WINDOWS\ServicePackFiles\i386\stream.sys ——w 16,384 2002-05-14 22:16:22 C:\WINDOWS\ServicePackFiles\i386\tcptsat.dll ——w 87,304 2002-08-29 07:46:44 C:\WINDOWS\ServicePackFiles\i386\rdpdd.dll ——w 1,813,632 2002-08-29 06:14:20 C:\WINDOWS\ServicePackFiles\i386\win32k.sys ——w 271,360 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxscomex.dll ——w 17,408 2002-08-29 07:41:30 C:\WINDOWS\ServicePackFiles\i386\ssmyst.scr ——w 142,208 2002-08-29 03:16:38 C:\WINDOWS\ServicePackFiles\i386\aec.sys ——w 117,760 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\stobject.dll ——w 60,416 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\shimeng.dll ——w 582,656 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll ——w 55,680 2002-08-29 05:33:20 C:\WINDOWS\ServicePackFiles\i386\ohci1394.sys ——w 88,064 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\tscfgwmi.dll ——w 113,664 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\sctasks.exe ——w 13,824 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\nppagent.exe ——w 107,008 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll ——w 182,272 2002-08-29 05:04:00 C:\WINDOWS\ServicePackFiles\i386\spra040d.dll ——w 51,712 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\ipconfig.exe ——w 1,220,608 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wmvcore.dll ——w 20,480 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\hidserv.dll ——w 163,328 2002-08-29 05:58:50 C:\WINDOWS\ServicePackFiles\i386\rdbss.sys ——w 104,064 2002-08-29 06:12:54 C:\WINDOWS\ServicePackFiles\i386\mup.sys ——w 38,272 2002-08-29 05:34:34 C:\WINDOWS\ServicePackFiles\i386\nmnt.sys ——w 310,272 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\winhttp.dll ——w 24,576 2002-08-29 04:37:22 C:\WINDOWS\ServicePackFiles\i386\custdial.dll ——w 61,952 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\webclnt.dll ——w 32,384 2002-08-29 02:59:22 C:\WINDOWS\ServicePackFiles\i386\usb101et.sys ——w 46,336 2002-08-29 06:12:48 C:\WINDOWS\ServicePackFiles\i386\raspptp.sys ——w 158,720 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rasmans.dll ——w 19,456 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\savedump.exe ——w 196,608 2002-08-29 05:04:16 C:\WINDOWS\ServicePackFiles\i386\spra0413.dll ——w 37,504 2002-08-29 05:05:06 C:\WINDOWS\ServicePackFiles\i386\p3.sys ——w 189,440 2002-08-29 05:04:38 C:\WINDOWS\ServicePackFiles\i386\spra041f.dll ——w 60,928 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\ipv6.exe ——w 478,720 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqsnap.dll ——w 245,760 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msscp.dll ——w 450,176 2002-08-29 03:16:16 C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys ——w 5,120 2002-08-29 07:40:06 C:\WINDOWS\ServicePackFiles\i386\asferror.dll ——w 345,600 2002-08-29 07:41:14 C:\WINDOWS\ServicePackFiles\i386\snmpincl.dll ——w 1,677,312 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wmvcore2.dll ——w 332,928 2002-08-29 05:58:12 C:\WINDOWS\ServicePackFiles\i386\tcpip.sys ——w 24,576 2002-08-29 04:36:06 C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll ——w 110,080 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll ——w 164,864 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqrt.dll ——w 25,600 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll ——w 219,136 2002-08-29 07:40:48 C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll ——w 23,552 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll ——w 307,712 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cscui.dll ——w 175,104 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\mspmsp.dll ——w 187,392 2002-08-29 05:03:52 C:\WINDOWS\ServicePackFiles\i386\spra0425.dll ——w 167,552 2002-08-29 06:09:26 C:\WINDOWS\ServicePackFiles\i386\ndis.sys ——w 703,488 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe ——w 122,880 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxsocm.dll ——w 67,200 2002-08-29 05:45:22 C:\WINDOWS\ServicePackFiles\i386\mqac.sys ——w 67,584 2002-08-29 07:41:02 C:\WINDOWS\ServicePackFiles\i386\msctfp.dll ——w 57,344 2002-08-29 05:33:30 C:\WINDOWS\ServicePackFiles\i386\arp1394.sys ——w 696,320 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sapi.dll ——w 297,984 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\scesrv.dll ——w 413,696 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\oledb32.dll ——w 250,368 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mstask.dll ——w 986,112 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\danim.dll ——w 161,792 2002-08-29 05:03:44 C:\WINDOWS\ServicePackFiles\i386\spra0404.dll ——w 46,336 2002-08-29 06:08:44 C:\WINDOWS\ServicePackFiles\i386\classpnp.sys ——w 103,424 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dgnet.dll ——w 235,520 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\sptip.dll ——w 56,320 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll ——w 10,752 2002-08-29 05:48:14 C:\WINDOWS\ServicePackFiles\i386\spiisupd.exe ——w 94,720 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dmusic.dll ——w 1,169,920 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\ole32.dll ——w 978,944 2002-06-27 20:38:42 C:\WINDOWS\ServicePackFiles\i386\msnmetal.dll ——w 49,664 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll ——w 79,488 2002-08-29 05:36:14 C:\WINDOWS\ServicePackFiles\i386\ipnat.sys ——w 122,880 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbcconf.dll ——w 96,256 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll ——w 272,896 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\kerberos.dll ——w 200,704 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbc32.dll ——w 6,656 2002-08-29 05:28:02 C:\WINDOWS\ServicePackFiles\i386\ltotape.sys ——w 254,976 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\pdh.dll ——w 38,400 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ntlanman.dll ——w 221,696 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\qmgr.dll ——w 480,256 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll ——w 188,480 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe ——w 302,080 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\untfs.dll ——w 109,840 2002-08-29 07:41:24 C:\WINDOWS\ServicePackFiles\i386\fp98swin.exe ——w 20,480 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\dbmsadsn.dll ——w 186,880 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\comadmin.dll ——w 19,456 2002-08-29 07:40:52 C:\WINDOWS\ServicePackFiles\i386\evntrprv.dll ——w 98,816 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe ——w 193,024 2002-08-29 05:04:30 C:\WINDOWS\ServicePackFiles\i386\spra041b.dll ——w 129,920 2002-08-29 05:05:04 C:\WINDOWS\ServicePackFiles\i386\halmacpi.dll ——w 11,776 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sigtab.dll ——w 22,528 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\slayerxp.dll ——w 200,192 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\termsrv.dll ——w 77,440 2002-08-29 05:05:04 C:\WINDOWS\ServicePackFiles\i386\halacpi.dll ——w 219,648 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\logon.scr ——w 89,088 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\policman.dll ——w 316,416 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll ——w 198,144 2002-08-29 05:04:00 C:\WINDOWS\ServicePackFiles\i386\spra040c.dll ——w 435,200 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll ——w 218,112 2002-08-29 07:41:12 C:\WINDOWS\ServicePackFiles\i386\sbe.dll ——w 440,320 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\mshtmled.dll ——w 391,168 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fxstiff.dll ——w 12,047 2002-08-29 03:16:26 C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys ——w 100,352 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\guitrn_a.dll ——w 47,488 2002-08-29 05:27:56 C:\WINDOWS\ServicePackFiles\i386\cdrom.sys ——w 20,992 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\setup.exe ——w 36,224 2002-08-29 02:59:12 C:\WINDOWS\ServicePackFiles\i386\an983.sys ——w 249,856 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\unregmp2.exe ——w 154,624 2002-08-29 02:59:26 C:\WINDOWS\ServicePackFiles\i386\wlluc48.sys ——w 565,760 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\autochk.exe ——w 359,936 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll ——w 872,557 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\fp4awel.dll ——w 168,448 2002-08-29 05:04:08 C:\WINDOWS\ServicePackFiles\i386\spra0412.dll ——w 324,608 2002-08-29 07:40:50 C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll ——w 134,144 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\ipv6mon.dll ——w 368,710 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msisam11.dll ——w 48,384 2002-08-29 06:06:38 C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys ——w 618,605 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4autl.dll ——w 149,504 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll ——w 57,344 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\rrcm.dll ——w 122,368 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll ——w 1,998,848 2002-08-29 07:39:24 C:\WINDOWS\ServicePackFiles\i386\wmploc.dll ——w 294,912 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\dlimport.exe ——w 357,376 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\qdvd.dll ——w 241,725 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msuni11.dll ——w 45,568 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\smss.exe ——w 28,160 2002-08-29 05:32:54 C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys ——w 69,632 2002-08-29 07:40:58 C:\WINDOWS\ServicePackFiles\i386\inseng.dll ——w 147,456 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\odbctrac.dll ——w 82,035 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4anscp.dll ——w 381,440 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\lmrt.dll ——w 56,591 2002-08-29 03:16:24 C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys ——w 403,456 2002-08-29 05:09:00 C:\WINDOWS\ServicePackFiles\i386\winbrand.dll ——w 38,912 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll ——w 1,174,016 2002-08-29 07:41:06 C:\WINDOWS\ServicePackFiles\i386\msoe.dll ——w 39,808 2002-08-29 05:28:08 C:\WINDOWS\ServicePackFiles\i386\imapi.sys ——w 4,639 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe ——w 16,384 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\nddenb32.dll ——w 67,584 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fdeploy.dll ——w 53,248 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\h323cc.dll ——w 124,928 2002-08-29 02:27:32 C:\WINDOWS\ServicePackFiles\i386\dssenh.dll ——w 468,480 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\iis.dll ——w 48,128 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\reg.exe ——w 169,984 2002-08-29 02:59:16 C:\WINDOWS\ServicePackFiles\i386\pcx500.sys ——w 7,168 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\tlntsvrp.dll ——w 133,632 2002-08-29 02:27:32 C:\WINDOWS\ServicePackFiles\i386\rsaenh.dll ——w 189,440 2002-08-29 05:04:00 