Spyware / Malware / Virus Removal

[Closed] Computer Infection - Lockdown

310 min read

Looking for the outcome? Ask AI

Scotty

Post #31October 4, 2007, 12:38 PM UTC

Hello Could you have another go at downloading and running Combofix? It's working here for me.

prieko

Post #32October 4, 2007, 12:41 PM UTC

Hello there, I forgot to say that I have tried to run ComboFix earlier and it ran fine. Here's the log.

ComboFix 07-09-30.9 - termite 2007-10-04 18:05:48.1 - NTFSx86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.2.1252.63.1033.18.689 [GMT 8:00]
Running from: C:\Documents and Settings\[removed]\Desktop\DLs\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\.exe
C:\Autorun.inf
C:\Program Files\Common Files\services.exe
C:\Program Files\messenger.exe
c:\RECYCLER\RECYCLER.exe
c:\RECYCLER\S-1-5-21-682003330-261903793-839522115-1003.exe
c:\RECYCLER\S-1-5-21-682003330-261903793-839522115-1009.exe
c:\RECYCLER\S-1-5-21-682003330-261903793-839522115-1010.exe
c:\RECYCLER\S-1-5-21-861567501-1078145449-839522115-1003.exe
C:\svchost.exe
C:\temp.exe
C:\WINDOWS.exe
C:\WINDOWS\system32\1025.exe
C:\WINDOWS\system32\1028.exe
C:\WINDOWS\system32\1031.exe
C:\WINDOWS\system32\1033.exe
C:\WINDOWS\system32\1037.exe
C:\WINDOWS\system32\1041.exe
C:\WINDOWS\system32\1042.exe
C:\WINDOWS\system32\1054.exe
C:\WINDOWS\system32\2052.exe
C:\WINDOWS\system32\3076.exe
C:\WINDOWS\system32\restore\restore.exe

.
((((((((((((((((((((((((( Files Created from 2007-09-04 to 2007-10-04 )))))))))))))))))))))))))))))))
.

2007-10-03 22:10 d——– C:\Documents and Settings\newusers\Application Data\Comodo
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Templates.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Start Menu.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\SendTo.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Recent.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\PrintHood.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\NetHood.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\My Documents.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Local Settings.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Favorites.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Desktop.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Default User.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Cookies.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Application Data\Application Data.exe
2007-10-03 22:09 224,382 –a—— C:\Documents and Settings\newusers\Application Data.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Templates.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Start Menu.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\SendTo.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Recent.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\PrintHood.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\NetHood.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\My Documents.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Local Settings.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Favorites.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Desktop.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Default User.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Cookies.exe
2007-10-03 22:02 224,382 –a—— C:\Documents and Settings\newuser.TERMITE\Application Data.exe
2007-10-03 20:40 d——– C:\Documents and Settings\newuser\Application Data\Ahead
2007-10-03 20:35 d——– C:\Documents and Settings\newuser\Application Data\MEGAUPLOADTOOLBAR
2007-10-03 20:35 d——– C:\Documents and Settings\newuser\Application Data\Comodo
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Templates.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Start Menu.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\SendTo.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Recent.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\PrintHood.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\NetHood.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\My Documents.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Local Settings.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Favorites.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Desktop.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Default User.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Cookies.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Application Data\Application Data.exe
2007-10-03 20:34 224,382 –a—— C:\Documents and Settings\newuser\Application Data.exe
2007-10-03 18:26 d——– C:\Documents and Settings\termite\Application Data\SUPERAntiSpyware.com
2007-10-03 18:26 d——– C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-10-03 17:40 d——– C:\Program Files\SUPERAntiSpyware
2007-10-03 17:20 d——– C:\WINDOWS\system32\ActiveScan
2007-10-01 17:29 d——– C:\ComboFix-old
2007-10-01 17:09 d——– C:\WINDOWS\ERUNT
2007-10-01 02:03 dr——- C:\Documents and Settings\All Users.WINDOWS.2\Documents
2007-10-01 01:58 d——– C:\WINDOWS.2
2007-10-01 01:30 dr——- C:\Documents and Settings\All Users.WINDOWS.1\Documents
2007-10-01 01:24 d——– C:\WINDOWS.1
2007-10-01 01:16 d——– C:\WINDOWS.0
2007-09-30 19:07 1,310,720 –ah—– C:\Documents and Settings\~illya~.USER-C0FEDC8BF0\NTUSER.DAT
2007-09-30 18:13 d–hs—- C:\Documents and Settings\All Users.WINDOWS.2\DRM
2007-09-30 17:51 524,288 –ah—– C:\Documents and Settings\~illya~\NTUSER.DAT
2007-09-30 17:39 d–hs—- C:\Documents and Settings\All Users.WINDOWS.1\DRM
2007-09-25 23:28 d——– C:\Documents and Settings\termite\Application Data\Ahead
2007-09-23 16:46 48,640 –a—— C:\WINDOWS\system32\hpzll4pi.dll
2007-09-22 00:53 80,384 –a—— C:\WINDOWS\gamedelete.exe
2007-09-22 00:53 d——– C:\Program Files\ASCII
2007-09-19 18:39 d——– C:\Documents and Settings\Guess\Application Data\Fujitsu
2007-09-12 12:51 d——– C:\Documents and Settings\Guess\Application Data\WinRAR
2007-09-11 07:17 d——– C:\Documents and Settings\Guess\Application Data\MEGAUPLOADTOOLBAR
2007-09-10 21:45 d——– C:\Documents and Settings\Guess\Application Data\Talkback
2007-09-10 21:43 d——– C:\Documents and Settings\Guess\Application Data\Comodo
2007-09-10 20:20 16,128 –a–c— C:\WINDOWS\system32\dllcache\modemcsa.sys
2007-09-10 20:20 16,128 –a—— C:\WINDOWS\system32\drivers\MODEMCSA.sys
2007-09-09 11:41 d——– C:\Documents and Settings\Administrator\Application Data\Ahead
2007-09-09 11:38 d——– C:\Program Files\Nero
2007-09-09 11:38 d——– C:\Program Files\Common Files\Ahead
2007-09-09 11:38 d——– C:\Documents and Settings\All Users\Application Data\Nero
2007-09-08 21:35 356,352 –a—— C:\WINDOWS\system32\nvudisp.exe
2007-09-08 21:35 d——– C:\WINDOWS\nview
2007-09-08 21:34 356,352 –a—— C:\WINDOWS\system32\NVUNINST.EXE
2007-09-08 20:57 d——– C:\WINDOWS\NV20083732.TMP
2007-09-07 12:12 d——– C:\Documents and Settings\Administrator\Application Data\MEGAUPLOADTOOLBAR
2007-09-06 18:32 dr-h—– C:\Documents and Settings\termite\Application Data\SecuROM
2007-09-06 18:32 d——– C:\Documents and Settings\termite\Application Data\Bioshock
2007-09-06 17:40 d——– C:\Program Files\2K Games
2007-09-06 17:37 81,768 –a—— C:\WINDOWS\system32\xinput1_3.dll
2007-09-06 17:37 443,752 –a—— C:\WINDOWS\system32\d3dx10_34.dll
2007-09-06 17:37 3,497,832 –a—— C:\WINDOWS\system32\d3dx9_34.dll
2007-09-06 17:37 266,088 –a—— C:\WINDOWS\system32\xactengine2_8.dll
2007-09-06 17:37 18,280 –a—— C:\WINDOWS\system32\x3daudio1_2.dll
2007-09-06 17:37 1,124,720 –a—— C:\WINDOWS\system32\D3DCompiler_34.dll
2007-09-06 16:54 120,656 –a—— C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2007-09-05 16:45 d——– C:\Program Files\MSN Messenger

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-03 22:09 ——— d——– C:\Documents and Settings\termite\Application Data\MegauploadToolbar
2007-10-03 22:04 ——— d——– C:\Program Files\uTorrent
2007-10-03 17:40 ——— d——– C:\Program Files\Common Files\Wise Installation Wizard
2007-09-29 21:07 ——— d——– C:\Program Files\Yahoo!
2007-09-29 21:06 ——— d——– C:\Program Files\Winamp
2007-09-29 21:06 ——— d——– C:\Program Files\ViRC
2007-09-29 21:06 ——— d——– C:\Program Files\THQ
2007-09-29 21:06 ——— d——– C:\Program Files\Terragen
2007-09-29 21:06 ——— d——– C:\Program Files\SystemRequirementsLab
2007-09-29 21:06 ——— d——– C:\Program Files\Steinberg
2007-09-29 21:06 ——— d——– C:\Program Files\Spyware Doctor
2007-09-29 21:05 ——— d——– C:\Program Files\Seagate
2007-09-29 21:05 ——— d——– C:\Program Files\ReflexiveArcade
2007-09-29 21:05 ——— d——– C:\Program Files\Realtek
2007-09-29 21:05 ——— d——– C:\Program Files\QuickTime
2007-09-29 21:05 ——— d——– C:\Program Files\PowerISO
2007-09-29 21:05 ——— d——– C:\Program Files\Philips
2007-09-29 21:05 ——— d——– C:\Program Files\PC Auto Shutdown
2007-09-29 21:05 ——— d——– C:\Program Files\Opera
2007-09-29 21:05 ——— d——– C:\Program Files\Ocean Technology
2007-09-29 21:05 ——— d——– C:\Program Files\MySQL
2007-09-29 21:04 ——— d——– C:\Program Files\MSXML 6.0
2007-09-29 21:04 ——— d——– C:\Program Files\MSXML 4.0
2007-09-29 21:04 ——— d——– C:\Program Files\MSBuild
2007-09-29 21:04 ——— d——– C:\Program Files\Microsoft.NET
2007-09-29 21:04 ——— d——– C:\Program Files\Microsoft Works
2007-09-29 21:04 ——— d——– C:\Program Files\Microsoft Visual Studio 8
2007-09-29 21:03 ——— d——– C:\Program Files\Microsoft SQL Server 2005 Mobile Edition
2007-09-29 21:03 ——— d——– C:\Program Files\Microsoft SQL Server
2007-09-29 21:03 ——— d——– C:\Program Files\microsoft frontpage
2007-09-29 21:03 ——— d——– C:\Program Files\Microsoft Device Emulator
2007-09-29 21:03 ——— d——– C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-09-29 21:03 ——— d——– C:\Program Files\Microsoft ActiveSync
2007-09-29 21:02 ——— d–h—– C:\Program Files\InstallShield Installation Information
2007-09-29 21:02 ——— d——– C:\Program Files\MegauploadToolbar
2007-09-29 21:02 ——— d——– C:\Program Files\Lavasoft
2007-09-29 21:02 ——— d——– C:\Program Files\iTunes
2007-09-29 21:02 ——— d——– C:\Program Files\iPod
2007-09-29 21:02 ——— d——– C:\Program Files\IObit
2007-09-29 21:01 ——— d——– C:\Program Files\Image-Line
2007-09-29 21:01 ——— d——– C:\Program Files\HTML Help Workshop
2007-09-29 21:01 ——— d——– C:\Program Files\HP
2007-09-29 21:01 ——— d——– C:\Program Files\Hewlett-Packard
2007-09-29 21:01 ——— d——– C:\Program Files\GetRight
2007-09-29 21:01 ——— d——– C:\Program Files\Exact Audio Copy
2007-09-29 21:01 ——— d——– C:\Program Files\eMule
2007-09-29 21:01 ——— d——– C:\Program Files\DivX
2007-09-29 21:00 ——— d——– C:\Program Files\D-Tools
2007-09-29 21:00 ——— d——– C:\Program Files\CyberLink
2007-09-29 21:00 ——— d——– C:\Program Files\Comodo
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\Sonic Shared
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\Macrovision Shared
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\L&H
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\InstallShield
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\EasyInfo
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\Control Panels
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\Business Objects
2007-09-29 21:00 ——— d——– C:\Program Files\Common Files\Adobe Systems Shared
2007-09-29 21:00 ——— d——– C:\Program Files\Combined Community Codec Pack
2007-09-29 20:59 ——— d——– C:\Program Files\CE Remote Tools
2007-09-29 20:59 ——— d——– C:\Program Files\CDex_150
2007-09-29 20:59 ——— d——– C:\Program Files\Buddy Spy
2007-09-29 20:59 ——— d——– C:\Program Files\Bonjour
2007-09-29 20:59 ——— d——– C:\Program Files\Blender Foundation
2007-09-29 20:59 ——— d——– C:\Program Files\Azureus
2007-09-29 20:59 ——— d——– C:\Program Files\Autodesk
2007-09-29 20:59 ——— d——– C:\Program Files\Audacity
2007-09-29 20:59 ——— d——– C:\Program Files\Attansic
2007-09-29 20:59 ——— d——– C:\Program Files\ATLAS V13
2007-09-29 20:59 ——— d——– C:\Program Files\ASUS WiFi-AP Solo
2007-09-29 20:59 ——— d——– C:\Program Files\Apple Software Update
2007-09-29 20:59 ——— d——– C:\Program Files\Alwil Software
2007-09-29 20:59 ——— d——– C:\Program Files\AGEIA Technologies
2007-09-29 20:58 ——— d——– C:\Program Files\a-squared HiJackFree
2007-09-24 23:27 ——— d——– C:\Documents and Settings\All Users\Application Data\GetRight
2007-09-19 23:42 ——— d——– C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-09-17 22:20 ——— d——– C:\Documents and Settings\termite\Application Data\uTorrent
2007-09-06 18:32 107888 –a—— C:\WINDOWS\system32\CmdLineExt.dll
2007-09-02 18:59 ——— d——– C:\Documents and Settings\termite\Application Data\Azureus
2007-09-02 18:53 ——— d——– C:\Documents and Settings\All Users\Application Data\Azureus
2007-09-01 19:18 ——— d——– C:\Program Files\SpeedFan
2007-08-17 21:18 ——— d——– C:\Documents and Settings\termite\Application Data\Lionhead Studios
2007-08-17 21:05 ——— d——– C:\Documents and Settings\All Users\Application Data\Lionhead Studios
2007-08-17 12:51 ——— d——– C:\Documents and Settings\termite\Application Data\Hamachi
2007-08-11 20:31 ——— d——– C:\Documents and Settings\termite\Application Data\uk.co.planetside
2007-08-10 19:36 ——— d——– C:\Program Files\Common Files\Autodesk Shared
2007-08-10 19:36 ——— d——– C:\Documents and Settings\All Users\Application Data\Autodesk
2007-08-10 19:27 ——— d——– C:\Documents and Settings\termite\Application Data\My Games
2007-08-09 12:16 ——— d——– C:\Program Files\MagicISO
2007-07-30 19:19 92504 –a—— C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 –a—— C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 53080 –a—— C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 43352 –a—— C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 –a—— C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 –a—— C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 –a—— C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 –a—— C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 –a—— C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 –a—— C:\WINDOWS\system32\wups.dll
2007-04-25 02:52 224382 -rahs—- C:\WINDOWS\Media\svchost.exe
2007-04-24 18:52:06 224,382 –sha-r C:\WINDOWS\winhelp32.exe.exe
2007-04-24 18:52:06 224,382 –sha-r C:\WINDOWS\Media\svchost.exe
.

– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-13 02:36 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-18 02:04 C:\WINDOWS\SkyTel.exe]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-03 22:32]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 13:31]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 13:32]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 13:32]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-05-22 22:36]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2007-05-23 12:52]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-29 00:43]
"nwiz"="nwiz.exe" [2007-06-29 00:43 C:\WINDOWS\system32\nwiz.exe]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-29 00:43]
"ServiceHost"="C:\WINDOWS\Media\svchost.exe" [2007-04-25 02:52]
"Windows Logon"="C:\Program Files\Common Files\System\winlogon.exe" [2007-04-25 02:52]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Spyware Doctor"="C:\Program Files\Spyware Doctor\swdoctor.exe" /Q

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableChangePassword"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"=1 (0x1)
"NoRecentDocsMenu"=1 (0x1)
"NoSetTaskBar"=1 (0x1)
"NoSetFolders"=1 (0x1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Photosmart Premier Fast Start.lnk
backup=C:\WINDOWS\pss\HP Photosmart Premier Fast Start.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^termite^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\termite\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray]
C:\Program Files\AGEIA Technologies\TrayIcon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AWWFSPU]
"C:\Program Files\ASUS WiFi-AP Solo\AWWFSPU.exe" -nogui

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
"C:\Program Files\D-Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
"C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rebootex]
C:\Rebootex\rebootw.exe -s

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware Doctor]
"C:\Program Files\Spyware Doctor\swdoctor.exe" /Q

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

S2 EAPPkt;Realtek EAPPkt Protocol;C:\WINDOWS\system32\DRIVERS\EAPPkt.sys
S2 PCAutoShutdown_Service;PCAutoShutdown_Service;C:\Program Files\PC Auto Shutdown\ShutdownService.exe
S2 SQLWriter;SQL Server VSS Writer;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
S2 STEC3;STEC3;\??\C:\WINDOWS\system32\STEC3.sys
S3 AR2425;AzureWave AR5006 Wireless Network Adapter Service;C:\WINDOWS\system32\DRIVERS\aw5006.sys
S3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;C:\WINDOWS\system32\DRIVERS\atl01_xp.sys
S3 ovt519;EyeToy;C:\WINDOWS\system32\Drivers\ov519vid.sys
S3 PRISM_USB;Linksys Wireless-B USB Network Adapter Driver;C:\WINDOWS\system32\DRIVERS\LSPMUSB.sys
S3 XDva011;XDva011;\??\C:\WINDOWS\system32\XDva011.sys
S4 msvsmon80;Visual Studio 2005 Remote Debugger;"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon80

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C]
AutoRun\command- rawdata.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a071bf4f-47d5-11dc-a425-000f66b71afd}]
Auto\command- D:\infrom.exe
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL infrom.exe

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-04 18:09:51
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-04 18:11:10
C:\ComboFix-quarantined-files.txt … 2007-10-04 18:11
C:\ComboFix2.txt … 2007-09-30 23:54
.
— E O F —

Scotty

Post #33October 4, 2007, 7:39 PM UTC

Hi

Whew, that took forever, and Im still not finished!

Download and run Flash Drive Disinfector. Put any usb drives you think may be infected.

Open Notepad and Copy/Paste the text in the codebox below into it:

File::
C:\Documents and Settings\newusers\Templates.exe
C:\Documents and Settings\newusers\Start Menu.exe
C:\Documents and Settings\newusers\SendTo.exe
C:\Documents and Settings\newusers\Recent.exe
C:\Documents and Settings\newusers\PrintHood.exe
C:\Documents and Settings\newusers\NetHood.exe
C:\Documents and Settings\newusers\My Documents.exe
C:\Documents and Settings\newusers\Local Settings.exe
C:\Documents and Settings\newusers\Favorites.exe
C:\Documents and Settings\newusers\Desktop.exe
C:\Documents and Settings\newusers\Default User.exe
C:\Documents and Settings\newusers\Cookies.exe
C:\Documents and Settings\newusers\Application Data\Application Data.exe
C:\Documents and Settings\newusers\Application Data.exe
C:\Documents and Settings\newuser.TERMITE\Templates.exe
C:\Documents and Settings\newuser.TERMITE\Start Menu.exe
C:\Documents and Settings\newuser.TERMITE\SendTo.exe
C:\Documents and Settings\newuser.TERMITE\Recent.exe
C:\Documents and Settings\newuser.TERMITE\PrintHood.exe
C:\Documents and Settings\newuser.TERMITE\NetHood.exe
C:\Documents and Settings\newuser.TERMITE\My Documents.exe
C:\Documents and Settings\newuser.TERMITE\Local Settings.exe
C:\Documents and Settings\newuser.TERMITE\Favorites.exe
C:\Documents and Settings\newuser.TERMITE\Desktop.exe
C:\Documents and Settings\newuser.TERMITE\Default User.exe
C:\Documents and Settings\newuser.TERMITE\Cookies.exe
C:\Documents and Settings\newuser.TERMITE\Application Data.exe
C:\Documents and Settings\newuser\Templates.exe
C:\Documents and Settings\newuser\Start Menu.exe
C:\Documents and Settings\newuser\SendTo.exe
C:\Documents and Settings\newuser\Recent.exe
C:\Documents and Settings\newuser\PrintHood.exe
C:\Documents and Settings\newuser\NetHood.exe
C:\Documents and Settings\newuser\My Documents.exe
C:\Documents and Settings\newuser\Local Settings.exe
C:\Documents and Settings\newuser\Favorites.exe
C:\Documents and Settings\newuser\Desktop.exe
C:\Documents and Settings\newuser\Default User.exe
C:\Documents and Settings\newuser\Cookies.exe
C:\Documents and Settings\newuser\Application Data\Application Data.exe
C:\Documents and Settings\newuser\Application Data.exe
C:\WINDOWS\Media\svchost.exe
C:\WINDOWS\Media\svchost.exe
C:\WINDOWS\winhelp32.exe.exe
C:\Program Files\Common Files\System\winlogon.exe
D:\infrom.exe

Folder::
C:\ComboFix-old

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ServiceHost"=-
"Windows Logon"=-

DirLook::
C:\WINDOWS.1
C:\WINDOWS.0
C:\WINDOWS.2
C:\Documents and Settings\All Users.WINDOWS.2
C:\Documents and Settings\All Users.WINDOWS.1
C:\Documents and Settings\~illya~.USER-C0FEDC8BF0

Save this as "CFScript"

[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.

prieko

Post #34October 5, 2007, 2:19 PM UTC

Hello there, I've done a couple of things and I believe my PC is close to being fixed. Here's the things I just did: Went to safe mode and scanned using: SuperAntiSpyware SDFix ComboFix Note that we already did that, but I just re-did it again, and in the end, I got some of the controls back such as the Task Manager and Control Panel. With the Search back, I searched for .exe files at most 220kbs, and deleted them. So far, I haven't heard much from the virus, it hasn't been re-spreading again or so. However, there are still some things that Windows restricts me, I am unable to change the properties in my Taskbar/Start menu, and My Computer still isn't available. Also, the virus did flunked up the icons a bit, and the Icons are still mixed up. The log for the ComboFix with your instructions was too long, I'll upload it soon on RapidShare.

Scotty

Post #35October 5, 2007, 7:51 PM UTC last edited October 5, 2007, 7:51 PM UTC

You can spread the Combo log over seperate posts, that's no problem. I restored My Computer with a fix from Kelly's Korner. Notably, I ran SAS this morning, and it found nothing, but then I installed and ran AVG anti-virus and it found a lot more. I have passed on that file to a SAS reseller who is uploading it to the makers, so expect that updated sometime soon. If we get what we can with Combofix then clean up. .

prieko

Post #36October 8, 2007, 9:21 AM UTC

Hello there, sorry for the late reply. Since yesterday, however, the Virus seemed to have returned. I tried to do the same thing I did earlier, but to no avail since I can't boot in Safe Mode even with the program we used earlier. Anything to do? Thanks.

Scotty

Post #37October 8, 2007, 9:34 AM UTC

Hi

Did you delete that folder you had uploaded? That appears to be the source. Run Combo again and post the newest log. Split it over seperate posts if need be.

Try this fix to get My Computer back.

http://www.kellys-korner-xp.com/regs_edits/mycomputer.reg

prieko

Post #38October 8, 2007, 9:39 AM UTC

Yes, after I had 'cleaned' the computer the other day, I also proceeded to use Search and eliminate the executable files. I will run ComboFix and post a log soon.

Scotty

Post #39October 8, 2007, 9:48 AM UTC

I hope you have time on your hands this week for Im taking 5 or 6 days off from Friday.

prieko

Post #40October 8, 2007, 10:53 AM UTC

Ah, won't there be others to take over the problem?

Here is the log, thanks:

ComboFix 07-09-30.9 - termite 2007-10-08 18:13:28.7 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.63.1033.18.541 [GMT 8:00]
Running from: C:\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\messenger.exe
C:\temp.exe
C:\WINDOWS.exe
C:\WINDOWS\help.exe
C:\WINDOWS\system.exe
C:\WINDOWS\system32\1025.exe
C:\WINDOWS\system32\1028.exe
C:\WINDOWS\system32\1031.exe
C:\WINDOWS\system32\1033.exe
C:\WINDOWS\system32\1037.exe
C:\WINDOWS\system32\1041.exe
C:\WINDOWS\system32\1042.exe
C:\WINDOWS\system32\1054.exe
C:\WINDOWS\system32\2052.exe
C:\WINDOWS\system32\3076.exe
C:\WINDOWS\system32\microsoft.exe
C:\WINDOWS\system32\system32.exe
C:\WINDOWS\temp.exe
C:\WINDOWS\windows.exe

.
((((((((((((((((((((((((( Files Created from 2007-09-08 to 2007-10-08 )))))))))))))))))))))))))))))))
.

2007-10-07 23:09 51,200 –a—— C:\WINDOWS\nircmd.exe
2007-10-07 20:19 d——– C:\Documents and Settings\nuck\Application Data\Comodo
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Local Settings.exe
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Favorites.exe
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Desktop.exe
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Default User.exe
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Cookies.exe
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Application Data\Application Data.exe
2007-10-07 20:18 224,382 –a—— C:\Documents and Settings\nuck\Application Data.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\Templates.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\Start Menu.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\SendTo.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\Recent.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\PrintHood.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\NetHood.exe
2007-10-07 20:17 224,382 –a—— C:\Documents and Settings\nuck\My Documents.exe
2007-10-07 20:16 d——– C:\Documents and Settings\nuser\Application Data\Comodo
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Templates.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Start Menu.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\SendTo.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Recent.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\PrintHood.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\NetHood.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\My Documents.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Local Settings.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Favorites.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Desktop.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Default User.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Cookies.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Application Data\Application Data.exe
2007-10-07 20:15 224,382 –a—— C:\Documents and Settings\nuser\Application Data.exe
2007-10-05 22:46 d——– C:\Documents and Settings\nub\Application Data\Ahead
2007-10-05 22:36 d——– C:\Documents and Settings\nub\Application Data\MEGAUPLOADTOOLBAR
2007-10-05 22:35 d——– C:\Documents and Settings\nub\Application Data\Comodo
2007-10-05 22:10 103,067 –a—— C:\Flash_Disinfector.exe
2007-10-05 22:10 drahs—- C:\autorun.inf
2007-10-03 22:10 d——– C:\Documents and Settings\newusers\Application Data\Comodo
2007-10-03 20:40 d——– C:\Documents and Settings\newuser\Application Data\Ahead
2007-10-03 20:35 d——– C:\Documents and Settings\newuser\Application Data\MEGAUPLOADTOOLBAR
2007-10-03 20:35 d——– C:\Documents and Settings\newuser\Application Data\Comodo
2007-10-03 18:26 d——– C:\Documents and Settings\termite\Application Data\SUPERAntiSpyware.com
2007-10-03 18:26 d——– C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-10-03 17:40 d——– C:\Program Files\SUPERAntiSpyware
2007-10-03 17:20 d——– C:\WINDOWS\system32\ActiveScan
2007-10-01 17:09 d——– C:\WINDOWS\ERUNT
2007-10-01 02:03 dr——- C:\Documents and Settings\All Users.WINDOWS.2\Documents
2007-10-01 01:58 d——– C:\WINDOWS.2
2007-10-01 01:30 dr——- C:\Documents and Settings\All Users.WINDOWS.1\Documents
2007-10-01 01:24 d——– C:\WINDOWS.1
2007-10-01 01:16 d——– C:\WINDOWS.0
2007-09-30 19:07 1,310,720 –ah—– C:\Documents and Settings\~illya~.USER-C0FEDC8BF0\NTUSER.DAT
2007-09-30 18:13 d–hs—- C:\Documents and Settings\All Users.WINDOWS.2\DRM
2007-09-30 17:51 524,288 –ah—– C:\Documents and Settings\~illya~\NTUSER.DAT
2007-09-30 17:39 d–hs—- C:\Documents and Settings\All Users.WINDOWS.1\DRM
2007-09-25 23:28 d——– C:\Documents and Settings\termite\Application Data\Ahead
2007-09-23 16:46 48,640 –a—— C:\WINDOWS\system32\hpzll4pi.dll
2007-09-22 00:53 d——– C:\Program Files\ASCII
2007-09-19 18:39 d——– C:\Documents and Settings\Guess\Application Data\Fujitsu
2007-09-12 12:51 d——– C:\Documents and Settings\Guess\Application Data\WinRAR
2007-09-11 07:17 d——– C:\Documents and Settings\Guess\Application Data\MEGAUPLOADTOOLBAR
2007-09-10 21:45 d——– C:\Documents and Settings\Guess\Application Data\Talkback
2007-09-10 21:43 d——– C:\Documents and Settings\Guess\Application Data\Comodo
2007-09-10 20:20 16,128 –a–c— C:\WINDOWS\system32\dllcache\modemcsa.sys
2007-09-10 20:20 16,128 –a—— C:\WINDOWS\system32\drivers\MODEMCSA.sys
2007-09-09 11:41 d——– C:\Documents and Settings\Administrator\Application Data\Ahead
2007-09-09 11:38 d——– C:\Program Files\Nero
2007-09-09 11:38 d——– C:\Program Files\Common Files\Ahead
2007-09-09 11:38 d——– C:\Documents and Settings\All Users\Application Data\Nero
2007-09-08 21:35 356,352 –a—— C:\WINDOWS\system32\nvudisp.exe
2007-09-08 21:35 d——– C:\WINDOWS\nview
2007-09-08 21:34 356,352 –a—— C:\WINDOWS\system32\NVUNINST.EXE
2007-09-08 20:57 d——– C:\WINDOWS\NV20083732.TMP

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-07 14:03 ——— d–h—– C:\Program Files\InstallShield Installation Information
2007-10-07 14:03 ——— d——– C:\Program Files\Yahoo!
2007-10-07 14:03 ——— d——– C:\Program Files\Winamp
2007-10-07 14:03 ——— d——– C:\Program Files\ViRC
2007-10-07 14:03 ——— d——– C:\Program Files\uTorrent
2007-10-07 14:03 ——— d——– C:\Program Files\THQ
2007-10-07 14:03 ——— d——– C:\Program Files\Terragen
2007-10-07 14:03 ——— d——– C:\Program Files\SystemRequirementsLab
2007-10-07 14:03 ——— d——– C:\Program Files\Steinberg
2007-10-07 14:03 ——— d——– C:\Program Files\SpywareBlaster
2007-10-07 14:03 ——— d——– C:\Program Files\Spyware Doctor
2007-10-07 14:03 ——— d——– C:\Program Files\SpeedFan
2007-10-07 14:03 ——— d——– C:\Program Files\Seagate
2007-10-07 14:03 ——— d——– C:\Program Files\ReflexiveArcade
2007-10-07 14:03 ——— d——– C:\Program Files\Realtek
2007-10-07 14:03 ——— d——– C:\Program Files\QuickTime
2007-10-07 14:03 ——— d——– C:\Program Files\PowerISO
2007-10-07 14:03 ——— d——– C:\Program Files\Philips
2007-10-07 14:03 ——— d——– C:\Program Files\PC Auto Shutdown
2007-10-07 14:03 ——— d——– C:\Program Files\Opera
2007-10-07 14:03 ——— d——– C:\Program Files\Ocean Technology
2007-10-07 14:03 ——— d——– C:\Program Files\MySQL
2007-10-07 14:03 ——— d——– C:\Program Files\MSXML 6.0
2007-10-07 14:03 ——— d——– C:\Program Files\MSXML 4.0
2007-10-07 14:03 ——— d——– C:\Program Files\MSN Messenger
2007-10-07 14:03 ——— d——– C:\Program Files\MSBuild
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft.NET
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft Works
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft Visual Studio 8
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft SQL Server 2005 Mobile Edition
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft SQL Server
2007-10-07 14:03 ——— d——– C:\Program Files\microsoft frontpage
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft Device Emulator
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft ActiveSync
2007-10-07 14:03 ——— d——– C:\Program Files\MegauploadToolbar
2007-10-07 14:03 ——— d——– C:\Program Files\MagicISO
2007-10-07 14:03 ——— d——– C:\Program Files\Lavasoft
2007-10-07 14:03 ——— d——– C:\Program Files\iTunes
2007-10-07 14:03 ——— d——– C:\Program Files\iPod
2007-10-07 14:03 ——— d——– C:\Program Files\IObit
2007-10-07 14:03 ——— d——– C:\Program Files\Image-Line
2007-10-07 14:03 ——— d——– C:\Program Files\HTML Help Workshop
2007-10-07 14:03 ——— d——– C:\Program Files\HP
2007-10-07 14:03 ——— d——– C:\Program Files\Hewlett-Packard
2007-10-07 14:03 ——— d——– C:\Program Files\Hamachi
2007-10-07 14:03 ——— d——– C:\Program Files\GetRight
2007-10-07 14:03 ——— d——– C:\Program Files\Exact Audio Copy
2007-10-07 14:02 ——— d——– C:\Program Files\eMule
2007-10-07 14:02 ——— d——– C:\Program Files\DivX
2007-10-07 14:02 ——— d——– C:\Program Files\Delayed Shutdown
2007-10-07 14:02 ——— d——– C:\Program Files\D-Tools
2007-10-07 14:02 ——— d——– C:\Program Files\CyberLink
2007-10-07 14:02 ——— d——– C:\Program Files\Comodo
2007-10-07 14:02 ——— d——– C:\Program Files\Combined Community Codec Pack
2007-10-07 14:02 ——— d——– C:\Program Files\CE Remote Tools
2007-10-07 14:02 ——— d——– C:\Program Files\CDex_150
2007-10-07 14:02 ——— d——– C:\Program Files\Buddy Spy
2007-10-07 14:02 ——— d——– C:\Program Files\Bonjour
2007-10-07 14:02 ——— d——– C:\Program Files\Blender Foundation
2007-10-07 14:02 ——— d——– C:\Program Files\Azureus
2007-10-07 14:02 ——— d——– C:\Program Files\Autodesk
2007-10-07 14:02 ——— d——– C:\Program Files\Audacity
2007-10-07 14:02 ——— d——– C:\Program Files\Attansic
2007-10-07 14:02 ——— d——– C:\Program Files\ATLAS V13
2007-10-07 14:02 ——— d——– C:\Program Files\ASUS WiFi-AP Solo
2007-10-07 14:02 ——— d——– C:\Program Files\Apple Software Update
2007-10-07 14:02 ——— d——– C:\Program Files\Alwil Software
2007-10-07 14:02 ——— d——– C:\Program Files\AGEIA Technologies
2007-10-07 14:02 ——— d——– C:\Program Files\a-squared HiJackFree
2007-10-07 14:02 ——— d——– C:\Program Files\2K Games
2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Wise Installation Wizard
2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Sonic Shared
2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Merge Modules
2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Macrovision Shared
2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\L&H
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\InstallShield
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\HP
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\EasyInfo
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Control Panels
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Business Objects
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Autodesk Shared
2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Adobe Systems Shared
2007-10-04 20:09 ——— d——– C:\Documents and Settings\termite\Application Data\MegauploadToolbar
2007-09-30 19:19 1470231 –a—— C:\ComboFix.exe
2007-09-29 16:16 ——— d——– C:\Documents and Settings\termite\Application Data\Bioshock
2007-09-24 23:27 ——— d——– C:\Documents and Settings\All Users\Application Data\GetRight
2007-09-19 23:42 ——— d——– C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-09-17 22:20 ——— d——– C:\Documents and Settings\termite\Application Data\uTorrent
2007-09-07 12:12 ——— d——– C:\Documents and Settings\Administrator\Application Data\MEGAUPLOADTOOLBAR
2007-09-06 18:32 107888 –a—— C:\WINDOWS\system32\CmdLineExt.dll
2007-09-06 18:32 ——— dr-h—– C:\Documents and Settings\termite\Application Data\SecuROM
2007-09-02 18:59 ——— d——– C:\Documents and Settings\termite\Application Data\Azureus
2007-09-02 18:53 ——— d——– C:\Documents and Settings\All Users\Application Data\Azureus
2007-08-17 21:18 ——— d——– C:\Documents and Settings\termite\Application Data\Lionhead Studios
2007-08-17 21:05 ——— d——– C:\Documents and Settings\All Users\Application Data\Lionhead Studios
2007-08-17 12:51 ——— d——– C:\Documents and Settings\termite\Application Data\Hamachi
2007-08-11 20:31 ——— d——– C:\Documents and Settings\termite\Application Data\uk.co.planetside
2007-08-10 19:36 ——— d——– C:\Documents and Settings\All Users\Application Data\Autodesk
2007-08-10 19:27 ——— d——– C:\Documents and Settings\termite\Application Data\My Games
2007-04-24 18:52:06 224,382 –sha-r C:\WINDOWS\winhelp32.exe.exe
2007-04-24 18:52:06 224,382 –sha-r C:\WINDOWS\Media\svchost.exe
.

– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Logon"="C:\Program Files\Common Files\System\winlogon.exe" [2007-04-25 02:52]
"ServiceHost"="C:\WINDOWS\Media\svchost.exe" [2007-04-25 02:52]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-13 02:36 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-18 02:04 C:\WINDOWS\SkyTel.exe]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-03 22:32]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 13:31]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 13:32]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 13:32]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-05-22 22:36]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2007-05-23 12:52]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-29 00:43]
"nwiz"="nwiz.exe" [2007-06-29 00:43 C:\WINDOWS\system32\nwiz.exe]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Spyware Doctor"="C:\Program Files\Spyware Doctor\swdoctor.exe" /Q

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableChangePassword"=1 (0x1)
"DisableRegistryTools"=1 (0x1)
"DisableTaskMgr"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"=1 (0x1)
"NoRecentDocsMenu"=1 (0x1)
"NoSetTaskBar"=1 (0x1)
"NoSetFolders"=1 (0x1)
"NoFolderOptions"=1 (0x1)
"NoFind"=1 (0x1)
"NoRun"=1 (0x1)
"NoControlPanel"=1 (0x1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Shell"="explorer.exe winhelp32.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Photosmart Premier Fast Start.lnk
backup=C:\WINDOWS\pss\HP Photosmart Premier Fast Start.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^termite^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\termite\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray]
C:\Program Files\AGEIA Technologies\TrayIcon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AWWFSPU]
"C:\Program Files\ASUS WiFi-AP Solo\AWWFSPU.exe" -nogui

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
"C:\Program Files\D-Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
"C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rebootex]
C:\Rebootex\rebootw.exe -s

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware Doctor]
"C:\Program Files\Spyware Doctor\swdoctor.exe" /Q

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

R2 PCAutoShutdown_Service;PCAutoShutdown_Service;C:\Program Files\PC Auto Shutdown\ShutdownService.exe
R2 SQLWriter;SQL Server VSS Writer;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
R2 STEC3;STEC3;\??\C:\WINDOWS\system32\STEC3.sys
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;C:\WINDOWS\system32\DRIVERS\atl01_xp.sys
S2 EAPPkt;Realtek EAPPkt Protocol;C:\WINDOWS\system32\DRIVERS\EAPPkt.sys
S3 AR2425;AzureWave AR5006 Wireless Network Adapter Service;C:\WINDOWS\system32\DRIVERS\aw5006.sys
S3 ovt519;EyeToy;C:\WINDOWS\system32\Drivers\ov519vid.sys
S3 PRISM_USB;Linksys Wireless-B USB Network Adapter Driver;C:\WINDOWS\system32\DRIVERS\LSPMUSB.sys
S3 XDva011;XDva011;\??\C:\WINDOWS\system32\XDva011.sys
S4 msvsmon80;Visual Studio 2005 Remote Debugger;"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon80

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a071bf4f-47d5-11dc-a425-000f66b71afd}]
Auto\command- D:\infrom.exe
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL infrom.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-10-08 10:18:46 C:\WINDOWS\Tasks\At1.job"
- C:\WINDOWS\system32\dxdiag32.exe
"2007-10-08 10:18:46 C:\WINDOWS\Tasks\At2.job"
- C:\WINDOWS\system32\dxdiag32.exe
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-08 18:17:27
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet002\Services\combofix]
"ImagePath"="C:\WINDOWS\system32\cmd.exe /c start /i /dC:\ComboFix\ C:\WINDOWS\system32\cmd.exe /c Sys.bat /\c@"
.
Completion time: 2007-10-08 18:19:09
C:\ComboFix-quarantined-files.txt … 2007-10-08 18:19
C:\ComboFix2.txt … 2007-10-07 21:19
C:\ComboFix3.txt … 2007-10-05 21:13
.
— E O F —

Scotty

Post #41October 8, 2007, 11:26 AM UTC last edited October 8, 2007, 2:13 PM UTC

Hi

There are others, but I like to finish what I start.

Lets do as much as possible in one go.

First stick in any flash drives that you use then run the FlashDisinfector again. Then run the SafeBootKey Repair again.

Open Notepad and Copy/Paste the text in the codebox below into it:

File::
C:\Documents and Settings\nuck\Local Settings.exe
C:\Documents and Settings\nuck\Favorites.exe
C:\Documents and Settings\nuck\Desktop.exe
C:\Documents and Settings\nuck\Default User.exe
C:\Documents and Settings\nuck\Cookies.exe
C:\Documents and Settings\nuck\Application Data\Application Data.exe
C:\Documents and Settings\nuck\Application Data.exe
C:\Documents and Settings\nuck\Templates.exe
C:\Documents and Settings\nuck\Start Menu.exe
C:\Documents and Settings\nuck\SendTo.exe
C:\Documents and Settings\nuck\Recent.exe
C:\Documents and Settings\nuck\PrintHood.exe
C:\Documents and Settings\nuck\NetHood.exe
C:\Documents and Settings\nuck\My Documents.exe
C:\Documents and Settings\nuser\Application Data\Comodo
C:\Documents and Settings\nuser\Templates.exe
C:\Documents and Settings\nuser\Start Menu.exe
C:\Documents and Settings\nuser\SendTo.exe
C:\Documents and Settings\nuser\Recent.exe
C:\Documents and Settings\nuser\PrintHood.exe
C:\Documents and Settings\nuser\NetHood.exe
C:\Documents and Settings\nuser\My Documents.exe
C:\Documents and Settings\nuser\Local Settings.exe
C:\Documents and Settings\nuser\Favorites.exe
C:\Documents and Settings\nuser\Desktop.exe
C:\Documents and Settings\nuser\Default User.exe
C:\Documents and Settings\nuser\Cookies.exe
C:\Documents and Settings\nuser\Application Data\Application Data.exe
C:\Documents and Settings\nuser\Application Data.exe
C:\WINDOWS\winhelp32.exe.exe
D:\infrom.exe
C:\WINDOWS\system32\dxdiag32.exe
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job

Folder::
C:\WINDOWS\Media
C:\Program Files\Common Files\System
C:\WINDOWS\NV20083732.TMP 

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Logon"=-
"ServiceHost"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableChangePassword"=dword:00000000 
"DisableRegistryTools"=dword:00000000 
"DisableTaskMgr"=dword:00000000 
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"=dword:00000000 
"NoRecentDocsMenu"=dword:00000000 
"NoSetTaskBar"=dword:00000000 
"NoSetFolders"=dword:00000000 
"NoFolderOptions"=dword:00000000 
"NoFind"=dword:00000000 
"NoRun"=dword:00000000 
"NoControlPanel"=dword:00000000 
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Shell"="explorer.exe"

DirLook::
C:\WINDOWS.2
C:\WINDOWS.1
C:\WINDOWS.0
C:\Program Files\Attansic
C:\Program Files\Buddy Spy

Save this as "CFScript"

[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.

Update and run SuperAntiSpyware again and post the resultant report.

F-Secure Online Scan

Scan online using F-Secure Online Scanner Next Generation using Internet Explorer
http://support.f-secure.com/enu/home/ols3.shtml
Click on the link "F-Secure Online Scanner Next Generation".
You may receive an alert on the address bar at this point to install the ActiveX control.
Click on that alert and then Click Insall ActiveX component.
Read the license agreement and click "Accept".
Click "Full System Scan" to download the scanning components and begin scan and cleaning.
When done click "Show report" and copy/paste its contents into your next reply.

prieko

Post #42October 8, 2007, 2:34 PM UTC

ComboFix 07-09-30.9 - termite 2007-10-08 22:02:13.7 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.63.1033.18.507 [GMT 8:00] Running from: C:\ComboFix.exe Command switches used :: C:\CFScript.txt FILE:: C:\Documents and Settings\nuck\Local Settings.exe C:\Documents and Settings\nuck\Favorites.exe C:\Documents and Settings\nuck\Desktop.exe C:\Documents and Settings\nuck\Default User.exe C:\Documents and Settings\nuck\Cookies.exe C:\Documents and Settings\nuck\Application Data\Application Data.exe C:\Documents and Settings\nuck\Application Data.exe C:\Documents and Settings\nuck\Templates.exe C:\Documents and Settings\nuck\Start Menu.exe C:\Documents and Settings\nuck\SendTo.exe C:\Documents and Settings\nuck\Recent.exe C:\Documents and Settings\nuck\PrintHood.exe C:\Documents and Settings\nuck\NetHood.exe C:\Documents and Settings\nuck\My Documents.exe C:\Documents and Settings\nuser\Application Data\Comodo C:\Documents and Settings\nuser\Templates.exe C:\Documents and Settings\nuser\Start Menu.exe C:\Documents and Settings\nuser\SendTo.exe C:\Documents and Settings\nuser\Recent.exe C:\Documents and Settings\nuser\PrintHood.exe C:\Documents and Settings\nuser\NetHood.exe C:\Documents and Settings\nuser\My Documents.exe C:\Documents and Settings\nuser\Local Settings.exe C:\Documents and Settings\nuser\Favorites.exe C:\Documents and Settings\nuser\Desktop.exe C:\Documents and Settings\nuser\Default User.exe C:\Documents and Settings\nuser\Cookies.exe C:\Documents and Settings\nuser\Application Data\Application Data.exe C:\Documents and Settings\nuser\Application Data.exe C:\WINDOWS\NV20083732.TMP C:\WINDOWS\winhelp32.exe.exe D:\infrom.exe C:\WINDOWS\system32\dxdiag32.exe C:\WINDOWS\Tasks\At1.job C:\WINDOWS\Tasks\At2.job . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\nuck\Application Data.exe C:\Documents and Settings\nuck\Application Data\Application Data.exe C:\Documents and Settings\nuck\Cookies.exe C:\Documents and Settings\nuck\Default User.exe C:\Documents and Settings\nuck\Desktop.exe C:\Documents and Settings\nuck\Favorites.exe C:\Documents and Settings\nuck\Local Settings.exe C:\Documents and Settings\nuck\My Documents.exe C:\Documents and Settings\nuck\NetHood.exe C:\Documents and Settings\nuck\PrintHood.exe C:\Documents and Settings\nuck\Recent.exe C:\Documents and Settings\nuck\SendTo.exe C:\Documents and Settings\nuck\Start Menu.exe C:\Documents and Settings\nuck\Templates.exe C:\Documents and Settings\nuser\Application Data.exe C:\Documents and Settings\nuser\Application Data\Application Data.exe C:\Documents and Settings\nuser\Cookies.exe C:\Documents and Settings\nuser\Default User.exe C:\Documents and Settings\nuser\Desktop.exe C:\Documents and Settings\nuser\Favorites.exe C:\Documents and Settings\nuser\Local Settings.exe C:\Documents and Settings\nuser\My Documents.exe C:\Documents and Settings\nuser\NetHood.exe C:\Documents and Settings\nuser\PrintHood.exe C:\Documents and Settings\nuser\Recent.exe C:\Documents and Settings\nuser\SendTo.exe C:\Documents and Settings\nuser\Start Menu.exe C:\Documents and Settings\nuser\Templates.exe C:\Program Files\Common Files\System . . . . failed to delete C:\Program Files\Common Files\System\ado.exe C:\Program Files\Common Files\System\ado\ado.exe C:\Program Files\Common Files\System\ado\adojavas.inc C:\Program Files\Common Files\System\ado\adovbs.inc C:\Program Files\Common Files\System\ado\MDACReadme.htm C:\Program Files\Common Files\System\ado\msader15.dll C:\Program Files\Common Files\System\ado\msado15.dll C:\Program Files\Common Files\System\ado\msado20.tlb C:\Program Files\Common Files\System\ado\msado21.tlb C:\Program Files\Common Files\System\ado\msado25.tlb C:\Program Files\Common Files\System\ado\msado26.tlb C:\Program Files\Common Files\System\ado\msado27.tlb C:\Program Files\Common Files\System\ado\msadomd.dll C:\Program Files\Common Files\System\ado\msador15.dll C:\Program Files\Common Files\System\ado\msadox.dll C:\Program Files\Common Files\System\ado\msadrh15.dll C:\Program Files\Common Files\System\ado\msjro.dll C:\Program Files\Common Files\System\directdb.dll C:\Program Files\Common Files\System\msadc.exe C:\Program Files\Common Files\System\msadc\adcjavas.inc C:\Program Files\Common Files\System\msadc\adcvbs.inc C:\Program Files\Common Files\System\msadc\handler.reg C:\Program Files\Common Files\System\msadc\handsafe.reg C:\Program Files\Common Files\System\msadc\msadc.exe C:\Program Files\Common Files\System\msadc\msadce.dll C:\Program Files\Common Files\System\msadc\msadcer.dll C:\Program Files\Common Files\System\msadc\msadcf.dll C:\Program Files\Common Files\System\msadc\msadcfr.dll C:\Program Files\Common Files\System\msadc\msadco.dll C:\Program Files\Common Files\System\msadc\msadcor.dll C:\Program Files\Common Files\System\msadc\msadcs.dll C:\Program Files\Common Files\System\msadc\msadds.dll C:\Program Files\Common Files\System\msadc\msaddsr.dll C:\Program Files\Common Files\System\msadc\msdaprsr.dll C:\Program Files\Common Files\System\msadc\msdaprst.dll C:\Program Files\Common Files\System\msadc\msdarem.dll C:\Program Files\Common Files\System\msadc\msdaremr.dll C:\Program Files\Common Files\System\msadc\msdfmap.dll C:\Program Files\Common Files\System\MSMAPI.exe C:\Program Files\Common Files\System\MSMAPI\1033.exe C:\Program Files\Common Files\System\MSMAPI\1033\1033.exe C:\Program Files\Common Files\System\MSMAPI\1033\BJABLR32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\CNFNOT32.EXE C:\Program Files\Common Files\System\MSMAPI\1033\CONTAB32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\DUMPSTER.DLL C:\Program Files\Common Files\System\MSMAPI\1033\EMABLT.HLP C:\Program Files\Common Files\System\MSMAPI\1033\EMABLT32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\EMSABP32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\EMSMDB32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\EMSUI32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\ESCONF.DLL C:\Program Files\Common Files\System\MSMAPI\1033\EXCHNG.HLP C:\Program Files\Common Files\System\MSMAPI\1033\GAPI32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\MAPI32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\MAPIR.DLL C:\Program Files\Common Files\System\MSMAPI\1033\MAPISVC.INF C:\Program Files\Common Files\System\MSMAPI\1033\MLCFG32.CPL C:\Program Files\Common Files\System\MSMAPI\1033\MSMAPI32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\MSPST32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\OUTEX.DLL C:\Program Files\Common Files\System\MSMAPI\1033\PSTPRX32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\SCANOST.EXE C:\Program Files\Common Files\System\MSMAPI\1033\SCANPST.EXE C:\Program Files\Common Files\System\MSMAPI\1033\SCNPST32.DLL C:\Program Files\Common Files\System\MSMAPI\1033\SCNPST64.DLL C:\Program Files\Common Files\System\MSMAPI\1033\SCRPTXTN.DLL C:\Program Files\Common Files\System\MSMAPI\MSMAPI.exe C:\Program Files\Common Files\System\Ole DB.exe C:\Program Files\Common Files\System\Ole DB\msdadc.dll C:\Program Files\Common Files\System\Ole DB\msdaenum.dll C:\Program Files\Common Files\System\Ole DB\msdaer.dll C:\Program Files\Common Files\System\Ole DB\msdaipp.dll C:\Program Files\Common Files\System\Ole DB\msdaora.dll C:\Program Files\Common Files\System\Ole DB\msdaorar.dll C:\Program Files\Common Files\System\Ole DB\msdaosp.dll C:\Program Files\Common Files\System\Ole DB\msdapml.dll C:\Program Files\Common Files\System\Ole DB\msdaps.dll C:\Program Files\Common Files\System\Ole DB\msdasc.dll C:\Program Files\Common Files\System\Ole DB\msdasql.dll C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll C:\Program Files\Common Files\System\Ole DB\msdatl3.dll C:\Program Files\Common Files\System\Ole DB\msdatt.dll C:\Program Files\Common Files\System\Ole DB\msdaurl.dll C:\Program Files\Common Files\System\Ole DB\MSDMENG.DLL C:\Program Files\Common Files\System\Ole DB\MSDMINE.DLL C:\Program Files\Common Files\System\Ole DB\MSMDCB80.DLL C:\Program Files\Common Files\System\Ole DB\MSMDGD80.DLL C:\Program Files\Common Files\System\Ole DB\MSMDUN80.DLL C:\Program Files\Common Files\System\Ole DB\MSOLAP80.DLL C:\Program Files\Common Files\System\Ole DB\MSOLUI80.DLL C:\Program Files\Common Files\System\Ole DB\msxactps.dll C:\Program Files\Common Files\System\Ole DB\Ole DB.exe C:\Program Files\Common Files\System\Ole DB\oledb32.dll C:\Program Files\Common Files\System\Ole DB\oledb32r.dll C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc C:\Program Files\Common Files\System\Ole DB\resources.exe C:\Program Files\Common Files\System\Ole DB\resources\1033.exe C:\Program Files\Common Files\System\Ole DB\resources\1033\1033.exe C:\Program Files\Common Files\System\Ole DB\resources\1033\MSDMINE.RLL C:\Program Files\Common Files\System\Ole DB\resources\1033\MSOLAP80.RLL C:\Program Files\Common Files\System\Ole DB\resources\1033\OLAPUIR.RLL C:\Program Files\Common Files\System\Ole DB\resources\resources.exe C:\Program Files\Common Files\System\Ole DB\sqloledb.dll C:\Program Files\Common Files\System\Ole DB\sqloledb.rll C:\Program Files\Common Files\System\Ole DB\sqlsoldb.chm C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll C:\Program Files\Common Files\System\System.exe C:\Program Files\Common Files\System\wab32.dll C:\Program Files\Common Files\System\wab32res.dll C:\Program Files\Common Files\System\winlogon.exe C:\Program Files\messenger.exe C:\temp.exe C:\WINDOWS.exe C:\WINDOWS\help.exe C:\WINDOWS\Media C:\WINDOWS\Media\chimes.wav C:\WINDOWS\Media\chord.wav C:\WINDOWS\Media\ding.wav C:\WINDOWS\Media\flourish.mid C:\WINDOWS\Media\Media.exe C:\WINDOWS\Media\notify.wav C:\WINDOWS\Media\onestop.mid C:\WINDOWS\Media\recycle.wav C:\WINDOWS\Media\ringin.wav C:\WINDOWS\Media\ringout.wav C:\WINDOWS\Media\start.wav C:\WINDOWS\Media\svchost.exe C:\WINDOWS\Media\tada.wav C:\WINDOWS\Media\town.mid C:\WINDOWS\Media\Windows XP Balloon.wav C:\WINDOWS\Media\Windows XP Battery Critical.wav C:\WINDOWS\Media\Windows XP Battery Low.wav C:\WINDOWS\Media\Windows XP Critical Stop.wav C:\WINDOWS\Media\Windows XP Default.wav C:\WINDOWS\Media\Windows XP Ding.wav C:\WINDOWS\Media\Windows XP Error.wav C:\WINDOWS\Media\Windows XP Exclamation.wav C:\WINDOWS\Media\Windows XP Hardware Fail.wav C:\WINDOWS\Media\Windows XP Hardware Insert.wav C:\WINDOWS\Media\Windows XP Hardware Remove.wav C:\WINDOWS\Media\Windows XP Information Bar.wav C:\WINDOWS\Media\Windows XP Logoff Sound.wav C:\WINDOWS\Media\Windows XP Logon Sound.wav C:\WINDOWS\Media\Windows XP Menu Command.wav C:\WINDOWS\Media\Windows XP Minimize.wav C:\WINDOWS\Media\Windows XP Notify.wav C:\WINDOWS\Media\Windows XP Pop-up Blocked.wav C:\WINDOWS\Media\Windows XP Print complete.wav C:\WINDOWS\Media\Windows XP Recycle.wav C:\WINDOWS\Media\Windows XP Restore.wav C:\WINDOWS\Media\Windows XP Ringin.wav C:\WINDOWS\Media\Windows XP Ringout.wav C:\WINDOWS\Media\Windows XP Shutdown.wav C:\WINDOWS\Media\Windows XP Start.wav C:\WINDOWS\Media\Windows XP Startup.wav C:\WINDOWS\system.exe C:\WINDOWS\system32\1025.exe C:\WINDOWS\system32\1028.exe C:\WINDOWS\system32\1031.exe C:\WINDOWS\system32\1033.exe C:\WINDOWS\system32\1037.exe C:\WINDOWS\system32\1041.exe C:\WINDOWS\system32\1042.exe C:\WINDOWS\system32\1054.exe C:\WINDOWS\system32\2052.exe C:\WINDOWS\system32\3076.exe C:\WINDOWS\system32\microsoft.exe C:\WINDOWS\system32\system32.exe C:\WINDOWS\temp.exe C:\WINDOWS\winhelp32.exe.exe . ((((((((((((((((((((((((( Files Created from 2007-09-08 to 2007-10-08 ))))))))))))))))))))))))))))))) . 2007-10-07 23:09 51,200 –a—— C:\WINDOWS\nircmd.exe 2007-10-07 20:19 d——– C:\Documents and Settings\nuck\Application Data\Comodo 2007-10-07 20:16 d——– C:\Documents and Settings\nuser\Application Data\Comodo 2007-10-05 22:46 d——– C:\Documents and Settings\nub\Application Data\Ahead 2007-10-05 22:36 d——– C:\Documents and Settings\nub\Application Data\MEGAUPLOADTOOLBAR 2007-10-05 22:35 d——– C:\Documents and Settings\nub\Application Data\Comodo 2007-10-05 22:10 103,067 –a—— C:\Flash_Disinfector.exe 2007-10-05 22:10 drahs—- C:\autorun.inf 2007-10-03 22:10 d——– C:\Documents and Settings\newusers\Application Data\Comodo 2007-10-03 20:40 d——– C:\Documents and Settings\newuser\Application Data\Ahead 2007-10-03 20:35 d——– C:\Documents and Settings\newuser\Application Data\MEGAUPLOADTOOLBAR 2007-10-03 20:35 d——– C:\Documents and Settings\newuser\Application Data\Comodo 2007-10-03 18:26 d——– C:\Documents and Settings\termite\Application Data\SUPERAntiSpyware.com 2007-10-03 18:26 d——– C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-10-03 17:40 d——– C:\Program Files\SUPERAntiSpyware 2007-10-03 17:20 d——– C:\WINDOWS\system32\ActiveScan 2007-10-01 17:09 d——– C:\WINDOWS\ERUNT 2007-10-01 02:03 dr——- C:\Documents and Settings\All Users.WINDOWS.2\Documents 2007-10-01 01:58 d——– C:\WINDOWS.2 2007-10-01 01:30 dr——- C:\Documents and Settings\All Users.WINDOWS.1\Documents 2007-10-01 01:24 d——– C:\WINDOWS.1 2007-10-01 01:16 d——– C:\WINDOWS.0 2007-09-30 19:07 1,310,720 –ah—– C:\Documents and Settings\~illya~.USER-C0FEDC8BF0\NTUSER.DAT 2007-09-30 18:13 d–hs—- C:\Documents and Settings\All Users.WINDOWS.2\DRM 2007-09-30 17:51 524,288 –ah—– C:\Documents and Settings\~illya~\NTUSER.DAT 2007-09-30 17:39 d–hs—- C:\Documents and Settings\All Users.WINDOWS.1\DRM 2007-09-25 23:28 d——– C:\Documents and Settings\termite\Application Data\Ahead 2007-09-23 16:46 48,640 –a—— C:\WINDOWS\system32\hpzll4pi.dll 2007-09-22 00:53 d——– C:\Program Files\ASCII 2007-09-19 18:39 d——– C:\Documents and Settings\Guess\Application Data\Fujitsu 2007-09-12 12:51 d——– C:\Documents and Settings\Guess\Application Data\WinRAR 2007-09-11 07:17 d——– C:\Documents and Settings\Guess\Application Data\MEGAUPLOADTOOLBAR 2007-09-10 21:45 d——– C:\Documents and Settings\Guess\Application Data\Talkback 2007-09-10 21:43 d——– C:\Documents and Settings\Guess\Application Data\Comodo 2007-09-10 20:20 16,128 –a–c— C:\WINDOWS\system32\dllcache\modemcsa.sys 2007-09-10 20:20 16,128 –a—— C:\WINDOWS\system32\drivers\MODEMCSA.sys 2007-09-09 11:41 d——– C:\Documents and Settings\Administrator\Application Data\Ahead 2007-09-09 11:38 d——– C:\Program Files\Nero 2007-09-09 11:38 d——– C:\Program Files\Common Files\Ahead 2007-09-09 11:38 d——– C:\Documents and Settings\All Users\Application Data\Nero 2007-09-08 21:35 356,352 –a—— C:\WINDOWS\system32\nvudisp.exe 2007-09-08 21:35 d——– C:\WINDOWS\nview 2007-09-08 21:34 356,352 –a—— C:\WINDOWS\system32\NVUNINST.EXE 2007-09-08 20:57 d——– C:\WINDOWS\NV20083732.TMP . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-08 21:33 ——— d——– C:\Documents and Settings\termite\Application Data\MegauploadToolbar 2007-10-08 19:00 ——— d——– C:\Documents and Settings\termite\Application Data\uTorrent 2007-10-07 14:03 ——— d–h—– C:\Program Files\InstallShield Installation Information 2007-10-07 14:03 ——— d——– C:\Program Files\Yahoo! 2007-10-07 14:03 ——— d——– C:\Program Files\Winamp 2007-10-07 14:03 ——— d——– C:\Program Files\ViRC 2007-10-07 14:03 ——— d——– C:\Program Files\uTorrent 2007-10-07 14:03 ——— d——– C:\Program Files\THQ 2007-10-07 14:03 ——— d——– C:\Program Files\Terragen 2007-10-07 14:03 ——— d——– C:\Program Files\SystemRequirementsLab 2007-10-07 14:03 ——— d——– C:\Program Files\Steinberg 2007-10-07 14:03 ——— d——– C:\Program Files\SpywareBlaster 2007-10-07 14:03 ——— d——– C:\Program Files\Spyware Doctor 2007-10-07 14:03 ——— d——– C:\Program Files\SpeedFan 2007-10-07 14:03 ——— d——– C:\Program Files\Seagate 2007-10-07 14:03 ——— d——– C:\Program Files\ReflexiveArcade 2007-10-07 14:03 ——— d——– C:\Program Files\Realtek 2007-10-07 14:03 ——— d——– C:\Program Files\QuickTime 2007-10-07 14:03 ——— d——– C:\Program Files\PowerISO 2007-10-07 14:03 ——— d——– C:\Program Files\Philips 2007-10-07 14:03 ——— d——– C:\Program Files\PC Auto Shutdown 2007-10-07 14:03 ——— d——– C:\Program Files\Opera 2007-10-07 14:03 ——— d——– C:\Program Files\Ocean Technology 2007-10-07 14:03 ——— d——– C:\Program Files\MySQL 2007-10-07 14:03 ——— d——– C:\Program Files\MSXML 6.0 2007-10-07 14:03 ——— d——– C:\Program Files\MSXML 4.0 2007-10-07 14:03 ——— d——– C:\Program Files\MSN Messenger 2007-10-07 14:03 ——— d——– C:\Program Files\MSBuild 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft.NET 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft Works 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft Visual Studio 8 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft SQL Server 2005 Mobile Edition 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft SQL Server 2007-10-07 14:03 ——— d——– C:\Program Files\microsoft frontpage 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft Device Emulator 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft CAPICOM 2.1.0.2 2007-10-07 14:03 ——— d——– C:\Program Files\Microsoft ActiveSync 2007-10-07 14:03 ——— d——– C:\Program Files\MegauploadToolbar 2007-10-07 14:03 ——— d——– C:\Program Files\MagicISO 2007-10-07 14:03 ——— d——– C:\Program Files\Lavasoft 2007-10-07 14:03 ——— d——– C:\Program Files\iTunes 2007-10-07 14:03 ——— d——– C:\Program Files\iPod 2007-10-07 14:03 ——— d——– C:\Program Files\IObit 2007-10-07 14:03 ——— d——– C:\Program Files\Image-Line 2007-10-07 14:03 ——— d——– C:\Program Files\HTML Help Workshop 2007-10-07 14:03 ——— d——– C:\Program Files\HP 2007-10-07 14:03 ——— d——– C:\Program Files\Hewlett-Packard 2007-10-07 14:03 ——— d——– C:\Program Files\Hamachi 2007-10-07 14:03 ——— d——– C:\Program Files\GetRight 2007-10-07 14:03 ——— d——– C:\Program Files\Exact Audio Copy 2007-10-07 14:02 ——— d——– C:\Program Files\eMule 2007-10-07 14:02 ——— d——– C:\Program Files\DivX 2007-10-07 14:02 ——— d——– C:\Program Files\Delayed Shutdown 2007-10-07 14:02 ——— d——– C:\Program Files\D-Tools 2007-10-07 14:02 ——— d——– C:\Program Files\CyberLink 2007-10-07 14:02 ——— d——– C:\Program Files\Comodo 2007-10-07 14:02 ——— d——– C:\Program Files\Combined Community Codec Pack 2007-10-07 14:02 ——— d——– C:\Program Files\CE Remote Tools 2007-10-07 14:02 ——— d——– C:\Program Files\CDex_150 2007-10-07 14:02 ——— d——– C:\Program Files\Buddy Spy 2007-10-07 14:02 ——— d——– C:\Program Files\Bonjour 2007-10-07 14:02 ——— d——– C:\Program Files\Blender Foundation 2007-10-07 14:02 ——— d——– C:\Program Files\Azureus 2007-10-07 14:02 ——— d——– C:\Program Files\Autodesk 2007-10-07 14:02 ——— d——– C:\Program Files\Audacity 2007-10-07 14:02 ——— d——– C:\Program Files\Attansic 2007-10-07 14:02 ——— d——– C:\Program Files\ATLAS V13 2007-10-07 14:02 ——— d——– C:\Program Files\ASUS WiFi-AP Solo 2007-10-07 14:02 ——— d——– C:\Program Files\Apple Software Update 2007-10-07 14:02 ——— d——– C:\Program Files\Alwil Software 2007-10-07 14:02 ——— d——– C:\Program Files\AGEIA Technologies 2007-10-07 14:02 ——— d——– C:\Program Files\a-squared HiJackFree 2007-10-07 14:02 ——— d——– C:\Program Files\2K Games 2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Wise Installation Wizard 2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Sonic Shared 2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Merge Modules 2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\Macrovision Shared 2007-10-05 19:46 ——— d——– C:\Program Files\Common Files\L&H 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\InstallShield 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\HP 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\EasyInfo 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Control Panels 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Business Objects 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Autodesk Shared 2007-10-05 19:41 ——— d——– C:\Program Files\Common Files\Adobe Systems Shared 2007-09-30 19:19 1470231 –a—— C:\ComboFix.exe 2007-09-29 16:16 ——— d——– C:\Documents and Settings\termite\Application Data\Bioshock 2007-09-24 23:27 ——— d——– C:\Documents and Settings\All Users\Application Data\GetRight 2007-09-19 23:42 ——— d——– C:\Documents and Settings\All Users\Application Data\Microsoft Help 2007-09-07 12:12 ——— d——– C:\Documents and Settings\Administrator\Application Data\MEGAUPLOADTOOLBAR 2007-09-06 18:32 107888 –a—— C:\WINDOWS\system32\CmdLineExt.dll 2007-09-06 18:32 ——— dr-h—– C:\Documents and Settings\termite\Application Data\SecuROM 2007-09-02 18:59 ——— d——– C:\Documents and Settings\termite\Application Data\Azureus 2007-09-02 18:53 ——— d——– C:\Documents and Settings\All Users\Application Data\Azureus 2007-08-17 21:18 ——— d——– C:\Documents and Settings\termite\Application Data\Lionhead Studios 2007-08-17 21:05 ——— d——– C:\Documents and Settings\All Users\Application Data\Lionhead Studios 2007-08-17 12:51 ——— d——– C:\Documents and Settings\termite\Application Data\Hamachi 2007-08-11 20:31 ——— d——– C:\Documents and Settings\termite\Application Data\uk.co.planetside 2007-08-10 19:36 ——— d——– C:\Documents and Settings\All Users\Application Data\Autodesk 2007-08-10 19:27 ——— d——– C:\Documents and Settings\termite\Application Data\My Games 2007-04-24 18:52:06 224,382 –sha-r C:\WINDOWS\winhelp32.exe.exe .