C:\WINDOWS\ServicePackFiles\i386\spra041a.dll ——w 36,352 2002-08-29 07:40:56 C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll ——w 54,272 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\ndisnpp.dll ——w 196,288 2002-08-29 05:37:54 C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys ——w 16,640 2002-08-29 05:28:06 C:\WINDOWS\ServicePackFiles\i386\ppa3.sys ——w 496,128 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\mstime.dll ——w 57,344 2002-08-29 07:41:10 C:\WINDOWS\ServicePackFiles\i386\nwwks.dll ——w 116,736 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\mplay32.exe ——w 16,437 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\shtml.exe ——w 21,343 2002-08-29 03:16:28 C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys ——w 13,312 2002-08-29 07:41:22 C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe ——w 56,832 2002-08-29 07:41:20 C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll ——w 32,256 2002-08-29 07:41:18 C:\WINDOWS\ServicePackFiles\i386\umandlg.dll ——w 32,826 2002-08-29 07:40:54 C:\WINDOWS\ServicePackFiles\i386\fp4avss.dll ——w 607,360 2002-08-29 03:34:36 C:\WINDOWS\ServicePackFiles\i386\ltmdmnt.sys ——w 84,992 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\muisetup.exe ——w 186,880 2002-08-29 05:03:52 C:\WINDOWS\ServicePackFiles\i386\spra040b.dll ——w 323,072 2002-08-29 07:41:08 C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll ——w 145,408 2002-08-29 07:41:26 C:\WINDOWS\ServicePackFiles\i386\msconfig.exe ——w 319,542 2002-08-29 07:39:24 C:\WINDOWS\ServicePackFiles\i386\wmmres.dll ——w 126,976 2002-08-29 02:57:36 C:\WINDOWS\ServicePackFiles\i386\netfxocm.dll ——w 57,374 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msgrocm.dll ——w 171,520 2002-08-29 05:04:08 C:\WINDOWS\ServicePackFiles\i386\spra0411.dll ——w 54,144 2002-08-29 05:32:48 C:\WINDOWS\ServicePackFiles\i386\gckernel.sys ——w 16,384 2002-08-29 07:41:04 C:\WINDOWS\ServicePackFiles\i386\msdatt.dll ——w 329,216 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wmic.exe ——w 6,912 2002-08-29 05:32:42 C:\WINDOWS\ServicePackFiles\i386\hidir.sys ——w 130,048 2002-08-29 07:41:00 C:\WINDOWS\ServicePackFiles\i386\mqad.dll ——w 520,192 2002-08-29 07:41:28 C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe ——w 455,168 2002-08-29 01:39:50 C:\WINDOWS\ServicePackFiles\i386\lang\tintsetp.exe ——w 173,568 2002-08-29 01:39:42 C:\WINDOWS\ServicePackFiles\i386\lang\chtskf.dll ——w 10,240 2002-08-29 01:39:48 C:\WINDOWS\ServicePackFiles\i386\lang\tmigrate.dll ——w 262,201 2002-08-29 01:38:52 C:\WINDOWS\ServicePackFiles\i386\lang\imjputy.exe ——w 233,528 2002-08-29 01:38:46 C:\WINDOWS\ServicePackFiles\i386\lang\imjprw.exe ——w 15,360 2002-08-29 01:39:08 C:\WINDOWS\ServicePackFiles\i386\lang\padrs804.dll ——w 97,792 2002-08-29 01:39:42 C:\WINDOWS\ServicePackFiles\i386\lang\chtmbx.dll ——w 827,438 2002-06-12 23:14:46 C:\WINDOWS\ServicePackFiles\i386\lang\imjp81k.dll ——w 70,144 2002-08-29 01:39:06 C:\WINDOWS\ServicePackFiles\i386\lang\pintlphr.exe ——w 56,320 2002-08-29 01:39:42 C:\WINDOWS\ServicePackFiles\i386\lang\chtskdic.dll ——w 86,074 2002-08-29 01:39:08 C:\WINDOWS\ServicePackFiles\i386\lang\voicesub.dll ——w 201,216 2002-08-29 01:39:42 C:\WINDOWS\ServicePackFiles\i386\lang\cintime.dll ——w 72,192 2002-08-29 05:12:18 C:\WINDOWS\ServicePackFiles\i386\lang\uniime.dll ——w 99,328 2002-08-29 05:12:30 C:\WINDOWS\ServicePackFiles\i386\lang\imekrcic.dll ——w 155,706 2002-08-29 01:38:40 C:\WINDOWS\ServicePackFiles\i386\lang\imjpdsvr.exe ——w 196,666 2002-08-29 01:38:42 C:\WINDOWS\ServicePackFiles\i386\lang\imjpinst.exe ——w 480,256 2002-08-29 01:39:44 C:\WINDOWS\ServicePackFiles\i386\lang\cintsetp.exe ——w 426,042 2002-08-29 01:39:06 C:\WINDOWS\ServicePackFiles\i386\lang\voicepad.dll ——w 44,032 2002-08-29 01:39:50 C:\WINDOWS\ServicePackFiles\i386\lang\tintlphr.exe ——w 15,872 2002-08-29 01:39:46 C:\WINDOWS\ServicePackFiles\i386\lang\padrs404.dll ——w 81,977 2002-08-29 01:38:40 C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.dll ——w 57,400 2002-08-29 01:38:26 C:\WINDOWS\ServicePackFiles\i386\lang\cplexe.exe ——w 53,760 2002-08-29 01:39:08 C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsd.dll ——w 59,392 2002-08-29 01:39:06 C:\WINDOWS\ServicePackFiles\i386\lang\imscinst.exe ——w 360,494 2002-08-07 23:35:54 C:\WINDOWS\ServicePackFiles\i386\lang\imjpcic.dll ——w 67,584 2002-08-29 01:39:08 C:\WINDOWS\ServicePackFiles\i386\lang\pmigrate.dll ——w 716,857 2002-08-29 01:38:40 C:\WINDOWS\ServicePackFiles\i386\lang\imjpcus.dll ——w 274,490 2002-08-29 01:38:54 C:\WINDOWS\ServicePackFiles\i386\lang\imjputyc.dll ——w 208,953 2002-08-29 01:38:42 C:\WINDOWS\ServicePackFiles\i386\lang\imjpmig.exe ——w 307,258 2002-08-29 01:38:40 C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.exe ——w 102,456 2002-08-29 01:39:02 C:\WINDOWS\ServicePackFiles\i386\lang\imlang.dll ——w 175,104 2002-08-29 01:39:08 C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsa.dll ——w 668,672 2002-08-29 07:40:42 C:\WINDOWS\$NtUninstallQ815021$\ntdll.dll —-a-w 107,520 2002-08-29 07:40:48 C:\WINDOWS\AppPatch\acxtrnal.dll —-a-w 255,488 2002-08-29 07:40:48 C:\WINDOWS\AppPatch\acverfyr.dll —-a-w 219,136 2002-08-29 07:40:48 C:\WINDOWS\AppPatch\acspecfc.dll —-a-w 125,440 2002-08-29 07:40:48 C:\WINDOWS\AppPatch\aclua.dll —-a-w 406,528 2002-08-29 07:40:48 C:\WINDOWS\AppPatch\aclayers.dll —-a-w 1,818,624 2002-08-29 07:40:48 C:\WINDOWS\AppPatch\acgenral.dll ——w 68,608 2002-12-03 22:55:20 C:\WINDOWS\$NtUninstallQ810833$\locator.exe ——w 407,552 2002-08-29 05:59:54 C:\WINDOWS\$NtUninstallQ810577$\mrxsmb.sys ——w 46,336 2002-08-29 06:12:48 C:\WINDOWS\$NtUninstallQ329834$\raspptp.sys ——w 226,304 2002-08-29 07:41:18 C:\WINDOWS\$NtUninstallQ329441$\srrstr.dll ——w 126,464 2002-09-19 15:27:40 C:\WINDOWS\$NtUninstallQ329390$\shmedia.dll ——w 322,304 2002-10-31 18:45:16 C:\WINDOWS\$NtUninstallQ329170$\srv.sys ——w 316,416 2002-08-29 07:41:20 C:\WINDOWS\$NtUninstallQ329048$\zipfldr.dll ——w 250,368 2002-08-29 07:40:56 C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll ——w 671,744 2002-08-29 07:41:00 C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll ——w 51,712 2004-03-30 01:25:46 C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll ——w 968,192 2002-08-29 07:41:04 C:\WINDOWS\$NtUninstallKB835732$\msgina.dll ——w 136,704 2004-03-30 01:25:48 C:\WINDOWS\$NtUninstallKB835732$\schannel.dll ——w 593,408 2004-03-30 01:25:42 C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll ——w 435,200 2002-08-29 07:40:58 C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll ——w 36,864 2004-03-30 01:25:44 C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll ——w 309,248 2002-08-29 07:41:08 C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll ——w 548,864 2002-08-29 07:41:10 C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll ——w 40,960 2004-03-30 01:25:40 C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll ——w 364,544 2004-03-30 01:25:40 C:\WINDOWS\$NtUninstallKB835732$\callcont.dll ——w 253,952 2004-03-30 01:25:46 C:\WINDOWS\$NtUninstallKB835732$\mst120.dll ——w 73,728 2004-03-30 01:25:46 C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll ——w 742,400 2002-08-29 07:41:24 C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe ——w 40,960 2004-03-30 01:25:40 C:\WINDOWS\$NtUninstallKB835732$\evtgprov.dll ——w 596,480 2004-03-06 02:04:58 C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll ——w 110,080 2004-03-06 02:04:58 C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll ——w 1,177,088 2004-03-06 02:05:02 C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll ——w 499,200 2004-03-06 02:05:04 C:\WINDOWS\$NtUninstallKB828741$\comuid.dll ——w 226,816 2004-03-06 02:05:04 C:\WINDOWS\$NtUninstallKB828741$\es.dll ——w 365,568 2004-03-06 02:05:06 C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll ——w 977,920 2004-03-06 02:05:08 C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll ——w 150,528 2004-03-06 02:05:08 C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll ——w 64,512 2004-03-06 02:05:10 C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll ——w 82,432 2004-03-06 02:05:10 C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll ——w 1,169,920 2002-08-29 07:41:10 C:\WINDOWS\$NtUninstallKB828741$\ole32.dll ——w 530,432 2002-08-29 07:41:10 C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll ——w 260,608 2002-08-29 07:41:10 C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll ——w 97,280 2004-03-06 02:05:18 C:\WINDOWS\$NtUninstallKB828741$\txflog.dll ——w 225,280 2004-03-06 02:04:56 C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll ——w 499,712 2004-03-05 22:05:00 C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll ——w 64,512 2004-03-06 02:05:00 C:\WINDOWS\$NtUninstallKB828741$\colbact.dll ——w 187,904 2004-03-06 02:05:00 C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll —-a-w 249,856 2002-08-29 07:41:28 C:\WINDOWS\inf\unregmp2.exe ——w 392,576 2002-11-18 15:27:40 C:\WINDOWS\Driver Cache\i386\mrxsmb.sys —-a-w 1,703,936 2002-08-29 07:41:32 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\GdiPlus.dll —-a-w 921,600 2002-08-29 07:41:32 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll —-a-w 323,072 2002-08-29 07:41:32 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcrt.dll —-a-w 50,688 2002-08-29 07:41:32 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcirt.dll —-a-w 235,520 2002-08-29 07:41:18 C:\WINDOWS\ime\sptip.dll —-a-w 121,344 2002-08-29 07:41:14 C:\WINDOWS\ime\softkbd.dll —-a-w 203,776 2002-08-29 07:41:02 C:\WINDOWS\ime\mscandui.dll ——w 62,464 2002-08-29 05:11:52 C:\WINDOWS\ime\spgrmr.dll —-a-w 798,782 2002-08-29 07:41:18 C:\WINDOWS\srchasst\srchui.dll . —-a-w 1,000,960 2001-08-23 16:00:00 C:\WINDOWS\explorer.exe —-a-w 134,144 2001-08-23 16:00:00 C:\WINDOWS\regedit.exe —-a-w 266,752 2001-08-23 16:00:00 C:\WINDOWS\winhlp32.exe —-a-w 589,881 2003-01-13 18:57:58 C:\WINDOWS\SYSTEM32\jscript.dll —-a-w 100,712 2002-05-23 14:52:40 C:\WINDOWS\SYSTEM32\iuctl.dll —-a-w 45,568 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\smss.exe —-a-w 565,760 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\autochk.exe —-a-w 1,562,112 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sfcfiles.dll —-a-w 549,888 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\advapi32.dll —-a-w 258,048 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\comdlg32.dll —-a-w 126,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\imagehlp.dll —-a-w 926,720 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\kernel32.dll —-a-w 569,344 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\oleaut32.dll —-a-w 8,322,560 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shell32.dll —-a-w 109,568 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\url.dll —-a-w 452,096 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\urlmon.dll —-a-w 561,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\user32.dll —-a-w 593,920 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wininet.dll —-a-w 167,936 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wldap32.dll —-a-w 397,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shlwapi.dll —-a-w 557,568 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\comctl32.dll —-a-w 322,560 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msvcrt.dll —-a-w 395,776 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntvdm.exe —-a-w 247,808 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wow32.dll —-a-w 662,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\userenv.dll —-a-w 1,799,552 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\win32k.sys —-a-w 14,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\watchdog.sys —-a-w 29,184 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\csrsrv.dll —-a-w 45,056 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\basesrv.dll —-a-w 275,968 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\winsrv.dll —-a-w 430,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\winlogon.exe —-a-w 52,224 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\secur32.dll —-a-w 47,104 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\winsta.dll —-a-w 44,032 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\regapi.dll —-a-w 200,704 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbc32.dll —-a-w 647,680 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sxs.dll —-a-w 114,688 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shsvcs.dll —-a-w 922,624 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\setupapi.dll —-a-w 22,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\slayerxp.dll —-a-w 104,448 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\apphelp.dll —-a-w 84,992 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ahui.exe —-a-w 11,776 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\lsass.exe —-a-w 295,936 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\scesrv.dll —-a-w 105,472 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\umpnpmgr.dll —-a-w 42,496 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ncobjapi.dll —-a-w 139,264 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dnsapi.dll —-a-w 54,784 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\samlib.dll —-a-w 58,880 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cabinet.dll —-a-w 265,216 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\kerberos.dll —-a-w 96,768 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\imm32.dll —-a-w 170,496 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\winmm.dll —-a-w 108,032 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msv1_0.dll —-a-w 397,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netlogon.dll —-a-w 131,584 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rsaenh.dll —-a-w 47,616 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\eventlog.dll —-a-w 174,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\scecli.dll —-a-w 77,312 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\iphlpapi.dll —-a-w 98,816 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dhcpcsvc.dll —-a-w 202,752 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\uxtheme.dll —-a-w 16,896 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wtsapi32.dll —-a-w 110,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntmarta.dll —-a-w 37,888 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\audiosrv.dll —-a-w 152,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ipsecsvc.dll —-a-w 61,952 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\faultrep.dll —-a-w 210,432 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\oakley.dll —-a-w 61,440 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\webclnt.dll —-a-w 51,200 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cryptsvc.dll —-a-w 184,320 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\certcli.dll —-a-w 74,802 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\atl.dll —-a-w 82,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\psbase.dll —-a-w 38,400 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntlanman.dll —-a-w 165,376 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\w32time.dll —-a-w 401,462 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msvcp60.dll —-a-w 122,880 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dssenh.dll —-a-w 139,264 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\adsldpc.dll —-a-w 80,384 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\trkwks.dll —-a-w 35,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sens.dll —-a-w 22,528 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shfolder.dll —-a-w 214,528 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rasapi32.dll —-a-w 55,808 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rasman.dll —-a-w 163,328 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tapi32.dll —-a-w 6,144 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sensapi.dll —-a-w 86,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wlnotify.dll —-a-w 305,664 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cscui.dll —-a-w 308,736 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\licdll.dll —-a-w 21,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\userinit.exe —-a-w 66,560 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\spoolss.dll —-a-w 1,020,416 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\browseui.dll —-a-w 292,352 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\localspl.dll —-a-w 1,338,880 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shdocvw.dll —-a-w 87,048 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rdpdd.dll —-a-w 95,232 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\win32spl.dll —-a-w 383,488 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\themeui.dll —-a-w 4,608 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msimg32.dll —-a-w 2,044,928 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msi.dll —-a-w 28,160 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ie4uinit.exe —-a-w 91,136 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\advpack.dll —-a-w 137,216 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntshrui.dll —-a-w 1,216,512 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmvcore.dll —-a-w 274,432 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmasf.dll —-a-w 76,288 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\avifil32.dll —-a-w 113,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msvfw32.dll —-a-w 163,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mindex.dll —-a-w 368,710 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msisam11.dll —-a-w 241,725 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msuni11.dll —-a-w 126,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msdart.dll —-a-w 1,302,528 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmpcore.dll —-a-w 1,998,848 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmploc.dll —-a-w 927,744 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\syssetup.dll —-a-w 118,784 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\imapi.exe —-a-w 49,664 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ipconfig.exe —-a-w 147,968 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netman.dll —-a-w 63,488 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msiexec.exe —-a-w 39,424 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\net.exe —-a-w 115,200 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\net1.exe —-a-w 258,560 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\webcheck.dll —-a-w 196,096 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mobsync.dll —-a-w 77,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmpshell.dll —-a-w 294,912 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\iedkcs32.dll —-a-w 1,135,616 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\quartz.dll —-a-w 498,205 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dxmasf.dll —-a-w 58,368 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\pautoenr.dll —-a-w 470,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cryptui.dll —-a-w 426,496 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\riched20.dll —-a-w 17,408 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\psapi.dll —-a-w 1,618,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netshell.dll —-a-w 52,224 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rastls.dll —-a-w 34,304 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\raschap.dll —-a-w 240,640 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\hnetcfg.dll —-a-w 117,760 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\stobject.dll —-a-w 161,792 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\credui.dll —-a-w 109,568 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\defrag.exe —-a-w 73,216 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dfrgfat.exe —-a-w 409,088 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\vssapi.dll —-a-w 85,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dfrgntfs.exe —-a-w 219,648 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\logon.scr —-a-w 37,760 2007-09-21 19:31:00 C:\WINDOWS\SYSTEM32\perfc009.dat —-a-w 305,318 2007-09-21 19:31:00 C:\WINDOWS\SYSTEM32\perfh009.dat —-a-w 486,400 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dbghelp.dll —-a-w 504,320 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\logonui.exe —-a-w 522,240 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\printui.dll —-a-w 62,464 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shgina.dll —-a-w 62,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\browselc.dll —-a-w 1,181,184 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\d3d8.dll —-a-w 2,793,984 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mshtml.dll —-a-w 261,120 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\duser.dll —-a-w 35,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\6to4svc.dll —-a-w 160,768 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\adsldp.dll —-a-w 62,464 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\adsmsext.dll —-a-w 239,616 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\adsnt.dll —-a-w 40,960 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\alg.exe —-a-w 155,648 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\appmgmts.dll —-a-w 277,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\appmgr.dll —-a-w 5,120 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\asferror.dll —-a-w 14,366 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\asfsipc.dll —-a-w 22,528 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\at.exe —-a-w 8,192 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\autolfn.exe —-a-w 71,680 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\browsewm.dll —-a-w 179,712 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cewmdm.dll —-a-w 