prieko

Post #43October 8, 2007, 2:35 PM UTC last edited October 8, 2007, 2:41 PM UTC

(((((((((((((((((((((((((((((((((((((((((((( Look ))))))))))))))))))))))))))))))))))))))))))))))))))))))))) —- Directory of C:\WINDOWS.2 —- 2007-10-07 21:24 1024 –ah—– C:\WINDOWS.2\system32\config\system.LOG 2007-10-07 21:24 1024 –ah—– C:\WINDOWS.2\repair\system.LOG 2007-10-07 14:10 9437184 –a—— C:\WINDOWS.2\system32\config\software 2007-10-07 14:10 8192 –a—— C:\WINDOWS.2\system32\CatRoot2\edb.chk 2007-10-07 14:10 8192 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore\Logs\edb.chk 2007-10-07 14:10 7500 –a—— C:\WINDOWS.2\Prefetch\WSCNTFY.EXE-075FC474.pf 2007-10-07 14:10 65536 –a—— C:\WINDOWS.2\system32\config\SysEvent.Evt 2007-10-07 14:10 65536 –a—— C:\WINDOWS.2\system32\config\AppEvent.Evt 2007-10-07 14:10 6 –ah—– C:\WINDOWS.2\Tasks\SA.DAT 2007-10-07 14:10 516 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\INDEX.MAP 2007-10-07 14:10 47409 –a—— C:\WINDOWS.2\WindowsUpdate.log 2007-10-07 14:10 4 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\MAPPING.VER 2007-10-07 14:10 354 –a—— C:\WINDOWS.2\Tasks\At1.job 2007-10-07 14:10 3407872 –a—— C:\WINDOWS.2\system32\config\system 2007-10-07 14:10 32130 –a—— C:\WINDOWS.2\system32\wbem\Logs\wbemcore.log 2007-10-07 14:10 31860 –a—— C:\WINDOWS.2\Prefetch\DUMPREP.EXE-0781C78A.pf 2007-10-07 14:10 31636 –a—— C:\WINDOWS.2\system32\wbem\Logs\wbemess.log 2007-10-07 14:10 2992 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\MAPPING2.MAP 2007-10-07 14:10 2992 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\MAPPING1.MAP 2007-10-07 14:10 262144 –a—— C:\WINDOWS.2\system32\config\SECURITY 2007-10-07 14:10 262144 –a—— C:\WINDOWS.2\system32\config\SAM 2007-10-07 14:10 262144 –a—— C:\WINDOWS.2\system32\config\default 2007-10-07 14:10 2476 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\OBJECTS.MAP 2007-10-07 14:10 22294 –a—— C:\WINDOWS.2\Prefetch\DWWIN.EXE-17918353.pf 2007-10-07 14:10 2048 –a-s—- C:\WINDOWS.2\bootstat.dat 2007-10-07 14:10 17698 –a—— C:\WINDOWS.2\SchedLgU.Txt 2007-10-07 14:10 13636 –a—— C:\WINDOWS.2\Prefetch\AT.EXE-0589C5F1.pf 2007-10-07 14:10 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb.log 2007-10-07 14:10 131072 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore\Logs\edb.log 2007-10-07 14:10 12088 –a—— C:\WINDOWS.2\Prefetch\CMD.EXE-02FE3088.pf 2007-10-07 14:10 11570 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-3FE2E8B0.pf 2007-10-07 14:10 1056768 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore\DataStore.edb 2007-10-07 14:10 1024 –ah—– C:\WINDOWS.2\system32\config\software.LOG 2007-10-07 14:09 65610 –a—— C:\WINDOWS.2\system32\wbem\Logs\wbemcore.lo_ 2007-10-07 14:09 12554 –a—— C:\WINDOWS.2\Prefetch\WINHELP32.EXE.EXE-2C2D29A7.pf 2007-10-07 14:08 30650 –a—— C:\WINDOWS.2\Prefetch\NOTEPAD.EXE-0B8DB919.pf 2007-10-07 14:08 14064 –a—— C:\WINDOWS.2\Prefetch\MIGWIZ.EXE-3347C018.pf 2007-10-07 14:07 16334 –a—— C:\WINDOWS.2\Prefetch\TASKMGR.EXE-0C603ADE.pf 2007-10-07 14:06 653 –a—— C:\WINDOWS.2\system32\wbem\Logs\wmiprov.log 2007-10-07 14:05 3153920 –a—— C:\WINDOWS.2\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb 2007-10-07 14:03 586930 –a—— C:\WINDOWS.2\Prefetch\NTOSBOOT-B00DFAAD.pf 2007-10-07 14:03 27284 –a—— C:\WINDOWS.2\Prefetch\WMIPRVSE.EXE-06E011E0.pf 2007-10-07 14:03 25970 –a—— C:\WINDOWS.2\Prefetch\WUAUCLT.EXE-275A44F0.pf 2007-10-07 14:03 2318 –a—— C:\WINDOWS.2\SoftwareDistribution\ReportingEvents.log 2007-10-07 14:03 1024 –ah—– C:\WINDOWS.2\system32\config\default.LOG 2007-10-07 14:02 20 –a—— C:\WINDOWS.2\system32\wbem\Repository\$WinMgmt.CFG 2007-10-07 14:02 19476 –a—— C:\WINDOWS.2\Debug\UserMode\userenv.log 2007-10-07 14:02 1024 –ah—– C:\WINDOWS.2\system32\config\SECURITY.LOG 2007-10-07 14:02 1024 –ah—– C:\WINDOWS.2\system32\config\SAM.LOG 2007-10-07 14:02 0 –a—— C:\WINDOWS.2.log 2007-10-07 14:01 2206 –a—— C:\WINDOWS.2\system32\wpa.dbl 2007-10-07 14:01 0 –a—— C:\WINDOWS.2\Debug\PASSWD.LOG 2007-10-03 09:14 215 –a—— C:\WINDOWS.2\wiadebug.log 2007-10-03 09:13 34186 –a—— C:\WINDOWS.2\Prefetch\MSPAINT.EXE-39A14EC1.pf 2007-10-03 09:13 17806 –a—— C:\WINDOWS.2\Prefetch\VERCLSID.EXE-312AE379.pf 2007-10-03 09:10 197710 –a—— C:\WINDOWS.2\setupapi.log 2007-10-03 09:10 13954 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-343A0964.pf 2007-10-03 09:06 69868 –a—— C:\WINDOWS.2\Prefetch\SVCHOST.EXE-0D5B5DE2.pf 2007-10-03 09:06 49 –a—— C:\WINDOWS.2\wiaservc.log 2007-10-03 09:06 12122 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-4182FFB7.pf 2007-10-03 09:05 25554 –a—— C:\WINDOWS.2\Prefetch\DESKTOP.EXE-1DB986EB.pf 2007-10-03 09:05 20054 –a—— C:\WINDOWS.2\Prefetch\TASKLIST.EXE-16162533.pf 2007-10-03 09:05 11594 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-214F2586.pf 2007-10-03 09:04 26328 –a—— C:\WINDOWS.2\Prefetch\WINLOGON.EXE-0FEC4ED4.pf 2007-10-03 09:04 25872 –a—— C:\WINDOWS.2\Prefetch\SVCHOST.EXE-101C2B9C.pf 2007-10-03 09:03 86136 –a—— C:\WINDOWS.2\Prefetch\EXPLORER.EXE-2A5F19E0.pf 2007-10-03 09:03 24542 –a—— C:\WINDOWS.2\Prefetch\LOGONUI.EXE-1CE36F39.pf 2007-10-03 09:03 14674 –a—— C:\WINDOWS.2\Prefetch\USERINIT.EXE-35EE5B50.pf 2007-10-03 09:03 12134 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-26DC15FB.pf 2007-10-03 09:03 12134 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-0F2AE5CF.pf 2007-10-03 09:02 18912 –a—— C:\WINDOWS.2\Prefetch\MMC.EXE-3E1770E5.pf 2007-10-03 09:00 29484 –a—— C:\WINDOWS.2\Prefetch\MY DOCUMENTS.EXE-159670D7.pf 2007-10-03 08:59 23230 –a—— C:\WINDOWS.2\Prefetch\HELPHOST.EXE-11A3BF22.pf 2007-10-03 08:59 170652 –a—— C:\WINDOWS.2\pchealth\helpctr\Config\Cache\Professional_32_1033.dat.bak 2007-10-03 08:59 14688256 –a—— C:\WINDOWS.2\pchealth\helpctr\Database\HCdata.edb 2007-10-03 08:58 9972 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d3.query 2007-10-03 08:58 9972 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d2.query 2007-10-03 08:58 98 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000220.query 2007-10-03 08:58 970 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ea.query 2007-10-03 08:58 970 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e9.query 2007-10-03 08:58 966 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000296.query 2007-10-03 08:58 966 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000295.query 2007-10-03 08:58 9526 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000cb.query 2007-10-03 08:58 9526 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ca.query 2007-10-03 08:58 948 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000156.query 2007-10-03 08:58 948 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000155.query 2007-10-03 08:58 9442 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d7.query 2007-10-03 08:58 9442 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d6.query 2007-10-03 08:58 930 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00029e.query 2007-10-03 08:58 930 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00029d.query 2007-10-03 08:58 8910 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000bb.query 2007-10-03 08:58 8910 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ba.query 2007-10-03 08:58 8830 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00007f.query 2007-10-03 08:58 8830 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00007e.query 2007-10-03 08:58 870 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000287.query 2007-10-03 08:58 870 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000286.query 2007-10-03 08:58 8646 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000083.query 2007-10-03 08:58 8646 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000082.query 2007-10-03 08:58 864 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c6.query 2007-10-03 08:58 86339 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\index.dat 2007-10-03 08:58 854 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00014e.query 2007-10-03 08:58 854 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00014d.query 2007-10-03 08:58 8452 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001df.query 2007-10-03 08:58 8452 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001de.query 2007-10-03 08:58 8438 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000bf.query 2007-10-03 08:58 8438 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000be.query 2007-10-03 08:58 82 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000224.query 2007-10-03 08:58 82 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00020c.query 2007-10-03 08:58 794 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000023.query 2007-10-03 08:58 794 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000022.query 2007-10-03 08:58 7702 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000107.query 2007-10-03 08:58 7702 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000106.query 2007-10-03 08:58 764 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00015e.query 2007-10-03 08:58 764 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00015d.query 2007-10-03 08:58 752 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000002.query 2007-10-03 08:58 752 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000001.query 2007-10-03 08:58 7306 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000093.query 2007-10-03 08:58 7306 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000092.query 2007-10-03 08:58 670 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000013.query 2007-10-03 08:58 670 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000012.query 2007-10-03 08:58 6596 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000197.query 2007-10-03 08:58 6596 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000196.query 2007-10-03 08:58 6500 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c3.query 2007-10-03 08:58 6500 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c2.query 2007-10-03 08:58 6468 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000127.query 2007-10-03 08:58 6468 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000126.query 2007-10-03 08:58 626 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00026f.query 2007-10-03 08:58 626 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00026e.query 2007-10-03 08:58 62 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000000.query 2007-10-03 08:58 6174 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000183.query 2007-10-03 08:58 6174 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000182.query 2007-10-03 08:58 608 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002bd.query 2007-10-03 08:58 60176 –a—— C:\WINDOWS.2\Prefetch\HELPCTR.EXE-2033930C.pf 2007-10-03 08:58 5906 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e3.query 2007-10-03 08:58 5906 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e2.query 2007-10-03 08:58 5866 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000143.query 2007-10-03 08:58 5866 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000142.query 2007-10-03 08:58 5844 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000203.query 2007-10-03 08:58 5844 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000202.query 2007-10-03 08:58 5786 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00018b.query 2007-10-03 08:58 5786 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00018a.query 2007-10-03 08:58 568 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c5.query 2007-10-03 08:58 564 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000032.query 2007-10-03 08:58 564 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000031.query 2007-10-03 08:58 5630 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f7.query 2007-10-03 08:58 5630 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f6.query 2007-10-03 08:58 5552 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00005f.query 2007-10-03 08:58 5552 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00005e.query 2007-10-03 08:58 5458 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00019f.query 2007-10-03 08:58 5458 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00019e.query 2007-10-03 08:58 5388 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000212.query 2007-10-03 08:58 5304 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001fb.query 2007-10-03 08:58 5304 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001fa.query 2007-10-03 08:58 5298 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000247.query 2007-10-03 08:58 5298 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000246.query 2007-10-03 08:58 5238 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000187.query 2007-10-03 08:58 5238 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000186.query 2007-10-03 08:58 520 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000116.query 2007-10-03 08:58 520 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000115.query 2007-10-03 08:58 520 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00008c.query 2007-10-03 08:58 51357 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_9.hhk 2007-10-03 08:58 512 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00013d.query 2007-10-03 08:58 5080 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000213.query 2007-10-03 08:58 508 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000034.query 2007-10-03 08:58 504 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000008.query 2007-10-03 08:58 500 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c2.query 2007-10-03 08:58 500 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c1.query 2007-10-03 08:58 500 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00002e.query 2007-10-03 08:58 500 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00002d.query 2007-10-03 08:58 490 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000208.query 2007-10-03 08:58 490 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ec.query 2007-10-03 08:58 488 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000130.query 2007-10-03 08:58 4824 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a7.query 2007-10-03 08:58 4824 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a6.query 2007-10-03 08:58 4786 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000137.query 2007-10-03 08:58 4786 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000136.query 2007-10-03 08:58 476 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b4.query 2007-10-03 08:58 4756 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001cf.query 2007-10-03 08:58 4756 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ce.query 2007-10-03 08:58 45972 –a—— C:\WINDOWS.2\Prefetch\HELPSVC.EXE-0C87A060.pf 2007-10-03 08:58 4582 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f3.query 2007-10-03 08:58 4582 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f2.query 2007-10-03 08:58 458 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000070.query 2007-10-03 08:58 4534 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00008b.query 2007-10-03 08:58 4534 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00008a.query 2007-10-03 08:58 450 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000028.query 2007-10-03 08:58 448 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00020e.query 2007-10-03 08:58 448 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00020d.query 2007-10-03 08:58 442 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000024.query 2007-10-03 08:58 4392 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ef.query 2007-10-03 08:58 4392 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ee.query 2007-10-03 08:58 4360 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00017b.query 2007-10-03 08:58 4360 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00017a.query 2007-10-03 08:58 436 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000154.query 2007-10-03 08:58 4332 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000177.query 2007-10-03 08:58 4332 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000176.query 2007-10-03 08:58 432 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000168.query 2007-10-03 08:58 425004 –a—— C:\WINDOWS.2\pchealth\helpctr\Logs\hcupdate.log 2007-10-03 08:58 424 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00011c.query 2007-10-03 08:58 4234 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000043.query 2007-10-03 08:58 4234 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000042.query 2007-10-03 08:58 4222 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00004f.query 2007-10-03 08:58 4222 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00004e.query 2007-10-03 08:58 422 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00024c.query 2007-10-03 08:58 4218 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000163.query 2007-10-03 08:58 4218 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000162.query 2007-10-03 08:58 4180 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001bb.query 2007-10-03 08:58 4180 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ba.query 2007-10-03 08:58 4176 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00000f.query 2007-10-03 08:58 4176 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00000e.query 2007-10-03 08:58 4148 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00023a.query 2007-10-03 08:58 4136 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000193.query 2007-10-03 08:58 4136 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000192.query 2007-10-03 08:58 4136 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000047.query 2007-10-03 08:58 4136 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000046.query 2007-10-03 08:58 4064 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00011a.query 2007-10-03 08:58 402 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000074.query 2007-10-03 08:58 402 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000050.query 2007-10-03 08:58 400 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00014c.query 2007-10-03 08:58 4 –a—— C:\WINDOWS.2\pchealth\helpctr\PackageStore\CRC_Disk 2007-10-03 08:58 3972 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a3.query 2007-10-03 08:58 3972 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a2.query 2007-10-03 08:58 3944 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ee.query 2007-10-03 08:58 3944 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ed.query 2007-10-03 08:58 3932 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00013e.query 2007-10-03 08:58 3916 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000283.query 2007-10-03 08:58 3916 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000282.query 2007-10-03 08:58 390 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000084.query 2007-10-03 08:58 388 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00001c.query 2007-10-03 08:58 3866 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00010b.query 2007-10-03 08:58 3866 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00010a.query 2007-10-03 08:58 3852 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00023b.query 2007-10-03 08:58 382 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000030.query 2007-10-03 08:58 378 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000114.query 2007-10-03 08:58 3744 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00011b.query 2007-10-03 08:58 3738 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e7.query 2007-10-03 08:58 3738 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e6.query 2007-10-03 08:58 372 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00012c.query 2007-10-03 08:58 3686 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ff.query 2007-10-03 08:58 3686 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000fe.query 2007-10-03 08:58 3648 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000173.query 2007-10-03 08:58 3648 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000172.query 2007-10-03 08:58 3644 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00009f.query 2007-10-03 08:58 3644 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00009e.query 2007-10-03 08:58 3620 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a7.query 2007-10-03 08:58 3620 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a6.query 2007-10-03 08:58 360 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00005c.query 2007-10-03 08:58 3592 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f3.query 2007-10-03 08:58 3592 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f2.query 2007-10-03 08:58 3590 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000123.query 2007-10-03 08:58 3590 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000122.query 2007-10-03 08:58 358 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000198.query 2007-10-03 08:58 35777 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_4.hhk 2007-10-03 08:58 356 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00017e.query 2007-10-03 08:58 356 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00017d.query 2007-10-03 08:58 3550 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c3.query 2007-10-03 08:58 3550 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c2.query 2007-10-03 08:58 352 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d8.query 2007-10-03 08:58 3496 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00016f.query 2007-10-03 08:58 3496 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00016e.query 2007-10-03 08:58 3428 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00013f.query 2007-10-03 08:58 3414 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000273.query 2007-10-03 08:58 3414 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000272.query 2007-10-03 08:58 340 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000148.query 2007-10-03 08:58 3388 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00001b.query 2007-10-03 08:58 3388 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00001a.query 2007-10-03 08:58 338 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00013c.query 2007-10-03 08:58 3378 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a3.query 2007-10-03 08:58 3378 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a2.query 2007-10-03 08:58 336 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00015c.query 2007-10-03 08:58 3358 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c7.query 2007-10-03 08:58 3358 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c6.query 2007-10-03 08:58 328 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000119.query 2007-10-03 08:58 3278 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000263.query 2007-10-03 08:58 3278 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000262.query 2007-10-03 08:58 3274 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00025f.query 2007-10-03 08:58 3274 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00025e.query 2007-10-03 08:58 326 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b0.query 2007-10-03 08:58 3246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b3.query 2007-10-03 08:58 3246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b2.query 2007-10-03 08:58 322 –a—— C:\WINDOWS.2\pchealth\helpctr\Config\NewsSet.xml 2007-10-03 08:58 320 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a8.query 2007-10-03 08:58 320 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00017c.query 2007-10-03 08:58 316 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000211.query 2007-10-03 08:58 314 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000138.query 2007-10-03 08:58 314 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000014.query 2007-10-03 08:58 3138 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00010f.query 2007-10-03 08:58 3138 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00010e.query 2007-10-03 08:58 3114 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ff.query 2007-10-03 08:58 3114 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001fe.query 2007-10-03 08:58 3100 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00007a.query 2007-10-03 08:58 3100 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000079.query 2007-10-03 08:58 310 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00021b.query 2007-10-03 08:58 310 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00021a.query 2007-10-03 08:58 310 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000217.query 2007-10-03 08:58 310 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000216.query 2007-10-03 08:58 310 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000194.query 2007-10-03 08:58 310 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000140.query 2007-10-03 08:58 3080 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00026b.query 2007-10-03 08:58 3080 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00026a.query 2007-10-03 08:58 308 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00029a.query 2007-10-03 08:58 308 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000299.query 2007-10-03 08:58 3068 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e3.query 2007-10-03 08:58 3068 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e2.query 2007-10-03 08:58 3062 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b7.query 2007-10-03 08:58 3062 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b6.query 2007-10-03 08:58 306 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000038.query 2007-10-03 08:58 3058 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000242.query 2007-10-03 08:58 3058 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000241.query 2007-10-03 08:58 304 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000239.query 2007-10-03 08:58 304 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c7.query 2007-10-03 08:58 304 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00007c.query 2007-10-03 08:58 302 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002ac.query 2007-10-03 08:58 302 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00003c.query 2007-10-03 08:58 3018 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000103.query 2007-10-03 08:58 3018 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000102.query 2007-10-03 08:58 2995605 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\merged.hhk 2007-10-03 08:58 298 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000170.query 2007-10-03 08:58 298 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000134.query 2007-10-03 08:58 298 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000094.query 2007-10-03 08:58 296 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000230.query 2007-10-03 08:58 288 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00028c.query 2007-10-03 08:58 286 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000078.query 2007-10-03 08:58 2848 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c7.query 2007-10-03 08:58 2848 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c6.query 2007-10-03 08:58 2832 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00013b.query 2007-10-03 08:58 2832 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00013a.query 2007-10-03 08:58 2820 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00019a.query 2007-10-03 08:58 2820 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000199.query 2007-10-03 08:58 282 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000180.query 2007-10-03 08:58 280 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c0.query 2007-10-03 08:58 2780 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00016a.query 2007-10-03 08:58 2780 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000169.query 2007-10-03 08:58 2768 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000df.query 2007-10-03 08:58 2768 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000de.query 2007-10-03 08:58 2746 –a—— C:\WINDOWS.2\pchealth\helpctr\PackageStore\SkuStore.bin 2007-10-03 08:58 272 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00002c.query 2007-10-03 08:58 2716 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000017.query 2007-10-03 08:58 2716 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000016.query 2007-10-03 08:58 270 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000184.query 2007-10-03 08:58 270 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b8.query 2007-10-03 08:58 2688 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001bf.query 2007-10-03 08:58 2688 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001be.query 2007-10-03 08:58 2688 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ab.query 2007-10-03 08:58 2688 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000aa.query 2007-10-03 08:58 2680 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000076.query 2007-10-03 08:58 2680 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000075.query 2007-10-03 08:58 268 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000158.query 2007-10-03 08:58 2666 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002bb.query 2007-10-03 08:58 2666 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002ba.query 2007-10-03 08:58 266 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000260.query 2007-10-03 08:58 266 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000190.query 2007-10-03 08:58 266 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000100.query 2007-10-03 08:58 2652 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00012b.query 2007-10-03 08:58 2652 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00012a.query 2007-10-03 08:58 264 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000167.query 2007-10-03 08:58 264 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000166.query 2007-10-03 08:58 264 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000020.query 2007-10-03 08:58 2622 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000232.query 2007-10-03 08:58 2622 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000231.query 2007-10-03 08:58 262 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b8.query 2007-10-03 08:58 262 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000124.query 2007-10-03 08:58 262 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000088.query 2007-10-03 08:58 2614 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000293.query 2007-10-03 08:58 2614 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000292.query 2007-10-03 08:58 260 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000200.query 2007-10-03 08:58 260 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f4.query 2007-10-03 08:58 2596 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b6.query 2007-10-03 08:58 2596 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b5.query 2007-10-03 08:58 2586 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00027f.query 2007-10-03 08:58 2586 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00027e.query 2007-10-03 08:58 258 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000274.query 2007-10-03 08:58 258 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000248.query 2007-10-03 08:58 258 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a4.query 2007-10-03 08:58 256 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f8.query 2007-10-03 08:58 256 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a8.query 2007-10-03 08:58 254 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c0.query 2007-10-03 08:58 254 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000018.query 2007-10-03 08:58 252 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000264.query 2007-10-03 08:58 2516 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00018f.query 2007-10-03 08:58 2516 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00018e.query 2007-10-03 08:58 2516 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e7.query 2007-10-03 08:58 2516 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e6.query 2007-10-03 08:58 250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000298.query 2007-10-03 08:58 250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e8.query 2007-10-03 08:58 250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c4.query 2007-10-03 08:58 250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000144.query 2007-10-03 08:58 250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c8.query 2007-10-03 08:58 2486 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001da.query 2007-10-03 08:58 2486 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d9.query 2007-10-03 08:58 248 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e0.query 2007-10-03 08:58 248 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b8.query 2007-10-03 08:58 246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a3.query 2007-10-03 08:58 246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a2.query 2007-10-03 08:58 246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000120.query 2007-10-03 08:58 246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000104.query 2007-10-03 08:58 246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000bc.query 2007-10-03 08:58 246 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000054.query 2007-10-03 08:58 2452 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000086.query 2007-10-03 08:58 2452 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000085.query 2007-10-03 08:58 2442 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000063.query 2007-10-03 08:58 2442 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000062.query 2007-10-03 08:58 244 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001e4.query 2007-10-03 08:58 2438 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002cb.query 2007-10-03 08:58 2438 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002ca.query 2007-10-03 08:58 2420 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000db.query 2007-10-03 08:58 2420 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000da.query 2007-10-03 08:58 242 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000128.query 2007-10-03 08:58 242 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c4.query 2007-10-03 08:58 2418 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000057.query 2007-10-03 08:58 2418 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000056.query 2007-10-03 08:58 240 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00019c.query 2007-10-03 08:58 240 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000dc.query 2007-10-03 08:58 240 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000058.query 2007-10-03 08:58 2390 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00009b.query 2007-10-03 08:58 2390 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00009a.query 2007-10-03 08:58 2362 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000207.query 2007-10-03 08:58 2362 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000206.query 2007-10-03 08:58 236 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001fc.query 2007-10-03 08:58 234 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002bc.query 2007-10-03 08:58 234 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000174.query 2007-10-03 08:58 2334 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00004b.query 2007-10-03 08:58 2334 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00004a.query 2007-10-03 08:58 232 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000010.query 2007-10-03 08:58 2302 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000266.query 2007-10-03 08:58 2302 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000265.query 2007-10-03 08:58 230 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00018c.query 2007-10-03 08:58 230 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000118.query 2007-10-03 08:58 230 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e4.query 2007-10-03 08:58 2286 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00024e.query 2007-10-03 08:58 2286 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00024d.query 2007-10-03 08:58 228 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000090.query 2007-10-03 08:58 226 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000228.query 2007-10-03 08:58 226 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ec.query 2007-10-03 08:58 226 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00016c.query 2007-10-03 08:58 2250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d3.query 2007-10-03 08:58 2250 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d2.query 2007-10-03 08:58 2230 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00022a.query 2007-10-03 08:58 2230 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000229.query 2007-10-03 08:58 2228 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00005b.query 2007-10-03 08:58 2228 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00005a.query 2007-10-03 08:58 2226 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ab.query 2007-10-03 08:58 2226 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001aa.query 2007-10-03 08:58 222 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000238.query 2007-10-03 08:58 222 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000178.query 2007-10-03 08:58 222 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000160.query 2007-10-03 08:58 2202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000132.query 2007-10-03 08:58 2202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000131.query 2007-10-03 08:58 218 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b4.query 2007-10-03 08:58 218 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000254.query 2007-10-03 08:58 218 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000fc.query 2007-10-03 08:58 216 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b4.query 2007-10-03 08:58 216 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a0.query 2007-10-03 08:58 216 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000080.query 2007-10-03 08:58 214 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c4.query 2007-10-03 08:58 214 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000290.query 2007-10-03 08:58 214 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000288.query 2007-10-03 08:58 214 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000c0.query 2007-10-03 08:58 2126 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d7.query 2007-10-03 08:58 2126 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d6.query 2007-10-03 08:58 212 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000040.query 2007-10-03 08:58 210611 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_8.hhk 2007-10-03 08:58 2098 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000237.query 2007-10-03 08:58 2098 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000236.query 2007-10-03 08:58 2080 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000113.query 2007-10-03 08:58 2080 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000112.query 2007-10-03 08:58 208 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000258.query 2007-10-03 08:58 208 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00021c.query 2007-10-03 08:58 208 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000204.query 2007-10-03 08:58 208 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000044.query 2007-10-03 08:58 206 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000270.query 2007-10-03 08:58 206 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000108.query 2007-10-03 08:58 206 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f4.query 2007-10-03 08:58 206 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d8.query 2007-10-03 08:58 206 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d4.query 2007-10-03 08:58 2044 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000cf.query 2007-10-03 08:58 2044 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ce.query 2007-10-03 08:58 204 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000064.query 2007-10-03 08:58 204 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000048.query 2007-10-03 08:58 2036 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000152.query 2007-10-03 08:58 2036 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000151.query 2007-10-03 08:58 2024 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000067.query 2007-10-03 08:58 2024 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000066.query 2007-10-03 08:58 202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002c8.query 2007-10-03 08:58 202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000240.query 2007-10-03 08:58 202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00023c.query 2007-10-03 08:58 202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000188.query 2007-10-03 08:58 202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00010c.query 2007-10-03 08:58 202 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000068.query 2007-10-03 08:58 20148 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_5.hhk 2007-10-03 08:58 2002 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000226.query 2007-10-03 08:58 2002 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000225.query 2007-10-03 08:58 200 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000244.query 2007-10-03 08:58 200 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001cc.query 2007-10-03 08:58 200 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ac.query 2007-10-03 08:58 1984 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00002a.query 2007-10-03 08:58 1984 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000029.query 2007-10-03 08:58 198 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000d0.query 2007-10-03 08:58 198 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000cc.query 2007-10-03 08:58 1972 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001eb.query 2007-10-03 08:58 1972 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ea.query 2007-10-03 08:58 196 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00025c.query 2007-10-03 08:58 196 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001bc.query 2007-10-03 08:58 1956 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002aa.query 2007-10-03 08:58 1956 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a9.query 2007-10-03 08:58 1950 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00015a.query 2007-10-03 08:58 1950 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000159.query 2007-10-03 08:58 1946 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00025b.query 2007-10-03 08:58 1946 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00025a.