30,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dumprep.exe —-a-w 62,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ciodm.dll —-a-w 53,248 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\clusapi.dll —-a-w 314,880 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cmdial32.dll —-a-w 41,472 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cmdl32.exe —-a-w 238,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\compatUI.dll —-a-w 24,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\conime.exe —-a-w 70,144 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\cryptdlg.dll —-a-w 986,112 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\danim.dll —-a-w 20,480 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dbmsadsn.dll —-a-w 24,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dbmsrpcn.dll —-a-w 65,536 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dbnetlib.dll —-a-w 28,672 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dbnmpntw.dll —-a-w 267,264 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ddraw.dll —-a-w 263,680 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\devmgr.dll —-a-w 25,088 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dfsshlex.dll —-a-w 41,984 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dfrgsnap.dll —-a-w 124,928 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dfrgui.dll —-a-w 103,424 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dgnet.dll —-a-w 55,808 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\digest.dll —-a-w 151,552 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dinput.dll —-a-w 168,960 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dinput8.dll —-a-w 26,112 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmband.dll —-a-w 59,904 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmcompos.dll —-a-w 172,032 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmime.dll —-a-w 31,232 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmloader.dll —-a-w 77,312 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmscript.dll —-a-w 110,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmstyle.dll —-a-w 94,720 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dmusic.dll —-a-w 45,056 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\docprop2.dll —-a-w 156,672 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dpnet.dll —-a-w 30,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dpnhpast.dll —-a-w 55,808 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dpnhupnp.dll —-a-w 206,336 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dpvoice.dll —-a-w 59,392 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dpvsetup.exe —-a-w 50,176 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dpwsockx.dll —-a-w 258,048 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\drmclien.dll —-a-w 76,830 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\drmstor.dll —-a-w 589,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\drmv2clt.dll —-a-w 778,240 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dxdiag.exe —-a-w 16,384 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ds32gt.dll —-a-w 131,072 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dsprop.dll —-a-w 227,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dsquery.dll —-a-w 802,816 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dxmrtp.dll —-a-w 337,920 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dxtmsft.dll —-a-w 194,560 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dxtrans.dll —-a-w 162,128 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dwwin.exe —-a-w 173,568 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\els.dll —-a-w 17,408 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ersvc.dll —-a-w 178,688 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\eudcedit.exe —-a-w 250,880 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\pdh.dll —-a-w 379,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\expsrv.dll —-a-w 67,072 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\fdeploy.dll —-a-w 84,992 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\fldrclnr.dll —-a-w 18,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\fontview.exe —-a-w 8,832 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\framebuf.dll
Post #9
Combofix part 4

—-a-w 40,448 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ftp.exe
—-a-w 111,616 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\gpresult.exe
—-a-w 178,688 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\gptext.dll
—-a-w 596,480 2004-03-06 02:04:58 C:\WINDOWS\SYSTEM32\catsrvut.dll
—-a-w 323,072 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netsetup.exe
—-a-w 236,032 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\icm32.dll
—-a-w 110,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\idq.dll
—-a-w 126,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ieakeng.dll
—-a-w 203,776 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ieaksie.dll
—-a-w 230,400 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\iepeers.dll
—-a-w 59,392 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\iesetup.dll
—-a-w 36,921 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\imeshare.dll
—-a-w 30,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\imgutil.dll
—-a-w 104,448 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\input.dll
—-a-w 69,632 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\inseng.dll
—-a-w 36,864 2004-03-30 01:25:44 C:\WINDOWS\SYSTEM32\mf3216.dll
—-a-w 318,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ippromon.dll
—-a-w 58,368 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ipv6.exe
—-a-w 121,344 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ipv6mon.dll
—-a-w 49,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ixsso.dll
—-a-w 44,160 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\kd1394.dll
—-a-w 42,537 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\keyboard.sys
—-a-w 6,656 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\laprxy.dll
—-a-w 19,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\licmgr10.dll
—-a-w 381,440 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\lmrt.dll
—-a-w 10,240 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\localui.dll
—-a-w 24,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\logagent.exe
—-a-w 301,568 2004-03-30 01:25:40 C:\WINDOWS\SYSTEM32\netapi32.dll
—-a-w 1,136,128 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mmcndmgr.dll
—-a-w 185,344 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\moricons.dll
—-a-w 233,472 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mpg4dmod.dll
—-a-w 129,024 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqad.dll
—-a-w 14,848 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqise.dll
—-a-w 605,696 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqqm.dll
—-a-w 164,864 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqrt.dll
—-a-w 88,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqsec.dll
—-a-w 478,720 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqsnap.dll
—-a-w 164,352 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqtrig.dll
—-a-w 467,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mqutil.dll
—-a-w 68,096 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mscms.dll
—-a-w 12,288 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mscpx32r.dLL
—-a-w 4,126 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msdxmlc.dll
—-a-w 438,272 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mshtmled.dll
—-a-w 56,320 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mshtmler.dll
—-a-w 232,448 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msieftp.dll
—-a-w 304,640 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msihnd.dll
—-a-w 1,503,260 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msjet40.dll
—-a-w 348,238 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msjetoledb40.dll
—-a-w 241,695 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msjtes40.dll
—-a-w 174,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msnetobj.dll
—-a-w 116,272 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msnsspc.dll
—-a-w 131,072 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msorcl32.dll
—-a-w 175,104 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mspmsp.dll
—-a-w 132,096 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msrating.dll
—-a-w 9,728 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msrle32.dll
—-a-w 245,760 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msscp.dll
—-a-w 497,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mstime.dll
—-a-w 979,968 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msvidctl.dll
—-a-w 243,712 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mswebdvd.dll
—-a-w 688,667 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msxml2.dll
—-a-w 1,118,720 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msxml3.dll
—-a-w 16,384 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\nddenb32.dll
—-a-w 584,704 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netcfgx.dll
—-a-w 105,984 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netdde.exe
—-a-w 857,600 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\netplwiz.dll
—-a-w 238,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\newdev.dll
—-a-w 91,136 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\nlhtml.dll
—-a-w 49,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\npptools.dll
—-a-w 33,808 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntio.sys
—-a-w 37,376 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntmsapi.dll
—-a-w 165,888 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntmsdba.dll
—-a-w 392,192 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntmssvc.dll
—-a-w 80,896 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntprint.dll
—-a-w 133,632 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\nwprovau.dll
—-a-w 57,856 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\nwwks.dll
—-a-w 16,384 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbc32gt.dll
—-a-w 32,768 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbcad32.exe
—-a-w 24,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbcbcp.dll
—-a-w 53,248 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbcconf.exe
—-a-w 122,880 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbcconf.dll
—-a-w 94,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbccp32.dll
—-a-w 61,440 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbccr32.dll
—-a-w 61,440 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbccu32.dll
—-a-w 12,288 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbcp32r.dll
—-a-w 147,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\odbctrac.dll
—-a-w 102,400 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\offfilt.dll