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000294.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00026c.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001dc.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000150.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f8.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e8.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00006c.query 2007-10-03 08:58 194 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000004.query 2007-10-03 08:58 1934 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b3.query 2007-10-03 08:58 1934 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b2.query 2007-10-03 08:58 1930 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b7.query 2007-10-03 08:58 1930 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002b6.query 2007-10-03 08:58 192 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d0.query 2007-10-03 08:58 192 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001c8.query 2007-10-03 08:58 1908 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000096.query 2007-10-03 08:58 1908 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000095.query 2007-10-03 08:58 190 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001d4.query 2007-10-03 08:58 190 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000110.query 2007-10-03 08:58 1898 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00008e.query 2007-10-03 08:58 1898 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00008d.query 2007-10-03 08:58 1894 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000af.query 2007-10-03 08:58 1894 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000ae.query 2007-10-03 08:58 1884 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000fb.query 2007-10-03 08:58 1884 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000fa.query 2007-10-03 08:58 188 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00029c.query 2007-10-03 08:58 188 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00004c.query 2007-10-03 08:58 186 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000278.query 2007-10-03 08:58 186 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ad.query 2007-10-03 08:58 186 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00000c.query 2007-10-03 08:58 1858 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ae.query 2007-10-03 08:58 1846 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00028e.query 2007-10-03 08:58 1846 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00028d.query 2007-10-03 08:58 1842 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00023e.query 2007-10-03 08:58 1842 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00023d.query 2007-10-03 08:58 184 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001f0.query 2007-10-03 08:58 184 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000e0.query 2007-10-03 08:58 184 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b0.query 2007-10-03 08:58 1828 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002af.query 2007-10-03 08:58 1828 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002ae.query 2007-10-03 08:58 1820 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000072.query 2007-10-03 08:58 1820 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000071.query 2007-10-03 08:58 182 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000234.query 2007-10-03 08:58 182 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f0.query 2007-10-03 08:58 1802 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a7.query 2007-10-03 08:58 1802 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000a6.query 2007-10-03 08:58 180 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a0.query 2007-10-03 08:58 180 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000060.query 2007-10-03 08:58 178 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000280.query 2007-10-03 08:58 178 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00022c.query 2007-10-03 08:58 1742 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000257.query 2007-10-03 08:58 1742 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000256.query 2007-10-03 08:58 1706 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00006b.query 2007-10-03 08:58 1706 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00006a.query 2007-10-03 08:58 1680 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001af.query 2007-10-03 08:58 168 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00009c.query 2007-10-03 08:58 16799 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_3.hhk 2007-10-03 08:58 166 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000268.query 2007-10-03 08:58 164 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000218.query 2007-10-03 08:58 164 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a4.query 2007-10-03 08:58 1634 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b3.query 2007-10-03 08:58 1634 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000b2.query 2007-10-03 08:58 1630 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000006.query 2007-10-03 08:58 1630 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000005.query 2007-10-03 08:58 162 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00027c.query 2007-10-03 08:58 1610 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002be.query 2007-10-03 08:58 1604 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00022e.query 2007-10-03 08:58 1604 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00022d.query 2007-10-03 08:58 160 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000214.query 2007-10-03 08:58 1598 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00000a.query 2007-10-03 08:58 1598 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000009.query 2007-10-03 08:58 1588 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000026.query 2007-10-03 08:58 1588 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000025.query 2007-10-03 08:58 158 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000210.query 2007-10-03 08:58 15754 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_6.hhk 2007-10-03 08:58 1570 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00001e.query 2007-10-03 08:58 1570 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00001d.query 2007-10-03 08:58 1546 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00027a.query 2007-10-03 08:58 1546 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000279.query 2007-10-03 08:58 154 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000098.query 2007-10-03 08:58 1464 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000252.query 2007-10-03 08:58 1464 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000251.query 2007-10-03 08:58 146 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000164.query 2007-10-03 08:58 1454 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f7.query 2007-10-03 08:58 1454 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0000f6.query 2007-10-03 08:58 1438 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00006e.query 2007-10-03 08:58 1438 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00006d.query 2007-10-03 08:58 1420 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001cb.query 2007-10-03 08:58 1420 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ca.query 2007-10-03 08:58 1414 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00003e.query 2007-10-03 08:58 1414 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00003d.query 2007-10-03 08:58 140 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000250.query 2007-10-03 08:58 1392 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000052.query 2007-10-03 08:58 1392 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000051.query 2007-10-03 08:58 1390 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000147.query 2007-10-03 08:58 1390 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000146.query 2007-10-03 08:58 1366 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00024a.query 2007-10-03 08:58 1366 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000249.query 2007-10-03 08:58 13430 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_2.hhk 2007-10-03 08:58 132 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001ac.query 2007-10-03 08:58 130 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a4.query 2007-10-03 08:58 130 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000284.query 2007-10-03 08:58 128 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002a0.query 2007-10-03 08:58 128 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001b0.query 2007-10-03 08:58 124 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0001a8.query 2007-10-03 08:58 1228 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000223.query 2007-10-03 08:58 1228 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000222.query 2007-10-03 08:58 1212 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00011e.query 2007-10-03 08:58 1212 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00011d.query 2007-10-03 08:58 1082 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00003a.query 2007-10-03 08:58 1082 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000039.query 2007-10-03 08:58 1052 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000276.query 2007-10-03 08:58 1052 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000275.query 2007-10-03 08:58 103609 –a—— C:\WINDOWS.2\pchealth\helpctr\Indices\scoped_7.hhk 2007-10-03 08:58 1010 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\0002bf.query 2007-10-03 08:58 1010 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00028b.query 2007-10-03 08:58 1010 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\00028a.query 2007-10-03 08:58 1000 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000036.query 2007-10-03 08:58 1000 –a—— C:\WINDOWS.2\pchealth\helpctr\OfflineCache\Professional_32#0409\000035.query 2007-10-03 08:57 8972 –a—— C:\WINDOWS.2\pchealth\helpctr\Config\Cntstore.bin 2007-10-03 08:57 8096 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm 2007-10-03 08:57 7840 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm 2007-10-03 08:57 77245 –a—— C:\WINDOWS.2\pchealth\helpctr\System\CompatCtr\CompatMode.htm 2007-10-03 08:57 690 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif 2007-10-03 08:57 666 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml 2007-10-03 08:57 5930 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm 2007-10-03 08:57 587 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml 2007-10-03 08:57 569 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\RAURA.xml 2007-10-03 08:57 5403 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm 2007-10-03 08:57 540 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml 2007-10-03 08:57 5231 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js 2007-10-03 08:57 5231 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\common.js 2007-10-03 08:57 5158 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js 2007-10-03 08:57 45530 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm 2007-10-03 08:57 37469 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\Search.htm 2007-10-03 08:57 3425 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm 2007-10-03 08:57 3282 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm 2007-10-03 08:57 3226 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm 2007-10-03 08:57 32141 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\commonFunc.js 2007-10-03 08:57 3159 –a—— C:\WINDOWS.2\pchealth\helpctr\System\scripts\Common.js 2007-10-03 08:57 30918 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm 2007-10-03 08:57 30465 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm 2007-10-03 08:57 27910 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysComponentInfo.js 2007-10-03 08:57 25050 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm 2007-10-03 08:57 2496 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm 2007-10-03 08:57 21049 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm 2007-10-03 08:57 19610 –a—— C:\WINDOWS.2\Prefetch\CONTROL.EXE-29135845.pf 2007-10-03 08:57 19520 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\AdvSearch.htm 2007-10-03 08:57 18852 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\connection.htm 2007-10-03 08:57 16167 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm 2007-10-03 08:57 16097 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysinfosum.htm 2007-10-03 08:57 15709 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js 2007-10-03 08:57 14557 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm 2007-10-03 08:57 14129 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\wmi_data.js 2007-10-03 08:57 12182 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-23FB986F.pf 2007-10-03 08:57 1206 –a—— C:\WINDOWS.2\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js 2007-10-03 08:57 11254 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js 2007-10-03 08:57 11187 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm 2007-10-02 11:29 65594 –a—— C:\WINDOWS.2\system32\wbem\Logs\wbemess.lo_ 2007-10-02 11:28 64928 –a—— C:\WINDOWS.2\Prefetch\IEXPLORE.EXE-27122324.pf 2007-10-02 11:28 24348 –a—— C:\WINDOWS.2\Prefetch\ICWCONN1.EXE-24884676.pf 2007-10-02 11:28 23032 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-4313927D.pf 2007-10-01 20:35 1056768 –a—— C:\WINDOWS.2\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb 2007-10-01 20:33 9534 –a—— C:\WINDOWS.2\Prefetch\FROZEN THRONE.EXE-059B2407.pf 2007-10-01 20:33 552 –a—— C:\WINDOWS.2\system32\d3d8caps.dat 2007-10-01 20:33 54800 –a—— C:\WINDOWS.2\Prefetch\WAR3.EXE-2C2A2463.pf 2007-10-01 02:09 0 –a—— C:\WINDOWS.2\system32\h323log.txt 2007-10-01 02:09 0 –a—— C:\WINDOWS.2\Sti_Trace.log 2007-10-01 02:06 592 –a—— C:\WINDOWS.2\security\logs\SceRoot.log 2007-10-01 02:04 231 –a—— C:\WINDOWS.2\system.ini 2007-10-01 02:04 1008 –a—— C:\WINDOWS.2\regopt.log 2007-10-01 02:03 8 –a—— C:\WINDOWS.2\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp 2007-10-01 02:03 8 –a—— C:\WINDOWS.2\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp 2007-10-01 02:03 8 –a—— C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp 2007-10-01 02:03 8 –a—— C:\WINDOWS.2\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp 2007-10-01 02:03 62 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Start Menu\desktop.ini 2007-10-01 02:03 62 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Local Settings\desktop.ini 2007-10-01 02:03 62 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Application Data\desktop.ini 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\res2.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\res1.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb0004E.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb0004D.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb0004C.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb0004B.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb0004A.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00049.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00048.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00047.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00046.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00045.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00044.log 2007-10-01 02:03 131072 –a—— C:\WINDOWS.2\system32\CatRoot2\edb00043.log 2007-10-01 02:02 65536 –a—— C:\WINDOWS.2\system32\config\SecEvent.Evt 2007-10-01 02:02 652 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8\4.20.9841.0.Policy 2007-10-01 02:02 641 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.Policy 2007-10-01 02:02 641 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.Policy 2007-10-01 02:02 640 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.0.0_x-ww_fc342b0b.Manifest 2007-10-01 02:02 623 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.2180.Policy 2007-10-01 02:02 623 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.Policy 2007-10-01 02:02 621 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2982.Policy 2007-10-01 02:02 605 –a—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.2180.Policy 2007-10-01 02:02 500 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9.Manifest 2007-10-01 02:02 500 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a.Manifest 2007-10-01 02:02 494 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a.Manifest 2007-10-01 02:02 460 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc .Manifest 2007-10-01 02:02 3973 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213.Manifest 2007-10-01 02:02 397 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82.Manifest 2007-10-01 02:02 391 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13.Manifest 2007-10-01 02:02 1877 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.Manifest 2007-10-01 02:02 1862 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03.Manifest 2007-10-01 02:02 1819 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7.Manifest 2007-10-01 02:02 1784 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a.Manifest 2007-10-01 02:02 1237 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.Manifest 2007-10-01 02:02 1177 –a—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.Manifest 2007-10-01 02:02 0 –a—— C:\WINDOWS.2\setuperr.log 2007-10-01 02:01 94208 –a—— C:\WINDOWS.2\system32\config\default.sav 2007-10-01 02:01 892928 –a—— C:\WINDOWS.2\system32\config\system.sav 2007-10-01 02:01 659456 –a—— C:\WINDOWS.2\system32\config\software.sav 2007-10-01 02:01 262144 –a—— C:\WINDOWS.2\system32\config\userdiff 2007-10-01 02:01 1024 –ah—– C:\WINDOWS.2\system32\config\userdiff.LOG 2007-10-01 02:01 1024 –ah—– C:\WINDOWS.2\system32\config\TempKey.LOG 2007-09-30 23:58 8156 –a—— C:\WINDOWS.2\Prefetch\TASKMAN.EXE-009723E5.pf 2007-09-30 23:54 7284 –a—— C:\WINDOWS.2\Prefetch\DUMPHIVE.CFEXE-2ED3B134.pf 2007-09-30 23:54 5462 –a—— C:\WINDOWS.2\Prefetch\TREE.COM-25C7D34A.pf 2007-09-30 23:54 4132 –a—— C:\WINDOWS.2\Prefetch\HANDLE.CFEXE-13427ED2.pf 2007-09-30 23:54 3866 –a—— C:\WINDOWS.2\Prefetch\SED.CFEXE-268D7E58.pf 2007-09-30 23:54 12924 –a—— C:\WINDOWS.2\Prefetch\FINDSTR.EXE-206B58C2.pf 2007-09-30 23:54 11590 –a—— C:\WINDOWS.2\Prefetch\SORT.EXE-3478144C.pf 2007-09-30 23:54 112810 –a—— C:\WINDOWS.2\Prefetch\CATCHME.CFEXE-0F2A0789.pf 2007-09-30 23:53 91714 –a—— C:\WINDOWS.2\Prefetch\27837.CFEXE-160844BB.pf 2007-09-30 23:53 9134 –a—— C:\WINDOWS.2\Prefetch\SWREG.CFEXE-2BF4FFCD.pf 2007-09-30 23:53 8940 –a—— C:\WINDOWS.2\Prefetch\NIRCMD.CFEXE-19FF4781.pf 2007-09-30 23:53 7352 –a—— C:\WINDOWS.2\Prefetch\SWSC.CFEXE-3B4FE4FE.pf 2007-09-30 23:53 6808 –a—— C:\WINDOWS.2\Prefetch\SWXCACLS.CFEXE-365F7973.pf 2007-09-30 23:53 5264 –a—— C:\WINDOWS.2\Prefetch\CHCP.COM-3882FE49.pf 2007-09-30 23:53 3976 –a—— C:\WINDOWS.2\Prefetch\MTEE.CFEXE-1E067BC7.pf 2007-09-30 23:53 3546 –a—— C:\WINDOWS.2\Prefetch\REGBINDUMP.CFEXE-28A4A438.pf 2007-09-30 23:53 3140 –a—— C:\WINDOWS.2\Prefetch\VFIND.CFEXE-2033727F.pf 2007-09-30 23:53 11924 –a—— C:\WINDOWS.2\Prefetch\FIND.EXE-29F05B2E.pf 2007-09-30 23:53 11728 –a—— C:\WINDOWS.2\Prefetch\ATTRIB.EXE-37C02C0B.pf 2007-09-30 23:53 11258 –a—— C:\WINDOWS.2\Prefetch\REGT.CFEXE-15DB5DAE.pf 2007-09-30 23:50 8698 –a—— C:\WINDOWS.2\Prefetch\SWREG.EXE-3560BE42.pf 2007-09-30 23:50 44120 –a—— C:\WINDOWS.2\Prefetch\COMBOFIX.EXE-00F3D781.pf 2007-09-30 23:50 21184 –a—— C:\WINDOWS.2\Prefetch\SETPATH.CFEXE-034E3D26.pf 2007-09-30 23:50 10324 –a—— C:\WINDOWS.2\Prefetch\NIRCMD.EXE-0173018D.pf 2007-09-30 23:49 33626 –a—— C:\WINDOWS.2\Prefetch\WRAR37B8.EXE-399164B9.pf 2007-09-30 23:30 12736 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-13674E75.pf 2007-09-30 23:30 12724 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-45A3528D.pf 2007-09-30 22:35 19380 –a—— C:\WINDOWS.2\Prefetch\WMPLAYER.EXE-18DDEFA2.pf 2007-09-30 22:35 18486 –a—— C:\WINDOWS.2\Prefetch\SETUP_WM.EXE-3135CBDC.pf 2007-09-30 21:59 22558 –a—— C:\WINDOWS.2\Prefetch\CAFE2.EXE-03131D06.pf 2007-09-30 21:23 5021696 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\OBJECTS.DATA 2007-09-30 21:23 1007616 –a—— C:\WINDOWS.2\system32\wbem\Repository\FS\INDEX.BTR 2007-09-30 21:20 21150 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-2EC02D6D.pf 2007-09-30 21:20 19202 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-28EF4E84.pf 2007-09-30 21:19 11304 –a—— C:\WINDOWS.2\Prefetch\CACLS.EXE-02AB5BCC.pf 2007-09-30 21:18 1441 –a—— C:\WINDOWS.2\system32\wbem\Logs\wmiadap.log 2007-09-30 21:16 11852 –a—— C:\WINDOWS.2\Prefetch\FONTVIEW.EXE-0317A663.pf 2007-09-30 21:14 25702 –a—— C:\WINDOWS.2\Prefetch\WMIADAP.EXE-0FB1D857.pf 2007-09-30 21:01 435 –a—— C:\WINDOWS.2\system32\wbem\Performance\WmiApRpl.h 2007-09-30 21:01 39992 –a—— C:\WINDOWS.2\system32\perfc009.dat 2007-09-30 21:01 356120 –a—— C:\WINDOWS.2\system32\PerfStringBackup.INI 2007-09-30 21:01 311604 –a—— C:\WINDOWS.2\system32\perfh009.dat 2007-09-30 21:01 1698 –a—— C:\WINDOWS.2\system32\wbem\Performance\WmiApRpl.ini 2007-09-30 21:00 9960 –a—— C:\WINDOWS.2\inf\xscan_xp.PNF 2007-09-30 21:00 9932 –a—— C:\WINDOWS.2\inf\trid3d.PNF 2007-09-30 21:00 9916 –a—— C:\WINDOWS.2\inf\tsbvcap.PNF 2007-09-30 21:00 9808 –a—— C:\WINDOWS.2\inf\tshoot.PNF 2007-09-30 21:00 9732 –a—— C:\WINDOWS.2\inf\tridkb.PNF 2007-09-30 21:00 9692 –a—— C:\WINDOWS.2\inf\viafir2k.PNF 2007-09-30 21:00 95864 –a—— C:\WINDOWS.2\inf\wdma_aur.PNF 2007-09-30 21:00 9440 –a—— C:\WINDOWS.2\inf\tdibth.PNF 2007-09-30 21:00 9388 –a—— C:\WINDOWS.2\inf\ps5333.PNF 2007-09-30 21:00 9216 –a—— C:\WINDOWS.2\inf\wstcodec.PNF 2007-09-30 21:00 9212 –a—— C:\WINDOWS.2\inf\slip.PNF 2007-09-30 21:00 9076 –a—— C:\WINDOWS.2\inf\sis300i.PNF 2007-09-30 21:00 8908 –a—— C:\WINDOWS.2\inf\wtv5.PNF 2007-09-30 21:00 8908 –a—— C:\WINDOWS.2\inf\wtv4.PNF 2007-09-30 21:00 8908 –a—— C:\WINDOWS.2\inf\wtv3.PNF 2007-09-30 21:00 8908 –a—— C:\WINDOWS.2\inf\wtv2.PNF 2007-09-30 21:00 8908 –a—— C:\WINDOWS.2\inf\wtv1.PNF 2007-09-30 21:00 8908 –a—— C:\WINDOWS.2\inf\wtv0.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp8.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp7.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp6.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp5.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp3.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp2.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp1.PNF 2007-09-30 21:00 8900 –a—— C:\WINDOWS.2\inf\wfp0.PNF 2007-09-30 21:00 8892 –a—— C:\WINDOWS.2\inf\wfp4.PNF 2007-09-30 21:00 8820 –a—— C:\WINDOWS.2\inf\tgiu.PNF 2007-09-30 21:00 87200 –a—— C:\WINDOWS.2\inf\stillcam.PNF 2007-09-30 21:00 8684 –a—— C:\WINDOWS.2\inf\s3savmx.PNF 2007-09-30 21:00 8652 –a—— C:\WINDOWS.2\inf\s3sav4.PNF 2007-09-30 21:00 8636 –a—— C:\WINDOWS.2\inf\tridxp.PNF 2007-09-30 21:00 8588 –a—— C:\WINDOWS.2\inf\sgiu.PNF 2007-09-30 21:00 8500 –a—— C:\WINDOWS.2\inf\s3sav3d.PNF 2007-09-30 21:00 8020 –a—— C:\WINDOWS.2\inf\stalport.PNF 2007-09-30 21:00 8004 –a—— C:\WINDOWS.2\inf\sis6306.PNF 2007-09-30 21:00 7824 –a—— C:\WINDOWS.2\inf\sffdisk.PNF 2007-09-30 21:00 7724 –a—— C:\WINDOWS.2\inf\sisv6326.PNF 2007-09-30 21:00 7464 –a—— C:\WINDOWS.2\inf\SYSOC.PNF 2007-09-30 21:00 74544 –a—— C:\WINDOWS.2\inf\wdma_ali.PNF 2007-09-30 21:00 74372 –a—— C:\WINDOWS.2\inf\wdma_usb.PNF 2007-09-30 21:00 7316 –a—— C:\WINDOWS.2\inf\smi.PNF 2007-09-30 21:00 7180 –a—— C:\WINDOWS.2\inf\ramdisk.PNF 2007-09-30 21:00 6936 –a—— C:\WINDOWS.2\inf\wbemsnmp.PNF 2007-09-30 21:00 68388 –a—— C:\WINDOWS.2\inf\umax.PNF 2007-09-30 21:00 6756 –a—— C:\WINDOWS.2\inf\s3trio3d.PNF 2007-09-30 21:00 6652 –a—— C:\WINDOWS.2\inf\wmtour.PNF 2007-09-30 21:00 6472 –a—— C:\WINDOWS.2\inf\sbp2.PNF 2007-09-30 21:00 63184 –a—— C:\WINDOWS.2\inf\wdma_ctl.PNF 2007-09-30 21:00 6208 –a—— C:\WINDOWS.2\inf\sonypvu1.PNF 2007-09-30 21:00 5996 –a—— C:\WINDOWS.2\inf\srchasst.PNF 2007-09-30 21:00 59852 –a—— C:\WINDOWS.2\inf\tape.PNF 2007-09-30 21:00 57564 –a—— C:\WINDOWS.2\inf\swnt.PNF 2007-09-30 21:00 558524 –a—— C:\WINDOWS.2\inf\tabletpc.PNF 2007-09-30 21:00 5484 –a—— C:\WINDOWS.2\inf\usbprint.PNF 2007-09-30 21:00 51472 –a—— C:\WINDOWS.2\inf\usbport.PNF 2007-09-30 21:00 4972 –a—— C:\WINDOWS.2\inf\volsnap.PNF 2007-09-30 21:00 4824 –a—— C:\WINDOWS.2\inf\volume.PNF 2007-09-30 21:00 4800 –a—— C:\WINDOWS.2\inf\unknown.PNF 2007-09-30 21:00 4692 –a—— C:\WINDOWS.2\inf\secdrv.PNF 2007-09-30 21:00 45672 –a—— C:\WINDOWS.2\inf\wdma_csf.PNF 2007-09-30 21:00 45008 –a—— C:\WINDOWS.2\inf\wdmaudio.PNF 2007-09-30 21:00 44924 –a—— C:\WINDOWS.2\inf\wdma_int.PNF 2007-09-30 21:00 4452 –a—— C:\WINDOWS.2\inf\skins.PNF 2007-09-30 21:00 44512 –a—— C:\WINDOWS.2\inf\usb.PNF 2007-09-30 21:00 4424 –a—— C:\WINDOWS.2\inf\wmpocm.PNF 2007-09-30 21:00 4376 –a—— C:\WINDOWS.2\inf\vgx.PNF 2007-09-30 21:00 43688 –a—— C:\WINDOWS.2\inf\wdma_m2e.PNF 2007-09-30 21:00 43524 –a—— C:\WINDOWS.2\inf\wdma_sis.PNF 2007-09-30 21:00 42096 –a—— C:\WINDOWS.2\inf\wdma_ess.PNF 2007-09-30 21:00 41676 –a—— C:\WINDOWS.2\inf\wdma_csc.PNF 2007-09-30 21:00 41172 –a—— C:\WINDOWS.2\inf\setupqry.PNF 2007-09-30 21:00 4072 –a—— C:\WINDOWS.2\inf\wmaccess.PNF 2007-09-30 21:00 3940 –a—— C:\WINDOWS.2\inf\rootau.PNF 2007-09-30 21:00 38484 –a—— C:\WINDOWS.2\inf\shell.PNF 2007-09-30 21:00 38264 –a—— C:\WINDOWS.2\inf\sceregvl.PNF 2007-09-30 21:00 37536 –a—— C:\WINDOWS.2\inf\scsidev.PNF 2007-09-30 21:00 37344 –a—— C:\WINDOWS.2\inf\sdwndr2k.PNF 2007-09-30 21:00 37040 –a—— C:\WINDOWS.2\inf\usbstor.PNF 2007-09-30 21:00 36640 –a—— C:\WINDOWS.2\inf\wdma_ens.PNF 2007-09-30 21:00 36428 –a—— C:\WINDOWS.2\inf\smartcrd.PNF 2007-09-30 21:00 359640 –a—— C:\WINDOWS.2\inf\rvmuppck.PNF 2007-09-30 21:00 35284 –a—— C:\WINDOWS.2\inf\wdma_azt.PNF 2007-09-30 21:00 33532 –a—— C:\WINDOWS.2\inf\wdma_via.PNF 2007-09-30 21:00 31828 –a—— C:\WINDOWS.2\inf\wdma_cwr.PNF 2007-09-30 21:00 3172 –a—— C:\WINDOWS.2\inf\syscomp.PNF 2007-09-30 21:00 3104 –a—— C:\WINDOWS.2\inf\swflash.PNF 2007-09-30 21:00 30268 –a—— C:\WINDOWS.2\inf\wdma_ym2.PNF 2007-09-30 21:00 301368 –a—— C:\WINDOWS.2\inf\wdma10k1.PNF 2007-09-30 21:00 27888 –a—— C:\WINDOWS.2\inf\sti.PNF 2007-09-30 21:00 26328 –a—— C:\WINDOWS.2\inf\secrecs.PNF 2007-09-30 21:00 25912 –a—— C:\WINDOWS.2\inf\wdma_rip.PNF 2007-09-30 21:00 24800 –a—— C:\WINDOWS.2\inf\wdma_neo.PNF 2007-09-30 21:00 21968 –a—— C:\WINDOWS.2\inf\scsi.PNF 2007-09-30 21:00 21824 –a—— C:\WINDOWS.2\inf\wmdm.PNF 2007-09-30 21:00 20340 –a—— C:\WINDOWS.2\inf\usbvideo.PNF 2007-09-30 21:00 20244 –a—— C:\WINDOWS.2\inf\spx.PNF 2007-09-30 21:00 18680 –a—— C:\WINDOWS.2\inf\wdma_ne2.PNF 2007-09-30 21:00 18564 –a—— C:\WINDOWS.2\inf\ricoh.PNF 2007-09-30 21:00 18232 –a—— C:\WINDOWS.2\inf\wdma_avc.PNF 2007-09-30 21:00 18128 –a—— C:\WINDOWS.2\inf\wdmjoy.PNF 2007-09-30 21:00 17424 –a—— C:\WINDOWS.2\inf\wdma_ymh.PNF 2007-09-30 21:00 16052 –a—— C:\WINDOWS.2\inf\wmfsdk.PNF 2007-09-30 21:00 15728 –a—— C:\WINDOWS.2\inf\shl_img.PNF 2007-09-30 21:00 15628 –a—— C:\WINDOWS.2\inf\wsh.PNF 2007-09-30 21:00 14032 –a—— C:\WINDOWS.2\inf\wbemoc.PNF 2007-09-30 21:00 139144 –a—— C:\WINDOWS.2\inf\sapi5.PNF 2007-09-30 21:00 1376352 –a—— C:\WINDOWS.2\inf\INFCACHE.1 2007-09-30 21:00 13494 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-1F0A968F.pf 2007-09-30 21:00 12636 –a—— C:\WINDOWS.2\inf\SVCPACK.PNF 2007-09-30 21:00 12396 –a—— C:\WINDOWS.2\inf\spxports.PNF 2007-09-30 21:00 123028 –a—— C:\WINDOWS.2\inf\wdma_es3.PNF 2007-09-30 21:00 122904 –a—— C:\WINDOWS.2\inf\tsoc.PNF 2007-09-30 21:00 12096 –a—— C:\WINDOWS.2\inf\sr.PNF 2007-09-30 21:00 11972 –a—— C:\WINDOWS.2\inf\streamip.PNF 2007-09-30 21:00 11952 –a—— C:\WINDOWS.2\inf\wceusbsh.PNF 2007-09-30 21:00 11676 –a—— C:\WINDOWS.2\inf\srusbusd.PNF 2007-09-30 21:00 11432 –a—— C:\WINDOWS.2\inf\qmgr.PNF 2007-09-30 21:00 11268 –a—— C:\WINDOWS.2\inf\sisgr.PNF 2007-09-30 21:00 11008 –a—— C:\WINDOWS.2\inf\umaxpp.PNF 2007-09-30 21:00 10660 –a—— C:\WINDOWS.2\inf\wbfirdma.PNF 2007-09-30 21:00 10648 –a—— C:\WINDOWS.2\inf\sdbus.PNF 2007-09-30 21:00 10628 –a—— C:\WINDOWS.2\inf\ptpusb.PNF 2007-09-30 21:00 10588 –a—— C:\WINDOWS.2\inf\wave.PNF 2007-09-30 21:00 101420 –a—— C:\WINDOWS.2\inf\wdma_es2.PNF 2007-09-30 21:00 100628 –a—— C:\WINDOWS.2\inf\syssetup.PNF 2007-09-30 20:59 9976 –a—— C:\WINDOWS.2\inf\mxboard.PNF 2007-09-30 20:59 9960 –a—— C:\WINDOWS.2\inf\msinfo32.PNF 2007-09-30 20:59 9948 –a—— C:\WINDOWS.2\inf\netfa312.PNF 2007-09-30 20:59 9888 –a—— C:\WINDOWS.2\inf\netf56n5.PNF 2007-09-30 20:59 9884 –a—— C:\WINDOWS.2\inf\netw840.PNF 2007-09-30 20:59 9856 –a—— C:\WINDOWS.2\inf\netxcpq.PNF 2007-09-30 20:59 9748 –a—— C:\WINDOWS.2\inf\netias.PNF 2007-09-30 20:59 9748 –a—— C:\WINDOWS.2\inf\netamd.PNF 2007-09-30 20:59 9720 –a—— C:\WINDOWS.2\inf\mflm56.PNF 2007-09-30 20:59 9712 –a—— C:\WINDOWS.2\inf\mff56n5.PNF 2007-09-30 20:59 9676 –a—— C:\WINDOWS.2\inf\nv3.PNF 2007-09-30 20:59 9652 –a—— C:\WINDOWS.2\inf\nabtsfec.PNF 2007-09-30 20:59 9612 –a—— C:\WINDOWS.2\inf\mfsocket.PNF 2007-09-30 20:59 9572 –a—— C:\WINDOWS.2\inf\netirda.PNF 2007-09-30 20:59 9500 –a—— C:\WINDOWS.2\inf\msnmsn.PNF 2007-09-30 20:59 9468 –a—— C:\WINDOWS.2\inf\mfx56nf.PNF 2007-09-30 20:59 94212 –a—— C:\WINDOWS.2\inf\monitor6.PNF 2007-09-30 20:59 9376 –a—— C:\WINDOWS.2\inf\netbcm4p.PNF 2007-09-30 20:59 9340 –a—— C:\WINDOWS.2\inf\mdmusrf.PNF 2007-09-30 20:59 9304 –a—— C:\WINDOWS.2\inf\mflm.PNF 2007-09-30 20:59 9252 –a—— C:\WINDOWS.2\inf\netdefxa.PNF 2007-09-30 20:59 9220 –a—— C:\WINDOWS.2\inf\nettb155.PNF 2007-09-30 20:59 9188 –a—— C:\WINDOWS.2\inf\net656c5.PNF 2007-09-30 20:59 9104 –a—— C:\WINDOWS.2\inf\ndisip.PNF 2007-09-30 20:59 9076 –a—— C:\WINDOWS.2\inf\netcem28.PNF 2007-09-30 20:59 9060 –a—— C:\WINDOWS.2\inf\netcem33.PNF 2007-09-30 20:59 90240 –a—— C:\WINDOWS.2\inf\mdmsonyu.PNF 2007-09-30 20:59 8956 –a—— C:\WINDOWS.2\inf\perm3.PNF 2007-09-30 20:59 8948 –a—— C:\WINDOWS.2\inf\netupnph.PNF 2007-09-30 20:59 8940 –a—— C:\WINDOWS.2\inf\memstpci.PNF 2007-09-30 20:59 89136 –a—— C:\WINDOWS.2\inf\monitor3.PNF 2007-09-30 20:59 8884 –a—— C:\WINDOWS.2\inf\netcb102.PNF 2007-09-30 20:59 8828 –a—— C:\WINDOWS.2\inf\net3c556.PNF 2007-09-30 20:59 88216 –a—— C:\WINDOWS.2\inf\monitor7.PNF 2007-09-30 20:59 8784 –a—— C:\WINDOWS.2\inf\netbcm4u.PNF 2007-09-30 20:59 8736 –a—— C:\WINDOWS.2\inf\mtxvideo.PNF 2007-09-30 20:59 8732 –a—— C:\WINDOWS.2\inf\netbcm4e.PNF 2007-09-30 20:59 8716 –a—— C:\WINDOWS.2\inf\netserv.PNF 2007-09-30 20:59 86844 –a—— C:\WINDOWS.2\inf\monitor4.PNF 2007-09-30 20:59 8624 –a—— C:\WINDOWS.2\inf\netktc.PNF 2007-09-30 20:59 8612 –a—— C:\WINDOWS.2\inf\net713.PNF 2007-09-30 20:59 8540 –a—— C:\WINDOWS.2\inf\net5515n.PNF 2007-09-30 20:59 8528 –a—— C:\WINDOWS.2\inf\netdf650.PNF 2007-09-30 20:59 8516 –a—— C:\WINDOWS.2\inf\mwmbatam.PNF 2007-09-30 20:59 8468 –a—— C:\WINDOWS.2\inf\net559ib.PNF 2007-09-30 20:59 8436 –a—— C:\WINDOWS.2\inf\netrwan.PNF 2007-09-30 20:59 8424 –a—— C:\WINDOWS.2\inf\netrsvp.PNF 2007-09-30 20:59 8420 –a—— C:\WINDOWS.2\inf\netpc100.PNF 2007-09-30 20:59 8380 –a—— C:\WINDOWS.2\inf\mdmpbit.PNF 2007-09-30 20:59 83400 –a—— C:\WINDOWS.2\inf\net557.PNF 2007-09-30 20:59 8332 –a—— C:\WINDOWS.2\inf\netejxmp.PNF 2007-09-30 20:59 8300 –a—— C:\WINDOWS.2\inf\mpe.PNF 2007-09-30 20:59 8248 –a—— C:\WINDOWS.2\inf\netepro.PNF 2007-09-30 20:59 8232 –a—— C:\WINDOWS.2\inf\mdmvdot.PNF 2007-09-30 20:59 8188 –a—— C:\WINDOWS.2\inf\nettdkb.PNF 2007-09-30 20:59 8188 –a—— C:\WINDOWS.2\inf\netlnev2.PNF 2007-09-30 20:59 80932 –a—— C:\WINDOWS.2\inf\mdmzyp.PNF 2007-09-30 20:59 80632 –a—— C:\WINDOWS.2\inf\mdmracal.PNF 2007-09-30 20:59 8036 –a—— C:\WINDOWS.2\inf\neo20xx.PNF 2007-09-30 20:59 7988 –a—— C:\WINDOWS.2\inf\net650d.PNF 2007-09-30 20:59 7980 –a—— C:\WINDOWS.2\inf\netfa410.PNF 2007-09-30 20:59 79724 –a—— C:\WINDOWS.2\inf\mdmpenr.PNF 2007-09-30 20:59 7864 –a—— C:\WINDOWS.2\inf\mymusic.PNF 2007-09-30 20:59 7764 –a—— C:\WINDOWS.2\inf\netali.PNF 2007-09-30 20:59 7684 –a—— C:\WINDOWS.2\inf\netsla30.PNF 2007-09-30 20:59 76828 –a—— C:\WINDOWS.2\inf\mdmxircc.PNF 2007-09-30 20:59 7676 –a—— C:\WINDOWS.2\inf\mfcem28.PNF 2007-09-30 20:59 7624 –a—— C:\WINDOWS.2\inf\netfore.PNF 2007-09-30 20:59 76076 –a—— C:\WINDOWS.2\inf\mdmspq28.PNF 2007-09-30 20:59 7600 –a—— C:\WINDOWS.2\inf\netforeh.PNF 2007-09-30 20:59 7568 –a—— C:\WINDOWS.2\inf\netel515.PNF 2007-09-30 20:59 7556 –a—— C:\WINDOWS.2\inf\netsap.PNF 2007-09-30 20:59 7544 –a—— C:\WINDOWS.2\inf\netrlw2k.PNF 2007-09-30 20:59 75376 –a—— C:\WINDOWS.2\inf\mdmusrgl.PNF 2007-09-30 20:59 7488 –a—— C:\WINDOWS.2\inf\nettpro.PNF 2007-09-30 20:59 7468 –a—— C:\WINDOWS.2\inf\netlm.PNF 2007-09-30 20:59 7456 –a—— C:\WINDOWS.2\inf\netloop.PNF 2007-09-30 20:59 74352 –a—— C:\WINDOWS.2\inf\mdmusrk1.PNF 2007-09-30 20:59 74052 –a—— C:\WINDOWS.2\inf\mdmxirmp.PNF 2007-09-30 20:59 7404 –a—— C:\WINDOWS.2\inf\mfcem33.PNF 2007-09-30 20:59 7360 –a—— C:\WINDOWS.2\inf\netlm56.PNF 2007-09-30 20:59 7312 –a—— C:\WINDOWS.2\inf\netel5x9.PNF 2007-09-30 20:59 7304 –a—— C:\WINDOWS.2\inf\netfjvj.PNF 2007-09-30 20:59 7280 –a—— C:\WINDOWS.2\inf\netfjvi.PNF 2007-09-30 20:59 7192 –a—— C:\WINDOWS.2\inf\netw926.PNF 2007-09-30 20:59 7140 –a—— C:\WINDOWS.2\inf\netex10.PNF 2007-09-30 20:59 71244 –a—— C:\WINDOWS.2\inf\mdmrock4.PNF 2007-09-30 20:59 71152 –a—— C:\WINDOWS.2\inf\mdmx5560.PNF 2007-09-30 20:59 7112 –a—— C:\WINDOWS.2\inf\ntgrip.PNF 2007-09-30 20:59 7040 –a—— C:\WINDOWS.2\inf\netepvcm.PNF 2007-09-30 20:59 7036 –a—— C:\WINDOWS.2\inf\netwzc.PNF 2007-09-30 20:59 7036 –a—— C:\WINDOWS.2\inf\msrio.PNF 2007-09-30 20:59 6952 –a—— C:\WINDOWS.2\inf\msrio8.PNF 2007-09-30 20:59 6932 –a—— C:\WINDOWS.2\inf\ppa3.PNF 2007-09-30 20:59 6924 –a—— C:\WINDOWS.2\inf\net3sr.PNF 2007-09-30 20:59 6884 –a—— C:\WINDOWS.2\inf\ppa.PNF 2007-09-30 20:59 68696 –a—— C:\WINDOWS.2\inf\mdmpctel.PNF 2007-09-30 20:59 6816 –a—— C:\WINDOWS.2\inf\netrndis.PNF 2007-09-30 20:59 6800 –a—— C:\WINDOWS.2\inf\msnike.PNF 2007-09-30 20:59 6792 –a—— C:\WINDOWS.2\inf\mdmrisa.PNF

prieko

Post #44October 8, 2007, 2:36 PM UTC last edited October 8, 2007, 2:42 PM UTC

2007-09-30 20:59 6704 –a—— C:\WINDOWS.2\inf\mscpqpa1.PNF 2007-09-30 20:59 6684 –a—— C:\WINDOWS.2\inf\netw940.PNF 2007-09-30 20:59 6668 –a—— C:\WINDOWS.2\inf\ntapm.PNF 2007-09-30 20:59 6664 –a—— C:\WINDOWS.2\inf\netauni.PNF 2007-09-30 20:59 6644 –a—— C:\WINDOWS.2\inf\mfsupra.PNF 2007-09-30 20:59 6584 –a—— C:\WINDOWS.2\inf\netambi.PNF 2007-09-30 20:59 65812 –a—— C:\WINDOWS.2\inf\mdmtdk.PNF 2007-09-30 20:59 6500 –a—— C:\WINDOWS.2\inf\netepvcp.PNF 2007-09-30 20:59 6428 –a—— C:\WINDOWS.2\inf\netsmc.PNF 2007-09-30 20:59 6372 –a—— C:\WINDOWS.2\inf\net1394.PNF 2007-09-30 20:59 6364 –a—— C:\WINDOWS.2\inf\nettun.PNF 2007-09-30 20:59 63144 –a—— C:\WINDOWS.2\inf\msmouse.PNF 2007-09-30 20:59 6276 –a—— C:\WINDOWS.2\inf\netlanep.PNF 2007-09-30 20:59 6244 –a—— C:\WINDOWS.2\inf\net10.PNF 2007-09-30 20:59 6224 –a—— C:\WINDOWS.2\inf\netiprip.PNF 2007-09-30 20:59 6216 –a—— C:\WINDOWS.2\inf\netpschd.PNF 2007-09-30 20:59 61004 –a—— C:\WINDOWS.2\inf\msnetmtg.PNF 2007-09-30 20:59 6084 –a—— C:\WINDOWS.2\inf\mdmsgsml.PNF 2007-09-30 20:59 6072 –a—— C:\WINDOWS.2\inf\netnb.PNF 2007-09-30 20:59 5904 –a—— C:\WINDOWS.2\inf\netbrdgm.PNF 2007-09-30 20:59 5868 –a—— C:\WINDOWS.2\inf\ovcomp.PNF 2007-09-30 20:59 5844 –a—— C:\WINDOWS.2\inf\multiprt.PNF 2007-09-30 20:59 5800 –a—— C:\WINDOWS.2\inf\ndisuio.PNF 2007-09-30 20:59 5788 –a—— C:\WINDOWS.2\inf\netpsa.PNF 2007-09-30 20:59 57476 –a—— C:\WINDOWS.2\inf\netdgdxb.PNF 2007-09-30 20:59 57232 –a—— C:\WINDOWS.2\inf\mdmpp.PNF 2007-09-30 20:59 5600 –a—— C:\WINDOWS.2\inf\mf.PNF 2007-09-30 20:59 55272 –a—— C:\WINDOWS.2\inf\mwtpdsp.PNF 2007-09-30 20:59 5500 –a—— C:\WINDOWS.2\inf\netbrdgs.PNF 2007-09-30 20:59 53888 –a—— C:\WINDOWS.2\inf\mdmti.PNF 2007-09-30 20:59 5364 –a—— C:\WINDOWS.2\inf\netgpc.PNF 2007-09-30 20:59 5356 –a—— C:\WINDOWS.2\inf\netlanem.PNF 2007-09-30 20:59 53308 –a—— C:\WINDOWS.2\inf\nv4_disp.PNF 2007-09-30 20:59 53136 –a—— C:\WINDOWS.2\inf\mdmtosh.PNF 2007-09-30 20:59 50632 –a—— C:\WINDOWS.2\inf\mdmrock3.PNF 2007-09-30 20:59 49580 –a—— C:\WINDOWS.2\inf\mshdc.PNF 2007-09-30 20:59 49104 –a—— C:\WINDOWS.2\inf\mdmosi.PNF 2007-09-30 20:59 46172 –a—— C:\WINDOWS.2\inf\mdmntstm.PNF 2007-09-30 20:59 45904 –a—— C:\WINDOWS.2\inf\mdmsupr3.PNF 2007-09-30 20:59 45788 –a—— C:\WINDOWS.2\inf\pcmcia.PNF 2007-09-30 20:59 45252 –a—— C:\WINDOWS.2\inf\netrass.PNF 2007-09-30 20:59 4500 –a—— C:\WINDOWS.2\inf\nlite.PNF 2007-09-30 20:59 44972 –a—— C:\WINDOWS.2\inf\printupg.PNF 2007-09-30 20:59 44884 –a—— C:\WINDOWS.2\inf\mdmsier.PNF 2007-09-30 20:59 4424 –a—— C:\WINDOWS.2\inf\netcis.PNF 2007-09-30 20:59 4400 –a—— C:\WINDOWS.2\inf\oeaccess.PNF 2007-09-30 20:59 41340 –a—— C:\WINDOWS.2\inf\mmopt.PNF 2007-09-30 20:59 40684 –a—— C:\WINDOWS.2\inf\mdmsuprv.PNF 2007-09-30 20:59 4012 –a—— C:\WINDOWS.2\inf\netupnp.PNF 2007-09-30 20:59 4008 –a—— C:\WINDOWS.2\inf\mdmsetup.PNF 2007-09-30 20:59 39424 –a—— C:\WINDOWS.2\inf\mdmosice.PNF 2007-09-30 20:59 39092 –a—— C:\WINDOWS.2\inf\msdv.PNF 2007-09-30 20:59 38344 –a—— C:\WINDOWS.2\inf\nettcpip.PNF 2007-09-30 20:59 38232 –a—— C:\WINDOWS.2\inf\mwavmdm1.PNF 2007-09-30 20:59 3772 –a—— C:\WINDOWS.2\inf\minioc.PNF 2007-09-30 20:59 3712 –a—— C:\WINDOWS.2\inf\netfw.PNF 2007-09-30 20:59 3704 –a—— C:\WINDOWS.2\inf\netclass.PNF 2007-09-30 20:59 3660 –a—— C:\WINDOWS.2\inf\netbeac.PNF 2007-09-30 20:59 35840 –a—— C:\WINDOWS.2\inf\parhmse.PNF 2007-09-30 20:59 34920 –a—— C:\WINDOWS.2\inf\netb57xp.PNF 2007-09-30 20:59 34280 –a—— C:\WINDOWS.2\inf\mdmsun2.PNF 2007-09-30 20:59 34068 –a—— C:\WINDOWS.2\inf\nvdm.PNF 2007-09-30 20:59 30964 –a—— C:\WINDOWS.2\inf\mplayer2.PNF 2007-09-30 20:59 306076 –a—— C:\WINDOWS.2\inf\mdmrpci.PNF 2007-09-30 20:59 30248 –a—— C:\WINDOWS.2\inf\msports.PNF 2007-09-30 20:59 29716 –a—— C:\WINDOWS.2\inf\mdmtdkj5.PNF 2007-09-30 20:59 29436 –a—— C:\WINDOWS.2\inf\nete1000.PNF 2007-09-30 20:59 29148 –a—— C:\WINDOWS.2\inf\msmscsi.PNF 2007-09-30 20:59 2832 –a—— C:\WINDOWS.2\inf\mqsysoc.PNF 2007-09-30 20:59 27896 –a—— C:\WINDOWS.2\inf\netwlan.PNF 2007-09-30 20:59 27868 –a—— C:\WINDOWS.2\inf\mdmpace.PNF 2007-09-30 20:59 27748 –a—— C:\WINDOWS.2\inf\netmadge.PNF 2007-09-30 20:59 27024 –a—— C:\WINDOWS.2\inf\mdmtdkj2.PNF 2007-09-30 20:59 26732 –a—— C:\WINDOWS.2\inf\mdmvv.PNF 2007-09-30 20:59 26724 –a—— C:\WINDOWS.2\inf\mdmtdkj3.PNF 2007-09-30 20:59 26584 –a—— C:\WINDOWS.2\inf\net21x4.PNF 2007-09-30 20:59 25492 –a—— C:\WINDOWS.2\inf\net8511.PNF 2007-09-30 20:59 24836 –a—— C:\WINDOWS.2\inf\ovcam.PNF 2007-09-30 20:59 24524 –a—— C:\WINDOWS.2\inf\mdmtdkj4.PNF 2007-09-30 20:59 24440 –a—— C:\WINDOWS.2\inf\netirsir.PNF 2007-09-30 20:59 23860 –a—— C:\WINDOWS.2\inf\mdmusrg.PNF 2007-09-30 20:59 23832 –a—— C:\WINDOWS.2\inf\mstape.PNF 2007-09-30 20:59 23720 –a—— C:\WINDOWS.2\inf\mdmrock.PNF 2007-09-30 20:59 23616 –a—— C:\WINDOWS.2\inf\mdmsiil6.PNF 2007-09-30 20:59 23552 –a—— C:\WINDOWS.2\inf\netrasa.PNF 2007-09-30 20:59 23456 –a—— C:\WINDOWS.2\inf\netsk_fp.PNF 2007-09-30 20:59 23416 –a—— C:\WINDOWS.2\inf\mdmsii64.PNF 2007-09-30 20:59 23196 –a—— C:\WINDOWS.2\inf\mdmtron.PNF 2007-09-30 20:59 23016 –a—— C:\WINDOWS.2\inf\mdmsgsmu.PNF 2007-09-30 20:59 22204 –a—— C:\WINDOWS.2\inf\nvts.PNF 2007-09-30 20:59 22156 –a—— C:\WINDOWS.2\inf\nvct.PNF 2007-09-30 20:59 22144 –a—— C:\WINDOWS.2\inf\optional.PNF 2007-09-30 20:59 22016 –a—— C:\WINDOWS.2\inf\netnf3.PNF 2007-09-30 20:59 22012 –a—— C:\WINDOWS.2\inf\mdmnttd6.PNF 2007-09-30 20:59 22004 –a—— C:\WINDOWS.2\inf\mdmnttd2.PNF 2007-09-30 20:59 21744 –a—— C:\WINDOWS.2\inf\netsis.PNF 2007-09-30 20:59 20376 –a—— C:\WINDOWS.2\inf\netmscli.PNF 2007-09-30 20:59 20268 –a—— C:\WINDOWS.2\inf\mdmtdkj7.PNF 2007-09-30 20:59 20224 –a—— C:\WINDOWS.2\inf\mdmnova.PNF 2007-09-30 20:59 20124 –a—— C:\WINDOWS.2\inf\netsnmp.PNF 2007-09-30 20:59 19844 –a—— C:\WINDOWS.2\inf\netrtsnt.PNF 2007-09-30 20:59 19488 –a—— C:\WINDOWS.2\inf\netel90b.PNF 2007-09-30 20:59 19416 –a—— C:\WINDOWS.2\inf\netwv48.PNF 2007-09-30 20:59 19360 –a—— C:\WINDOWS.2\inf\netx500.PNF 2007-09-30 20:59 19276 –a—— C:\WINDOWS.2\inf\mdmpin.PNF 2007-09-30 20:59 19056 –a—— C:\WINDOWS.2\inf\mdmolic.PNF 2007-09-30 20:59 18992 –a—— C:\WINDOWS.2\inf\mfcem56.PNF 2007-09-30 20:59 18640 –a—— C:\WINDOWS.2\inf\netklsi.PNF 2007-09-30 20:59 17952 –a—— C:\WINDOWS.2\inf\netamd2.PNF 2007-09-30 20:59 17788 –a—— C:\WINDOWS.2\inf\netcpqi.PNF 2007-09-30 20:59 17728 –a—— C:\WINDOWS.2\inf\netibm.PNF 2007-09-30 20:59 175364 –a—— C:\WINDOWS.2\inf\netfxocm.PNF 2007-09-30 20:59 17468 –a—— C:\WINDOWS.2\inf\mdmnttp2.PNF 2007-09-30 20:59 17408 –a—— C:\WINDOWS.2\inf\netcpqg.PNF 2007-09-30 20:59 17348 –a—— C:\WINDOWS.2\inf\netel99x.PNF 2007-09-30 20:59 17328 –a—— C:\WINDOWS.2\inf\mdmtdkj6.PNF 2007-09-30 20:59 17248 –a—— C:\WINDOWS.2\inf\oobe.PNF 2007-09-30 20:59 17196 –a—— C:\WINDOWS.2\inf\memcard.PNF 2007-09-30 20:59 16960 –a—— C:\WINDOWS.2\inf\pmxmcro.PNF 2007-09-30 20:59 16948 –a—— C:\WINDOWS.2\inf\mwremove.PNF 2007-09-30 20:59 168912 –a—— C:\WINDOWS.2\inf\mdmwhql0.PNF 2007-09-30 20:59 16532 –a—— C:\WINDOWS.2\inf\netcbe.PNF 2007-09-30 20:59 16456 –a—— C:\WINDOWS.2\inf\netoc.PNF 2007-09-30 20:59 16432 –a—— C:\WINDOWS.2\inf\netan983.PNF 2007-09-30 20:59 16340 –a—— C:\WINDOWS.2\inf\mdmtexas.PNF 2007-09-30 20:59 16204 –a—— C:\WINDOWS.2\inf\mdmnttp.PNF 2007-09-30 20:59 16180 –a—— C:\WINDOWS.2\inf\netnwlnk.PNF 2007-09-30 20:59 15940 –a—— C:\WINDOWS.2\inf\mpsstln.PNF 2007-09-30 20:59 15848 –a—— C:\WINDOWS.2\inf\mdmpsion.PNF 2007-09-30 20:59 15764 –a—— C:\WINDOWS.2\inf\net83820.PNF 2007-09-30 20:59 15380 –a—— C:\WINDOWS.2\inf\msmusb.PNF 2007-09-30 20:59 1536468 –a—— C:\WINDOWS.2\inf\mdmrpciw.PNF 2007-09-30 20:59 15204 –a—— C:\WINDOWS.2\inf\moviemk.PNF 2007-09-30 20:59 15140 –a—— C:\WINDOWS.2\inf\netcicap.PNF 2007-09-30 20:59 14900 –a—— C:\WINDOWS.2\inf\netvt86.PNF 2007-09-30 20:59 14820 –a—— C:\WINDOWS.2\inf\netcb325.PNF 2007-09-30 20:59 14792 –a—— C:\WINDOWS.2\inf\netnm.PNF 2007-09-30 20:59 14756 –a—— C:\WINDOWS.2\inf\netwlan2.PNF 2007-09-30 20:59 14728 –a—— C:\WINDOWS.2\inf\netsk98.PNF 2007-09-30 20:59 14704 –a—— C:\WINDOWS.2\inf\netosi2c.PNF 2007-09-30 20:59 14692 –a—— C:\WINDOWS.2\inf\netnovel.PNF 2007-09-30 20:59 146484 –a—— C:\WINDOWS.2\inf\prtupg9x.PNF 2007-09-30 20:59 14628 –a—— C:\WINDOWS.2\inf\netibm2.PNF 2007-09-30 20:59 14544 –a—— C:\WINDOWS.2\inf\mdmsmart.PNF 2007-09-30 20:59 14404 –a—— C:\WINDOWS.2\inf\netcem56.PNF 2007-09-30 20:59 14360 –a—— C:\WINDOWS.2\inf\net3c985.PNF 2007-09-30 20:59 14256 –a—— C:\WINDOWS.2\inf\p2p.PNF 2007-09-30 20:59 14136 –a—— C:\WINDOWS.2\inf\netce3.PNF 2007-09-30 20:59 13992 –a—— C:\WINDOWS.2\inf\mstask.PNF 2007-09-30 20:59 13844 –a—— C:\WINDOWS.2\inf\phil2vid.PNF 2007-09-30 20:59 13816 –a—— C:\WINDOWS.2\inf\mdmntt1.PNF 2007-09-30 20:59 13600 –a—— C:\WINDOWS.2\inf\msmqocm.PNF 2007-09-30 20:59 134972 –a—— C:\WINDOWS.2\inf\mdmzyxlg.PNF 2007-09-30 20:59 134316 –a—— C:\WINDOWS.2\inf\mdmsupra.PNF 2007-09-30 20:59 13332 –a—— C:\WINDOWS.2\inf\pchealth.PNF 2007-09-30 20:59 13308 –a—— C:\WINDOWS.2\inf\philtune.PNF 2007-09-30 20:59 13180 –a—— C:\WINDOWS.2\inf\phildec.PNF 2007-09-30 20:59 1317396 –a—— C:\WINDOWS.2\inf\ntprint.PNF 2007-09-30 20:59 13036 –a—— C:\WINDOWS.2\inf\netip6.PNF 2007-09-30 20:59 130000 –a—— C:\WINDOWS.2\inf\mdmzoom.PNF 2007-09-30 20:59 12956 –a—— C:\WINDOWS.2\inf\netosi5.PNF 2007-09-30 20:59 12664 –a—— C:\WINDOWS.2\inf\netcpqc.PNF 2007-09-30 20:59 12628 –a—— C:\WINDOWS.2\inf\netel980.PNF 2007-09-30 20:59 126160 –a—— C:\WINDOWS.2\inf\mdmomrn3.PNF 2007-09-30 20:59 12612 –a—— C:\WINDOWS.2\inf\netbrzw.PNF 2007-09-30 20:59 12604 –a—— C:\WINDOWS.2\inf\phdsext.PNF 2007-09-30 20:59 12572 –a—— C:\WINDOWS.2\inf\perm2.PNF 2007-09-30 20:59 125644 –a—— C:\WINDOWS.2\inf\mdmrock5.PNF 2007-09-30 20:59 12396 –a—— C:\WINDOWS.2\inf\ovsound.PNF 2007-09-30 20:59 12376 –a—— C:\WINDOWS.2\inf\pinball.PNF 2007-09-30 20:59 12300 –a—— C:\WINDOWS.2\inf\mfosi5.PNF 2007-09-30 20:59 12240 –a—— C:\WINDOWS.2\inf\mxport.PNF 2007-09-30 20:59 122060 –a—— C:\WINDOWS.2\inf\mdmzyxel.PNF 2007-09-30 20:59 12196 –a—— C:\WINDOWS.2\inf\netana.PNF 2007-09-30 20:59 12128 –a—— C:\WINDOWS.2\inf\netrast.PNF 2007-09-30 20:59 12104 –a—— C:\WINDOWS.2\inf\netdlh5x.PNF 2007-09-30 20:59 120728 –a—— C:\WINDOWS.2\inf\monitor5.PNF 2007-09-30 20:59 12000 –a—— C:\WINDOWS.2\inf\netel90a.PNF 2007-09-30 20:59 11992 –a—— C:\WINDOWS.2\inf\multimed.PNF 2007-09-30 20:59 11920 –a—— C:\WINDOWS.2\inf\netasp2k.PNF 2007-09-30 20:59 11780 –a—— C:\WINDOWS.2\inf\modemcsa.PNF 2007-09-30 20:59 11560 –a—— C:\WINDOWS.2\inf\net3c589.PNF 2007-09-30 20:59 11540 –a—— C:\WINDOWS.2\inf\nete100i.PNF 2007-09-30 20:59 11532 –a—— C:\WINDOWS.2\inf\mdmnttme.PNF 2007-09-30 20:59 11488 –a—— C:\WINDOWS.2\inf\mdmoptn.PNF 2007-09-30 20:59 11404 –a—— C:\WINDOWS.2\inf\netpwr2.PNF 2007-09-30 20:59 11328 –a—— C:\WINDOWS.2\inf\nettiger.PNF 2007-09-30 20:59 11300 –a—— C:\WINDOWS.2\inf\mdmsun1.PNF 2007-09-30 20:59 112368 –a—— C:\WINDOWS.2\inf\monitor8.PNF 2007-09-30 20:59 11188 –a—— C:\WINDOWS.2\inf\netmhzn5.PNF 2007-09-30 20:59 11140 –a—— C:\WINDOWS.2\inf\netel574.PNF 2007-09-30 20:59 11084 –a—— C:\WINDOWS.2\inf\mfmhzn5.PNF 2007-09-30 20:59 11032 –a—— C:\WINDOWS.2\inf\netx56n5.PNF 2007-09-30 20:59 10904 –a—— C:\WINDOWS.2\inf\netepicn.PNF 2007-09-30 20:59 10900 –a—— C:\WINDOWS.2\inf\netngr.PNF 2007-09-30 20:59 10840 –a—— C:\WINDOWS.2\inf\netnwcli.PNF 2007-09-30 20:59 10836 –a—— C:\WINDOWS.2\inf\net656n5.PNF 2007-09-30 20:59 108196 –a—— C:\WINDOWS.2\inf\monitor.PNF 2007-09-30 20:59 10740 –a—— C:\WINDOWS.2\inf\nettpsmp.PNF 2007-09-30 20:59 10708 –a—— C:\WINDOWS.2\inf\netrtpnt.PNF 2007-09-30 20:59 106648 –a—— C:\WINDOWS.2\inf\medctroc.PNF 2007-09-30 20:59 10616 –a—— C:\WINDOWS.2\inf\netdm.PNF 2007-09-30 20:59 10596 –a—— C:\WINDOWS.2\inf\net575nt.PNF 2007-09-30 20:59 10580 –a—— C:\WINDOWS.2\inf\mdmnttte.PNF 2007-09-30 20:59 105688 –a—— C:\WINDOWS.2\inf\pnpscsi.PNF 2007-09-30 20:59 10492 –a—— C:\WINDOWS.2\inf\phil1vid.PNF 2007-09-30 20:59 10476 –a—— C:\WINDOWS.2\inf\netctmrk.PNF 2007-09-30 20:59 10464 –a—— C:\WINDOWS.2\inf\netdav.PNF 2007-09-30 20:59 10432 –a—— C:\WINDOWS.2\inf\mdmusrsp.PNF 2007-09-30 20:59 10432 –a—— C:\WINDOWS.2\inf\mdmpn1.PNF 2007-09-30 20:59 10428 –a—— C:\WINDOWS.2\inf\netlpd.PNF 2007-09-30 20:59 10368 –a—— C:\WINDOWS.2\inf\netamdhl.PNF 2007-09-30 20:59 10344 –a—— C:\WINDOWS.2\inf\netcpqmt.PNF 2007-09-30 20:59 10332 –a—— C:\WINDOWS.2\inf\netsnip.PNF 2007-09-30 20:59 10236 –a—— C:\WINDOWS.2\inf\netpnic.PNF 2007-09-30 20:59 101156 –a—— C:\WINDOWS.2\inf\monitor2.PNF 2007-09-30 20:59 10088 –a—— C:\WINDOWS.2\inf\netce2.PNF 2007-09-30 20:59 10020 –a—— C:\WINDOWS.2\inf\mgau.PNF 2007-09-30 20:58 96720 –a—— C:\WINDOWS.2\inf\mdmgl006.PNF 2007-09-30 20:58 96416 –a—— C:\WINDOWS.2\inf\mdmlt3.PNF 2007-09-30 20:58 93604 –a—— C:\WINDOWS.2\inf\mdmgl010.PNF 2007-09-30 20:58 92100 –a—— C:\WINDOWS.2\inf\mdmmhza.PNF 2007-09-30 20:58 90004 –a—— C:\WINDOWS.2\inf\mdmmhzk1.PNF 2007-09-30 20:58 89860 –a—— C:\WINDOWS.2\inf\mdmgl002.PNF 2007-09-30 20:58 8872 –a—— C:\WINDOWS.2\inf\mdmmotou.PNF 2007-09-30 20:58 8568 –a—— C:\WINDOWS.2\inf\mdmhaeu.PNF 2007-09-30 20:58 82392 –a—— C:\WINDOWS.2\inf\mdmgl005.PNF 2007-09-30 20:58 81768 –a—— C:\WINDOWS.2\inf\mdmmts.PNF 2007-09-30 20:58 78000 –a—— C:\WINDOWS.2\inf\mdmdcm5.PNF 2007-09-30 20:58 77236 –a—— C:\WINDOWS.2\inf\mdmgl001.PNF 2007-09-30 20:58 77184 –a—— C:\WINDOWS.2\inf\mdmltsft.PNF 2007-09-30 20:58 76300 –a—— C:\WINDOWS.2\inf\mdmltleo.PNF 2007-09-30 20:58 74128 –a—— C:\WINDOWS.2\inf\mdmmhrtz.PNF 2007-09-30 20:58 72144 –a—— C:\WINDOWS.2\inf\mdmmoto.PNF 2007-09-30 20:58 72024 –a—— C:\WINDOWS.2\inf\mdmgen.PNF 2007-09-30 20:58 69856 –a—— C:\WINDOWS.2\inf\mdmhay2.PNF 2007-09-30 20:58 69548 –a—— C:\WINDOWS.2\inf\mdmgatew.PNF 2007-09-30 20:58 64552 –a—— C:\WINDOWS.2\inf\mdmmcom.PNF 2007-09-30 20:58 63184 –a—— C:\WINDOWS.2\inf\mdmmct.PNF 2007-09-30 20:58 62716 –a—— C:\WINDOWS.2\inf\mdmetech.PNF 2007-09-30 20:58 59564 –a—— C:\WINDOWS.2\inf\mdmhandy.PNF 2007-09-30 20:58 59380 –a—— C:\WINDOWS.2\inf\mdmgl003.PNF 2007-09-30 20:58 58760 –a—— C:\WINDOWS.2\inf\mdmisdn.PNF 2007-09-30 20:58 57580 –a—— C:\WINDOWS.2\inf\mdmgl008.PNF 2007-09-30 20:58 57172 –a—— C:\WINDOWS.2\inf\mdmdyna.PNF 2007-09-30 20:58 49244 –a—— C:\WINDOWS.2\inf\mdmess.PNF 2007-09-30 20:58 47324 –a—— C:\WINDOWS.2\inf\mdmexp.PNF 2007-09-30 20:58 42684 –a—— C:\WINDOWS.2\inf\mdmgcs.PNF 2007-09-30 20:58 42668 –a—— C:\WINDOWS.2\inf\mdmlasno.PNF 2007-09-30 20:58 36412 –a—— C:\WINDOWS.2\inf\mdmlucnt.PNF 2007-09-30 20:58 34092 –a—— C:\WINDOWS.2\inf\mdmdcm6.PNF 2007-09-30 20:58 31792 –a—— C:\WINDOWS.2\inf\mdmdigi.PNF 2007-09-30 20:58 30756 –a—— C:\WINDOWS.2\inf\mdmiodat.PNF 2007-09-30 20:58 30604 –a—— C:\WINDOWS.2\inf\mdmeiger.PNF 2007-09-30 20:58 29520 –a—— C:\WINDOWS.2\inf\mdmgsm.PNF 2007-09-30 20:58 28916 –a—— C:\WINDOWS.2\inf\mdminfot.PNF 2007-09-30 20:58 27216 –a—— C:\WINDOWS.2\inf\mdmintel.PNF 2007-09-30 20:58 26880 –a—— C:\WINDOWS.2\inf\mdmeric2.PNF 2007-09-30 20:58 26004 –a—— C:\WINDOWS.2\inf\MDMJF56E.PNF 2007-09-30 20:58 24632 –a—— C:\WINDOWS.2\inf\mdmdf56F.PNF 2007-09-30 20:58 21132 –a—— C:\WINDOWS.2\inf\mdmfj2.PNF 2007-09-30 20:58 20876 –a—— C:\WINDOWS.2\inf\mdmlasat.PNF 2007-09-30 20:58 20376 –a—— C:\WINDOWS.2\inf\mdmdgden.PNF 2007-09-30 20:58 20336 –a—— C:\WINDOWS.2\inf\mdmneuhs.PNF 2007-09-30 20:58 20200 –a—— C:\WINDOWS.2\inf\mdmeric.PNF 2007-09-30 20:58 20140 –a—— C:\WINDOWS.2\inf\mdmmoto1.PNF 2007-09-30 20:58 20060 –a—— C:\WINDOWS.2\inf\mdmdgitn.PNF 2007-09-30 20:58 199768 –a—— C:\WINDOWS.2\inf\mdmmhzel.PNF 2007-09-30 20:58 18548 –a—— C:\WINDOWS.2\inf\mdmmod.PNF 2007-09-30 20:58 17508 –a—— C:\WINDOWS.2\inf\mdmdp2.PNF 2007-09-30 20:58 17424 –a—— C:\WINDOWS.2\inf\mdmmega.PNF 2007-09-30 20:58 169552 –a—— C:\WINDOWS.2\inf\mdmdsi.PNF 2007-09-30 20:58 16512 –a—— C:\WINDOWS.2\inf\mdmmc288.PNF 2007-09-30 20:58 1597344 –a—— C:\WINDOWS.2\inf\mdmgl004.PNF 2007-09-30 20:58 157272 –a—— C:\WINDOWS.2\inf\mdmgl009.PNF 2007-09-30 20:58 152860 –a—— C:\WINDOWS.2\inf\mdmhamrw.PNF 2007-09-30 20:58 151724 –a—— C:\WINDOWS.2\inf\mdmgl007.PNF 2007-09-30 20:58 13252 –a—— C:\WINDOWS.2\inf\mdmnokia.PNF 2007-09-30 20:58 12652 –a—— C:\WINDOWS.2\inf\mdmkortx.PNF 2007-09-30 20:58 11900 –a—— C:\WINDOWS.2\inf\mdmke.PNF 2007-09-30 20:58 11704 –a—— C:\WINDOWS.2\inf\mdmminij.PNF 2007-09-30 20:58 115120 –a—— C:\WINDOWS.2\inf\mdmelsa.PNF 2007-09-30 20:58 11512 –a—— C:\WINDOWS.2\inf\mdmmcd.PNF 2007-09-30 20:58 11356 –a—— C:\WINDOWS.2\inf\Mdmnis2u.PNF 2007-09-30 20:58 11276 –a—— C:\WINDOWS.2\inf\Mdmnis1u.PNF 2007-09-30 20:58 110420 –a—— C:\WINDOWS.2\inf\mdmmetri.PNF 2007-09-30 20:58 107880 –a—— C:\WINDOWS.2\inf\mdmirmdm.PNF 2007-09-30 20:58 10372 –a—— C:\WINDOWS.2\inf\Mdmnis3t.PNF 2007-09-30 20:58 10348 –a—— C:\WINDOWS.2\inf\Mdmnis5t.PNF 2007-09-30 20:58 102160 –a—— C:\WINDOWS.2\inf\mdmhayes.PNF 2007-09-30 19:08 99412 –a—— C:\WINDOWS.2\inf\mdm3mini.PNF 2007-09-30 19:08 97632 –a—— C:\WINDOWS.2\inf\mdm3com.PNF 2007-09-30 19:08 974460 –a—— C:\WINDOWS.2\inf\iis.PNF 2007-09-30 19:08 9660 –a—— C:\WINDOWS.2\inf\ccdecode.PNF 2007-09-30 19:08 9492 –a—— C:\WINDOWS.2\inf\HidDigi.PNF 2007-09-30 19:08 9164 –a—— C:\WINDOWS.2\inf\irstusb.PNF 2007-09-30 19:08 91516 –a—— C:\WINDOWS.2\inf\mdmcm28.PNF 2007-09-30 19:08 91452 –a—— C:\WINDOWS.2\inf\ks.PNF 2007-09-30 19:08 9004 –a—— C:\WINDOWS.2\inf\i740nt5.PNF 2007-09-30 19:08 8956 –a—— C:\WINDOWS.2\inf\irmk7w2k.PNF 2007-09-30 19:08 8900 –a—— C:\WINDOWS.2\inf\irdaalif.PNF 2007-09-30 19:08 8832 –a—— C:\WINDOWS.2\inf\mdmairte.PNF 2007-09-30 19:08 8672 –a—— C:\WINDOWS.2\inf\dshowext.PNF 2007-09-30 19:08 8596 –a—— C:\WINDOWS.2\inf\fsvga.PNF 2007-09-30 19:08 8496 –a—— C:\WINDOWS.2\inf\flpydisk.PNF 2007-09-30 19:08 8400 –a—— C:\WINDOWS.2\inf\digiisdn.PNF 2007-09-30 19:08 8184 –a—— C:\WINDOWS.2\inf\digirprt.PNF 2007-09-30 19:08 81056 –a—— C:\WINDOWS.2\inf\mdmbcmsm.PNF 2007-09-30 19:08 8048 –a—— C:\WINDOWS.2\inf\bthpan.PNF 2007-09-30 19:08 7992 –a—— C:\WINDOWS.2\inf\ibmvcap.PNF 2007-09-30 19:08 7980 –a—— C:\WINDOWS.2\inf\digirp.PNF 2007-09-30 19:08 7956 –a—— C:\WINDOWS.2\inf\fdc.PNF 2007-09-30 19:08 7788 –a—— C:\WINDOWS.2\inf\hidbth.PNF 2007-09-30 19:08 77760 –a—— C:\WINDOWS.2\inf\mdmati.PNF 2007-09-30 19:08 7032 –a—— C:\WINDOWS.2\inf\hpdigwia.PNF 2007-09-30 19:08 6872 –a—— C:\WINDOWS.2\inf\cyclom-y.PNF 2007-09-30 19:08 68364 –a—— C:\WINDOWS.2\inf\mdmcxsf2.PNF 2007-09-30 19:08 68032 –a—— C:\WINDOWS.2\inf\dot4.PNF 2007-09-30 19:08 67724 –a—— C:\WINDOWS.2\inf\keyboard.PNF 2007-09-30 19:08 6748 –a—— C:\WINDOWS.2\inf\cyclad-z.PNF 2007-09-30 19:08 6684 –a—— C:\WINDOWS.2\inf\hdaudbus.PNF 2007-09-30 19:08 6612 –a—— C:\WINDOWS.2\inf\dfrg.PNF 2007-09-30 19:08 6600 –a—— C:\WINDOWS.2\inf\eqnport.PNF 2007-09-30 19:08 6476 –a—— C:\WINDOWS.2\inf\dot4prt.PNF 2007-09-30 19:08 6440 –a—— C:\WINDOWS.2\inf\digiasyn.PNF 2007-09-30 19:08 64300 –a—— C:\WINDOWS.2\inf\mdmboca.PNF 2007-09-30 19:08 628120 –a—— C:\WINDOWS.2\inf\mdmcxsft.PNF 2007-09-30 19:08 6240 –a—— C:\WINDOWS.2\inf\bthprint.PNF 2007-09-30 19:08 62244 –a—— C:\WINDOWS.2\inf\font.PNF 2007-09-30 19:08 6108 –a—— C:\WINDOWS.2\inf\enum1394.PNF 2007-09-30 19:08 5980 –a—— C:\WINDOWS.2\inf\bthspp.PNF 2007-09-30 19:08 5888 –a—— C:\WINDOWS.2\inf\epcfw2k.PNF 2007-09-30 19:08 5864 –a—— C:\WINDOWS.2\inf\epstw2k.PNF 2007-09-30 19:08 5852 –a—— C:\WINDOWS.2\inf\genprint.PNF 2007-09-30 19:08 5760 –a—— C:\WINDOWS.2\inf\iereset.PNF 2007-09-30 19:08 56868 –a—— C:\WINDOWS.2\inf\mdm656n5.PNF 2007-09-30 19:08 56548 –a—— C:\WINDOWS.2\inf\cdrom.PNF 2007-09-30 19:08 55768 –a—— C:\WINDOWS.2\inf\fxsocm.PNF 2007-09-30 19:08 54044 –a—— C:\WINDOWS.2\inf\display.PNF 2007-09-30 19:08 5012 –a—— C:\WINDOWS.2\inf\fltmgr.PNF 2007-09-30 19:08 49088 –a—— C:\WINDOWS.2\inf\mdm3cpcm.PNF 2007-09-30 19:08 47584 –a—— C:\WINDOWS.2\inf\mdmcpq2.PNF 2007-09-30 19:08 45656 –a—— C:\WINDOWS.2\inf\epsnscan.PNF 2007-09-30 19:08 4480 –a—— C:\WINDOWS.2\inf\ieaccess.PNF 2007-09-30 19:08 43716 –a—— C:\WINDOWS.2\inf\mdm5674a.PNF 2007-09-30 19:08 43532 –a—— C:\WINDOWS.2\inf\kscaptur.PNF 2007-09-30 19:08 43248 –a—— C:\WINDOWS.2\inf\mdmcom1.PNF 2007-09-30 19:08 43236 –a—— C:\WINDOWS.2\inf\mdmarch.PNF 2007-09-30 19:08 432172 –a—— C:\WINDOWS.2\inf\intl.PNF 2007-09-30 19:08 41676 –a—— C:\WINDOWS.2\inf\dgaport.PNF 2007-09-30 19:08 41084 –a—— C:\WINDOWS.2\inf\hpscan.PNF 2007-09-30 19:08 4092 –a—— C:\WINDOWS.2\inf\drm.PNF 2007-09-30 19:08 40576 –a—— C:\WINDOWS.2\inf\mdmbtmdm.PNF 2007-09-30 19:08 40560 –a—— C:\WINDOWS.2\inf\hdaudio.PNF 2007-09-30 19:08 39404 –a—— C:\WINDOWS.2\inf\devxprop.PNF 2007-09-30 19:08 3932 –a—— C:\WINDOWS.2\inf\legcydrv.PNF 2007-09-30 19:08 37360 –a—— C:\WINDOWS.2\inf\brmfcwia.PNF 2007-09-30 19:08 34220 –a—— C:\WINDOWS.2\inf\mdmatt.PNF 2007-09-30 19:08 33660 –a—— C:\WINDOWS.2\inf\divac.PNF 2007-09-30 19:08 329052 –a—— C:\WINDOWS.2\inf\dwup.PNF 2007-09-30 19:08 3268 –a—— C:\WINDOWS.2\inf\icminst.PNF 2007-09-30 19:08 321056 –a—— C:\WINDOWS.2\inf\defltwk.PNF 2007-09-30 19:08 31020 –a—— C:\WINDOWS.2\inf\corelist.PNF 2007-09-30 19:08 30328 –a—— C:\WINDOWS.2\inf\mchgr.PNF 2007-09-30 19:08 28357 –a—— C:\WINDOWS.2\system32\CatRoot2\dberr.txt 2007-09-30 19:08 28204 –a—— C:\WINDOWS.2\inf\irbus.PNF 2007-09-30 19:08 28012 –a—— C:\WINDOWS.2\inf\dimaps.PNF 2007-09-30 19:08 26684 –a—— C:\WINDOWS.2\inf\mdmaiwa5.PNF 2007-09-30 19:08 26596 –a—— C:\WINDOWS.2\inf\dvd.PNF 2007-09-30 19:08 2656 –a—— C:\WINDOWS.2\inf\fsvgadel.PNF 2007-09-30 19:08 2656 –a—— C:\WINDOWS.2\inf\fsvgaadd.PNF 2007-09-30 19:08 26324 –a—— C:\WINDOWS.2\inf\mdmbw561.PNF 2007-09-30 19:08 26140 –a—— C:\WINDOWS.2\inf\irnsc.PNF 2007-09-30 19:08 25804 –a—— C:\WINDOWS.2\inf\bth.PNF 2007-09-30 19:08 24712 –a—— C:\WINDOWS.2\inf\ksfilter.PNF 2007-09-30 19:08 24476 –a—— C:\WINDOWS.2\inf\mdmcodex.PNF 2007-09-30 19:08 23996 –a—— C:\WINDOWS.2\inf\mdmaiwa.PNF 2007-09-30 19:08 23896 –a—— C:\WINDOWS.2\inf\mdmbsb.PNF 2007-09-30 19:08 23892 –a—— C:\WINDOWS.2\inf\fjtscan.PNF 2007-09-30 19:08 23828 –a—— C:\WINDOWS.2\inf\divasrv.PNF 2007-09-30 19:08 2320 –a—— C:\WINDOWS.2\inf\mdmchipv.PNF 2007-09-30 19:08 23076 –a—— C:\WINDOWS.2\inf\hpojscan.PNF 2007-09-30 19:08 22820 –a—— C:\WINDOWS.2\inf\image.PNF 2007-09-30 19:08 22436 –a—— C:\WINDOWS.2\inf\mdmc26a.PNF 2007-09-30 19:08 222188 –a—— C:\WINDOWS.2\inf\drvindex.PNF 2007-09-30 19:08 22056 –a—— C:\WINDOWS.2\inf\kdk2x0.PNF 2007-09-30 19:08 21920 –a—— C:\WINDOWS.2\inf\dgasync.PNF 2007-09-30 19:08 21808 –a—— C:\WINDOWS.2\inf\cyzport.PNF 2007-09-30 19:08 21520 –a—— C:\WINDOWS.2\inf\ctmaport.PNF 2007-09-30 19:08 21384 –a—— C:\WINDOWS.2\inf\mdmaus.PNF 2007-09-30 19:08 21380 –a—— C:\WINDOWS.2\inf\mdmcrtix.PNF 2007-09-30 19:08 19576 –a—— C:\WINDOWS.2\inf\mdmatm2k.PNF 2007-09-30 19:08 187460 –a—— C:\WINDOWS.2\inf\machine.PNF 2007-09-30 19:08 18608 –a—— C:\WINDOWS.2\inf\lwusbhid.PNF 2007-09-30 19:08 18496 –a—— C:\WINDOWS.2\inf\mdmaiwa3.PNF 2007-09-30 19:08 18100 –a—— C:\WINDOWS.2\inf\i81xnt5.PNF 2007-09-30 19:08 17892 –a—— C:\WINDOWS.2\inf\icam4usb.PNF 2007-09-30 19:08 17588 –a—— C:\WINDOWS.2\inf\mdac.PNF 2007-09-30 19:08 17576 –a—— C:\WINDOWS.2\inf\fp40ext.PNF 2007-09-30 19:08 17492 –a—— C:\WINDOWS.2\inf\communic.PNF 2007-09-30 19:08 17276 –a—— C:\WINDOWS.2\inf\camvid20.PNF 2007-09-30 19:08 17004 –a—— C:\WINDOWS.2\inf\cpu.PNF 2007-09-30 19:08 16428 –a—— C:\WINDOWS.2\inf\mdmarn.PNF 2007-09-30 19:08 16392 –a—— C:\WINDOWS.2\inf\digimps.PNF 2007-09-30 19:08 16036 –a—— C:\WINDOWS.2\inf\camvid30.PNF 2007-09-30 19:08 15536 –a—— C:\WINDOWS.2\inf\mdmar1.PNF 2007-09-30 19:08 15456 –a—— C:\WINDOWS.2\inf\irdasmc.PNF 2007-09-30 19:08 15416 –a—— C:\WINDOWS.2\inf\icwnt5.PNF 2007-09-30 19:08 15320 –a—— C:\WINDOWS.2\inf\brmfport.PNF 2007-09-30 19:08 15100 –a—— C:\WINDOWS.2\inf\games.PNF 2007-09-30 19:08 15044 –a—— C:\WINDOWS.2\inf\mdmadc.PNF 2007-09-30 19:08 14200 –a—— C:\WINDOWS.2\inf\gameport.PNF 2007-09-30 19:08 13960 –a—— C:\WINDOWS.2\inf\lwngmadi.PNF 2007-09-30 19:08 13836 –a—— C:\WINDOWS.2\inf\mdmcpv.PNF 2007-09-30 19:08 13716 –a—— C:\WINDOWS.2\inf\icam5usb.PNF 2007-09-30 19:08 136136 –a—— C:\WINDOWS.2\inf\mdmcpq.PNF 2007-09-30 19:08 134812 –a—— C:\WINDOWS.2\inf\comnt5.PNF 2007-09-30 19:08 13360 –a—— C:\WINDOWS.2\inf\cyyport.PNF 2007-09-30 19:08 13268 –a—— C:\WINDOWS.2\inf\igames.PNF 2007-09-30 19:08 13164 –a—— C:\WINDOWS.2\inf\icam3.PNF 2007-09-30 19:08 12852 –a—— C:\WINDOWS.2\inf\g400.PNF 2007-09-30 19:08 12728 –a—— C:\WINDOWS.2\inf\hidserv.PNF 2007-09-30 19:08 12552 –a—— C:\WINDOWS.2\inf\mdmcdp.PNF 2007-09-30 19:08 12536 –a—— C:\WINDOWS.2\inf\mdmcomp.PNF 2007-09-30 19:08 12152 –a—— C:\WINDOWS.2\inf\disk.PNF 2007-09-30 19:08 11892 –a—— C:\WINDOWS.2\inf\irtos4mo.PNF 2007-09-30 19:08 11884 –a—— C:\WINDOWS.2\inf\g200.PNF 2007-09-30 19:08 11476 –a—— C:\WINDOWS.2\inf\hal.PNF 2007-09-30 19:08 11432 –a—— C:\WINDOWS.2\inf\epsnmfp.PNF 2007-09-30 19:08 11412 –a—— C:\WINDOWS.2\inf\flash.PNF 2007-09-30 19:08 11188 –a—— C:\WINDOWS.2\inf\camdsh20.PNF 2007-09-30 19:08 10976 –a—— C:\WINDOWS.2\inf\mdmaiwat.PNF 2007-09-30 19:08 108948 –a—— C:\WINDOWS.2\inf\input.PNF 2007-09-30 19:08 10744 –a—— C:\WINDOWS.2\inf\kdkscan.PNF 2007-09-30 19:08 10524 –a—— C:\WINDOWS.2\inf\mdmbug3.PNF 2007-09-30 19:08 105216 –a—— C:\WINDOWS.2\inf\ims.PNF 2007-09-30 19:08 105112 –a—— C:\WINDOWS.2\inf\mdmaiwa4.PNF 2007-09-30 19:08 10464 –a—— C:\WINDOWS.2\inf\mdmcommu.PNF 2007-09-30 19:08 10248 –a—— C:\WINDOWS.2\inf\dtcnt5.PNF 2007-09-30 19:08 10220 –a—— C:\WINDOWS.2\inf\kodak.PNF 2007-09-30 19:07 9916 –a—— C:\WINDOWS.2\inf\banshee.PNF 2007-09-30 19:07 9556 –a—— C:\WINDOWS.2\inf\avc.PNF 2007-09-30 19:07 94540 –a—— C:\WINDOWS.2\inf\atiixpag.PNF 2007-09-30 19:07 9428 –a—— C:\WINDOWS.2\inf\atirage3.PNF 2007-09-30 19:07 8940 –a—— C:\WINDOWS.2\inf\brmfcsto.PNF 2007-09-30 19:07 8664 –a—— C:\WINDOWS.2\inf\brmfcumd.PNF 2007-09-30 19:07 8436 –a—— C:\WINDOWS.2\inf\apcompat.PNF 2007-09-30 19:07 8264 –a—— C:\WINDOWS.2\inf\adm_mult.PNF 2007-09-30 19:07 7808 –a—— C:\WINDOWS.2\inf\certclas.PNF 2007-09-30 19:07 7272 –a—— C:\WINDOWS.2\inf\61883.PNF 2007-09-30 19:07 69264 –a—— C:\WINDOWS.2\inf\biosinfo.PNF 2007-09-30 19:07 66240 –a—— C:\WINDOWS.2\inf\brmfcmf.PNF 2007-09-30 19:07 6468 –a—— C:\WINDOWS.2\inf\adm_port.PNF 2007-09-30 19:07 5604 –a—— C:\WINDOWS.2\inf\1394vdbg.PNF 2007-09-30 19:07 48740 –a—— C:\WINDOWS.2\inf\accessor.PNF 2007-09-30 19:07 47536 –a—— C:\WINDOWS.2\inf\brmfcmdm.PNF 2007-09-30 19:07 45840 –a—— C:\WINDOWS.2\inf\atixpwdm.PNF 2007-09-30 19:07 4444 –a—— C:\WINDOWS.2\inf\axant5.PNF 2007-09-30 19:07 43336 –a—— C:\WINDOWS.2\inf\ati1xwdm.PNF 2007-09-30 19:07 41780 –a—— C:\WINDOWS.2\inf\atividin.PNF 2007-09-30 19:07 38652 –a—— C:\WINDOWS.2\inf\atimpab.PNF 2007-09-30 19:07 33368 –a—— C:\WINDOWS.2\inf\avmisdn.PNF 2007-09-30 19:07 3196 –a—— C:\WINDOWS.2\inf\asroc.PNF 2007-09-30 19:07 29332 –a—— C:\WINDOWS.2\inf\atim128.PNF 2007-09-30 19:07 29020 –a—— C:\WINDOWS.2\inf\atiixpaa.PNF 2007-09-30 19:07 28844 –a—— C:\WINDOWS.2\inf\3dfxvs2k.PNF 2007-09-30 19:07 2864 –a—— C:\WINDOWS.2\inf\appmig.PNF 2007-09-30 19:07 223 –a—— C:\WINDOWS.2\system32\wbem\Logs\wbemprox.log 2007-09-30 19:07 20268 –a—— C:\WINDOWS.2\inf\bda.PNF 2007-09-30 19:07 17264 –a—— C:\WINDOWS.2\inf\agtinst.PNF 2007-09-30 19:07 16584 –a—— C:\WINDOWS.2\inf\1394.PNF 2007-09-30 19:07 14780 –a—— C:\WINDOWS.2\inf\au.PNF 2007-09-30 19:07 13636 –a—— C:\WINDOWS.2\inf\asynceqn.PNF 2007-09-30 19:07 13336 –a—— C:\WINDOWS.2\inf\battery.PNF 2007-09-30 19:07 12544 –a—— C:\WINDOWS.2\inf\acpi.PNF 2007-09-30 19:07 1178 –a—— C:\WINDOWS.2\OEWABLog.txt 2007-09-30 19:07 1107 –a—— C:\WINDOWS.2\wmsetup.log 2007-09-30 19:07 109412 –a—— C:\WINDOWS.2\inf\apps.PNF 2007-09-30 19:07 10784 –a—— C:\WINDOWS.2\inf\agp.PNF 2007-09-30 19:07 10292 –a—— C:\WINDOWS.2\inf\acerscan.PNF 2007-09-30 18:22 14542 –a—— C:\WINDOWS.2\Prefetch\WINHLP32.EXE-2A232FF4.pf 2007-09-30 18:20 53380 –a—— C:\WINDOWS.2\Prefetch\REGSVR32.EXE-20B2241F.pf 2007-09-30 18:20 32622 –a—— C:\WINDOWS.2\Prefetch\MSIEXEC.EXE-07B4F41E.pf 2007-09-30 18:20 25374 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-1DFA6F19.pf 2007-09-30 18:20 20964 –a—— C:\WINDOWS.2\Prefetch\SHMGRATE.EXE-20E37878.pf 2007-09-30 18:20 12904 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-19B9E951.pf 2007-09-30 18:20 12002 –a—— C:\WINDOWS.2\Prefetch\TOURSTART.EXE-0A97215D.pf 2007-09-30 18:19 87480 –a—— C:\WINDOWS.2\inf\msmsgs.PNF 2007-09-30 18:19 83744 –a—— C:\WINDOWS.2\inf\ie.PNF 2007-09-30 18:19 78 –a—— C:\WINDOWS.2\system32\Restore\MachineGuid.txt 2007-09-30 18:19 7358 –a—— C:\WINDOWS.2\Prefetch\CSRSS.EXE-218395EF.pf 2007-09-30 18:19 728180 –a—— C:\WINDOWS.2\setuplog.txt 2007-09-30 18:19 72522 –a—— C:\WINDOWS.2\Prefetch\SETUP50.EXE-362FF7C9.pf 2007-09-30 18:19 720896 –a—— C:\WINDOWS.2\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb 2007-09-30 18:19 68460 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-253BB24D.pf 2007-09-30 18:19 67 —hs—- C:\WINDOWS.2\system32\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini 2007-09-30 18:19 61776 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-3B2E1FEE.pf 2007-09-30 18:19 61732 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-23F0D223.pf 2007-09-30 18:19 60198 –a—— C:\WINDOWS.2\Prefetch\WINLOGON.EXE-38025759.pf 2007-09-30 18:19 57108 –a—— C:\WINDOWS.2\inf\wmp.PNF 2007-09-30 18:19 5244 –a—— C:\WINDOWS.2\Prefetch\LSASS.EXE-135E5D47.pf 2007-09-30 18:19 400 –a—— C:\WINDOWS.2\system32\wbem\Logs\replog.log 2007-09-30 18:19 388 –ahs—- C:\WINDOWS.2\system32\Microsoft\Protect\S-1-5-18\Userae9aff6-ba93-4514-9a4b-a09039d36c11 2007-09-30 18:19 35980 –a—— C:\WINDOWS.2\inf\msoe50.PNF 2007-09-30 18:19 32768 –a—— C:\WINDOWS.2\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012007093020071001\index.dat 2007-09-30 18:19 32768 –a—— C:\WINDOWS.2\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat 2007-09-30 18:19 272384 –a—— C:\WINDOWS.2\Installer\19d98.msi 2007-09-30 18:19 27128 –a—— C:\WINDOWS.2\Prefetch\UNREGMP2.EXE-39EB6601.pf 2007-09-30 18:19 24 –ahs—- C:\WINDOWS.2\system32\Microsoft\Protect\S-1-5-18\User\Preferred 2007-09-30 18:19 21384 –a—— C:\WINDOWS.2\inf\wab50.PNF 2007-09-30 18:19 17242 –a—— C:\WINDOWS.2\Prefetch\MSOOBE.EXE-1359AE6E.pf 2007-09-30 18:19 166912 -ra—— C:\WINDOWS.2\Installer\{7CCEBC24-62DB-4280-A8EC-BFA49F167920}\places.exe 2007-09-30 18:19 16664 –a—— C:\WINDOWS.2\inf\wordpad.PNF 2007-09-30 18:19 16384 –a—— C:\WINDOWS.2\system32\config\systemprofile\Cookies\index.dat 2007-09-30 18:19 15546 –a—— C:\WINDOWS.2\Prefetch\ALG.EXE-1A8CF709.pf 2007-09-30 18:19 14952 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-107ED30A.pf 2007-09-30 18:19 14734 –a—— C:\WINDOWS.2\Prefetch\RUNDLL32.EXE-11FB7826.pf 2007-09-30 18:19 131072 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore\Logs\res2.log 2007-09-30 18:19 131072 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore\Logs\res1.log 2007-09-30 18:19 12787 –a—— C:\WINDOWS.2\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML 2007-09-30 18:19 11330 –a—— C:\WINDOWS.2\Prefetch\SPOOLSV.EXE-0059DE17.pf 2007-09-30 18:19 113 —hs—- C:\WINDOWS.2\system32\config\systemprofile\Local Settings\History\History.IE5\desktop.ini 2007-09-30 18:19 113 —hs—- C:\WINDOWS.2\system32\config\systemprofile\Local Settings\History\desktop.ini 2007-09-30 18:19 1051072 –a—— C:\WINDOWS.2\inf\LAYOUT.PNF 2007-09-30 18:19 1018 –a—— C:\WINDOWS.2\Prefetch\SERVICES.EXE-2A065941.pf 2007-09-30 18:18 90296 –a—— C:\WINDOWS.2\system32\FNTCACHE.DAT 2007-09-30 18:18 8192 –a—— C:\WINDOWS.2\REGLOCS.OLD 2007-09-30 18:17 9043968 –a—— C:\WINDOWS.2\repair\software 2007-09-30 18:17 885 –a—— C:\WINDOWS.2\ocmsn.log 2007-09-30 18:17 808 –a—— C:\WINDOWS.2\system32\$winnt$.inf 2007-09-30 18:17 8030 –a—— C:\WINDOWS.2\ntdtcsetup.log 2007-09-30 18:17 48873 –a—— C:\WINDOWS.2\iis6.log 2007-09-30 18:17 4512 –a—— C:\WINDOWS.2\imsins.log 2007-09-30 18:17 32768 –a—— C:\WINDOWS.2\system32\MsDtc\Trace\dtctrace.log 2007-09-30 18:17 32768 –a—— C:\WINDOWS.2\repair\security 2007-09-30 18:17 24576 –a—— C:\WINDOWS.2\repair\sam 2007-09-30 18:17 237568 –a—— C:\WINDOWS.2\repair\default 2007-09-30 18:17 16055 –a—— C:\WINDOWS.2\comsetup.log 2007-09-30 18:17 147834 –a—— C:\WINDOWS.2\setupact.log 2007-09-30 18:17 1252 –a—— C:\WINDOWS.2\tabletoc.log 2007-09-30 18:17 10254 –a—— C:\WINDOWS.2\tsoc.log 2007-09-30 18:16 1462272 –a—— C:\WINDOWS.2\repair\system 2007-09-30 18:14 84 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini 2007-09-30 18:14 84 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini 2007-09-30 18:14 804 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk 2007-09-30 18:14 792 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Windows Media Player.lnk 2007-09-30 18:14 780812 –a—— C:\WINDOWS.2\security\templates\setup security.inf 2007-09-30 18:14 780812 –a—— C:\WINDOWS.2\repair\secsetup.inf 2007-09-30 18:14 482 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini 2007-09-30 18:14 477 –a—— C:\WINDOWS.2\win.ini 2007-09-30 18:14 419272 –a—— C:\WINDOWS.2\security\logs\scesetup.log 2007-09-30 18:14 386 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk 2007-09-30 18:14 348 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini 2007-09-30 18:14 316640 –a—— C:\WINDOWS.2\WMSysPr9.prx 2007-09-30 18:14 3153920 –a—— C:\WINDOWS.2\security\Database\secedit.sdb 2007-09-30 18:14 2718 –a—— C:\WINDOWS.2\security\logs\backup.log 2007-09-30 18:14 2577 –a—— C:\WINDOWS.2\system32\CONFIG.NT 2007-09-30 18:14 2577 –a—— C:\WINDOWS.2\repair\config.nt 2007-09-30 18:14 237568 –ah—– C:\WINDOWS.2\repair\ntuser.dat 2007-09-30 18:14 23392 –a—— C:\WINDOWS.2\system32\nscompat.tlb 2007-09-30 18:14 16832 –a—— C:\WINDOWS.2\system32\amcompat.tlb 2007-09-30 18:14 1611 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Remote Assistance.lnk 2007-09-30 18:14 1567 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Command Prompt.lnk 2007-09-30 18:14 1551 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk 2007-09-30 18:14 1544 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk 2007-09-30 18:14 1539 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Tour Windows XP.lnk 2007-09-30 18:14 1537 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk 2007-09-30 18:14 1531 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Synchronize.lnk 2007-09-30 18:14 1531 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Notepad.lnk 2007-09-30 18:14 1513 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk 2007-09-30 18:14 148 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\desktop.ini 2007-09-30 18:14 1048576 –a—— C:\WINDOWS.2\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{6F48B5CB-D225-4A13-94C0-D677FDD52334}.crmlog 2007-09-30 18:14 0 –a—— C:\WINDOWS.2\control.ini 2007-09-30 18:13 994 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif 2007-09-30 18:13 99 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\info.gif 2007-09-30 18:13 9506 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.js 2007-09-30 18:13 9270 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp 2007-09-30 18:13 9270 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp 2007-09-30 18:13 9270 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp 2007-09-30 18:13 9270 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp 2007-09-30 18:13 9270 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp 2007-09-30 18:13 9264 –a—— C:\WINDOWS.2\pchealth\helpctr\System\DVDUpgrd\stripe.jpg 2007-09-30 18:13 9174 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\Context.htm 2007-09-30 18:13 910 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif 2007-09-30 18:13 8969 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm 2007-09-30 18:13 895 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\feedback.gif 2007-09-30 18:13 88746 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\3DC224B74439A2DE4391F2B09942BE48.mof 2007-09-30 18:13 8844 –a—— C:\WINDOWS.2\pchealth\helpctr\System\scripts\HomePage__SERVER.js 2007-09-30 18:13 8824 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\C22914F79FA02290AC44C12265332686.mof 2007-09-30 18:13 880 –a—— C:\WINDOWS.2\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm 2007-09-30 18:13 861 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif 2007-09-30 18:13 8522 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\Favorites.htm 2007-09-30 18:13 8509 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif 2007-09-30 18:13 850 –a—— C:\WINDOWS.2\pchealth\helpctr\System\dialogs\DlgLib.js 2007-09-30 18:13 8494 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\Channels.htm 2007-09-30 18:13 845 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif 2007-09-30 18:13 8445 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm 2007-09-30 18:13 838 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif 2007-09-30 18:13 834 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif 2007-09-30 18:13 8095 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm 2007-09-30 18:13 80856 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\ding.wav 2007-09-30 18:13 793 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif 2007-09-30 18:13 789 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif 2007-09-30 18:13 789 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif 2007-09-30 18:13 785 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif 2007-09-30 18:13 784 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif 2007-09-30 18:13 782 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif 2007-09-30 18:13 781 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css 2007-09-30 18:13 781 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif 2007-09-30 18:13 778 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif 2007-09-30 18:13 777 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif 2007-09-30 18:13 775 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif 2007-09-30 18:13 775 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\offline.htm 2007-09-30 18:13 7737 –a—— C:\WINDOWS.2\pchealth\helpctr\System\HomePage__DESKTOP.htm 2007-09-30 18:13 773 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif 2007-09-30 18:13 7662 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm 2007-09-30 18:13 762 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif 2007-09-30 18:13 76 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\wrapperhelp.gif 2007-09-30 18:13 7523 –a—— C:\WINDOWS.2\pchealth\helpctr\System\dialogs\Print.dlg 2007-09-30 18:13 750 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif 2007-09-30 18:13 75 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif 2007-09-30 18:13 741 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif 2007-09-30 18:13 7355 –a—— C:\WINDOWS.2\pchealth\helpctr\System\HomePage__SERVER.htm 2007-09-30 18:13 734 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie_chart.gif 2007-09-30 18:13 727 -r-hs—- C:\WINDOWS.2\pchealth\helpctr\PackageStore\package_1.cab 2007-09-30 18:13 7140 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm 2007-09-30 18:13 714 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\firstpage.htm 2007-09-30 18:13 713 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif 2007-09-30 18:13 713 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\HHWrapper.htm 2007-09-30 18:13 7098 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml 2007-09-30 18:13 7066 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif 2007-09-30 18:13 70 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\flyout_arrow.gif 2007-09-30 18:13 694 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif 2007-09-30 18:13 692 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif 2007-09-30 18:13 690 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif 2007-09-30 18:13 682 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif 2007-09-30 18:13 682 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif 2007-09-30 18:13 677 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg 2007-09-30 18:13 674 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif 2007-09-30 18:13 674 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Centers\blue_arrow.gif 2007-09-30 18:13 67 –ahs—- C:\WINDOWS.2\Fonts\desktop.ini 2007-09-30 18:13 67 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif 2007-09-30 18:13 67 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif 2007-09-30 18:13 6552 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm 2007-09-30 18:13 6520 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\Subsite.htm 2007-09-30 18:13 640 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif 2007-09-30 18:13 630 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\icon_tutorials_12x.bmp 2007-09-30 18:13 630 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\icon_tours_12x.bmp 2007-09-30 18:13 630 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp 2007-09-30 18:13 630 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\icon_newwindow_12x.bmp 2007-09-30 18:13 630 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\icon_blank_12x.bmp 2007-09-30 18:13 630 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\icon_articles_12x.bmp 2007-09-30 18:13 627 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm 2007-09-30 18:13 6150 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Headlines.htm 2007-09-30 18:13 608 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif 2007-09-30 18:13 608 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\blank.htm 2007-09-30 18:13 600 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\warning.gif 2007-09-30 18:13 5980 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm 2007-09-30 18:13 59 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif 2007-09-30 18:13 582 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\msinfohss.css 2007-09-30 18:13 5812 –a—— C:\WINDOWS.2\pchealth\helpctr\System\HelpCtr.mmf 2007-09-30 18:13 569 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\windows.gif 2007-09-30 18:13 56777 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\RSoP.js 2007-09-30 18:13 56540 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\RSoP.htm 2007-09-30 18:13 55709 –a—— C:\WINDOWS.2\pchealth\helpctr\System\NetDiag\dglogs.htm 2007-09-30 18:13 5547 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\Topics.htm 2007-09-30 18:13 5403 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm 2007-09-30 18:13 5369 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\History.htm 2007-09-30 18:13 53542 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png 2007-09-30 18:13 5207 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm 2007-09-30 18:13 51 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif 2007-09-30 18:13 498 –a—— C:\WINDOWS.2\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD 2007-09-30 18:13 492 –a—— C:\WINDOWS.2\pchealth\helpctr\System\css\Layout.css 2007-09-30 18:13 4805 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm 2007-09-30 18:13 4797 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm 2007-09-30 18:13 4764 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\MiniNavBar.htm 2007-09-30 18:13 4756 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif 2007-09-30 18:13 466 –a—— C:\WINDOWS.2\pchealth\UploadLB\Config\config.xml 2007-09-30 18:13 4609 –a—— C:\WINDOWS.2\pchealth\helpctr\System\scripts\HomePage__SHARED.js 2007-09-30 18:13 4553 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\ShareHelp.htm 2007-09-30 18:13 4437 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm 2007-09-30 18:13 4418 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\Options.htm 2007-09-30 18:13 4374 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm 2007-09-30 18:13 43111 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\RemoteHelp.htm 2007-09-30 18:13 43 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif 2007-09-30 18:13 43 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\spacer.gif 2007-09-30 18:13 4249 –a—— C:\WINDOWS.2\ODBCINST.INI 2007-09-30 18:13 4150 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysinfomain.htm 2007-09-30 18:13 4132 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm 2007-09-30 18:13 4113 –a—— C:\WINDOWS.2\pchealth\helpctr\System\UpdateCtr\AboutWU.htm 2007-09-30 18:13 410 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif 2007-09-30 18:13 404 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\system.gif 2007-09-30 18:13 3907 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp 2007-09-30 18:13 3898 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp 2007-09-30 18:13 3873 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\isupport.htm 2007-09-30 18:13 387 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif 2007-09-30 18:13 384 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif 2007-09-30 18:13 382 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif 2007-09-30 18:13 380 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif 2007-09-30 18:13 379 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif 2007-09-30 18:13 373 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif 2007-09-30 18:13 371 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\msinfo.xml 2007-09-30 18:13 360054 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\watermark_300x.bmp 2007-09-30 18:13 353 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm 2007-09-30 18:13 3493 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm 2007-09-30 18:13 3465 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\Options.htm 2007-09-30 18:13 346 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm 2007-09-30 18:13 3445 –a—— C:\WINDOWS.2\pchealth\helpctr\System\scripts\HomePage__DESKTOP.js 2007-09-30 18:13 341 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm 2007-09-30 18:13 3332 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm 2007-09-30 18:13 3210 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm 2007-09-30 18:13 321 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm 2007-09-30 18:13 321 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif 2007-09-30 18:13 3172 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.xml 2007-09-30 18:13 3169 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif 2007-09-30 18:13 3155 –a—— C:\WINDOWS.2\pchealth\helpctr\System\CompatCtr\AboutCompat.htm 2007-09-30 18:13 311 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif 2007-09-30 18:13 30494 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm 2007-09-30 18:13 2981 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm 2007-09-30 18:13 2954 –a—— C:\WINDOWS.2\pchealth\helpctr\System\scripts\wrapperparam.js 2007-09-30 18:13 2911 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\subpanels\Index.htm 2007-09-30 18:13 286 –a—— C:\WINDOWS.2\Debug\blastcln.log 2007-09-30 18:13 2843 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm 2007-09-30 18:13 283990 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\B21778E92190E49514AA39E8E2E49FD6.mof 2007-09-30 18:13 2818 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif 2007-09-30 18:13 2801 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\progbar.gif 2007-09-30 18:13 2722 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm 2007-09-30 18:13 2670 –a—— C:\WINDOWS.2\pchealth\helpctr\Config\SAFStore.xml 2007-09-30 18:13 2654 –a—— C:\WINDOWS.2\pchealth\helpctr\System\NetDiag\dglogshelp.htm 2007-09-30 18:13 26520 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\loc_strings.xml 2007-09-30 18:13 2630 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm 2007-09-30 18:13 262 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\usb.gif 2007-09-30 18:13 2588 –a—— C:\WINDOWS.2\pchealth\helpctr\System\CompatCtr\LearnCompat.htm 2007-09-30 18:13 2570 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\EA818C785720E55968CF38664ED3A1D6.mof 2007-09-30 18:13 257 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\cd.gif 2007-09-30 18:13 254 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif 2007-09-30 18:13 2537 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysDiskTS.htm 2007-09-30 18:13 2518 –a—— C:\WINDOWS.2\pchealth\helpctr\System\UpdateCtr\learnWU.htm 2007-09-30 18:13 2513 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\NavBar.xml 2007-09-30 18:13 2501 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\msinfo.htm 2007-09-30 18:13 2500 –a—— C:\WINDOWS.2\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm 2007-09-30 18:13 244933 -r-hs—- C:\WINDOWS.2\pchealth\helpctr\PackageStore\package_3.cab 2007-09-30 18:13 2442 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css 2007-09-30 18:13 2442 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Css\rc.css 2007-09-30 18:13 2435 –a—— C:\WINDOWS.2\pchealth\helpctr\Config\dataspec.xml 2007-09-30 18:13 2368 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\windows_newsgroups.htm 2007-09-30 18:13 2367 –a—— C:\WINDOWS.2\pchealth\helpctr\System\rc\rcRequest.htm 2007-09-30 18:13 2358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\32x32\logo.bmp 2007-09-30 18:13 2358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp 2007-09-30 18:13 2358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp 2007-09-30 18:13 2358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp 2007-09-30 18:13 2358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp 2007-09-30 18:13 2358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp 2007-09-30 18:13 2352 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\about_support.htm 2007-09-30 18:13 234 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif 2007-09-30 18:13 234 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif 2007-09-30 18:13 2333 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm 2007-09-30 18:13 232 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif 2007-09-30 18:13 2317 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm 2007-09-30 18:13 2317 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm 2007-09-30 18:13 227 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif 2007-09-30 18:13 227 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif 2007-09-30 18:13 22512 –a—— C:\WINDOWS.2\Registration\R000000000007.clb 2007-09-30 18:13 22512 –a—— C:\WINDOWS.2\Registration\R000000000006.clb 2007-09-30 18:13 219 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif 2007-09-30 18:13 219 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif 2007-09-30 18:13 2151 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js 2007-09-30 18:13 2151 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\constants.js 2007-09-30 18:13 213 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif 2007-09-30 18:13 2086 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm 2007-09-30 18:13 20832 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\NavBar.htm 2007-09-30 18:13 207 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Expando\helpdoc.gif 2007-09-30 18:13 2059 –a—— C:\WINDOWS.2\pchealth\helpctr\System\UpdateCtr\Learn.htm 2007-09-30 18:13 2028 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\notfound.htm 2007-09-30 18:13 20083 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysHealthInfo.js 2007-09-30 18:13 1990 –a—— C:\WINDOWS.2\pchealth\helpctr\System\panels\MiniNavBar.xml 2007-09-30 18:13 19854 -r-hs—- C:\WINDOWS.2\pchealth\helpctr\PackageStore\package_2.cab 2007-09-30 18:13 1864 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm 2007-09-30 18:13 1839 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Centers\IULogo.gif 2007-09-30 18:13 1816 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\keywordhelp.htm 2007-09-30 18:13 181 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif 2007-09-30 18:13 180 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif 2007-09-30 18:13 1763 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\searchblurb.htm 2007-09-30 18:13 1740 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\ftshelp.htm 2007-09-30 18:13 1728 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\redirect.htm 2007-09-30 18:13 1689 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\unreachable.htm 2007-09-30 18:13 1679 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\options.htm 2007-09-30 18:13 1663 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\badurl.htm 2007-09-30 18:13 1656 –a—— C:\WINDOWS.2\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm 2007-09-30 18:13 1655 –a—— C:\WINDOWS.2\pchealth\helpctr\System\errors\indexfirstlevel.htm 2007-09-30 18:13 1633 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm 2007-09-30 18:13 1633 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm 2007-09-30 18:13 162 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\card.gif 2007-09-30 18:13 159 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif 2007-09-30 18:13 159 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\floppy.gif 2007-09-30 18:13 1557 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\error.gif 2007-09-30 18:13 15550 –a—— C:\WINDOWS.2\pchealth\helpctr\Config\sereg.xml 2007-09-30 18:13 1525 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Centers\Uabrand.gif 2007-09-30 18:13 1521 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\info.gif 2007-09-30 18:13 1498 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\up.bmp 2007-09-30 18:13 1498 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\down.bmp 2007-09-30 18:13 1477 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\Index.htm 2007-09-30 18:13 14765 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm 2007-09-30 18:13 1473 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif 2007-09-30 18:13 1466 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\warning.gif 2007-09-30 18:13 14603 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif 2007-09-30 18:13 1453 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\Favorites.htm 2007-09-30 18:13 145 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\check.gif 2007-09-30 18:13 1447 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif 2007-09-30 18:13 1446 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif 2007-09-30 18:13 1446 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif 2007-09-30 18:13 1446 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif 2007-09-30 18:13 1445 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif 2007-09-30 18:13 1445 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif 2007-09-30 18:13 1443 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif 2007-09-30 18:13 1442 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif 2007-09-30 18:13 1442 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif 2007-09-30 18:13 1441 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif 2007-09-30 18:13 1435 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif 2007-09-30 18:13 1435 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif 2007-09-30 18:13 1430 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif 2007-09-30 18:13 1428 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif 2007-09-30 18:13 1426 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif 2007-09-30 18:13 1423 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif 2007-09-30 18:13 1421 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif 2007-09-30 18:13 1413 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif 2007-09-30 18:13 1412 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif 2007-09-30 18:13 1411 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\tools.htm 2007-09-30 18:13 141 –a—— C:\WINDOWS.2\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt 2007-09-30 18:13 139 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif 2007-09-30 18:13 139 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\drive.gif 2007-09-30 18:13 139 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Expando\collapsed.gif 2007-09-30 18:13 1386 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\History.htm 2007-09-30 18:13 1383 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\get_conn.gif 2007-09-30 18:13 1383 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Centers\Connect.gif 2007-09-30 18:13 137 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif 2007-09-30 18:13 1369 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css 2007-09-30 18:13 1369 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Css\RAChat.css 2007-09-30 18:13 136 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\printer.gif 2007-09-30 18:13 136 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Expando\endnode.gif 2007-09-30 18:13 1358 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif 2007-09-30 18:13 13556 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm 2007-09-30 18:13 135 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\gears.gif 2007-09-30 18:13 135 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\Expando\expanded.gif 2007-09-30 18:13 1345 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\47x24pie_chart.gif 2007-09-30 18:13 13433 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm 2007-09-30 18:13 1340 –a—— C:\WINDOWS.2\pchealth\helpctr\System\CompatCtr\CompatOffline.htm 2007-09-30 18:13 1323 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm 2007-09-30 18:13 1308 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css 2007-09-30 18:13 1308 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Css\rcbuddy.css 2007-09-30 18:13 13050 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm 2007-09-30 18:13 1290 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm 2007-09-30 18:13 1290 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm 2007-09-30 18:13 129 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\monitor.gif 2007-09-30 18:13 1207 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif 2007-09-30 18:13 1199 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif 2007-09-30 18:13 1196 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif 2007-09-30 18:13 1196 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif 2007-09-30 18:13 1194 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif 2007-09-30 18:13 1190 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif 2007-09-30 18:13 1190 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif 2007-09-30 18:13 118 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\alert.gif 2007-09-30 18:13 1175 –a—— C:\WINDOWS.2\pchealth\helpctr\System\css\Behaviors.css 2007-09-30 18:13 114 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif 2007-09-30 18:13 114 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif 2007-09-30 18:13 1135 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif 2007-09-30 18:13 1135 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif 2007-09-30 18:13 1132 –a—— C:\WINDOWS.2\pchealth\helpctr\System\UpdateCtr\updatecenter.htm 2007-09-30 18:13 113 –a—— C:\WINDOWS.2\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.bak 2007-09-30 18:13 111 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif 2007-09-30 18:13 1094 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif 2007-09-30 18:13 10912 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml 2007-09-30 18:13 1078 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\update.bmp 2007-09-30 18:13 1078 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\tools.bmp 2007-09-30 18:13 1078 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\support.bmp 2007-09-30 18:13 1078 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\errmsg.bmp 2007-09-30 18:13 1078 –a—— C:\WINDOWS.2\pchealth\helpctr\System\images\16x16\compat.bmp 2007-09-30 18:13 10755 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml 2007-09-30 18:13 1074 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif 2007-09-30 18:13 107 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif 2007-09-30 18:13 107 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif 2007-09-30 18:13 107 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif 2007-09-30 18:13 107 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif 2007-09-30 18:13 107 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\error.gif 2007-09-30 18:13 106 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif 2007-09-30 18:13 106 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif 2007-09-30 18:13 1047 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif 2007-09-30 18:13 1041 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif 2007-09-30 18:13 10376 –a—— C:\WINDOWS.2\pchealth\helpctr\System\blurbs\searchtips.htm 2007-09-30 18:13 10312 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm 2007-09-30 18:13 10301 –a—— C:\WINDOWS.2\system32\wbem\Logs\mofcomp.log 2007-09-30 18:13 1024 –a—— C:\WINDOWS.2\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif 2007-09-30 18:13 102 –a—— C:\WINDOWS.2\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif 2007-09-30 18:13 102 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\graphics\chip.gif 2007-09-30 18:13 10136 –a—— C:\WINDOWS.2\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm 2007-09-30 18:12 749 -rah—– C:\WINDOWS.2\WindowsShell.Manifest 2007-09-30 18:12 749 -rah—– C:\WINDOWS.2\system32\wuaucpl.cpl.manifest 2007-09-30 18:12 749 -rah—– C:\WINDOWS.2\system32\sapi.cpl.manifest 2007-09-30 18:12 749 -rah—– C:\WINDOWS.2\system32\nwc.cpl.manifest 2007-09-30 18:12 749 -rah—– C:\WINDOWS.2\system32\ncpa.cpl.manifest 2007-09-30 18:12 749 -rah—– C:\WINDOWS.2\system32\cdplayer.exe.manifest 2007-09-30 18:12 65 —h—– C:\WINDOWS.2\Offline Web Pages\desktop.ini 2007-09-30 18:12 65 —h—– C:\WINDOWS.2\Downloaded Program Files\desktop.ini 2007-09-30 18:12 488 -rah—– C:\WINDOWS.2\system32\WindowsLogon.manifest 2007-09-30 18:12 488 -rah—– C:\WINDOWS.2\system32\logonui.exe.manifest 2007-09-30 18:12 234553 –a—— C:\WINDOWS.2\repair\setup.log 2007-09-30 18:12 181 –ahs—- C:\WINDOWS.2\system32\config\systemprofile\SendTo\desktop.ini 2007-09-30 18:12 1499 –a—— C:\WINDOWS.2\system32\config\systemprofile\Start Menu\Programs\Accessories\Windows Explorer.lnk 2007-09-30 18:12 1440054 –a—— C:\WINDOWS.2\Web\Wallpaper\Bliss.bmp 2007-09-30 18:12 0 –a—— C:\WINDOWS.2\system32\config\systemprofile\SendTo\Mail Recipient.MAPIMail 2007-09-30 18:12 0 –a—— C:\WINDOWS.2\system32\config\systemprofile\SendTo\Desktop (create shortcut).DeskLink 2007-09-30 18:12 0 –a—— C:\WINDOWS.2\system32\config\systemprofile\SendTo\Compressed (zipped) Folder.ZFSendToTarget 2007-09-30 18:11 99860 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\3BE6F0B67C4187E30403ADED77545633.mof 2007-09-30 18:11 9854 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\32424847054AD7D95B4998581E615CF9.mof 2007-09-30 18:11 9598 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\F89A3A0BD1D58BBA5CAF503F0A6B5C54.mof 2007-09-30 18:11 871 –a—— C:\WINDOWS.2\msgsocm.log 2007-09-30 18:11 8674 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\FB186F32B3C57D02407CC55F2A0F1C9F.mof 2007-09-30 18:11 8320 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\2E3CABA6E199D153DA8E54EB8F0A6EE1.mof 2007-09-30 18:11 7698 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\D776FC53CF9B4F5013C64543BDF0E281.mof 2007-09-30 18:11 6604 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\3C2AE0B8EFB99E811204142F86DA5295.mof 2007-09-30 18:11 61318 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\B7B219B58BD51E134BF2ECD0E39E36BB.mof 2007-09-30 18:11 58856 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\8657A3F6B8C2CD8EE87E9CFDDE548688.mof 2007-09-30 18:11 58206 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\B7E36814AFD9DA929DF63DC3603E1824.mof 2007-09-30 18:11 5059 –a—— C:\WINDOWS.2\system32\wbem\Logs\setup.log 2007-09-30 18:11 5010 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\9DFBBA73AFBB548DD2556CDB2180C46F.mof 2007-09-30 18:11 46482 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\9D1070BBF737FCBDC1916A49B1527E.mof 2007-09-30 18:11 4500 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\4B58FFF4B1514B83F3993AD481219B3D.mof 2007-09-30 18:11 4470 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\BD223E88D163E523C24D8F95691CCC20.mof 2007-09-30 18:11 44270 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\5CE8CF4B52F434139DB8671FF3B2F467.mof 2007-09-30 18:11 43186 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover3F136133C6F5485C81821152B817279.mof 2007-09-30 18:11 4194304 ——— C:\WINDOWS.2\system32\MsDtc\MSDTC.LOG 2007-09-30 18:11 41512 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\CC02CB38C76A69904C5AD15B697F874C.mof 2007-09-30 18:11 4104 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\86E951CD9F6E20FA306B22493236DEAC.mof 2007-09-30 18:11 4096 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\C0A39DADDEEFA74E06D9E328E6096420.mof 2007-09-30 18:11 38688 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\CA01EA6E7217C3DB715E9E7EC6DAD667.mof 2007-09-30 18:11 37 –a—— C:\WINDOWS.2\vbaddin.ini 2007-09-30 18:11 36 –a—— C:\WINDOWS.2\vb.ini 2007-09-30 18:11 33634 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\C238FA335B0243EAF0CD40D72AB28C3A.mof 2007-09-30 18:11 32776 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\73BF8DC92B7C189BFC0FAE94B28B58F9.mof 2007-09-30 18:11 3200 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\3DD16519F3F09A31D3EBFFBD5519BAC0.mof 2007-09-30 18:11 3186 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\2D35BE472532B24735B963957B44431F.mof 2007-09-30 18:11 29866 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\BEFFE2F6194DA2979CC28C463EF17ED2.mof 2007-09-30 18:11 29390 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\7F55F3E7DA3134BF219D93BF0629DE7D.mof 2007-09-30 18:11 28956 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\10AD210DFB78862B175DCE8C575FCDBF.mof 2007-09-30 18:11 2790 –a—— C:\WINDOWS.2\netfxocm.log 2007-09-30 18:11 2774338 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\B2553A7308C0658D36EB4C3889D16CAD.mof 2007-09-30 18:11 259 –a—— C:\WINDOWS.2\system32\wbem\Logs\FrameWork.log 2007-09-30 18:11 23802 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\D9BB481ADFAC9FFFCA34F0B0BCD58FB9.mof 2007-09-30 18:11 21640 –a—— C:\WINDOWS.2\system32\emptyregdb.dat 2007-09-30 18:11 20648 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\B6A3B99B3766F63624A1697A14E945C8.mof 2007-09-30 18:11 1960510 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\B19446A0E1A050FED810024736E79C23.mof 2007-09-30 18:11 19466 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\49D4E9FB1794F1024B5DAAE228EB2556.mof 2007-09-30 18:11 19376 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\E0FE10AB975E91A6196D09FEABBD4980.mof 2007-09-30 18:11 18504 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\1B0C4F7C171E9527734890C0578C9649.mof 2007-09-30 18:11 17156 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\EC75690AD1343E86CDC98AF48F3F9BF2.mof 2007-09-30 18:11 16918 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\97493D337904EACBCA7EE0FBF4F5DC60.mof 2007-09-30 18:11 165530 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\8F81DE37239AC98C1AD2D9091B437729.mof 2007-09-30 18:11 16270 –a—— C:\WINDOWS.2\ocgen.log 2007-09-30 18:11 15692 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover4490D616AE9FEDF810700457DBDAA73.mof 2007-09-30 18:11 1487 –a—— C:\WINDOWS.2\MedCtrOC.log 2007-09-30 18:11 14036 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\11EA5DF2FF1E1FA348C10AB281B13534.mof 2007-09-30 18:11 13990 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\A078233CFE707D59ABC4927E0BE0AB71.mof 2007-09-30 18:11 13452 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\F751DA6301EB00E3F574695229E10FD3.mof 2007-09-30 18:11 133 –a—— C:\WINDOWS.2\DtcInstall.log 2007-09-30 18:11 130468 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\D955A3000104592AE7039A1FC9DDF84A.mof 2007-09-30 18:11 129410 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\2ADB767B955F6935B5C6FAE03A98BBF1.mof 2007-09-30 18:11 12822 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\4C37ACE3FA06F7140B6949013DCABA67.mof 2007-09-30 18:11 12260 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\93E4C340CC1084E4966A59A077628E4A.mof 2007-09-30 18:11 11571 –a—— C:\WINDOWS.2\FaxSetup.log 2007-09-30 18:11 11158 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\BA21A2A51C8DBAD10E0148C9342ACA0B.mof 2007-09-30 18:11 108552 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\5460EAF6B87090582D232048A69C2C15.mof 2007-09-30 18:11 10852 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\1C46CDEA683342918C45C2F7502A7DC8.mof 2007-09-30 18:11 10788 –a—— C:\WINDOWS.2\system32\wbem\AutoRecover\3E14AD815500AF419B11740747AD3EF2.mof 2007-09-30 18:11 1022 –a—— C:\WINDOWS.2\sessmgr.setup.log 2007-09-30 18:10 2557 –a—— C:\WINDOWS.2\Debug\NetSetup.LOG 2007-09-30 18:10 200 –a—— C:\WINDOWS.2\cmsetacl.log 2007-09-30 18:10 10516 –a—— C:\WINDOWS.2\msmqinst.log 2007-05-22 19:37 87040 –a—— C:\WINDOWS.2\catchme.exe 2007-04-25 02:52 224382 -rahs—- C:\WINDOWS.2\winhelp32.exe.exe 2007-04-25 02:52 224382 -rahs—- C:\WINDOWS.2\Media\svchost.exe 2007-04-25 02:52 224382 –a–c— C:\WINDOWS.2\system32\dllcache\dllcache.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc \x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc .exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc .exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\WinSxS.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\Policies\Policies.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\Policies.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\Manifests\Manifests.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\Manifests.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\InstallTemp\InstallTemp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS\InstallTemp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WinSxS.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\WINDOWS.2.exe