—-a-w 98,304 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\oleprn.dll
—-a-w 685,568 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\opengl32.dll
—-a-w 212,480 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\osk.exe
—-a-w 52,224 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\packager.exe
—-a-w 31,744 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\pid.dll
—-a-w 27,136 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\pidgen.dll
—-a-w 14,848 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ping.exe
—-a-w 30,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\pngfilt.dll
—-a-w 184,832 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\qcap.dll
—-a-w 356,352 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\qdvd.dll
—-a-w 511,488 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\qedit.dll
—-a-w 1,337,856 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\query.dll
—-a-w 630,784 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rasdlg.dll
—-a-w 159,744 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rasmans.dll
—-a-w 193,536 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rasppp.dll
—-a-w 13,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rassapi.dll
—-a-w 53,760 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rastapi.dll
—-a-w 34,304 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rcimlby.exe
—-a-w 3,338 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\redir.exe
—-a-w 48,128 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\reg.exe
—-a-w 35,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rshx32.dll
—-a-w 103,424 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rsnotify.exe
—-a-w 74,240 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\rtcshare.exe
—-a-w 12,288 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\runonce.exe
—-a-w 19,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\savedump.exe
—-a-w 169,984 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sccbase.dll
—-a-w 171,008 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sccsccp.dll
—-a-w 8,192 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\scrnsave.scr
—-a-w 113,664 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\schtasks.exe
—-a-w 37,888 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sdbinst.exe
—-a-w 20,992 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\setup.exe
—-a-w 132,608 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sfc_os.dll
—-a-w 54,784 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shimeng.dll
—-a-w 419,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shimgvw.dll
—-a-w 21,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\shmgrate.exe
—-a-w 11,776 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sigtab.dll
—-a-w 66,048 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sigverif.exe
—-a-w 24,064 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\skeys.exe
—-a-w 332,288 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\smlogcfg.dll
—-a-w 86,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\smlogsvc.exe
—-a-w 16,896 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\snmpapi.dll
—-a-w 356,352 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sqlsrv32.dll
—-a-w 667,648 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ss3dfo.scr
—-a-w 18,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssbezier.scr
—-a-w 26,624 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssdpapi.dll
—-a-w 39,936 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssdpsrv.dll
—-a-w 364,544 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssflwbox.scr
—-a-w 19,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssmarque.scr
—-a-w 17,408 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssmyst.scr
—-a-w 569,344 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sspipes.scr
—-a-w 13,312 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ssstars.scr
—-a-w 638,976 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sstext3d.scr
—-a-w 60,928 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sti.dll
—-a-w 132,096 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\sti_ci.dll
—-a-w 246,302 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\strmdll.dll
—-a-w 233,984 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tapisrv.dll
—-a-w 128,512 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\taskmgr.exe
—-a-w 70,144 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\telnet.exe
—-a-w 7,168 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tlntsvrp.dll
—-a-w 70,144 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tlntsess.exe
—-a-w 52,224 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tlntadmn.exe
—-a-w 60,928 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tlntsvr.exe
—-a-w 9,728 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\tracert.exe
—-a-w 225,280 2004-03-06 02:04:56 C:\WINDOWS\SYSTEM32\catsrv.dll
—-a-w 21,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\udhisapi.dll
—-a-w 31,744 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\umandlg.dll
—-a-w 302,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\untfs.dll
—-a-w 115,200 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\upnp.dll
—-a-w 162,816 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\upnphost.dll
—-a-w 231,424 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\upnpui.dll
—-a-w 16,384 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ups.exe
—-a-w 339,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usp10.dll
—-a-w 46,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\utilman.exe
—-a-w 479,261 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\vbscript.dll
—-a-w 48,640 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\vdmredir.dll
—-a-w 124,928 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\webvw.dll
—-a-w 60,416 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wextract.exe
—-a-w 118,272 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wiadss.dll
—-a-w 314,368 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wiaservc.dll
—-a-w 184,320 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmadmod.dll
—-a-w 442,398 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmadmoe.dll
—-a-w 253,952 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmnetmgr.dll
—-a-w 253,952 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmpcd.dll
—-a-w 77,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmpstub.exe
—-a-w 1,392,640 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmpui.dll
—-a-w 110,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmsdmod.dll
—-a-w 118,784 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmsdmoe.dll
—-a-w 298,496 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmstream.dll
—-a-w 311,327 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmv8dmod.dll
—-a-w 294,912 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmvdmod.dll
—-a-w 446,464 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmvdmoe.dll
—-a-w 13,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wship6.dll
—-a-w 38,912 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wsnmp32.dll
—-a-w 47,616 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wzcdlg.dll
—-a-w 18,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wzcsapi.dll
—-a-w 184,320 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wzcsvc.dll
—-a-w 85,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\xactsrv.dll
—-a-w 165,744 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\xenroll.dll
—-a-w 241,664 2004-03-30 01:25:40 C:\WINDOWS\SYSTEM32\gdi32.dll
—-a-w 293,888 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\MSCTF.dll
—-a-w 65,536 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\MSCTFP.dll
—-a-w 209,920 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msutb.dll
—-a-w 13,312 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ctfmon.exe
—-a-w 156,672 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\MSIMTF.dll
—-a-w 46,080 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mslbui.dll
—-a-w 51,200 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wmerrenu.dll
—-a-w 24,576 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\dbmsvinn.dLL
—-a-w 512,074 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msexch40.dll
—-a-w 319,562 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msexcl40.dll
—-a-w 213,066 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msltus40.dll
—-a-w 348,234 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mspbde40.dll
—-a-w 421,962 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msrd2x40.dll
—-a-w 553,034 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msrepl40.dll
—-a-w 254,026 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\mstext40.dll
—-a-w 344,138 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\msxbde40.dll
—-a-w 1,982,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntoskrnl.exe
—-a-w 1,896,704 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\ntkrnlpa.exe
—-a-w 78,464 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\hal.dll
—-a-w 285,312 2007-09-20 00:43:48 C:\WINDOWS\SYSTEM32\FNTCACHE.DAT
—-a-w 70,656 2001-08-18 02:36:32 C:\WINDOWS\SYSTEM32\storprop.dll
—-a-w 6,656 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\batt.dll
——w 6,656 2004-05-14 22:12:02 C:\WINDOWS\SYSTEM32\spmsg.dll
—-a-w 651,264 2003-05-02 15:03:02 C:\WINDOWS\SYSTEM32\ntdll.dll
—-a-w 57,344 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\licwmi.dll
—-a-w 40,960 2006-01-09 14:36:06 C:\WINDOWS\SYSTEM32\swsc.exe
—-a-w 977,920 2004-03-06 02:05:08 C:\WINDOWS\SYSTEM32\msdtctm.dll
—-a-w 79,360 2006-12-01 10:20:34 C:\WINDOWS\SYSTEM32\swxcacls.exe
—-a-w 499,200 2004-03-06 02:05:04 C:\WINDOWS\SYSTEM32\comuid.dll
—-a-w 454,656 2004-03-30 01:25:44 C:\WINDOWS\SYSTEM32\ipnathlp.dll
—-a-w 648,192 2004-03-29 21:25:44 C:\WINDOWS\SYSTEM32\lsasrv.dll
—-a-w 969,216 2004-03-30 01:25:46 C:\WINDOWS\SYSTEM32\msgina.dll
—-a-w 51,712 2004-03-30 01:25:46 C:\WINDOWS\SYSTEM32\msasn1.dll
—-a-w 136,704 2004-03-30 01:25:48 C:\WINDOWS\SYSTEM32\schannel.dll
—-a-w 48,640 2004-03-30 01:25:40 C:\WINDOWS\SYSTEM32\browser.dll
—-a-w 550,400 2004-03-30 01:25:48 C:\WINDOWS\SYSTEM32\rtcdll.dll
—-a-w 593,408 2004-03-30 01:25:42 C:\WINDOWS\SYSTEM32\h323msp.dll
—-a-w 1,177,088 2004-03-06 02:05:02 C:\WINDOWS\SYSTEM32\comsvcs.dll
—-a-w 226,816 2004-03-06 02:05:04 C:\WINDOWS\SYSTEM32\es.dll
—-a-w 150,528 2004-03-06 02:05:08 C:\WINDOWS\SYSTEM32\msdtcuiu.dll
—-a-w 365,568 2004-03-06 02:05:06 C:\WINDOWS\SYSTEM32\msdtcprx.dll
—-a-w 1,105,408 2004-03-06 02:05:12 C:\WINDOWS\SYSTEM32\ole32.dll
—-a-w 214,528 2004-03-06 02:05:16 C:\WINDOWS\SYSTEM32\rpcss.dll
—-a-w 442,880 2004-03-06 02:05:14 C:\WINDOWS\SYSTEM32\rpcrt4.dll
—-a-w 64,512 2004-03-06 02:05:10 C:\WINDOWS\SYSTEM32\mtxclu.dll
—-a-w 97,280 2004-03-06 02:05:18 C:\WINDOWS\SYSTEM32\txflog.dll
—-a-w 499,712 2004-03-05 22:05:00 C:\WINDOWS\SYSTEM32\clbcatq.dll
—-a-w 32,768 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\cfgbkend.dll
—-a-w 64,512 2004-03-06 02:05:00 C:\WINDOWS\SYSTEM32\colbact.dll
—-a-w 8,704 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\icaapi.dll
—-a-w 110,080 2004-03-06 02:04:58 C:\WINDOWS\SYSTEM32\clbcatex.dll
—-a-w 82,432 2004-03-06 02:05:10 C:\WINDOWS\SYSTEM32\mtxoci.dll
—-a-w 41,984 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\rdpclip.exe
—-a-w 14,848 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\rdpsnd.dll
—-a-w 73,864 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\rdpwsx.dll
—-a-w 197,632 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\termsrv.dll
—-a-w 40,448 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\tscupgrd.exe
—-a-w 134,656 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\rdchost.dll
—-a-w 130,048 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\sessmgr.exe
—-a-w 12,288 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\rdsaddin.exe
—-a-w 56,320 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\remotepg.dll
—-a-w 385,536 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mstsc.exe
—-a-w 503,296 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mstscax.dll
—-a-w 88,576 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\tscfgwmi.dll
—-a-w 4,096 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wuauserv.dll
—-a-w 534,016 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\spider.exe
—-a-w 98,816 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\clipbrd.exe
—-a-w 339,968 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mspaint.exe
—-a-w 116,736 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mplay32.exe
—-a-w 249,856 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mstask.dll
—-a-w 9,728 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mstinit.exe
—-a-w 158,720 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\schedsvc.dll
—-a-w 593,920 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\inetcomm.dll
—-a-w 228,864 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\msoeacct.dll
—-a-w 90,624 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\msoert2.dll
—-a-w 65,536 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\msconf.dll
—-a-w 24,576 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\nmmkcert.dll
—-a-w 32,384 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\mnmdd.dll
—-a-w 73,728 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\ils.dll
—-a-w 61,952 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\srclient.dll
—-a-w 155,136 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\srsvc.dll
—-a-w 86,656 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\atapi.sys
—-a-w 33,664 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\disk.sys
—-a-w 44,928 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\classpnp.sys
—-a-w 23,680 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\pciidex.sys
—-a-w 161,536 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ndis.sys
—-a-w 163,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\rdbss.sys
—-a-w 103,936 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\mup.sys
—-a-w 33,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\netbios.sys
—-a-w 34,816 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\p3.sys
—-a-w 65,024 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\videoprt.sys
—-a-w 134,144 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ks.sys
—-a-w 62,464 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\serial.sys
—-a-w 76,160 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\parport.sys
—-a-w 47,488 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\cdrom.sys
—-a-w 48,640 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\rasl2tp.sys
—-a-w 88,320 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ndiswan.sys
—-a-w 65,920 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\psched.sys
—-a-w 19,712 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\flpydisk.sys
—-a-w 10,496 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\sfloppy.sys
—-a-w 19,584 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\vga.sys
—-a-w 56,064 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ipsec.sys
—-a-w 327,168 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys
—-a-w 150,272 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\netbt.sys
—-a-w 39,296 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\imapi.sys
—-a-w 144,768 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\fastfat.sys
—-a-w 68,224 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\dxg.sys
—-a-w 130,688 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\afd.sys
—-a-w 12,160 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ndisuio.sys
—-a-w 13,184 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\diskdump.sys
—-a-w 30,592 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\processr.sys
—-a-w 32,000 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\amdk6.sys
—-a-w 54,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\arp1394.sys
—-a-w 53,888 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\atmlane.sys
—-a-w 53,376 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\bridge.sys
—-a-w 62,208 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\cdfs.sys
—-a-w 31,360 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\crusoe.sys
—-a-w 76,288 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ipnat.sys
—-a-w 66,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\mqac.sys
—-a-w 56,960 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\nic1394.sys
—-a-w 37,760 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\nmnt.sys
—-a-w 533,504 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\ntfs.sys
—-a-w 155,648 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\nwrdr.sys
—-a-w 116,352 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\pcmcia.sys
—-a-w 89,984 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\scsiport.sys
—-a-w 24,064 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\sonydcam.sys
—-a-w 42,752 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\stream.sys
—-a-w 13,696 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\tape.sys
—-a-w 180,032 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\tcpip6.sys
—-a-w 63,872 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\udfs.sys
—-a-w 15,104 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\usbintel.sys
—-a-w 50,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\i8042prt.sys
—-a-w 179,200 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\acpi.sys
—-a-w 62,464 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\pci.sys
—-a-w 4,608 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\intelide.sys
—-a-w 50,688 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\usbhub.sys
—-a-w 33,152 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\hidclass.sys
—-a-w 123,264 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\usbport.sys
—-a-w 18,944 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\usbuhci.sys
—-a-w 22,016 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\mouclass.sys
—-a-w 23,424 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\kbdclass.sys
—-a-w 57,344 2001-08-17 18:01:20 C:\WINDOWS\SYSTEM32\DRIVERS\drmk.sys
—-a-w 135,040 2001-08-18 02:24:38 C:\WINDOWS\SYSTEM32\DRIVERS\portcls.sys
—-a-w 9,728 2001-08-17 18:02:32 C:\WINDOWS\SYSTEM32\DRIVERS\gameenum.sys
—-a-w 55,808 2001-08-17 17:51:42 C:\WINDOWS\SYSTEM32\DRIVERS\redbook.sys
—-a-w 57,472 2001-08-18 02:24:44 C:\WINDOWS\SYSTEM32\DRIVERS\sysaudio.sys
—-a-w 6,400 2001-08-17 17:48:48 C:\WINDOWS\SYSTEM32\DRIVERS\MSKSSRV.sys
—-a-w 159,232 2001-08-17 18:00:54 C:\WINDOWS\SYSTEM32\DRIVERS\kmixer.sys
—-a-w 79,616 2001-08-18 02:24:46 C:\WINDOWS\SYSTEM32\DRIVERS\wdmaud.sys
—-a-w 122,472 2001-07-23 21:25:14 C:\WINDOWS\SYSTEM32\DRIVERS\aec.sys
—-a-w 5,632 2001-08-17 18:00:46 C:\WINDOWS\SYSTEM32\DRIVERS\splitter.sys
—-a-w 181,632 2001-08-17 17:50:48 C:\WINDOWS\SYSTEM32\DRIVERS\rdpdr.sys
—-a-w 37,896 2001-08-18 02:38:00 C:\WINDOWS\SYSTEM32\DRIVERS\termdd.sys
—-a-w 107,912 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\rdpwd.sys
—-a-w 70,400 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\DRIVERS\sr.sys
—-a-w 21,760 2001-08-17 18:03:22 C:\WINDOWS\SYSTEM32\DRIVERS\USBSTOR.SYS
—-a-w 322,304 2002-10-31 18:45:16 C:\WINDOWS\SYSTEM32\DRIVERS\srv.sys
—-a-w 391,936 2002-11-18 15:17:00 C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb.sys
—-a-w 46,208 2002-10-01 22:43:52 C:\WINDOWS\SYSTEM32\DRIVERS\raspptp.sys
—-a-w 251,904 2001-08-18 02:36:34 C:\WINDOWS\SYSTEM32\spool\drivers\w32x86\3\UNIDRV.DLL
—-a-w 196,096 2001-08-18 02:36:34 C:\WINDOWS\SYSTEM32\spool\drivers\w32x86\3\UNIDRVUI.DLL
—-a-w 19,456 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\wbem\evntrprv.dll
—-a-w 1,266,688 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\cimwin32.dll
—-a-w 235,520 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\esscli.dll
—-a-w 585,216 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\fastprox.dll
—-a-w 14,336 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\mofcomp.exe
—-a-w 104,960 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\mofd.dll
—-a-w 60,928 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\ncprov.dll
—-a-w 89,600 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\policman.dll
—-a-w 137,216 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\repdrvfs.dll
—-a-w 80,896 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\stdprov.dll
—-a-w 214,528 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wbemcomn.dll
—-a-w 477,184 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wbemcore.dll
—-a-w 259,072 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wbemess.dll
—-a-w 28,160 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wbemprox.dll
—-a-w 106,496 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wbemupgd.dll
—-a-w 330,752 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmic.exe
—-a-w 55,808 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmicookr.dll
—-a-w 138,752 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmidcprv.dll
—-a-w 149,504 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmipcima.dll
—-a-w 122,368 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmiprov.dll
—-a-w 407,040 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmiprvsd.dll
—-a-w 203,264 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmiprvse.exe
—-a-w 38,912 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmipsess.dll
—-a-w 100,864 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmisvc.dll
—-a-w 95,744 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\wbem\wmiutils.dll
—-a-w 40,960 2004-03-30 01:25:40 C:\WINDOWS\SYSTEM32\wbem\cmdevtgprov.dll
—-a-w 32,828 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\fp40ext.dll