prieko

Post #45October 8, 2007, 2:39 PM UTC last edited October 8, 2007, 2:49 PM UTC

2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Web\Web.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Web\Wallpaper\Wallpaper.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Web\Wallpaper.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Web\printers\printers.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Web\printers.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Web.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\twain_32\twain_32.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\twain_32.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\temp\temp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\temp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Tasks\Tasks.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Tasks.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\xircom\xircom.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\xircom.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\wins\wins.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\wins.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\wbem\wbem.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\wbem.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\usmt\usmt.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\usmt.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\system32.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\spool\spool.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\spool.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\ShellExt\ShellExt.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\ShellExt.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Setup\Setup.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Restore\Restore.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Restore.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\ras\ras.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\ras.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\PreInstall\PreInstall.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\PreInstall.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\oobe\oobe.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\oobe.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\npp\npp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\npp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\mui\mui.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\mui.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\MsDtc\MsDtc.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Microsoft\Microsoft.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Microsoft.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Macromed\Macromed.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Macromed.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\inetsrv\inetsrv.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\inetsrv.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\IME\IME.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\IME.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\icsxml\icsxml.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\icsxml.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\ias\ias.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\ias.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\export\export.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\export.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\en\en.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\en.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\drivers\drivers.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\drivers.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\dllcache.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\DirectX\DirectX.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\DirectX.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\dhcp\dhcp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\dhcp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\config\config.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\config.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Com\Com.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\Com.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\CatRoot2\CatRoot2.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\CatRoot2.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\CatRoot\CatRoot.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\CatRoot.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\3com_dmi\3com_dmi.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\3com_dmi.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\3076\3076.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\3076.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\2052\2052.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\2052.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1054\1054.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1054.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1042\1042.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1042.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1041\1041.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1041.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1037\1037.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1037.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1033\1033.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1033.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1031\1031.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1031.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1028\1028.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1028.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1025\1025.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32\1025.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system32.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system\system.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\system.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\srchasst\srchasst.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\srchasst\mui\mui.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\srchasst\mui.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\srchasst\chars\chars.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\srchasst\chars.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\srchasst.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\SoftwareDistribution.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\SelfUpdate\SelfUpdate.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\SelfUpdate.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\Download\Download.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\Download.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore\DataStore.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution\DataStore.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\SoftwareDistribution.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\templates\templates.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\templates.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\security.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\logs\logs.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\logs.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\Database\Database.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security\Database.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\security.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Resources\Themes\Themes.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Resources\Themes.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Resources\Resources.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Resources.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\repair\repair.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\repair.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Registration\Registration.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Registration\CRMLog\CRMLog.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Registration\CRMLog.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Registration.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Provisioning\Schemas\Schemas.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Provisioning\Schemas.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Provisioning\Provisioning.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Provisioning.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Prefetch\Prefetch.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Prefetch.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\PIF\PIF.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\PIF.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\PeerNet\PeerNet.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\PeerNet.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\pchealth\UploadLB\UploadLB.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\pchealth\UploadLB.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\pchealth\pchealth.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\pchealth\helpctr\helpctr.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\pchealth\helpctr.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\pchealth.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Offline Web Pages\Offline Web Pages.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Offline Web Pages.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Network Diagnostic\Network Diagnostic.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Network Diagnostic.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\mui\mui.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\mui.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msapps\msinfo\msinfo.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msapps\msinfo.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msapps\msapps.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msapps.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msagent\msagent.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msagent\intl\intl.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msagent\intl.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msagent\chars\chars.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msagent\chars.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\msagent.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Media\Media.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Media.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\java\trustlib\trustlib.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\java\trustlib.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\java\java.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\java\classes\classes.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\java\classes.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\java.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Installer\Installer.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Installer\{7CCEBC24-62DB-4280-A8EC-BFA49F167920}\{7CCEBC24-62DB-4280-A8EC-BFA49F167920}.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Installer\{7CCEBC24-62DB-4280-A8EC-BFA49F167920}.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Installer.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\inf\inf.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\inf.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\shared\shared.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\shared.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imkr6_1\imkr6_1.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imkr6_1.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imjp8_1\imjp8_1.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imjp8_1.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imejp98\imejp98.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imejp98.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imejp\imejp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\imejp.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\ime.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\CHTIME\CHTIME.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\CHTIME.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\chsime\chsime.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime\chsime.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ime.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Help\Tours\Tours.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Help\Tours.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Help\Help.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Help.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Fonts\Fonts.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Fonts.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ehome\ehome.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\ehome.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Driver Cache\i386\i386.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Driver Cache\i386.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Driver Cache\Driver Cache.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Driver Cache.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Downloaded Program Files\Downloaded Program Files.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Downloaded Program Files.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Debug\UserMode\UserMode.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Debug\UserMode.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Debug\Debug.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Debug.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Cursors\Cursors.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Cursors.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Connection Wizard\Connection Wizard.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Connection Wizard.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Config\Config.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\Config.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\AppPatch\AppPatch.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\AppPatch.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\addins\addins.exe 2007-04-25 02:52 224382 –a—— C:\WINDOWS.2\addins.exe 2007-04-02 14:21 428032 –a—— C:\WINDOWS.2\system32\swreg.exe 2006-12-14 12:50 80128 –a—— C:\WINDOWS.2\system32\drivers\parport.sys 2006-12-14 12:50 63744 –a—— C:\WINDOWS.2\system32\drivers\mf.sys 2006-12-14 12:50 61824 –a—— C:\WINDOWS.2\system32\drivers\nic1394.sys 2006-12-14 12:50 60800 –a—— C:\WINDOWS.2\system32\drivers\arp1394.sys 2006-12-14 12:50 52736 –a—— C:\WINDOWS.2\system32\wzcsapi.dll 2006-12-14 12:50 52224 –a—— C:\WINDOWS.2\system32\dmutil.dll 2006-12-14 12:50 48768 –a—— C:\WINDOWS.2\system32\drivers\stream.sys 2006-12-14 12:50 476160 –a—— C:\WINDOWS.2\system32\wzcsvc.dll 2006-12-14 12:50 47616 –a—— C:\WINDOWS.2\system32\iyuv_32.dll 2006-12-14 12:50 47104 –a—— C:\WINDOWS.2\system32\cnbjmon.dll 2006-12-14 12:50 4352 –a—— C:\WINDOWS.2\system32\drivers\swenum.sys 2006-12-14 12:50 42496 –a—— C:\WINDOWS.2\system32\drivers\p3.sys 2006-12-14 12:50 37376 –a—— C:\WINDOWS.2\system32\drivers\amdk7.sys 2006-12-14 12:50 36992 –a—— C:\WINDOWS.2\system32\drivers\amdk6.sys 2006-12-14 12:50 36480 –a—— C:\WINDOWS.2\system32\drivers\crusoe.sys 2006-12-14 12:50 35456 –a—— C:\WINDOWS.2\system32\drivers\processr.sys 2006-12-14 12:50 35328 –a—— C:\WINDOWS.2\system32\pid.dll 2006-12-14 12:50 30080 –a—— C:\WINDOWS.2\system32\drivers\modem.sys 2006-12-14 12:50 294912 –a—— C:\WINDOWS.2\system32\msh263.drv 2006-12-14 12:50 25472 –a—— C:\WINDOWS.2\system32\drivers\sonydcam.sys 2006-12-14 12:50 23552 –a—— C:\WINDOWS.2\system32\wdmaud.drv 2006-12-14 12:50 23040 –a—— C:\WINDOWS.2\system32\drivers\mouclass.sys 2006-12-14 12:50 20992 –a—— C:\WINDOWS.2\system32\hid.dll 2006-12-14 12:50 2016768 –a—— C:\WINDOWS.2\system32\ntkrnlpa.exe 2006-12-14 12:50 17408 –a—— C:\WINDOWS.2\system32\msyuv.dll 2006-12-14 12:50 16752239 –a—— C:\WINDOWS.2\Driver Cache\i386\sp2.cab 2006-12-14 12:50 16000 –a—— C:\WINDOWS.2\system32\drivers\usbintel.sys 2006-12-14 12:50 15488 –a—— C:\WINDOWS.2\system32\drivers\mssmbios.sys 2006-12-14 12:50 15360 –a—— C:\WINDOWS.2\system32\pjlmon.dll 2006-12-14 12:50 14592 –a—— C:\WINDOWS.2\system32\drivers\ndisuio.sys 2006-12-14 12:50 140928 –a—— C:\WINDOWS.2\system32\drivers\ks.sys 2006-12-14 12:50 12416 –a—— C:\WINDOWS.2\system32\drivers\tunmp.sys 2006-12-14 12:48 86073 –a—— C:\WINDOWS.2\system32\usrfaxa.dll 2006-12-14 12:48 8192 –a—— C:\WINDOWS.2\system32\tsbyuv.dll 2006-12-14 12:48 8192 –a—— C:\WINDOWS.2\system32\streamci.dll 2006-12-14 12:48 77891 –a—— C:\WINDOWS.2\system32\usrmlnka.exe 2006-12-14 12:48 77890 –a—— C:\WINDOWS.2\system32\usrdpa.dll 2006-12-14 12:48 77883 –a—— C:\WINDOWS.2\system32\usrrtosa.dll 2006-12-14 12:48 73882 –a—— C:\WINDOWS.2\Help\digiras.chm 2006-12-14 12:48 72192 –a—— C:\WINDOWS.2\system32\sprio800.dll 2006-12-14 12:48 70656 –a—— C:\WINDOWS.2\system32\sprio600.dll 2006-12-14 12:48 69700 –a—— C:\WINDOWS.2\system32\usrshuta.exe 2006-12-14 12:48 69699 –a—— C:\WINDOWS.2\system32\usrcoina.dll 2006-12-14 12:48 69632 –a—— C:\WINDOWS.2\system32\spnike.dll 2006-12-14 12:48 64702423 –a—— C:\WINDOWS.2\Driver Cache\i386\driver.cab 2006-12-14 12:48 61508 –a—— C:\WINDOWS.2\system32\usrprbda.exe 2006-12-14 12:48 61500 –a—— C:\WINDOWS.2\system32\usrcntra.dll 2006-12-14 12:48 58112 –a—— C:\WINDOWS.2\system32\drivers\vdmindvd.sys 2006-12-14 12:48 55296 –a—— C:\WINDOWS.2\system32\dvdplay.exe 2006-12-14 12:48 53305 –a—— C:\WINDOWS.2\system32\usrlbva.dll 2006-12-14 12:48 51712 –a—— C:\WINDOWS.2\system32\drivers\tosdvd.sys 2006-12-14 12:48 49211 –a—— C:\WINDOWS.2\system32\usrvpa.dll 2006-12-14 12:48 49211 –a—— C:\WINDOWS.2\system32\usrsdpia.dll 2006-12-14 12:48 49209 –a—— C:\WINDOWS.2\system32\usrv80a.dll 2006-12-14 12:48 45116 –a—— C:\WINDOWS.2\system32\usrvoica.dll 2006-12-14 12:48 41019 –a—— C:\WINDOWS.2\system32\usrsvpia.dll 2006-12-14 12:48 323641 –a—— C:\WINDOWS.2\system32\usrdtea.dll 2006-12-14 12:48 3200 –a—— C:\WINDOWS.2\system32\wowfax.dll 2006-12-14 12:48 3144 –a—— C:\WINDOWS.2\system32\spool\drivers\color\sRGB Color Space Profile.icm 2006-12-14 12:48 262528 –a—— C:\WINDOWS.2\system32\drivers\cinemst2.sys 2006-12-14 12:48 23936 –a—— C:\WINDOWS.2\system32\drivers\usbcamd2.sys 2006-12-14 12:48 23808 –a—— C:\WINDOWS.2\system32\drivers\usbcamd.sys 2006-12-14 12:48 21376 –a—— C:\WINDOWS.2\system32\drivers\tsbvcap.sys 2006-12-14 12:48 18688 –a—— C:\WINDOWS.2\system32\drivers\cdaudio.sys 2006-12-14 12:48 174020 –a—— C:\WINDOWS.2\system32\spool\drivers\color\kodak_dc.icm 2006-12-14 12:48 157696 –a—— C:\WINDOWS.2\system32\paqsp.dll 2006-12-14 12:48 147968 –a—— C:\WINDOWS.2\system32\mdwmdmsp.dll 2006-12-14 12:48 13824 –a—— C:\WINDOWS.2\system32\wowfaxui.dll 2006-12-14 12:48 12160 –a—— C:\WINDOWS.2\system32\drivers\fsvga.sys 2006-12-14 12:48 12032 –a—— C:\WINDOWS.2\system32\drivers\riodrv.sys 2006-12-14 12:48 12032 –a—— C:\WINDOWS.2\system32\drivers\rio8drv.sys 2006-12-14 12:48 12032 –a—— C:\WINDOWS.2\system32\drivers\nikedrv.sys 2006-12-14 12:48 11776 –a—— C:\WINDOWS.2\system32\drivers\cpqdap01.sys 2006-12-14 12:48 10743 –a—— C:\WINDOWS.2\Help\cyzcoins.chm 2006-12-14 12:48 10483 –a—— C:\WINDOWS.2\Help\cyycoins.chm 2006-12-14 12:48 102457 –a—— C:\WINDOWS.2\system32\usrv42a.dll 2006-12-14 12:43 86728 –a—— C:\WINDOWS.2\system32\msxml6r.dll 2006-12-14 12:43 84480 –a—— C:\WINDOWS.2\system32\pintool.exe 2006-12-14 12:43 82432 –a—— C:\WINDOWS.2\system32\msxml4r.dll 2006-12-14 12:43 716000 –a—— C:\WINDOWS.2\system32\PreInstall\WinSE\wxp_x86_0409_v1\update.exe.ref 2006-12-14 12:43 557568 –a—— C:\WINDOWS.2\Network Diagnostic\xpnetdiag.exe 2006-12-14 12:43 371424 –a—— C:\WINDOWS.2\system32\PreInstall\WinSE\wxp_x86_0409_v1\updspapi.dll.ref 2006-12-14 12:43 35840 –a—— C:\WINDOWS.2\system32\qfecheck.exe 2006-12-14 12:43 28672 –a—— C:\WINDOWS.2\system32\verclsid.exe 2006-12-14 12:43 248320 –a—— C:\WINDOWS.2\system32\xpsp3res.dll 2006-12-14 12:43 22752 –a—— C:\WINDOWS.2\system32\PreInstall\WinSE\wxp_x86_0409_v1\spupdsvc.exe.ref 2006-12-14 12:43 22752 –a—— C:\WINDOWS.2\system32\PreInstall\WinSE\wxp_x86_0409_v1\spcustom.dll.ref 2006-12-14 12:43 213216 –a—— C:\WINDOWS.2\system32\PreInstall\WinSE\wxp_x86_0409_v1\spuninst.exe.ref 2006-12-14 12:43 199680 –a—— C:\WINDOWS.2\system32\usmt\scripta.dll 2006-12-14 12:43 1841 –a—— C:\WINDOWS.2\inf\sysoc.inf 2006-12-14 12:43 18200 –a—— C:\WINDOWS.2\system32\wups2.dll 2006-12-14 12:43 178408 –a—— C:\WINDOWS.2\system32\muweb.dll 2006-12-14 12:43 173568 –a—— C:\WINDOWS.2\system32\usmt\sysmoda.dll 2006-12-14 12:43 1692 –a—— C:\WINDOWS.2\Network Diagnostic\xpnetdiag.xsl 2006-12-14 12:43 13536 –a—— C:\WINDOWS.2\system32\PreInstall\WinSE\wxp_x86_0409_v1\spmsg.dll.ref 2006-12-14 12:43 1323 –a—— C:\WINDOWS.2\inf\nlite.inf 2006-12-14 12:43 1321744 –a—— C:\WINDOWS.2\system32\msxml6.dll 2006-12-14 12:43 1245696 –a—— C:\WINDOWS.2\system32\msxml4.dll 2006-12-14 12:43 121856 –a—— C:\WINDOWS.2\system32\xmllite.dll 2006-12-14 12:43 10342824 –a—— C:\WINDOWS.2\system32\MRT.exe 2006-12-14 12:42 98304 –a–c— C:\WINDOWS.2\system32\dllcache\wshom.ocx 2006-12-14 12:42 98304 –a—— C:\WINDOWS.2\system32\wshom.ocx 2006-12-14 12:42 96792 –a—— C:\WINDOWS.2\system32\basecsp.dll 2006-12-14 12:42 96768 –a–c— C:\WINDOWS.2\system32\dllcache\srvsvc.dll 2006-12-14 12:42 96768 –a—— C:\WINDOWS.2\system32\srvsvc.dll 2006-12-14 12:42 9026 –a—— C:\WINDOWS.2\inf\usbvideo.inf 2006-12-14 12:42 8847 –a—— C:\WINDOWS.2\Help\wscript.hlp 2006-12-14 12:42 85504 –a–c— C:\WINDOWS.2\system32\dllcache\wabimp.dll 2006-12-14 12:42 851968 –a–c— C:\WINDOWS.2\system32\dllcache\vgx.dll 2006-12-14 12:42 8458240 –a–c— C:\WINDOWS.2\system32\dllcache\shell32.dll 2006-12-14 12:42 8458240 –a—— C:\WINDOWS.2\system32\shell32.dll 2006-12-14 12:42 825260 –a—— C:\WINDOWS.2\system32\usmt\sysfiles.inf 2006-12-14 12:42 81664 –a–c— C:\WINDOWS.2\system32\dllcache\videoprt.sys 2006-12-14 12:42 81664 –a—— C:\WINDOWS.2\system32\drivers\videoprt.sys 2006-12-14 12:42 80896 –a–c— C:\WINDOWS.2\system32\dllcache\wscsvc.dll 2006-12-14 12:42 80896 –a—— C:\WINDOWS.2\system32\wscsvc.dll 2006-12-14 12:42 74909 –a—— C:\WINDOWS.2\Help\wuauhelp.chm 2006-12-14 12:42 72387 –a—— C:\WINDOWS.2\system32\usmt\archvapp.inf 2006-12-14 12:42 713216 –a–c— C:\WINDOWS.2\system32\dllcache\sxs.dll 2006-12-14 12:42 713216 –a—— C:\WINDOWS.2\system32\sxs.dll 2006-12-14 12:42 68096 –a–c— C:\WINDOWS.2\system32\dllcache\webclnt.dll 2006-12-14 12:42 68096 –a—— C:\WINDOWS.2\system32\webclnt.dll 2006-12-14 12:42 6656 –a—— C:\WINDOWS.2\system32\en\mmcfxcommon.resources.dll 2006-12-14 12:42 664576 –a–c— C:\WINDOWS.2\system32\dllcache\wininet.dll 2006-12-14 12:42 664576 –a—— C:\WINDOWS.2\system32\wininet.dll 2006-12-14 12:42 65536 –a–c— C:\WINDOWS.2\system32\dllcache\wshext.dll 2006-12-14 12:42 65536 –a—— C:\WINDOWS.2\system32\wshext.dll 2006-12-14 12:42 61952 –a—— C:\WINDOWS.2\system32\hdashcut.exe 2006-12-14 12:42 615936 –a–c— C:\WINDOWS.2\system32\dllcache\urlmon.dll 2006-12-14 12:42 615936 –a—— C:\WINDOWS.2\system32\urlmon.dll 2006-12-14 12:42 59392 –a–c— C:\WINDOWS.2\system32\dllcache\stclient.dll 2006-12-14 12:42 59392 –a—— C:\WINDOWS.2\system32\stclient.dll 2006-12-14 12:42 59264 –a—— C:\WINDOWS.2\system32\drivers\usbhub.sys 2006-12-14 12:42 57856 –a–c— C:\WINDOWS.2\system32\dllcache\spoolsv.exe 2006-12-14 12:42 57856 –a—— C:\WINDOWS.2\system32\spoolsv.exe 2006-12-14 12:42 577024 –a–c— C:\WINDOWS.2\system32\dllcache\user32.dll 2006-12-14 12:42 577024 –a—— C:\WINDOWS.2\system32\user32.dll 2006-12-14 12:42 55808 –a–c— C:\WINDOWS.2\system32\dllcache\twext.dll 2006-12-14 12:42 55808 –a—— C:\WINDOWS.2\system32\twext.dll 2006-12-14 12:42 531456 –a–c— C:\WINDOWS.2\system32\dllcache\wbemcore.dll 2006-12-14 12:42 531456 –a—— C:\WINDOWS.2\system32\wbem\wbemcore.dll 2006-12-14 12:42 51932 –a—— C:\WINDOWS.2\inf\hdaudio.inf 2006-12-14 12:42 5120 –a—— C:\WINDOWS.2\system32\hdaudres.dll 2006-12-14 12:42 510976 –a–c— C:\WINDOWS.2\system32\dllcache\wab32.dll 2006-12-14 12:42 49152 –a–c— C:\WINDOWS.2\system32\dllcache\wdigest.dll 2006-12-14 12:42 49152 –a—— C:\WINDOWS.2\system32\wdigest.dll 2006-12-14 12:42 4880 –a—— C:\WINDOWS.2\inf\hdaudbus.inf 2006-12-14 12:42 474112 –a–c— C:\WINDOWS.2\system32\dllcache\shlwapi.dll 2006-12-14 12:42 474112 –a—— C:\WINDOWS.2\system32\shlwapi.dll 2006-12-14 12:42 465176 –a–c— C:\WINDOWS.2\system32\dllcache\wuapi.dll 2006-12-14 12:42 465176 –a—— C:\WINDOWS.2\system32\wuapi.dll 2006-12-14 12:42 438272 –a–c— C:\WINDOWS.2\system32\dllcache\vbscript.dll 2006-12-14 12:42 438272 –a—— C:\WINDOWS.2\system32\vbscript.dll 2006-12-14 12:42 43244 –a—— C:\WINDOWS.2\inf\wuau.adm 2006-12-14 12:42 41240 –a–c— C:\WINDOWS.2\system32\dllcache\wups.dll 2006-12-14 12:42 41240 –a—— C:\WINDOWS.2\system32\wups.dll 2006-12-14 12:42 40960 –a—— C:\WINDOWS.2\system32\en\mmcex.resources.dll 2006-12-14 12:42 397312 –a—— C:\WINDOWS.2\system32\mmcex.dll 2006-12-14 12:42 39424 –a—— C:\WINDOWS.2\AppPatch\acadproc.dll 2006-12-14 12:42 383804 –a–c— C:\WINDOWS.2\system32\dllcache\tahoma.ttf 2006-12-14 12:42 383804 –a—— C:\WINDOWS.2\Fonts\tahoma.ttf 2006-12-14 12:42 383488 –a–c— C:\WINDOWS.2\system32\dllcache\wzcdlg.dll 2006-12-14 12:42 383488 –a—— C:\WINDOWS.2\system32\wzcdlg.dll 2006-12-14 12:42 360576 –a–c— C:\WINDOWS.2\system32\dllcache\tcpip.sys 2006-12-14 12:42 360576 –a—— C:\WINDOWS.2\system32\drivers\tcpip.sys 2006-12-14 12:42 355680 –a–c— C:\WINDOWS.2\system32\dllcache\tahomabd.ttf 2006-12-14 12:42 355680 –a—— C:\WINDOWS.2\Fonts\tahomabd.ttf 2006-12-14 12:42 33792 –a—— C:\WINDOWS.2\system32\mmcperf.exe 2006-12-14 12:42 33792 –a—— C:\WINDOWS.2\Network Diagnostic\custsat.dll 2006-12-14 12:42 332928 –a–c— C:\WINDOWS.2\system32\dllcache\srv.sys 2006-12-14 12:42 332928 –a—— C:\WINDOWS.2\system32\drivers\srv.sys 2006-12-14 12:42 30208 –a—— C:\WINDOWS.2\system32\drivers\usbehci.sys 2006-12-14 12:42 295424 –a–c— C:\WINDOWS.2\system32\dllcache\termsrv.dll 2006-12-14 12:42 295424 –a—— C:\WINDOWS.2\system32\termsrv.dll 2006-12-14 12:42 291840 –a–c— C:\WINDOWS.2\system32\dllcache\winsrv.dll 2006-12-14 12:42 291840 –a—— C:\WINDOWS.2\system32\winsrv.dll 2006-12-14 12:42 28672 –a–c— C:\WINDOWS.2\system32\dllcache\wshcon.dll 2006-12-14 12:42 28672 –a—— C:\WINDOWS.2\system32\wshcon.dll 2006-12-14 12:42 28672 –a—— C:\WINDOWS.2\system32\en\microsoft.managementconsole.resources.dll 2006-12-14 12:42 283796 –a—— C:\WINDOWS.2\inf\RVMUpPck.inf 2006-12-14 12:42 26624 –a–c— C:\WINDOWS.2\system32\dllcache\verifier.dll 2006-12-14 12:42 26624 –a—— C:\WINDOWS.2\system32\verifier.dll 2006-12-14 12:42 262148 –a–c— C:\WINDOWS.2\system32\dllcache\sortkey.nls 2006-12-14 12:42 262148 –a—— C:\WINDOWS.2\system32\sortkey.nls 2006-12-14 12:42 261120 –a—— C:\WINDOWS.2\system32\usmt\migisma.dll 2006-12-14 12:42 25600 –a—— C:\WINDOWS.2\system32\bcsprsrc.dll 2006-12-14 12:42 25088 –a—— C:\WINDOWS.2\system32\hdaprop.dll 2006-12-14 12:42 249344 –a–c— C:\WINDOWS.2\system32\dllcache\tapisrv.dll 2006-12-14 12:42 249344 –a—— C:\WINDOWS.2\system32\tapisrv.dll 2006-12-14 12:42 241152 –a—— C:\WINDOWS.2\system32\usmt\migwiza.exe 2006-12-14 12:42 23044 –a–c— C:\WINDOWS.2\system32\dllcache\sorttbls.nls 2006-12-14 12:42 23044 –a—— C:\WINDOWS.2\system32\sorttbls.nls 2006-12-14 12:42 2262648 -ra—— C:\WINDOWS.2\system32\Macromed\Flash\Flash9b.ocx 2006-12-14 12:42 225664 –a–c— C:\WINDOWS.2\system32\dllcache\tcpip6.sys 2006-12-14 12:42 225664 –a—— C:\WINDOWS.2\system32\drivers\tcpip6.sys 2006-12-14 12:42 218624 –a–c— C:\WINDOWS.2\system32\dllcache\uxtheme.dll 2006-12-14 12:42 218624 –a—— C:\WINDOWS.2\system32\uxtheme.dll 2006-12-14 12:42 209280 –a–c— C:\WINDOWS.2\system32\dllcache\update.sys 2006-12-14 12:42 209280 –a—— C:\WINDOWS.2\system32\drivers\update.sys 2006-12-14 12:42 20608 –a—— C:\WINDOWS.2\system32\drivers\usbuhci.sys 2006-12-14 12:42 200 –a—— C:\WINDOWS.2\inf\swflash.inf 2006-12-14 12:42 1960448 –a—— C:\WINDOWS.2\system32\webfldrs.msi 2006-12-14 12:42 194328 –a–c— C:\WINDOWS.2\system32\dllcache\wuaueng1.dll 2006-12-14 12:42 194328 –a—— C:\WINDOWS.2\system32\wuaueng1.dll 2006-12-14 12:42 193024 –a–c— C:\WINDOWS.2\system32\dllcache\sysmod.dll 2006-12-14 12:42 193024 –a—— C:\WINDOWS.2\system32\usmt\sysmod.dll 2006-12-14 12:42 190072 -ra—— C:\WINDOWS.2\system32\Macromed\Flash\FlashUtil9b.exe 2006-12-14 12:42 184320 –a—— C:\WINDOWS.2\system32\microsoft.managementconsole.dll 2006-12-14 12:42 1839616 –a–c— C:\WINDOWS.2\system32\dllcache\win32k.sys 2006-12-14 12:42 1839616 –a—— C:\WINDOWS.2\system32\win32k.sys 2006-12-14 12:42 17920 –a—— C:\WINDOWS.2\system32\usmt\cobramsg.dll 2006-12-14 12:42 174360 –a–c— C:\WINDOWS.2\system32\dllcache\wuaucpl.cpl 2006-12-14 12:42 174360 –a—— C:\WINDOWS.2\system32\wuaucpl.cpl 2006-12-14 12:42 173536 –a–c— C:\WINDOWS.2\system32\dllcache\wuweb.dll 2006-12-14 12:42 173536 –a—— C:\WINDOWS.2\system32\wuweb.dll 2006-12-14 12:42 172312 –a–c— C:\WINDOWS.2\system32\dllcache\wuauclt1.exe 2006-12-14 12:42 172312 –a—— C:\WINDOWS.2\system32\wuauclt1.exe 2006-12-14 12:42 151552 –a—— C:\WINDOWS.2\system32\ifxcardm.dll 2006-12-14 12:42 148624 –a—— C:\WINDOWS.2\Fonts\tunga.ttf 2006-12-14 12:42 145920 –a—— C:\WINDOWS.2\system32\drivers\hdaudio.sys 2006-12-14 12:42 143488 –a—— C:\WINDOWS.2\system32\drivers\usbport.sys 2006-12-14 12:42 13962 –a—— C:\WINDOWS.2\system32\usmt\usmtdef.inf 2006-12-14 12:42 138752 –a—— C:\WINDOWS.2\system32\drivers\hdaudbus.sys 2006-12-14 12:42 1343768 –a–c— C:\WINDOWS.2\system32\dllcache\wuaueng.dll 2006-12-14 12:42 1343768 –a—— C:\WINDOWS.2\system32\wuaueng.dll 2006-12-14 12:42 133120 –a—— C:\WINDOWS.2\system32\axaltocm.dll 2006-12-14 12:42 132096 –a–c— C:\WINDOWS.2\system32\dllcache\wkssvc.dll 2006-12-14 12:42 132096 –a—— C:\WINDOWS.2\system32\wkssvc.dll 2006-12-14 12:42 127256 –a–c— C:\WINDOWS.2\system32\dllcache\wucltui.dll 2006-12-14 12:42 127256 –a—— C:\WINDOWS.2\system32\wucltui.dll 2006-12-14 12:42 124184 –a–c— C:\WINDOWS.2\system32\dllcache\wuauclt.exe 2006-12-14 12:42 124184 –a—— C:\WINDOWS.2\system32\wuauclt.exe 2006-12-14 12:42 123392 –a–c— C:\WINDOWS.2\system32\dllcache\umpnpmgr.dll 2006-12-14 12:42 123392 –a—— C:\WINDOWS.2\system32\umpnpmgr.dll 2006-12-14 12:42 1195674 –a–c— C:\WINDOWS.2\system32\dllcache\sysmain.sdb 2006-12-14 12:42 1195674 –a—— C:\WINDOWS.2\AppPatch\sysmain.sdb 2006-12-14 12:42 117760 –a–c— C:\WINDOWS.2\system32\dllcache\t2embed.dll 2006-12-14 12:42 117760 –a—— C:\WINDOWS.2\system32\t2embed.dll 2006-12-14 12:42 11776 –a–c— C:\WINDOWS.2\system32\dllcache\xolehlp.dll 2006-12-14 12:42 11776 –a—— C:\WINDOWS.2\system32\xolehlp.dll 2006-12-14 12:42 115200 –a—— C:\WINDOWS.2\system32\usmt\guitrna.dll 2006-12-14 12:42 114688 –a–c— C:\WINDOWS.2\system32\dllcache\wscript.exe 2006-12-14 12:42 114688 –a—— C:\WINDOWS.2\system32\wscript.exe 2006-12-14 12:42 106496 –a—— C:\WINDOWS.2\system32\mmcfxcommon.dll 2006-12-14 12:42 101376 –a–c— C:\WINDOWS.2\system32\dllcache\txflog.dll 2006-12-14 12:42 101376 –a—— C:\WINDOWS.2\system32\txflog.dll 2006-12-14 12:41 985088 –a–c— C:\WINDOWS.2\system32\dllcache\setupapi.dll 2006-12-14 12:41 985088 –a—— C:\WINDOWS.2\system32\setupapi.dll 2006-12-14 12:41 956928 –a–c— C:\WINDOWS.2\system32\dllcache\msdtctm.dll 2006-12-14 12:41 956928 –a—— C:\WINDOWS.2\system32\msdtctm.dll 2006-12-14 12:41 91648 –a–c— C:\WINDOWS.2\system32\dllcache\mtxoci.dll 2006-12-14 12:41 91648 –a—— C:\WINDOWS.2\system32\mtxoci.dll 2006-12-14 12:41 916 –a—— C:\WINDOWS.2\inf\secdrv.inf 2006-12-14 12:41 884736 –a–c— C:\WINDOWS.2\system32\dllcache\msimsg.dll 2006-12-14 12:41 884736 –a—— C:\WINDOWS.2\system32\msimsg.dll 2006-12-14 12:41 838360 –a–c— C:\WINDOWS.2\system32\dllcache\mswdat10.dll 2006-12-14 12:41 838360 –a—— C:\WINDOWS.2\system32\mswdat10.dll 2006-12-14 12:41 78848 –a–c— C:\WINDOWS.2\system32\dllcache\msiexec.exe 2006-12-14 12:41 78848 –a—— C:\WINDOWS.2\system32\msiexec.exe 2006-12-14 12:41 76800 –a–c— C:\WINDOWS.2\system32\dllcache\remotesp.tsp 2006-12-14 12:41 76800 –a—— C:\WINDOWS.2\system32\remotesp.tsp 2006-12-14 12:41 7680 –a–c— C:\WINDOWS.2\system32\dllcache\rasadhlp.dll 2006-12-14 12:41 7680 –a—— C:\WINDOWS.2\system32\rasadhlp.dll 2006-12-14 12:41 74752 –a–c— C:\WINDOWS.2\system32\dllcache\olecli32.dll 2006-12-14 12:41 74752 –a—— C:\WINDOWS.2\system32\olecli32.dll 2006-12-14 12:41 73728 –a–c— C:\WINDOWS.2\system32\dllcache\mscms.dll 2006-12-14 12:41 73728 –a—— C:\WINDOWS.2\system32\mscms.dll 2006-12-14 12:41 701440 –a–c— C:\WINDOWS.2\system32\dllcache\msxml2.dll 2006-12-14 12:41 701440 –a—— C:\WINDOWS.2\system32\msxml2.dll 2006-12-14 12:41 66560 –a–c— C:\WINDOWS.2\system32\dllcache\mtxclu.dll 2006-12-14 12:41 66560 –a—— C:\WINDOWS.2\system32\mtxclu.dll 2006-12-14 12:41 65536 –a–c— C:\WINDOWS.2\system32\dllcache\nwwks.dll 2006-12-14 12:41 65536 –a—— C:\WINDOWS.2\system32\nwwks.dll 2006-12-14 12:41 64000 –a–c— C:\WINDOWS.2\system32\dllcache\nwapi32.dll 2006-12-14 12:41 64000 –a—— C:\WINDOWS.2\system32\nwapi32.dll 2006-12-14 12:41 621272 –a–c— C:\WINDOWS.2\system32\dllcache\mswstr10.dll 2006-12-14 12:41 621272 –a—— C:\WINDOWS.2\system32\mswstr10.dll 2006-12-14 12:41 618496 –a–c— C:\WINDOWS.2\system32\dllcache\mmsys.cpl 2006-12-14 12:41 618496 –a—— C:\WINDOWS.2\system32\mmsys.cpl 2006-12-14 12:41 61440 –a–c— C:\WINDOWS.2\system32\dllcache\mmcshext.dll 2006-12-14 12:41 61440 –a—— C:\WINDOWS.2\system32\mmcshext.dll 2006-12-14 12:41 58880 –a–c— C:\WINDOWS.2\system32\dllcache\pnrpnsp.dll 2006-12-14 12:41 58880 –a–c— C:\WINDOWS.2\system32\dllcache\msdtclog.dll 2006-12-14 12:41 58880 –a—— C:\WINDOWS.2\system32\pnrpnsp.dll 2006-12-14 12:41 58880 –a—— C:\WINDOWS.2\system32\msdtclog.dll 2006-12-14 12:41 582144 –a–c— C:\WINDOWS.2\system32\dllcache\rpcrt4.dll 2006-12-14 12:41 582144 –a—— C:\WINDOWS.2\system32\rpcrt4.dll 2006-12-14 12:41 563200 –a–c— C:\WINDOWS.2\system32\dllcache\msobmain.dll 2006-12-14 12:41 563200 –a—— C:\WINDOWS.2\system32\oobe\msobmain.dll 2006-12-14 12:41 553984 –a–c— C:\WINDOWS.2\system32\dllcache\p2psvc.dll 2006-12-14 12:41 553984 –a—— C:\WINDOWS.2\system32\p2psvc.dll 2006-12-14 12:41 532480 –a–c— C:\WINDOWS.2\system32\dllcache\mstime.dll 2006-12-14 12:41 532480 –a—— C:\WINDOWS.2\system32\mstime.dll 2006-12-14 12:41 454656 –a—— C:\WINDOWS.2\system32\drivers\mrxsmb.sys 2006-12-14 12:41 448512 –a–c— C:\WINDOWS.2\system32\dllcache\mshtmled.dll 2006-12-14 12:41 448512 –a—— C:\WINDOWS.2\system32\mshtmled.dll 2006-12-14 12:41 43520 –a–c— C:\WINDOWS.2\system32\dllcache\ntlanman.dll 2006-12-14 12:41 43520 –a—— C:\WINDOWS.2\system32\ntlanman.dll 2006-12-14 12:41 427520 –a–c— C:\WINDOWS.2\system32\dllcache\msdtcprx.dll 2006-12-14 12:41 427520 –a—— C:\WINDOWS.2\system32\msdtcprx.dll 2006-12-14 12:41 399360 –a–c— C:\WINDOWS.2\system32\dllcache\rpcss.dll 2006-12-14 12:41 399360 –a—— C:\WINDOWS.2\system32\rpcss.dll 2006-12-14 12:41 39424 –a–c— C:\WINDOWS.2\system32\dllcache\pngfilt.dll 2006-12-14 12:41 39424 –a—— C:\WINDOWS.2\system32\pngfilt.dll 2006-12-14 12:41 386048 –a–c— C:\WINDOWS.2\system32\dllcache\qdvd.dll 2006-12-14 12:41 386048 –a—— C:\WINDOWS.2\system32\qdvd.dll 2006-12-14 12:41 37376 –a–c— C:\WINDOWS.2\system32\dllcache\olecnv32.dll 2006-12-14 12:41 37376 –a—— C:\WINDOWS.2\system32\olecnv32.dll 2006-12-14 12:41 364544 –a–c— C:\WINDOWS.2\system32\dllcache\npdsplay.dll 2006-12-14 12:41 337408 –a–c— C:\WINDOWS.2\system32\dllcache\netapi32.dll 2006-12-14 12:41 337408 –a—— C:\WINDOWS.2\system32\netapi32.dll 2006-12-14 12:41 313344 –a–c— C:\WINDOWS.2\system32\dllcache\p2pgraph.dll 2006-12-14 12:41 313344 –a—— C:\WINDOWS.2\system32\p2pgraph.dll 2006-12-14 12:41 3058688 –a–c— C:\WINDOWS.2\system32\dllcache\mshtml.dll 2006-12-14 12:41 3058688 –a—— C:\WINDOWS.2\system32\mshtml.dll 2006-12-14 12:41 297472 –a–c— C:\WINDOWS.2\system32\dllcache\msctf.dll 2006-12-14 12:41 297472 –a—— C:\WINDOWS.2\system32\MSCTF.dll 2006-12-14 12:41 2890240 –a–c— C:\WINDOWS.2\system32\dllcache\msi.dll 2006-12-14 12:41 2890240 –a—— C:\WINDOWS.2\system32\msi.dll 2006-12-14 12:41 271360 –a–c— C:\WINDOWS.2\system32\dllcache\msihnd.dll 2006-12-14 12:41 271360 –a—— C:\WINDOWS.2\system32\msihnd.dll 2006-12-14 12:41 269824 –a–c— C:\WINDOWS.2\system32\dllcache\oakley.dll 2006-12-14 12:41 269824 –a—— C:\WINDOWS.2\system32\oakley.dll 2006-12-14 12:41 247808 –a–c— C:\WINDOWS.2\system32\dllcache\newdev.dll 2006-12-14 12:41 247808 –a—— C:\WINDOWS.2\system32\newdev.dll 2006-12-14 12:41 215552 –a–c— C:\WINDOWS.2\system32\dllcache\script.dll 2006-12-14 12:41 215552 –a—— C:\WINDOWS.2\system32\usmt\script.dll 2006-12-14 12:41 2137088 –a—— C:\WINDOWS.2\system32\ntoskrnl.exe 2006-12-14 12:41 202496 –a–c— C:\WINDOWS.2\system32\dllcache\rmcast.sys 2006-12-14 12:41 202496 –a—— C:\WINDOWS.2\system32\drivers\RMCast.sys 2006-12-14 12:41 197632 –a–c— C:\WINDOWS.2\system32\dllcache\netman.dll 2006-12-14 12:41 197632 –a—— C:\WINDOWS.2\system32\netman.dll 2006-12-14 12:41 1912320 –a–c— C:\WINDOWS.2\system32\dllcache\mmcndmgr.dll 2006-12-14 12:41 1912320 –a—— C:\WINDOWS.2\system32\mmcndmgr.dll 2006-12-14 12:41 180736 –a–c— C:\WINDOWS.2\system32\dllcache\rasmans.dll 2006-12-14 12:41 180736 –a—— C:\WINDOWS.2\system32\rasmans.dll 2006-12-14 12:41 174592 –a–c— C:\WINDOWS.2\system32\dllcache\rdbss.sys 2006-12-14 12:41 174592 –a—— C:\WINDOWS.2\system32\drivers\rdbss.sys 2006-12-14 12:41 1705472 –a–c— C:\WINDOWS.2\system32\dllcache\netshell.dll 2006-12-14 12:41 1705472 –a—— C:\WINDOWS.2\system32\netshell.dll 2006-12-14 12:41 169984 –a–c— C:\WINDOWS.2\system32\dllcache\msconfig.exe 2006-12-14 12:41 169984 –a—— C:\WINDOWS.2\pchealth\helpctr\binaries\msconfig.exe 2006-12-14 12:41 163644 –a—— C:\WINDOWS.2\system32\drivers\secdrv.sys 2006-12-14 12:41 163456 –a–c— C:\WINDOWS.2\system32\dllcache\nwrdr.sys 2006-12-14 12:41 163456 –a—— C:\WINDOWS.2\system32\drivers\nwrdr.sys 2006-12-14 12:41 161792 –a–c— C:\WINDOWS.2\system32\dllcache\msdtcuiu.dll 2006-12-14 12:41 161792 –a—— C:\WINDOWS.2\system32\msdtcuiu.dll 2006-12-14 12:41 15360 –a–c— C:\WINDOWS.2\system32\dllcache\msisip.dll 2006-12-14 12:41 15360 –a—— C:\WINDOWS.2\system32\msisip.dll 2006-12-14 12:41 153088 –a–c— C:\WINDOWS.2\system32\dllcache\p2p.dll 2006-12-14 12:41 153088 –a—— C:\WINDOWS.2\system32\p2p.dll 2006-12-14 12:41 151552 –a–c— C:\WINDOWS.2\system32\dllcache\scrrun.dll 2006-12-14 12:41 151552 –a–c— C:\WINDOWS.2\system32\dllcache\scrobj.dll 2006-12-14 12:41 151552 –a—— C:\WINDOWS.2\system32\scrrun.dll 2006-12-14 12:41 151552 –a—— C:\WINDOWS.2\system32\scrobj.dll 2006-12-14 12:41 1497088 –a–c— C:\WINDOWS.2\system32\dllcache\shdocvw.dll 2006-12-14 12:41 1497088 –a—— C:\WINDOWS.2\system32\shdocvw.dll 2006-12-14 12:41 146432 –a–c— C:\WINDOWS.2\system32\dllcache\msrating.dll 2006-12-14 12:41 146432 –a—— C:\WINDOWS.2\system32\msrating.dll 2006-12-14 12:41 1435648 –a–c— C:\WINDOWS.2\system32\dllcache\query.dll 2006-12-14 12:41 1435648 –a—— C:\WINDOWS.2\system32\query.dll 2006-12-14 12:41 143360 –a–c— C:\WINDOWS.2\system32\dllcache\msadco.dll 2006-12-14 12:41 142336 –a–c— C:\WINDOWS.2\system32\dllcache\nwprovau.dll 2006-12-14 12:41 142336 –a—— C:\WINDOWS.2\system32\nwprovau.dll 2006-12-14 12:41 139528 –a–c— C:\WINDOWS.2\system32\dllcache\rdpwd.sys 2006-12-14 12:41 139528 –a—— C:\WINDOWS.2\system32\drivers\rdpwd.sys 2006-12-14 12:41 1314816 –a–c— C:\WINDOWS.2\system32\dllcache\msoe.dll 2006-12-14 12:41 1287680 –a–c— C:\WINDOWS.2\system32\dllcache\quartz.dll 2006-12-14 12:41 1287680 –a—— C:\WINDOWS.2\system32\quartz.dll 2006-12-14 12:41 1286656 –a–c— C:\WINDOWS.2\system32\dllcache\ole32.dll 2006-12-14 12:41 1286656 –a—— C:\WINDOWS.2\system32\ole32.dll 2006-12-14 12:41 115712 –a–c— C:\WINDOWS.2\system32\dllcache\p2pnetsh.dll 2006-12-14 12:41 115712 –a—— C:\WINDOWS.2\system32\p2pnetsh.dll 2006-12-14 12:41 1084416 –a–c— C:\WINDOWS.2\system32\dllcache\msxml3.dll 2006-12-14 12:41 1084416 –a—— C:\WINDOWS.2\system32\msxml3.dll 2006-12-14 12:41 104960 –a–c— C:\WINDOWS.2\system32\dllcache\p2pgasvc.dll 2006-12-14 12:41 104960 –a—— C:\WINDOWS.2\system32\p2pgasvc.dll 2006-12-14 12:41 104704 –a–c— C:\WINDOWS.2\system32\dllcache\mup.sys 2006-12-14 12:41 104704 –a—— C:\WINDOWS.2\system32\drivers\mup.sys 2006-12-14 12:40 985600 –a–c— C:\WINDOWS.2\system32\dllcache\kernel32.dll 2006-12-14 12:40 985600 –a—— C:\WINDOWS.2\system32\kernel32.dll 2006-12-14 12:40 98304 –a–c— C:\WINDOWS.2\system32\dllcache\cscript.exe 2006-12-14 12:40 98304 –a—— C:\WINDOWS.2\system32\cscript.exe 2006-12-14 12:40 97792 –a–c— C:\WINDOWS.2\system32\dllcache\comrepl.dll 2006-12-14 12:40 97792 –a—— C:\WINDOWS.2\system32\comrepl.dll 2006-12-14 12:40 96256 –a–c— C:\WINDOWS.2\system32\dllcache\inseng.dll 2006-12-14 12:40 96256 –a—— C:\WINDOWS.2\system32\inseng.dll 2006-12-14 12:40 94720 –a–c— C:\WINDOWS.2\system32\dllcache\iphlpapi.dll 2006-12-14 12:40 94720 –a—— C:\WINDOWS.2\system32\iphlpapi.dll 2006-12-14 12:40 86528 –a–c— C:\WINDOWS.2\system32\dllcache\directdb.dll 2006-12-14 12:40 80896 –a–c— C:\WINDOWS.2\system32\dllcache\fontsub.dll 2006-12-14 12:40 80896 –a–c— C:\WINDOWS.2\system32\dllcache\firewall.cpl 2006-12-14 12:40 80896 –a—— C:\WINDOWS.2\system32\fontsub.dll 2006-12-14 12:40 80896 –a—— C:\WINDOWS.2\system32\firewall.cpl 2006-12-14 12:40 77824 –a–c— C:\WINDOWS.2\system32\dllcache\browser.dll 2006-12-14 12:40 77824 –a—— C:\WINDOWS.2\system32\browser.dll 2006-12-14 12:40 75544 –a–c— C:\WINDOWS.2\system32\dllcache\cdm.dll 2006-12-14 12:40 75544 –a—— C:\WINDOWS.2\system32\cdm.dll 2006-12-14 12:40 72704 –a–c— C:\WINDOWS.2\system32\dllcache\hlink.dll 2006-12-14 12:40 72704 –a—— C:\WINDOWS.2\system32\hlink.dll 2006-12-14 12:40 726528 –a–c— C:\WINDOWS.2\system32\dllcache\lsasrv.dll 2006-12-14 12:40 726528 –a—— C:\WINDOWS.2\system32\lsasrv.dll 2006-12-14 12:40 69990 –a—— C:\WINDOWS.2\inf\input.inf 2006-12-14 12:40 69120 –a–c— C:\WINDOWS.2\system32\dllcache\ciodm.dll 2006-12-14 12:40 69120 –a—— C:\WINDOWS.2\system32\ciodm.dll 2006-12-14 12:40 679424 –a–c— C:\WINDOWS.2\system32\dllcache\inetcomm.dll 2006-12-14 12:40 679424 –a—— C:\WINDOWS.2\system32\inetcomm.dll 2006-12-14 12:40 66509 –a—— C:\WINDOWS.2\system32\usmt\migsys.inf 2006-12-14 12:40 625152 –a–c— C:\WINDOWS.2\system32\dllcache\catsrvut.dll 2006-12-14 12:40 625152 –a—— C:\WINDOWS.2\system32\catsrvut.dll 2006-12-14 12:40 62464 –a–c— C:\WINDOWS.2\system32\dllcache\cryptsvc.dll 2006-12-14 12:40 62464 –a–c— C:\WINDOWS.2\system32\dllcache\authz.dll 2006-12-14 12:40 62464 –a—— C:\WINDOWS.2\system32\cryptsvc.dll 2006-12-14 12:40 62464 –a—— C:\WINDOWS.2\system32\authz.dll 2006-12-14 12:40 617472 –a–c— C:\WINDOWS.2\system32\dllcache\comctl32.dll 2006-12-14 12:40 617472 –a—— C:\WINDOWS.2\system32\comctl32.dll 2006-12-14 12:40 60416 –a–c— C:\WINDOWS.2\system32\dllcache\colbact.dll 2006-12-14 12:40 60416 –a—— C:\WINDOWS.2\system32\colbact.dll 2006-12-14 12:40 586240 –a–c— C:\WINDOWS.2\system32\dllcache\mlang.dll 2006-12-14 12:40 586240 –a—— C:\WINDOWS.2\system32\mlang.dll 2006-12-14 12:40 57344 –a–c— C:\WINDOWS.2\system32\dllcache\agentdpv.dll 2006-12-14 12:40 57344 –a—— C:\WINDOWS.2\msagent\agentdpv.dll 2006-12-14 12:40 55808 –a–c— C:\WINDOWS.2\system32\dllcache\extmgr.dll 2006-12-14 12:40 55808 –a—— C:\WINDOWS.2\system32\extmgr.dll 2006-12-14 12:40 546304 –a–c— C:\WINDOWS.2\system32\dllcache\hhctrl.ocx 2006-12-14 12:40 546304 –a—— C:\WINDOWS.2\system32\hhctrl.ocx 2006-12-14 12:40 539648 –a–c— C:\WINDOWS.2\system32\dllcache\comuid.dll 2006-12-14 12:40 539648 –a—— C:\WINDOWS.2\system32\comuid.dll 2006-12-14 12:40 498688 –a–c— C:\WINDOWS.2\system32\dllcache\clbcatq.dll 2006-12-14 12:40 498688 –a—— C:\WINDOWS.2\system32\clbcatq.dll 2006-12-14 12:40 49536 –a–c— C:\WINDOWS.2\system32\dllcache\classpnp.sys 2006-12-14 12:40 49536 –a—— C:\WINDOWS.2\system32\drivers\classpnp.sys 2006-12-14 12:40 465864 –a–c— C:\WINDOWS.2\system32\dllcache\jscript.dll 2006-12-14 12:40 465864 –a—— C:\WINDOWS.2\system32\jscript.dll 2006-12-14 12:40 4638 –a—— C:\WINDOWS.2\system32\usmt\migwiz.inf 2006-12-14 12:40 461672 –a–c— C:\WINDOWS.2\system32\dllcache\micross.ttf 2006-12-14 12:40 461672 –a—— C:\WINDOWS.2\Fonts\micross.ttf 2006-12-14 12:40 43203 –a—— C:\WINDOWS.2\inf\keyboard.inf 2006-12-14 12:40 42496 –a–c— C:\WINDOWS.2\system32\dllcache\ftp.exe 2006-12-14 12:40 42496 –a–c— C:\WINDOWS.2\system32\dllcache\agentdp2.dll 2006-12-14 12:40 42496 –a—— C:\WINDOWS.2\system32\ftp.exe 2006-12-14 12:40 42496 –a—— C:\WINDOWS.2\msagent\agentdp2.dll 2006-12-14 12:40 41984 –a—— C:\WINDOWS.2\system32\drivers\imapi.sys 2006-12-14 12:40 41472 –a–c— C:\WINDOWS.2\system32\dllcache\hhsetup.dll 2006-12-14 12:40 41472 –a—— C:\WINDOWS.2\system32\hhsetup.dll 2006-12-14 12:40 4060 –a—— C:\WINDOWS.2\system32\usmt\miguser.inf 2006-12-14 12:40 36921 –a–c— C:\WINDOWS.2\system32\dllcache\imeshare.dll 2006-12-14 12:40 36921 –a—— C:\WINDOWS.2\system32\imeshare.dll 2006-12-14 12:40 36864 –a—— C:\WINDOWS.2\system32\drivers\hidclass.sys 2006-12-14 12:40 36096 –a—— C:\WINDOWS.2\system32\drivers\intelppm.sys 2006-12-14 12:40 357888 –a–c— C:\WINDOWS.2\system32\dllcache\dxtmsft.dll 2006-12-14 12:40 357888 –a—— C:\WINDOWS.2\system32\dxtmsft.dll 2006-12-14 12:40 347136 –a—— C:\WINDOWS.2\system32\hypertrm.dll 2006-12-14 12:40 298496 –a–c— C:\WINDOWS.2\system32\dllcache\kerberos.dll 2006-12-14 12:40 298496 –a—— C:\WINDOWS.2\system32\kerberos.dll 2006-12-14 12:40 2978 –a—— C:\WINDOWS.2\system32\usmt\migism.inf 2006-12-14 12:40 28672 –a–c— C:\WINDOWS.2\system32\dllcache\dispex.dll 2006-12-14 12:40 28672 –a—— C:\WINDOWS.2\system32\dispex.dll 2006-12-14 12:40 282296 –a—— C:\WINDOWS.2\system32\usmt\migapp.inf 2006-12-14 12:40 280064 –a–c— C:\WINDOWS.2\system32\dllcache\gdi32.dll 2006-12-14 12:40 280064 –a—— C:\WINDOWS.2\system32\gdi32.dll 2006-12-14 12:40 27648 –a—— C:\WINDOWS.2\system32\jgpl400.dll 2006-12-14 12:40 27483 –a—— C:\WINDOWS.2\inf\irbus.inf 2006-12-14 12:40 274432 –a–c— C:\WINDOWS.2\system32\dllcache\migism.dll 2006-12-14 12:40 274432 –a—— C:\WINDOWS.2\system32\usmt\migism.dll 2006-12-14 12:40 265948 –a–c— C:\WINDOWS.2\system32\dllcache\locale.nls 2006-12-14 12:40 265948 –a—— C:\WINDOWS.2\system32\locale.nls 2006-12-14 12:40 262656 –a—— C:\WINDOWS.2\system32\drivers\http.sys 2006-12-14 12:40 256512 –a–c— C:\WINDOWS.2\system32\dllcache\agentsvr.exe 2006-12-14 12:40 256512 –a—— C:\WINDOWS.2\msagent\agentsvr.exe 2006-12-14 12:40 2560 –a—— C:\WINDOWS.2\system32\usmt\iconlib.dll 2006-12-14 12:40 254976 –a–c— C:\WINDOWS.2\system32\dllcache\icm32.dll 2006-12-14 12:40 254976 –a—— C:\WINDOWS.2\system32\icm32.dll 2006-12-14 12:40 251904 –a–c— C:\WINDOWS.2\system32\dllcache\iepeers.dll 2006-12-14 12:40 251904 –a—— C:\WINDOWS.2\system32\iepeers.dll 2006-12-14 12:40 245248 –a–c— C:\WINDOWS.2\system32\dllcache\migwiz.exe 2006-12-14 12:40 245248 –a—— C:\WINDOWS.2\system32\usmt\migwiz.exe 2006-12-14 12:40 243200 –a–c— C:\WINDOWS.2\system32\dllcache\es.dll 2006-12-14 12:40 243200 –a—— C:\WINDOWS.2\system32\es.dll 2006-12-14 12:40 23040 –a–c— C:\WINDOWS.2\system32\dllcache\fltmc.exe 2006-12-14 12:40 23040 –a—— C:\WINDOWS.2\system32\fltMc.exe 2006-12-14 12:40 225792 –a–c— C:\WINDOWS.2\system32\dllcache\catsrv.dll 2006-12-14 12:40 225792 –a—— C:\WINDOWS.2\system32\catsrv.dll 2006-12-14 12:40 2068480 –a–c— C:\WINDOWS.2\system32\dllcache\cdosys.dll 2006-12-14 12:40 2068480 –a—— C:\WINDOWS.2\system32\cdosys.dll 2006-12-14 12:40 205312 –a–c— C:\WINDOWS.2\system32\dllcache\dxtrans.dll 2006-12-14 12:40 205312 –a—— C:\WINDOWS.2\system32\dxtrans.dll 2006-12-14 12:40 19968 –a–c— C:\WINDOWS.2\system32\dllcache\log.dll 2006-12-14 12:40 19968 –a–c— C:\WINDOWS.2\system32\dllcache\linkinfo.dll 2006-12-14 12:40 19968 –a—— C:\WINDOWS.2\system32\usmt\log.dll 2006-12-14 12:40 19968 –a—— C:\WINDOWS.2\system32\linkinfo.dll 2006-12-14 12:40 198424 –a–c— C:\WINDOWS.2\system32\dllcache\iuengine.dll 2006-12-14 12:40 198424 –a—— C:\WINDOWS.2\system32\iuengine.dll 2006-12-14 12:40 195072 –a–c— C:\WINDOWS.2\system32\dllcache\comadmin.dll 2006-12-14 12:40 195072 –a—— C:\WINDOWS.2\system32\Com\comadmin.dll 2006-12-14 12:40 18432 –a–c— C:\WINDOWS.2\system32\dllcache\iedw.exe 2006-12-14 12:40 183808 –a–c— C:\WINDOWS.2\system32\dllcache\ipsecsvc.dll 2006-12-14 12:40 183808 –a—— C:\WINDOWS.2\system32\ipsecsvc.dll 2006-12-14 12:40 16896 –a–c— C:\WINDOWS.2\system32\dllcache\fltlib.dll 2006-12-14 12:40 16896 –a—— C:\WINDOWS.2\system32\fltlib.dll 2006-12-14 12:40 163840 –a—— C:\WINDOWS.2\system32\jgdw400.dll 2006-12-14 12:40 163328 –a–c— C:\WINDOWS.2\system32\dllcache\mmcbase.dll 2006-12-14 12:40 163328 –a—— C:\WINDOWS.2\system32\mmcbase.dll 2006-12-14 12:40 15872 –a–c— C:\WINDOWS.2\system32\dllcache\jsproxy.dll 2006-12-14 12:40 15872 –a—— C:\WINDOWS.2\system32\jsproxy.dll 2006-12-14 12:40 155136 –a–c— C:\WINDOWS.2\system32\dllcache\itircl.dll 2006-12-14 12:40 155136 –a—— C:\WINDOWS.2\system32\itircl.dll 2006-12-14 12:40 151040 –a–c— C:\WINDOWS.2\system32\dllcache\cdfview.dll 2006-12-14 12:40 151040 –a—— C:\WINDOWS.2\system32\cdfview.dll 2006-12-14 12:40 148480 –a–c— C:\WINDOWS.2\system32\dllcache\cic.dll 2006-12-14 12:40 148480 –a—— C:\WINDOWS.2\system32\cic.dll 2006-12-14 12:40 147456 –a–c— C:\WINDOWS.2\system32\dllcache\dnsapi.dll 2006-12-14 12:40 147456 –a—— C:\WINDOWS.2\system32\dnsapi.dll 2006-12-14 12:40 143747 –a—— C:\WINDOWS.2\Help\mmc.chm 2006-12-14 12:40 1392 –a—— C:\WINDOWS.2\system32\usmt\migwiz.exe.manifest 2006-12-14 12:40 137216 –a–c— C:\WINDOWS.2\system32\dllcache\itss.dll 2006-12-14 12:40 137216 –a—— C:\WINDOWS.2\system32\itss.dll 2006-12-14 12:40 136320 –a–c— C:\WINDOWS.2\system32\dllcache\ipnat.sys 2006-12-14 12:40 136320 –a—— C:\WINDOWS.2\system32\drivers\ipnat.sys 2006-12-14 12:40 1353728 –a–c— C:\WINDOWS.2\system32\dllcache\mmc.exe 2006-12-14 12:40 1353728 –a—— C:\WINDOWS.2\system32\mmc.exe 2006-12-14 12:40 134272 –a—— C:\WINDOWS.2\system32\hal.dll 2006-12-14 12:40 133120 –a–c— C:\WINDOWS.2\system32\dllcache\guitrn.dll 2006-12-14 12:40 133120 –a—— C:\WINDOWS.2\system32\usmt\guitrn.dll 2006-12-14 12:40 129536 –a–c— C:\WINDOWS.2\system32\dllcache\intl.cpl 2006-12-14 12:40 129536 –a—— C:\WINDOWS.2\system32\intl.cpl 2006-12-14 12:40 128768 –a–c— C:\WINDOWS.2\system32\dllcache\fltmgr.sys 2006-12-14 12:40 128768 –a—— C:\WINDOWS.2\system32\drivers\fltMgr.sys 2006-12-14 12:40 128512 –a–c— C:\WINDOWS.2\system32\dllcache\dhtmled.ocx 2006-12-14 12:40 1269248 –a–c— C:\WINDOWS.2\system32\dllcache\comsvcs.dll 2006-12-14 12:40 1269248 –a—— C:\WINDOWS.2\system32\comsvcs.dll 2006-12-14 12:40 123392 –a–c— C:\WINDOWS.2\system32\dllcache\input.dll 2006-12-14 12:40 123392 –a—— C:\WINDOWS.2\system32\input.dll 2006-12-14 12:40 112128 –a–c— C:\WINDOWS.2\system32\dllcache\dhcpcsvc.dll 2006-12-14 12:40 112128 –a—— C:\WINDOWS.2\system32\dhcpcsvc.dll 2006-12-14 12:40 110080 –a–c— C:\WINDOWS.2\system32\dllcache\clbcatex.dll 2006-12-14 12:40 110080 –a—— C:\WINDOWS.2\system32\clbcatex.dll 2006-12-14 12:40 1082368 –a–c— C:\WINDOWS.2\system32\dllcache\esent.dll 2006-12-14 12:40 1082368 –a—— C:\WINDOWS.2\system32\esent.dll 2006-12-14 12:40 10752 –a–c— C:\WINDOWS.2\system32\dllcache\hh.exe 2006-12-14 12:40 10752 –a—— C:\WINDOWS.2\hh.exe 2006-12-14 12:40 1054208 –a–c— C:\WINDOWS.2\system32\dllcache\danim.dll 2006-12-14 12:40 1054208 –a—— C:\WINDOWS.2\system32\danim.dll 2006-12-14 12:40 103424 –a–c— C:\WINDOWS.2\system32\dllcache\migload.exe 2006-12-14 12:40 103424 –a—— C:\WINDOWS.2\system32\usmt\migload.exe 2006-12-14 12:40 1033216 –a–c— C:\WINDOWS.2\system32\dllcache\explorer.exe 2006-12-14 12:40 1033216 –a—— C:\WINDOWS.2\explorer.exe 2006-12-14 12:40 1022976 –a–c— C:\WINDOWS.2\system32\dllcache\browseui.dll 2006-12-14 12:40 1022976 –a—— C:\WINDOWS.2\system32\browseui.dll 2006-12-14 12:38 9969 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917140.CAT 2006-12-14 12:38 9852 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB904412.CAT 2006-12-14 12:38 9798 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB907865.CAT 2006-12-14 12:38 9798 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB903250.CAT 2006-12-14 12:38 9798 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB903234.CAT 2006-12-14 12:38 9798 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB902853.CAT 2006-12-14 12:38 9798 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB902149.CAT 2006-12-14 12:38 9798 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB898439.CAT 2006-12-14 12:38 9782 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893008.CAT 2006-12-14 12:38 9782 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB892489.CAT 2006-12-14 12:38 9782 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890831.CAT 2006-12-14 12:38 9782 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB889320.CAT 2006-12-14 12:38 9782 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB885626.CAT 2006-12-14 12:38 9748 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921401.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921411.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921337.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB919071.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918033.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917730.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB916189.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914906.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914841.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914463.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB912461.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB909667.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908536.CAT 2006-12-14 12:38 9694 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB907717.CAT 2006-12-14 12:38 9500 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB909441.CAT 2006-12-14 12:38 9500 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB900485.CAT 2006-12-14 12:38 9500 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899409.CAT 2006-12-14 12:38 9500 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896626.CAT 2006-12-14 12:38 9500 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB895961.CAT 2006-12-14 12:38 9479 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924692.CAT 2006-12-14 12:38 94720 –a–c— C:\WINDOWS.2\system32\dllcache\imekr61.ime 2006-12-14 12:38 9435 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924191.CAT 2006-12-14 12:38 8847 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB925486.CAT 2006-12-14 12:38 8792 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911564.CAT 2006-12-14 12:38 86073 –a–c— C:\WINDOWS.2\system32\dllcache\voicesub.dll 2006-12-14 12:38 8557 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922599.CAT 2006-12-14 12:38 8297 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB887606.CAT 2006-12-14 12:38 81976 –a–c— C:\WINDOWS.2\system32\dllcache\imjpdct.dll 2006-12-14 12:38 811064 –a–c— C:\WINDOWS.2\system32\dllcache\imjp81k.dll 2006-12-14 12:38 716856 –a–c— C:\WINDOWS.2\system32\dllcache\imjpcus.dll 2006-12-14 12:38 57399 –a–c— C:\WINDOWS.2\system32\dllcache\cplexe.exe 2006-12-14 12:38 450048 –a–c— C:\WINDOWS.2\system32\dllcache\aclayers.dll 2006-12-14 12:38 450048 –a—— C:\WINDOWS.2\AppPatch\AcLayers.dll 2006-12-14 12:38 426041 –a–c— C:\WINDOWS.2\system32\dllcache\voicepad.dll 2006-12-14 12:38 368696 –a–c— C:\WINDOWS.2\system32\dllcache\imjpcic.dll 2006-12-14 12:38 340023 –a–c— C:\WINDOWS.2\system32\dllcache\imjp81.ime 2006-12-14 12:38 29535 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB888111.CAT 2006-12-14 12:38 29451 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893803.CAT 2006-12-14 12:38 274489 –a–c— C:\WINDOWS.2\system32\dllcache\imjputyc.dll 2006-12-14 12:38 262200 –a–c— C:\WINDOWS.2\system32\dllcache\imjputy.exe 2006-12-14 12:38 25200 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922668.CAT 2006-12-14 12:38 245248 –a–c— C:\WINDOWS.2\system32\dllcache\acspecfc.dll 2006-12-14 12:38 245248 –a—— C:\WINDOWS.2\AppPatch\AcSpecfc.dll 2006-12-14 12:38 233527 –a–c— C:\WINDOWS.2\system32\dllcache\imjprw.exe 2006-12-14 12:38 22261 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922760.CAT 2006-12-14 12:38 208952 –a–c— C:\WINDOWS.2\system32\dllcache\imjpmig.exe 2006-12-14 12:38 196665 –a–c— C:\WINDOWS.2\system32\dllcache\imjpinst.exe 2006-12-14 12:38 1933 –a—— C:\WINDOWS.2\inf\svcpack.inf 2006-12-14 12:38 1852928 –a–c— C:\WINDOWS.2\system32\dllcache\acgenral.dll 2006-12-14 12:38 1852928 –a—— C:\WINDOWS.2\AppPatch\AcGenral.dll 2006-12-14 12:38 18393 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB907265.CAT 2006-12-14 12:38 18226 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896344.CAT 2006-12-14 12:38 18199 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890859.CAT 2006-12-14 12:38 16203 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914388.CAT 2006-12-14 12:38 15945 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB913580.CAT 2006-12-14 12:38 155705 –a–c— C:\WINDOWS.2\system32\dllcache\imjpdsvr.exe 2006-12-14 12:38 15022 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896358.CAT 2006-12-14 12:38 14901 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922819.CAT 2006-12-14 12:38 14795 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB894395.CAT 2006-12-14 12:38 14348 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB897338.CAT 2006-12-14 12:38 141312 –a–c— C:\WINDOWS.2\system32\dllcache\aclua.dll 2006-12-14 12:38 141312 –a—— C:\WINDOWS.2\AppPatch\AcLua.dll 2006-12-14 12:38 14054 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908531.CAT 2006-12-14 12:38 13402 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB909520.CAT 2006-12-14 12:38 13309 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911280.CAT 2006-12-14 12:38 13285 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923191.CAT 2006-12-14 12:38 13083 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920342.CAT 2006-12-14 12:38 12525 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB916846.CAT 2006-12-14 12:38 12455 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911567.CAT 2006-12-14 12:38 12143 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893756.CAT 2006-12-14 12:38 12039 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908519.CAT 2006-12-14 12:38 11929 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920685.CAT 2006-12-14 12:38 11929 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920683.CAT 2006-12-14 12:38 11900 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB889673.CAT 2006-12-14 12:38 11857 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920872.CAT 2006-12-14 12:38 11845 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB901214.CAT 2006-12-14 12:38 11749 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922582.CAT 2006-12-14 12:38 11749 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918766.CAT 2006-12-14 12:38 116224 –a–c— C:\WINDOWS.2\system32\dllcache\acxtrnal.dll 2006-12-14 12:38 116224 –a—— C:\WINDOWS.2\AppPatch\AcXtrnal.dll 2006-12-14 12:38 11459 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923154.CAT 2006-12-14 12:38 11437 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896423.CAT 2006-12-14 12:38 11421 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB885836.CAT 2006-12-14 12:38 11318 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896256.CAT 2006-12-14 12:38 11231 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918334.CAT 2006-12-14 12:38 11223 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911927.CAT 2006-12-14 12:38 11106 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB909608.CAT 2006-12-14 12:38 11084 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB905749.CAT 2006-12-14 12:38 11084 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB905414.CAT 2006-12-14 12:38 11084 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB901017.CAT 2006-12-14 12:38 11084 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899591.CAT 2006-12-14 12:38 11079 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB912024.CAT 2006-12-14 12:38 11068 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB888302.CAT 2006-12-14 12:38 11068 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB873339.CAT 2006-12-14 12:38 11043 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918439.CAT 2006-12-14 12:38 10980 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB901190.CAT 2006-12-14 12:38 10965 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923980.CAT 2006-12-14 12:38 10965 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920213.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923414.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922616.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920670.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB919007.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917953.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB913446.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911562.CAT 2006-12-14 12:38 10925 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB910437.CAT 2006-12-14 12:38 10912 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB898543.CAT 2006-12-14 12:38 10861 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB889816.CAT 2006-12-14 12:38 10786 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896428.CAT 2006-12-14 12:38 10785 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899271.CAT 2006-12-14 12:38 10697 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\SCRIPTEN.CAT 2006-12-14 12:38 10690 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914440.CAT 2006-12-14 12:38 10441 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB906216.CAT 2006-12-14 12:38 10441 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB897663.CAT 2006-12-14 12:38 10425 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB889016.CAT 2006-12-14 12:38 10425 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB887472.CAT 2006-12-14 12:38 10425 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB886677.CAT 2006-12-14 12:38 10425 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB883667.CAT 2006-12-14 12:38 10337 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920214.CAT 2006-12-14 12:38 10337 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB916595.CAT 2006-12-14 12:38 10337 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB904942.CAT 2006-12-14 12:38 10282 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924867.CAT 2006-12-14 12:38 10282 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923232.CAT 2006-12-14 12:38 10282 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920183.CAT 2006-12-14 12:38 10259 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924270.CAT 2006-12-14 12:38 10151 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB906569.CAT 2006-12-14 12:38 10151 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB898900.CAT 2006-12-14 12:38 10135 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB884575.CAT 2006-12-14 12:38 10101 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924941.CAT 2006-12-14 12:38 10047 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922859.CAT 2006-12-14 12:38 10047 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB913296.CAT 2006-12-14 12:38 10047 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911990.CAT 2006-12-14 12:38 10038 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB910678.CAT 2006-12-14 12:38 100352 –a–c— C:\WINDOWS.2\system32\dllcache\6to4svc.dll 2006-12-14 12:38 100352 –a—— C:\WINDOWS.2\system32\6to4svc.dll 2006-12-01 05:20 212480 –a—— C:\WINDOWS.2\system32\swxcacls.exe 2006-11-29 17:21 370688 –a—— C:\WINDOWS.2\system32\swsc.exe 2006-11-27 02:34 49152 –a—— C:\WINDOWS.2\system32\vfind.exe 2006-11-05 03:20 8359 -ra—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8\4.20.9841.0.cat 2006-11-05 03:20 8349 -ra—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a.cat 2006-11-05 03:20 8347 -ra—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213.cat 2006-11-05 03:17 1245696 -ra—— C:\WINDOWS.2\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\msxml4.dll 2006-08-26 00:43 8339 -ra—— C:\WINDOWS.2\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03.cat 2006-08-26 00:43 8335 -ra—— C:\WINDOWS.2\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2982.cat 2006-08-25 20:45 1054208 -ra—— C:\WINDOWS.2\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 2006-07-24 01:38 49152 –a—— C:\WINDOWS.2\nircmd.exe 2006-06-28 07:20 82432 -ra—— C:\WINDOWS.2\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll 2006-05-12 12:03 6144 –a—— C:\WINDOWS.2\system32\kbdpash.dll 2006-05-12 12:03 6144 –a—— C:\WINDOWS.2\system32\kbdnepr.dll 2006-05-12 12:03 6144 –a—— C:\WINDOWS.2\system32\kbdiultn.dll 2006-05-12 12:03 6144 –a—— C:\WINDOWS.2\system32\kbdbhc.dll 2006-05-11 15:22 867330 –a—— C:\WINDOWS.2\inf\intl.inf 2005-11-09 00:26 38400 –a—— C:\WINDOWS.2\system32\moveex.exe 2005-05-11 07:51 75776 –a–c— C:\WINDOWS.2\system32\dllcache\telnet.exe 2005-05-11 07:51 75776 –a—— C:\WINDOWS.2\system32\telnet.exe 2004-08-04 08:56 74752 –a—— C:\WINDOWS.2\system32\storprop.dll 2004-08-04 08:56 74240 –a—— C:\WINDOWS.2\system32\usbui.dll 2004-08-04 06:59 57472 –a—— C:\WINDOWS.2\system32\drivers\redbook.sys 2004-08-04 02:03 1042903 -ra—— C:\WINDOWS.2\SET3.tmp 2004-08-04 02:03 1042903 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\SP2.CAT 2004-08-04 02:03 1042903 –a–c— C:\WINDOWS.2\system32\dllcache\SP2.CAT 2004-08-04 02:02 110116 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\tabletpc.cat 2004-08-04 02:02 110116 –a–c— C:\WINDOWS.2\system32\dllcache\tabletpc.cat 2004-08-04 01:58 9581 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSMSGS.CAT 2004-08-04 01:58 9581 –a–c— C:\WINDOWS.2\system32\dllcache\MSMSGS.CAT 2004-08-04 01:58 7245 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSTSWEB.CAT 2004-08-04 01:58 7245 –a–c— C:\WINDOWS.2\system32\dllcache\MSTSWEB.CAT 2004-08-04 01:58 502724 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT 2004-08-04 01:58 502724 –a–c— C:\WINDOWS.2\system32\dllcache\NT5INF.CAT 2004-08-04 01:58 31281 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\FP4.CAT 2004-08-04 01:58 31281 –a–c— C:\WINDOWS.2\system32\dllcache\FP4.CAT 2004-08-04 01:58 24209 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat 2004-08-04 01:58 24209 –a–c— C:\WINDOWS.2\system32\dllcache\msn7.cat 2004-08-04 01:58 2012670 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT 2004-08-04 01:58 2012670 –a–c— C:\WINDOWS.2\system32\dllcache\NT5.CAT 2004-08-04 01:58 141702 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\netfx.cat 2004-08-04 01:58 141702 –a–c— C:\WINDOWS.2\system32\dllcache\netfx.cat 2004-08-04 01:58 13753 -ra—— C:\WINDOWS.2\SET8.tmp 2004-08-04 01:58 13753 –a-s—- C:\WINDOWS.2\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IMS.CAT 2004-08-04 01:58 13753 –a–c— C:\WINDOWS.2\system32\dllcache\IMS.CAT

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Closed] Computer Infection - Lockdown

✨ Ask AI

Ask AI