—-a-w 122,368 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\fxsocm.dll
—-a-w 468,480 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\iis.dll
—-a-w 151,552 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\msmqocm.dll
—-a-w 71,168 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\netoc.dll
—-a-w 11,776 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\ocgen.dll
—-a-w 96,768 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\setupqry.dll
—-a-w 99,840 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\tsoc.dll
—-a-w 36,864 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\ocmsn.dll
—-a-w 24,606 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\Setup\msgrocm.dll
—-a-w 55,808 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\npp\ndisnpp.dll
—-a-w 13,824 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\npp\nppagent.exe
—-a-w 322,304 2002-10-31 18:45:16 C:\WINDOWS\SYSTEM32\dllcache\srv.sys
—-a-w 36,864 2004-03-30 01:25:44 C:\WINDOWS\SYSTEM32\dllcache\mf3216.dll
—-a-w 364,544 2004-03-30 01:25:40 C:\WINDOWS\SYSTEM32\dllcache\callcont.dll
—-a-w 73,728 2004-03-30 01:25:46 C:\WINDOWS\SYSTEM32\dllcache\nmcom.dll
—-a-w 499,712 2004-03-05 22:05:00 C:\WINDOWS\SYSTEM32\dllcache\clbcatq.dll
—-a-w 187,904 2004-03-06 02:05:00 C:\WINDOWS\SYSTEM32\dllcache\comadmin.dll
—-a-w 596,480 2004-03-06 02:04:58 C:\WINDOWS\SYSTEM32\dllcache\catsrvut.dll
—-a-w 64,512 2004-03-06 02:05:00 C:\WINDOWS\SYSTEM32\dllcache\colbact.dll
—-a-w 110,080 2004-03-06 02:04:58 C:\WINDOWS\SYSTEM32\dllcache\clbcatex.dll
—-a-w 1,177,088 2004-03-06 02:05:02 C:\WINDOWS\SYSTEM32\dllcache\comsvcs.dll
—-a-w 499,200 2004-03-06 02:05:04 C:\WINDOWS\SYSTEM32\dllcache\comuid.dll
—-a-w 226,816 2004-03-06 02:05:04 C:\WINDOWS\SYSTEM32\dllcache\es.dll
—-a-w 365,568 2004-03-06 02:05:06 C:\WINDOWS\SYSTEM32\dllcache\msdtcprx.dll
—-a-w 593,408 2004-03-30 01:25:42 C:\WINDOWS\SYSTEM32\dllcache\h323msp.dll
—-a-w 40,960 2004-03-30 01:25:40 C:\WINDOWS\SYSTEM32\dllcache\evtgprov.dll
—-a-w 51,712 2004-03-30 01:25:46 C:\WINDOWS\SYSTEM32\dllcache\msasn1.dll
—-a-w 253,952 2004-03-30 01:25:46 C:\WINDOWS\SYSTEM32\dllcache\mst120.dll
—-a-w 150,528 2004-03-06 02:05:08 C:\WINDOWS\SYSTEM32\dllcache\msdtcuiu.dll
—-a-w 64,512 2004-03-06 02:05:10 C:\WINDOWS\SYSTEM32\dllcache\mtxclu.dll
—-a-w 136,704 2004-03-30 01:25:48 C:\WINDOWS\SYSTEM32\dllcache\schannel.dll
—-a-w 97,280 2004-03-06 02:05:18 C:\WINDOWS\SYSTEM32\dllcache\txflog.dll
—-a-w 82,432 2004-03-06 02:05:10 C:\WINDOWS\SYSTEM32\dllcache\mtxoci.dll
—-a-w 225,280 2004-03-06 02:04:56 C:\WINDOWS\SYSTEM32\dllcache\catsrv.dll
—-a-w 977,920 2004-03-06 02:05:08 C:\WINDOWS\SYSTEM32\dllcache\msdtctm.dll
—-a-w 49,664 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\oobe\oobebaln.exe
—-a-w 107,008 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\oobe\msobcomm.dll
—-a-w 532,480 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\oobe\msobmain.dll
—-a-w 113,664 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\guitrn.dll
—-a-w 100,864 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\guitrn_a.dll
—-a-w 16,896 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\log.dll
—-a-w 185,344 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\migism.dll
—-a-w 179,200 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\migism_a.dll
—-a-w 98,816 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\migload.exe
—-a-w 230,400 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\migwiz.exe
—-a-w 226,816 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\migwiz_a.exe
—-a-w 186,368 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\script.dll
—-a-w 167,424 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\script_a.dll
—-a-w 141,312 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\sysmod.dll
—-a-w 130,560 2001-08-23 16:00:00 C:\WINDOWS\SYSTEM32\usmt\sysmod_a.dll
—-a-w 187,904 2004-03-06 02:05:00 C:\WINDOWS\SYSTEM32\Com\comadmin.dll
—-a-w 366,080 2001-08-23 12:00:00 C:\WINDOWS\SYSTEM32\Restore\rstrui.exe
—-a-w 694,272 2001-08-23 12:00:00 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\HelpSvc.exe
—-a-w 145,408 2001-08-23 12:00:00 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\msconfig.exe
—-a-w 97,792 2001-08-23 12:00:00 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\pchshell.dll
—-a-w 29,184 2001-08-23 12:00:00 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\pchsvc.dll
—-a-w 727,040 2004-02-05 22:14:58 C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpctr.exe
——w 126,464 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329390$\shmedia.dll
——w 330,368 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329170$\srv.sys
——w 218,112 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallQ329441$\srrstr.dll
——w 674,304 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ815021$\ntdll.dll
——w 68,096 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ810833$\locator.exe
——w 407,680 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ810577$\mrxsmb.sys
——w 317,952 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329048$\zipfldr.dll
——w 46,464 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallQ329834$\raspptp.sys
——w 250,880 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll
——w 669,696 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll
——w 51,200 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll
——w 967,680 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\msgina.dll
——w 133,632 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\schannel.dll
——w 592,896 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll
——w 453,632 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll
——w 35,328 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll
——w 309,760 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll
——w 550,400 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll
——w 34,304 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll
——w 360,448 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732$\callcont.dll
——w 249,856 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732$\mst120.dll
——w 69,632 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll
——w 692,224 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe
——w 34,304 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB835732$\evtgprov.dll
——w 583,168 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll
——w 1,139,200 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll
——w 224,768 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741$\es.dll
——w 360,960 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll
——w 1,141,248 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741$\ole32.dll
——w 463,872 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll
——w 259,072 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll
——w 90,624 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741$\txflog.dll
——w 215,040 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll
——w 468,480 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll
——w 56,832 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\colbact.dll
——w 100,864 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll
——w 495,616 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\comuid.dll
——w 869,376 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll
——w 151,040 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll
——w 61,440 2001-08-23 16:00:00 C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll
——w 83,968 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll
——w 186,880 2001-08-23 12:00:00 C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll
—-a-w 1,229,312 2001-08-23 16:00:00 C:\WINDOWS\AppPatch\AcGenral.dll
—-a-w 370,688 2001-08-23 16:00:00 C:\WINDOWS\AppPatch\AcLayers.dll
—-a-w 45,568 2001-08-23 16:00:00 C:\WINDOWS\AppPatch\AcLua.dll
—-a-w 204,288 2001-08-23 16:00:00 C:\WINDOWS\AppPatch\AcSpecfc.dll
—-a-w 148,480 2001-08-23 16:00:00 C:\WINDOWS\AppPatch\AcVerfyr.dll
—-a-w 105,472 2001-08-23 16:00:00 C:\WINDOWS\AppPatch\AcXtrnal.dll
—-a-w 229,376 2001-08-23 16:00:00 C:\WINDOWS\inf\unregmp2.exe
——w 391,936 2002-11-18 15:17:00 C:\WINDOWS\Driver Cache\i386\mrxsmb.sys
—-a-w 256,000 2001-08-23 16:00:00 C:\WINDOWS\ime\SPTIP.dll
—-a-w 238,592 2001-08-23 16:00:00 C:\WINDOWS\ime\mscandui.dll
—-a-w 160,768 2001-08-23 16:00:00 C:\WINDOWS\ime\SOFTKBD.DLL
—-a-w 794,686 2001-08-23 12:00:00 C:\WINDOWS\srchasst\srchui.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"@"="" []
"InstantAccess"="C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.exe" [2000-06-19 08:51]
"BellSouthWCC_McciTrayApp"="C:\Program Files\BellSouthWCC\McciTrayApp.exe" [2005-11-17 14:19]
"blspcloader"="C:\Program Files\BellSouth Internet Tools\blsloader.exe" [2007-07-24 21:31]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"ISW.exe"="C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" [2007-05-03 13:12]
"AT&T Internet Security Suite"="C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe" [2007-06-28 16:09]
"-FreedomNeedsReboot"="C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe" [2007-06-28 16:09]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2002-08-29 03:41]
"ctfmon.exe"="C:\WINDOWS\System32\ctfmon.exe" [2002-08-29 03:41]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MySpaceIM"=C:\Program Files\MySpace\IM\MySpaceIM.exe
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\Startup\
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-05-28 20:01:32]
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-05-28 20:01:32]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"LoadPowerProfile"=Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
"SO5 Integrator Pass Two"=C:\WINDOWS\SOINTGR.EXE
"LXSUPMON"=C:\WINDOWS\SYSTEM32\lxsupmon.exe RUN
"Camera Detector"=C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
"OneTouch Monitor"=C:\Program Files\Visioneer OneTouch\OneTouchMon.exe
"RegisterDropHandler"=C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE

R2 VProt2k;BroadJump PPPoE Helper Protocol;C:\WINDOWS\System32\DRIVERS\VProt2k.SYS
S3 Radialpoint Security Services;AT&T Internet Security Suite;C:\WINDOWS\System32\dllhost.exe /Processid:{80098F68-1220-4F43-80A8-15C7395B8874}

.
Contents of the 'Scheduled Tasks' folder
"2007-09-23 15:13:02 C:\WINDOWS\Tasks\PCHealth Scheduler for Data Collection.job"
"2007-09-23 15:34:02 C:\WINDOWS\Tasks\Uninstall Expiration Reminder.job"
- C:\WINDOWS\System32\OOBE\oobebaln.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-23 11:40:31
Windows 5.1.2600 Service Pack 1 FAT NTAPI

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-23 11:43:46 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-09-23 11:43
C:\ComboFix2.txt … 2007-09-21 15:33
.
— E O F —
Post #10 last edited
Yikes, I'm not sure what happened on combofix but it should not be that long. If you get this in time just hold the rest for now if there is too much more and give me the other stuff. Sorry about that. EDIT: You beat me to it.
Post #11
——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 1:28:57 PM 9/23/2007 + Scan result: C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP69\A0016361.exe -> Adware.Agent : No action taken. C:\Bundle\Flyswat\Flyswat.exe/Setup.exe -> Adware.FlySwat : No action taken. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : No action taken. HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : No action taken. HKU\S-1-5-21-1004336348-746137067-1060284298-500\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : No action taken. C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP70\A0017457.exe -> Adware.ZenoSearch : No action taken. C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP70\A0017439.exe -> Downloader.Agent.djj : No action taken. C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022576.exe -> Trojan.Small : No action taken. C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022577.vbs -> Trojan.Small : No action taken. C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022582.exe -> Trojan.Small : No action taken. C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022583.exe -> Trojan.Small : No action taken. ::Report end
Post #12
Logfile of HijackThis v1.99.1
Scan saved at 9:35:52 PM, on 9/23/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE
C:\Program Files\BellSouthWCC\McciTrayApp.exe
C:\Program Files\BellSouth Internet Tools\blsloader.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\AT&T\Internet Security Wizard\ISW.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AT&T\Internet Security Wizard\ISWComHandler.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: BlspcHlpr Class - {15C9938F-CB96-496D-800A-B827F2E34EA1} - C:\Program Files\BellSouth Internet Tools\blspc.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [BellSouthWCC_McciTrayApp] C:\Program Files\BellSouthWCC\McciTrayApp.exe
O4 - HKLM\..\Run: [blspcloader] "C:\Program Files\BellSouth Internet Tools\blsloader.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN
O4 - HKLM\..\Run: [AT&T Internet Security Suite] "C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1190432300813
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: AT&T Internet Security Suite Service (RPSUpdaterR) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
O23 - Service: AT&T Internet Security Suite AT&T Firewall (RP_FWS) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Post #13
——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Sunday, September 23, 2007 9:28:35 PM Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600) Kaspersky Online Scanner version: 5.0.93.1 Kaspersky Anti-Virus database last update: 23/09/2007 Kaspersky Anti-Virus database records: 422662 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ Scan Statistics: Total number of scanned objects: 65189 Number of viruses found: 14 Number of infected objects: 41 Number of suspicious objects: 0 Duration of the scan process: 04:24:47 Infected Object Name / Virus Name / Last Action C:\WINDOWS\SYSTEM32\wbem\REPOSITORY\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\SYSTEM32\wbem\REPOSITORY\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\SYSTEM32\config\system.LOG Object is locked skipped C:\WINDOWS\SYSTEM32\config\software.LOG Object is locked skipped C:\WINDOWS\SYSTEM32\config\default.LOG Object is locked skipped C:\WINDOWS\SYSTEM32\config\SAM.LOG Object is locked skipped C:\WINDOWS\SYSTEM32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\SYSTEM32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\SYSTEM32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\SYSTEM32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\SYSTEM32\config\SECURITY Object is locked skipped C:\WINDOWS\SYSTEM32\config\SOFTWARE Object is locked skipped C:\WINDOWS\SYSTEM32\config\SYSTEM Object is locked skipped C:\WINDOWS\SYSTEM32\config\DEFAULT Object is locked skipped C:\WINDOWS\SYSTEM32\config\SAM Object is locked skipped C:\WINDOWS\SYSTEM32\h323log.txt Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{526088B5-C3BE-4DDC-BB7A-5FD567B515A0}.bin Object is locked skipped C:\WINDOWS\SchedLog.Txt Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Debug\oakley.log Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\xxyvtst.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\khfdcde.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\ddccded.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\GRB3\rwddr2SD.exe.vir Infected: Trojan-Downloader.Win32.Small.fox skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\chks2\MSI17bb.exe.vir/stream/data0002 Infected: not-a-virus:Downloader.Win32.Agent.q skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\chks2\MSI17bb.exe.vir/stream/data0003 Infected: not-a-virus:AdWare.Win32.Agent.jl skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\chks2\MSI17bb.exe.vir/stream/data0004 Infected: not-a-virus:AdWare.Win32.Agent.jn skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\chks2\MSI17bb.exe.vir/stream Infected: not-a-virus:AdWare.Win32.Agent.jn skipped C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\chks2\MSI17bb.exe.vir NSIS: infected - 4 skipped C:\Program Files\CA\PPRT\logs\2007-09-23.csv Object is locked skipped C:\Bundle\Flyswat\Flyswat.exe/flydesk.exe Infected: not-a-virus:AdWare.Win32.FlySwat.a skipped C:\Bundle\Flyswat\Flyswat.exe ZIP: infected - 1 skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\AT&T\AT&T Internet Security Suite\Logs\AT&T Firewall - Blocked Packets - 09-23-2007–16-12-21.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\AT&T\AT&T Internet Security Suite\Logs\FirewallService09-23-2007–16-09-27.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\AT&T\AT&T Internet Security Suite\Logs\Fw_Session.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\AT&T\AT&T Internet Security Suite\Logs\ServiceModel09-23-2007–16-10-41.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\AT&T\AT&T Internet Security Suite\Logs\SafetyConsoleLog09-23-2007–16-10-47.log Object is locked skipped C:\Documents and Settings\default\NTUSER.DAT Object is locked skipped C:\Documents and Settings\default\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\default\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\default\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\default\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\default\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped C:\Documents and Settings\default\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\default\Cookies\index.dat Object is locked skipped C:\Documents and Settings\default\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\default\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\default\Application Data\AT&T\Internet Security Wizard\client_gateway.log Object is locked skipped C:\Documents and Settings\default\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP69\A0016361.exe Infected: not-a-virus:AdWare.Win32.Agent.co skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP70\A0017439.exe Infected: Trojan-Downloader.Win32.Agent.djj skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP70\A0017442.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.o skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP70\A0017457.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.r skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP72\A0018518.exe Infected: Trojan-Downloader.Win32.Alphabet.gen skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP72\A0018552.exe Infected: not-a-virus:AdWare.Win32.Agent.jn skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP72\A0018553.dll Infected: not-a-virus:AdWare.Win32.Agent.jl skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP72\A0018556.exe Infected: not-a-virus:Downloader.Win32.Agent.q skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022575.exe/data0002 Infected: not-a-virus:AdWare.Win32.TTC.a skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022575.exe NSIS: infected - 1 skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022576.exe Infected: Trojan-Downloader.Win32.Agent.dnt skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022578.exe/data0002 Infected: not-a-virus:AdWare.Win32.TTC.a skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022578.exe NSIS: infected - 1 skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022579.dll Infected: not-a-virus:AdWare.Win32.TTC.a skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022580.dll Infected: not-a-virus:AdWare.Win32.TTC.a skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022582.exe Infected: Trojan-Downloader.Win32.Agent.dnt skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP73\A0022583.exe Infected: Trojan-Downloader.Win32.Agent.dnt skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP84\A0025371.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP84\A0025372.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP84\A0025387.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\A0031721.exe Infected: Trojan-Downloader.Win32.Small.fox skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\A0031722.exe/stream/data0002 Infected: not-a-virus:Downloader.Win32.Agent.q skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\A0031722.exe/stream/data0003 Infected: not-a-virus:AdWare.Win32.Agent.jl skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\A0031722.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.Agent.jn skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\A0031722.exe/stream Infected: not-a-virus:AdWare.Win32.Agent.jn skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\A0031722.exe NSIS: infected - 4 skipped C:\System Volume Information\_restore{4397EC23-2483-413C-9443-DE8DC76EAE5A}\RP99\change.log Object is locked skipped Scan process completed.
Post #14
Hi,

Looking much better from here.

This Flyswat thing is Adware, not sure why AVG AS didn't quarantine what it found? Do the following:

Delete this folder:

C:\Bundle\Flyswat

You can also delete these:

C:\qoobox - this was from combofix
C:\Documents and Settings\default\Desktop\SmitfraudFix.exe - I see you ran Smitfraudfix earlier too, this can go.

Please also delete the Combofix tool itself.

The rest of what was found is in your restore points and we'll clean that up at the end.

The real question is how are things running now? Let me know.
Post #15
The computer is running pretty well for a emachine 633 with 256 MB ram. I doubt it could get much faster but if you have any suggestions for that it would be great! I realize I'm really pushing it :lol:
Going from my new Athlon dual core (with 2GB) to this dinosaur is like night and day. It is fine for the kids though.

Her's the latest Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 6:58:34 PM, on 9/24/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE
C:\Program Files\BellSouthWCC\McciTrayApp.exe
C:\Program Files\BellSouth Internet Tools\blsloader.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\AT&T\Internet Security Wizard\ISW.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\AT&T\Internet Security Wizard\ISWComHandler.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: BlspcHlpr Class - {15C9938F-CB96-496D-800A-B827F2E34EA1} - C:\Program Files\BellSouth Internet Tools\blspc.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [BellSouthWCC_McciTrayApp] C:\Program Files\BellSouthWCC\McciTrayApp.exe
O4 - HKLM\..\Run: [blspcloader] "C:\Program Files\BellSouth Internet Tools\blsloader.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN
O4 - HKLM\..\Run: [AT&T Internet Security Suite] "C:\Program Files\AT&T\AT&T Internet Security Suite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\AT&T\AT&T Internet Security Suite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1190432300813
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: AT&T Internet Security Suite Service (RPSUpdaterR) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\rpsupdaterR.exe
O23 - Service: AT&T Internet Security Suite AT&T Firewall (RP_FWS) - AT&T - C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI