Spyware / Malware / Virus Removal

[Resolved] Yet another infection...I think.

154 min read

Looking for the outcome? Ask AI

medicman151

Post #16November 11, 2007, 7:20 PM UTC

+ 2004-08-04 10:00:00 12,288 -c–a-w C:\WINDOWS\system32\dllcache\odbcp32r.dll + 2004-08-04 10:00:00 147,456 -c–a-w C:\WINDOWS\system32\dllcache\odbctrac.dll + 2004-08-04 10:00:00 20,511 -c–a-w C:\WINDOWS\system32\dllcache\oddbse32.dll + 2004-08-04 10:00:00 20,510 -c–a-w C:\WINDOWS\system32\dllcache\odexl32.dll + 2004-08-04 10:00:00 20,510 -c–a-w C:\WINDOWS\system32\dllcache\odfox32.dll + 2004-08-04 10:00:00 20,510 -c–a-w C:\WINDOWS\system32\dllcache\odpdx32.dll + 2004-08-04 10:00:00 20,511 -c–a-w C:\WINDOWS\system32\dllcache\odtext32.dll + 2004-08-04 07:56:44 104,448 -c–a-w C:\WINDOWS\system32\dllcache\oeimport.dll - 2003-07-16 20:54:54 13,107,200 -c–a-w C:\WINDOWS\system32\dllcache\oembios.bin + 2005-03-22 18:48:43 13,107,200 -c–a-w C:\WINDOWS\system32\dllcache\oembios.bin - 2003-07-16 20:54:55 4,594 -c–a-w C:\WINDOWS\system32\dllcache\oembios.dat + 2005-03-22 18:48:43 4,627 -c–a-w C:\WINDOWS\system32\dllcache\oembios.dat + 2004-08-04 10:00:00 60,416 -c–a-w C:\WINDOWS\system32\dllcache\oemig50.exe + 2004-08-04 07:56:44 35,328 -c–a-w C:\WINDOWS\system32\dllcache\oemiglib.dll + 2004-08-04 10:00:00 120,832 -c–a-w C:\WINDOWS\system32\dllcache\offfilt.dll - 2003-07-16 20:40:32 39,744 -c–a-w C:\WINDOWS\system32\dllcache\ole2.dll + 2004-08-04 10:00:00 39,744 -c–a-w C:\WINDOWS\system32\dllcache\ole2.dll - 2003-07-16 20:40:32 169,520 -c–a-w C:\WINDOWS\system32\dllcache\ole2disp.dll + 2004-08-04 10:00:00 169,520 -c–a-w C:\WINDOWS\system32\dllcache\ole2disp.dll - 2003-07-16 20:40:33 153,008 -c–a-w C:\WINDOWS\system32\dllcache\ole2nls.dll + 2004-08-04 10:00:00 153,008 -c–a-w C:\WINDOWS\system32\dllcache\ole2nls.dll + 2005-07-26 04:39:48 1,285,120 -c–a-w C:\WINDOWS\system32\dllcache\ole32.dll - 2003-07-16 20:40:34 163,328 -c–a-w C:\WINDOWS\system32\dllcache\oleacc.dll + 2004-08-04 10:00:00 163,328 -c–a-w C:\WINDOWS\system32\dllcache\oleacc.dll - 2003-07-16 20:40:34 16,896 -c–a-w C:\WINDOWS\system32\dllcache\oleaccrc.dll + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\oleaccrc.dll - 2003-07-16 20:40:36 82,944 -c–a-w C:\WINDOWS\system32\dllcache\olecli.dll + 2004-08-04 10:00:00 82,944 -c–a-w C:\WINDOWS\system32\dllcache\olecli.dll + 2004-08-04 07:56:44 487,424 -c–a-w C:\WINDOWS\system32\dllcache\oledb32.dll + 2004-08-04 07:56:44 65,536 -c–a-w C:\WINDOWS\system32\dllcache\oledb32r.dll + 2004-08-04 10:00:00 107,008 -c–a-w C:\WINDOWS\system32\dllcache\oleprn.dll + 2004-08-04 10:00:00 83,456 -c–a-w C:\WINDOWS\system32\dllcache\olepro32.dll - 2003-07-16 20:40:41 24,064 -c–a-w C:\WINDOWS\system32\dllcache\olesvr.dll + 2004-08-04 10:00:00 24,064 -c–a-w C:\WINDOWS\system32\dllcache\olesvr.dll - 2003-07-16 20:40:41 22,016 -c–a-w C:\WINDOWS\system32\dllcache\olesvr32.dll + 2004-08-04 10:00:00 22,016 -c–a-w C:\WINDOWS\system32\dllcache\olesvr32.dll - 2003-07-16 20:40:42 69,120 -c–a-w C:\WINDOWS\system32\dllcache\olethk32.dll + 2004-08-04 10:00:00 69,120 -c–a-w C:\WINDOWS\system32\dllcache\olethk32.dll + 2004-08-04 10:00:00 51,200 -c–a-w C:\WINDOWS\system32\dllcache\oobebaln.exe + 2004-08-04 10:00:00 713,728 -c–a-w C:\WINDOWS\system32\dllcache\opengl32.dll + 2004-08-04 10:00:00 215,552 -c–a-w C:\WINDOWS\system32\dllcache\osk.exe + 2004-08-04 10:00:00 67,584 -c–a-w C:\WINDOWS\system32\dllcache\osuninst.dll - 2007-11-03 12:19:18 47,104 -c–a-w C:\WINDOWS\system32\dllcache\osuninst.exe + 2004-08-04 10:00:00 40,448 -c–a-w C:\WINDOWS\system32\dllcache\osuninst.exe + 2004-08-04 10:00:00 116,224 -c–a-w C:\WINDOWS\system32\dllcache\p2p.dll + 2004-08-04 10:00:00 86,016 -c–a-w C:\WINDOWS\system32\dllcache\p2pgasvc.dll + 2004-08-04 10:00:00 312,320 -c–a-w C:\WINDOWS\system32\dllcache\p2pgraph.dll + 2004-08-04 10:00:00 88,064 -c–a-w C:\WINDOWS\system32\dllcache\p2pnetsh.dll + 2004-08-04 10:00:00 526,848 -c–a-w C:\WINDOWS\system32\dllcache\p2psvc.dll + 2004-08-04 10:00:00 58,368 -c–a-w C:\WINDOWS\system32\dllcache\packager.exe - 2003-07-16 20:23:02 15,872 -c–a-w C:\WINDOWS\system32\dllcache\padrs404.dll + 2004-08-04 10:00:00 15,872 -c–a-w C:\WINDOWS\system32\dllcache\padrs404.dll - 2003-07-16 20:23:02 36,927 -c–a-w C:\WINDOWS\system32\dllcache\padrs411.dll + 2004-08-04 10:00:00 36,927 -c–a-w C:\WINDOWS\system32\dllcache\padrs411.dll - 2003-07-16 20:23:03 14,336 -c–a-w C:\WINDOWS\system32\dllcache\padrs412.dll + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\padrs412.dll - 2003-07-16 20:23:03 15,360 -c–a-w C:\WINDOWS\system32\dllcache\padrs804.dll + 2004-08-04 10:00:00 15,360 -c–a-w C:\WINDOWS\system32\dllcache\padrs804.dll - 2003-07-16 20:41:00 10,240 -c–a-w C:\WINDOWS\system32\dllcache\panmap.dll + 2004-08-04 10:00:00 10,240 -c–a-w C:\WINDOWS\system32\dllcache\panmap.dll - 2003-07-16 20:41:02 18,688 -c–a-w C:\WINDOWS\system32\dllcache\partmgr.sys + 2004-08-04 10:00:00 18,688 -c–a-w C:\WINDOWS\system32\dllcache\partmgr.sys - 2003-07-16 20:41:02 6,784 -c–a-w C:\WINDOWS\system32\dllcache\parvdm.sys + 2004-08-04 10:00:00 6,784 -c–a-w C:\WINDOWS\system32\dllcache\parvdm.sys - 2007-11-03 12:19:18 28,160 -c–a-w C:\WINDOWS\system32\dllcache\pathping.exe + 2004-08-04 10:00:00 21,504 -c–a-w C:\WINDOWS\system32\dllcache\pathping.exe + 2004-08-04 10:00:00 62,976 -c–a-w C:\WINDOWS\system32\dllcache\pautoenr.dll + 2004-08-04 07:56:44 102,400 -c–a-w C:\WINDOWS\system32\dllcache\pchshell.dll + 2004-08-04 07:56:44 38,912 -c–a-w C:\WINDOWS\system32\dllcache\pchsvc.dll + 2004-08-04 10:00:00 283,648 -c–a-w C:\WINDOWS\system32\dllcache\pdh.dll - 2007-11-03 12:19:18 22,016 -c–a-w C:\WINDOWS\system32\dllcache\pentnt.exe + 2004-08-04 10:00:00 15,360 -c–a-w C:\WINDOWS\system32\dllcache\pentnt.exe + 2004-08-04 10:00:00 39,936 -c–a-w C:\WINDOWS\system32\dllcache\perfctrs.dll + 2004-08-04 10:00:00 26,624 -c–a-w C:\WINDOWS\system32\dllcache\perfdisk.dll + 2004-08-04 10:00:00 15,872 -c–a-w C:\WINDOWS\system32\dllcache\perfmon.exe - 2003-07-16 20:41:27 16,896 -c–a-w C:\WINDOWS\system32\dllcache\perfnet.dll + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\perfnet.dll + 2004-08-04 10:00:00 25,088 -c–a-w C:\WINDOWS\system32\dllcache\perfos.dll + 2004-08-04 10:00:00 34,816 -c–a-w C:\WINDOWS\system32\dllcache\perfproc.dll - 2003-07-16 20:41:28 12,288 -c–a-w C:\WINDOWS\system32\dllcache\perfts.dll + 2004-08-04 10:00:00 12,288 -c–a-w C:\WINDOWS\system32\dllcache\perfts.dll + 2004-08-04 10:00:00 176,128 -c–a-w C:\WINDOWS\system32\dllcache\photowiz.dll + 2004-08-04 10:00:00 24,064 -c–a-w C:\WINDOWS\system32\dllcache\pidgen.dll - 2003-07-16 20:41:46 35,328 -c–a-w C:\WINDOWS\system32\dllcache\pifmgr.dll + 2004-08-04 10:00:00 35,328 -c–a-w C:\WINDOWS\system32\dllcache\pifmgr.dll + 2004-08-04 10:00:00 281,088 -c–a-w C:\WINDOWS\system32\dllcache\pinball.exe + 2004-08-04 10:00:00 17,920 -c–a-w C:\WINDOWS\system32\dllcache\ping.exe - 2007-11-03 12:19:18 39,936 -c–a-w C:\WINDOWS\system32\dllcache\ping6.exe + 2004-08-04 10:00:00 33,280 -c–a-w C:\WINDOWS\system32\dllcache\ping6.exe - 2003-07-16 20:23:05 175,104 -c–a-w C:\WINDOWS\system32\dllcache\pintlcsa.dll + 2004-08-04 10:00:00 175,104 -c–a-w C:\WINDOWS\system32\dllcache\pintlcsa.dll - 2003-07-16 20:23:05 53,760 -c–a-w C:\WINDOWS\system32\dllcache\pintlcsd.dll + 2004-08-04 10:00:00 53,760 -c–a-w C:\WINDOWS\system32\dllcache\pintlcsd.dll - 2007-11-03 12:19:18 76,800 -c–a-w C:\WINDOWS\system32\dllcache\pintlphr.exe + 2004-08-04 10:00:00 70,144 -c–a-w C:\WINDOWS\system32\dllcache\pintlphr.exe - 2003-07-16 20:41:52 30,720 -c–a-w C:\WINDOWS\system32\dllcache\plustab.dll + 2004-08-04 10:00:00 30,720 -c–a-w C:\WINDOWS\system32\dllcache\plustab.dll - 2003-07-16 20:23:11 67,584 -c–a-w C:\WINDOWS\system32\dllcache\pmigrate.dll + 2004-08-04 10:00:00 67,584 -c–a-w C:\WINDOWS\system32\dllcache\pmigrate.dll - 2003-07-16 20:41:53 46,592 -c–a-w C:\WINDOWS\system32\dllcache\pmspl.dll + 2004-08-04 10:00:00 46,592 -c–a-w C:\WINDOWS\system32\dllcache\pmspl.dll - 2003-07-16 20:41:53 6,144 -c–a-w C:\WINDOWS\system32\dllcache\pmxgl.dll + 2004-08-04 10:00:00 6,144 -c–a-w C:\WINDOWS\system32\dllcache\pmxgl.dll - 2003-07-16 20:41:53 11,264 -c–a-w C:\WINDOWS\system32\dllcache\pmxmcro.dll + 2004-08-04 10:00:00 11,264 -c–a-w C:\WINDOWS\system32\dllcache\pmxmcro.dll - 2003-07-16 20:41:54 131,584 -c–a-w C:\WINDOWS\system32\dllcache\pmxviceo.dll + 2004-08-04 10:00:00 131,584 -c–a-w C:\WINDOWS\system32\dllcache\pmxviceo.dll - 2006-10-17 15:58:08 44,544 -c–a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2007-08-13 23:36:12 44,544 -c–a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2004-08-04 10:00:00 48,640 -c–a-w C:\WINDOWS\system32\dllcache\pnrpnsp.dll + 2004-08-04 10:00:00 105,472 -c–a-w C:\WINDOWS\system32\dllcache\polstore.dll + 2004-08-04 10:00:00 49,152 -c–a-w C:\WINDOWS\system32\dllcache\powercfg.exe + 2004-08-04 10:00:00 17,408 -c–a-w C:\WINDOWS\system32\dllcache\powrprof.dll - 2003-07-16 20:42:03 16,384 -c–a-w C:\WINDOWS\system32\dllcache\prflbmsg.dll + 2004-08-04 10:00:00 16,384 -c–a-w C:\WINDOWS\system32\dllcache\prflbmsg.dll - 2007-11-03 12:19:18 15,872 -c–a-w C:\WINDOWS\system32\dllcache\print.exe + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\print.exe + 2004-08-04 10:00:00 560,640 -c–a-w C:\WINDOWS\system32\dllcache\printui.dll + 2004-08-04 10:00:00 27,648 -c–a-w C:\WINDOWS\system32\dllcache\profmap.dll + 2004-08-04 10:00:00 109,568 -c–a-w C:\WINDOWS\system32\dllcache\progman.exe + 2004-08-04 10:00:00 50,176 -c–a-w C:\WINDOWS\system32\dllcache\proquota.exe + 2004-08-04 07:56:44 237,056 -c–a-w C:\WINDOWS\system32\dllcache\provthrd.dll + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\proxycfg.exe + 2004-08-04 10:00:00 23,040 -c–a-w C:\WINDOWS\system32\dllcache\psapi.dll + 2004-08-04 10:00:00 96,768 -c–a-w C:\WINDOWS\system32\dllcache\psbase.dll - 2003-07-16 20:42:15 10,752 -c–a-w C:\WINDOWS\system32\dllcache\pschdprf.dll + 2004-08-04 10:00:00 10,752 -c–a-w C:\WINDOWS\system32\dllcache\pschdprf.dll + 2004-08-04 10:00:00 69,120 -c–a-w C:\WINDOWS\system32\dllcache\psched.sys - 2003-07-16 20:42:16 8,192 -c–a-w C:\WINDOWS\system32\dllcache\psnppagn.dll + 2004-08-04 10:00:00 8,192 -c–a-w C:\WINDOWS\system32\dllcache\psnppagn.dll + 2004-08-04 10:00:00 43,520 -c–a-w C:\WINDOWS\system32\dllcache\pstorec.dll + 2004-08-04 10:00:00 34,304 -c–a-w C:\WINDOWS\system32\dllcache\pstorsvc.dll - 2003-07-16 20:42:18 17,792 -c–a-w C:\WINDOWS\system32\dllcache\ptilink.sys + 2004-08-04 10:00:00 17,792 -c–a-w C:\WINDOWS\system32\dllcache\ptilink.sys - 2003-07-16 20:42:18 3,708 -c–a-w C:\WINDOWS\system32\dllcache\pubprn.vbs + 2004-08-04 10:00:00 3,708 -c–a-w C:\WINDOWS\system32\dllcache\pubprn.vbs - 2007-11-03 12:19:18 23,552 -c–a-w C:\WINDOWS\system32\dllcache\qappsrv.exe + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\qappsrv.exe + 2004-08-04 10:00:00 237,568 -c–a-w C:\WINDOWS\system32\dllcache\qasf.dll + 2004-08-04 10:00:00 192,512 -c–a-w C:\WINDOWS\system32\dllcache\qcap.dll + 2004-08-04 10:00:00 279,040 -c–a-w C:\WINDOWS\system32\dllcache\qdv.dll + 2004-08-04 10:00:00 385,024 -c–a-w C:\WINDOWS\system32\dllcache\qdvd.dll + 2004-08-04 10:00:00 562,176 -c–a-w C:\WINDOWS\system32\dllcache\qedit.dll + 2004-08-04 10:00:00 733,696 -c–a-w C:\WINDOWS\system32\dllcache\qedwipes.dll + 2004-08-04 07:56:44 382,464 -c–a-w C:\WINDOWS\system32\dllcache\qmgr.dll + 2004-08-04 07:56:44 18,944 -c–a-w C:\WINDOWS\system32\dllcache\qmgrprxy.dll - 2003-07-16 20:42:29 8,192 -c–a-w C:\WINDOWS\system32\dllcache\qosname.dll + 2004-08-04 10:00:00 8,192 -c–a-w C:\WINDOWS\system32\dllcache\qosname.dll + 2004-08-04 10:00:00 20,480 -c–a-w C:\WINDOWS\system32\dllcache\qprocess.exe + 2005-08-30 03:54:26 1,287,168 -c–a-w C:\WINDOWS\system32\dllcache\quartz.dll - 2007-11-03 12:19:18 16,384 -c–a-w C:\WINDOWS\system32\dllcache\query.exe + 2004-08-04 10:00:00 9,728 -c–a-w C:\WINDOWS\system32\dllcache\query.exe - 2007-11-03 12:19:18 23,040 -c–a-w C:\WINDOWS\system32\dllcache\quser.exe + 2004-08-04 10:00:00 16,384 -c–a-w C:\WINDOWS\system32\dllcache\quser.exe - 2007-11-03 12:19:18 28,672 -c–a-w C:\WINDOWS\system32\dllcache\qwinsta.exe + 2002-08-29 12:00:00 22,016 -c–a-w C:\WINDOWS\system32\dllcache\qwinsta.exe + 2004-08-04 07:56:44 43,520 -c–a-w C:\WINDOWS\system32\dllcache\racpldlg.dll + 2004-08-04 10:00:00 20,736 -c–a-w C:\WINDOWS\system32\dllcache\ramdisk.sys - 2003-07-16 20:42:37 8,832 -c–a-w C:\WINDOWS\system32\dllcache\rasacd.sys + 2004-08-04 10:00:00 8,832 -c–a-w C:\WINDOWS\system32\dllcache\rasacd.sys + 2004-08-04 10:00:00 236,544 -c–a-w C:\WINDOWS\system32\dllcache\rasapi32.dll + 2004-08-04 10:00:00 89,088 -c–a-w C:\WINDOWS\system32\dllcache\rasauto.dll - 2007-11-03 12:19:18 18,432 -c–a-w C:\WINDOWS\system32\dllcache\rasautou.exe + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\rasautou.exe + 2004-08-04 10:00:00 69,632 -c–a-w C:\WINDOWS\system32\dllcache\raschap.dll - 2003-07-16 20:42:40 11,776 -c–a-w C:\WINDOWS\system32\dllcache\rasctrs.dll + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\rasctrs.dll - 2007-11-03 12:19:18 17,920 -c–a-w C:\WINDOWS\system32\dllcache\rasdial.exe + 2004-08-04 10:00:00 11,264 -c–a-w C:\WINDOWS\system32\dllcache\rasdial.exe + 2004-08-04 10:00:00 657,920 -c–a-w C:\WINDOWS\system32\dllcache\rasdlg.dll + 2004-08-04 10:00:00 51,328 -c–a-w C:\WINDOWS\system32\dllcache\rasl2tp.sys + 2004-08-04 10:00:00 61,440 -c–a-w C:\WINDOWS\system32\dllcache\rasman.dll - 2003-07-16 20:42:42 143,360 -c–a-w C:\WINDOWS\system32\dllcache\rasmontr.dll + 2004-08-04 10:00:00 143,360 -c–a-w C:\WINDOWS\system32\dllcache\rasmontr.dll - 2003-07-16 20:42:43 22,528 -c–a-w C:\WINDOWS\system32\dllcache\rasmxs.dll + 2004-08-04 10:00:00 22,528 -c–a-w C:\WINDOWS\system32\dllcache\rasmxs.dll + 2004-08-04 10:00:00 56,832 -c–a-w C:\WINDOWS\system32\dllcache\rasphone.exe + 2004-08-04 10:00:00 206,336 -c–a-w C:\WINDOWS\system32\dllcache\rasppp.dll + 2004-08-04 10:00:00 41,472 -c–a-w C:\WINDOWS\system32\dllcache\raspppoe.sys + 2004-08-04 10:00:00 48,384 -c–a-w C:\WINDOWS\system32\dllcache\raspptp.sys - 2003-07-16 20:42:45 16,512 -c–a-w C:\WINDOWS\system32\dllcache\raspti.sys + 2004-08-04 10:00:00 16,512 -c–a-w C:\WINDOWS\system32\dllcache\raspti.sys - 2003-07-16 20:42:45 23,552 -c–a-w C:\WINDOWS\system32\dllcache\rasrad.dll + 2004-08-04 10:00:00 23,552 -c–a-w C:\WINDOWS\system32\dllcache\rasrad.dll + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\rassapi.dll - 2003-07-16 20:42:46 12,800 -c–a-w C:\WINDOWS\system32\dllcache\rasser.dll + 2004-08-04 10:00:00 12,800 -c–a-w C:\WINDOWS\system32\dllcache\rasser.dll + 2004-08-04 10:00:00 58,880 -c–a-w C:\WINDOWS\system32\dllcache\rastapi.dll + 2004-08-04 10:00:00 112,128 -c–a-w C:\WINDOWS\system32\dllcache\rastls.dll - 2003-07-16 20:42:49 34,432 -c–a-w C:\WINDOWS\system32\dllcache\rawwan.sys + 2004-08-04 10:00:00 34,432 -c–a-w C:\WINDOWS\system32\dllcache\rawwan.sys + 2004-08-04 10:00:00 102,400 -c–a-w C:\WINDOWS\system32\dllcache\rcbdyctl.dll + 2004-08-04 10:00:00 35,840 -c–a-w C:\WINDOWS\system32\dllcache\rcimlby.exe + 2004-08-04 10:00:00 21,504 -c–a-w C:\WINDOWS\system32\dllcache\rcp.exe + 2004-08-04 07:56:44 147,968 -c–a-w C:\WINDOWS\system32\dllcache\rdchost.dll - 2003-07-16 20:42:52 4,224 -c–a-w C:\WINDOWS\system32\dllcache\rdpcdd.sys + 2004-08-04 10:00:00 4,224 -c–a-w C:\WINDOWS\system32\dllcache\rdpcdd.sys + 2004-08-04 10:00:00 62,464 -c–a-w C:\WINDOWS\system32\dllcache\rdpclip.exe + 2004-08-04 10:00:00 92,168 -c–a-w C:\WINDOWS\system32\dllcache\rdpdd.dll + 2004-08-04 07:56:44 19,968 -c–a-w C:\WINDOWS\system32\dllcache\rdpsnd.dll + 2005-06-10 04:09:46 139,528 -c–a-w C:\WINDOWS\system32\dllcache\rdpwd.sys + 2004-08-04 08:01:08 87,176 -c–a-w C:\WINDOWS\system32\dllcache\rdpwsx.dll + 2004-08-04 10:00:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\rdsaddin.exe + 2004-08-04 10:00:00 67,072 -c–a-w C:\WINDOWS\system32\dllcache\rdshost.exe - 2007-11-03 12:19:18 13,824 -c–a-w C:\WINDOWS\system32\dllcache\recover.exe + 2004-08-04 10:00:00 7,168 -c–a-w C:\WINDOWS\system32\dllcache\recover.exe + 2004-08-04 10:00:00 3,338 -c–a-w C:\WINDOWS\system32\dllcache\redir.exe + 2004-08-04 10:00:00 50,176 -c–a-w C:\WINDOWS\system32\dllcache\reg.exe + 2004-08-04 10:00:00 49,664 -c–a-w C:\WINDOWS\system32\dllcache\regapi.dll + 2004-08-04 10:00:00 146,432 -c–a-w C:\WINDOWS\system32\dllcache\regedit.exe - 2007-11-03 12:19:18 10,240 -c–a-w C:\WINDOWS\system32\dllcache\regedt32.exe + 2004-08-04 10:00:00 3,584 -c–a-w C:\WINDOWS\system32\dllcache\regedt32.exe - 2007-11-03 12:19:18 40,448 -c–a-w C:\WINDOWS\system32\dllcache\regini.exe + 2002-08-29 12:00:00 33,792 -c–a-w C:\WINDOWS\system32\dllcache\regini.exe - 2007-11-03 12:19:18 21,504 -c–a-w C:\WINDOWS\system32\dllcache\register.exe + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\register.exe + 2004-08-04 10:00:00 59,904 -c–a-w C:\WINDOWS\system32\dllcache\regsvc.dll + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\regsvr32.exe - 2007-11-03 12:19:18 11,264 -c–a-w C:\WINDOWS\system32\dllcache\regwiz.exe + 2004-08-04 10:00:00 4,608 -c–a-w C:\WINDOWS\system32\dllcache\regwiz.exe + 2004-08-04 10:00:00 397,824 -c–a-w C:\WINDOWS\system32\dllcache\regwizc.dll + 2004-08-04 07:56:44 60,416 -c–a-w C:\WINDOWS\system32\dllcache\remotepg.dll - 2003-07-16 20:43:10 107,520 -c–a-w C:\WINDOWS\system32\dllcache\rend.dll + 2004-08-04 10:00:00 107,520 -c–a-w C:\WINDOWS\system32\dllcache\rend.dll + 2004-08-04 07:56:44 177,152 -c–a-w C:\WINDOWS\system32\dllcache\repdrvfs.dll - 2007-11-03 12:19:18 19,456 -c–a-w C:\WINDOWS\system32\dllcache\replace.exe + 2004-08-04 10:00:00 12,800 -c–a-w C:\WINDOWS\system32\dllcache\replace.exe - 2007-11-03 12:19:18 16,384 -c–a-w C:\WINDOWS\system32\dllcache\reset.exe + 2002-08-29 12:00:00 9,728 -c–a-w C:\WINDOWS\system32\dllcache\reset.exe + 2004-08-04 10:00:00 58,880 -c–a-w C:\WINDOWS\system32\dllcache\resutils.dll + 2004-08-04 10:00:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\rexec.exe - 2003-07-16 20:43:13 3,584 -c–a-w C:\WINDOWS\system32\dllcache\riched32.dll + 2004-08-04 10:00:00 3,584 -c–a-w C:\WINDOWS\system32\dllcache\riched32.dll + 2004-08-04 10:00:00 30,080 -c–a-w C:\WINDOWS\system32\dllcache\rndismp.sys - 2003-07-16 20:43:18 3,072 -c–a-w C:\WINDOWS\system32\dllcache\rnr20.dll + 2004-08-04 10:00:00 3,072 -c–a-w C:\WINDOWS\system32\dllcache\rnr20.dll - 2003-07-16 20:43:20 5,888 -c–a-w C:\WINDOWS\system32\dllcache\rootmdm.sys + 2004-08-04 10:00:00 5,888 -c–a-w C:\WINDOWS\system32\dllcache\rootmdm.sys - 2007-11-03 12:19:18 26,624 -c–a-w C:\WINDOWS\system32\dllcache\route.exe + 2004-08-04 10:00:00 19,968 -c–a-w C:\WINDOWS\system32\dllcache\route.exe - 2007-11-03 12:19:18 32,256 -c–a-w C:\WINDOWS\system32\dllcache\routemon.exe + 2004-08-04 10:00:00 25,600 -c–a-w C:\WINDOWS\system32\dllcache\routemon.exe - 2003-07-16 20:43:22 6,656 -c–a-w C:\WINDOWS\system32\dllcache\routetab.dll + 2004-08-04 10:00:00 6,656 -c–a-w C:\WINDOWS\system32\dllcache\routetab.dll - 2003-07-16 20:43:23 22,016 -c–a-w C:\WINDOWS\system32\dllcache\rpcns4.dll + 2004-08-04 10:00:00 22,016 -c–a-w C:\WINDOWS\system32\dllcache\rpcns4.dll + 2005-07-26 04:39:49 397,824 -c–a-w C:\WINDOWS\system32\dllcache\rpcss.dll + 2004-08-04 07:56:44 61,440 -c–a-w C:\WINDOWS\system32\dllcache\rrcm.dll + 2004-08-04 10:00:00 152,576 -c–a-w C:\WINDOWS\system32\dllcache\rsaenh.dll + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\rsh.exe + 2004-08-04 10:00:00 39,936 -c–a-w C:\WINDOWS\system32\dllcache\rshx32.dll - 2007-11-03 12:19:18 55,808 -c–a-w C:\WINDOWS\system32\dllcache\rsm.exe + 2004-08-04 10:00:00 49,152 -c–a-w C:\WINDOWS\system32\dllcache\rsm.exe + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\rsmps.dll - 2007-11-03 12:19:18 31,232 -c–a-w C:\WINDOWS\system32\dllcache\rsmsink.exe + 2004-08-04 10:00:00 24,576 -c–a-w C:\WINDOWS\system32\dllcache\rsmsink.exe - 2007-11-03 12:19:18 55,808 -c–a-w C:\WINDOWS\system32\dllcache\rsmui.exe + 2004-08-04 10:00:00 49,152 -c–a-w C:\WINDOWS\system32\dllcache\rsmui.exe + 2004-08-04 10:00:00 380,416 -c–a-w C:\WINDOWS\system32\dllcache\rstrui.exe - 2007-11-03 12:19:19 139,264 -c–a-w C:\WINDOWS\system32\dllcache\rsvp.exe + 2004-08-04 10:00:00 132,608 -c–a-w C:\WINDOWS\system32\dllcache\rsvp.exe - 2003-07-16 20:43:31 23,552 -c–a-w C:\WINDOWS\system32\dllcache\rsvpmsg.dll + 2004-08-04 10:00:00 23,552 -c–a-w C:\WINDOWS\system32\dllcache\rsvpmsg.dll - 2003-07-16 20:43:31 9,728 -c–a-w C:\WINDOWS\system32\dllcache\rsvpperf.dll + 2004-08-04 10:00:00 9,728 -c–a-w C:\WINDOWS\system32\dllcache\rsvpperf.dll - 2003-07-16 20:43:32 90,112 -c–a-w C:\WINDOWS\system32\dllcache\rsvpsp.dll + 2004-08-04 10:00:00 90,112 -c–a-w C:\WINDOWS\system32\dllcache\rsvpsp.dll + 2004-08-04 10:00:00 77,312 -c–a-w C:\WINDOWS\system32\dllcache\rtcshare.exe + 2004-08-04 10:00:00 31,744 -c–a-w C:\WINDOWS\system32\dllcache\rtipxmib.dll - 2003-07-16 20:43:34 98,304 -c–a-w C:\WINDOWS\system32\dllcache\rtm.dll + 2004-08-04 10:00:00 98,304 -c–a-w C:\WINDOWS\system32\dllcache\rtm.dll + 2004-08-04 10:00:00 44,032 -c–a-w C:\WINDOWS\system32\dllcache\rtutils.dll - 2007-11-03 12:19:19 23,040 -c–a-w C:\WINDOWS\system32\dllcache\runas.exe + 2004-08-04 10:00:00 16,384 -c–a-w C:\WINDOWS\system32\dllcache\runas.exe + 2004-08-04 10:00:00 33,280 -c–a-w C:\WINDOWS\system32\dllcache\rundll32.exe + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\runonce.exe - 2003-07-16 20:43:40 24,576 -c–a-w C:\WINDOWS\system32\dllcache\rw001ext.dll + 2004-08-04 10:00:00 24,576 -c–a-w C:\WINDOWS\system32\dllcache\rw001ext.dll - 2003-07-16 20:43:41 26,624 -c–a-w C:\WINDOWS\system32\dllcache\rw330ext.dll + 2004-08-04 10:00:00 26,624 -c–a-w C:\WINDOWS\system32\dllcache\rw330ext.dll - 2003-07-16 20:43:41 79,872 -c–a-w C:\WINDOWS\system32\dllcache\rwia001.dll + 2004-08-04 10:00:00 79,872 -c–a-w C:\WINDOWS\system32\dllcache\rwia001.dll - 2003-07-16 20:43:43 79,872 -c–a-w C:\WINDOWS\system32\dllcache\rwia330.dll + 2004-08-04 10:00:00 79,872 -c–a-w C:\WINDOWS\system32\dllcache\rwia330.dll - 2007-11-03 12:19:19 22,528 -c–a-w C:\WINDOWS\system32\dllcache\rwinsta.exe + 2002-08-29 12:00:00 15,872 -c–a-w C:\WINDOWS\system32\dllcache\rwinsta.exe + 2004-08-04 07:56:44 43,520 -c–a-w C:\WINDOWS\system32\dllcache\safrcdlg.dll + 2004-08-04 07:56:44 29,696 -c–a-w C:\WINDOWS\system32\dllcache\safrdm.dll + 2004-08-04 07:56:44 45,568 -c–a-w C:\WINDOWS\system32\dllcache\safrslv.dll + 2004-08-04 10:00:00 64,000 -c–a-w C:\WINDOWS\system32\dllcache\samlib.dll + 2004-08-04 10:00:00 415,744 -c–a-w C:\WINDOWS\system32\dllcache\samsrv.dll + 2004-08-04 07:56:44 741,376 -c–a-w C:\WINDOWS\system32\dllcache\sapi.dll + 2004-08-04 10:00:00 13,312 -c–a-w C:\WINDOWS\system32\dllcache\savedump.exe + 2004-08-04 10:00:00 270,848 -c–a-w C:\WINDOWS\system32\dllcache\sbe.dll + 2004-08-04 10:00:00 159,232 -c–a-w C:\WINDOWS\system32\dllcache\sbeio.dll - 2007-11-03 12:19:19 37,888 -c–a-w C:\WINDOWS\system32\dllcache\sc.exe + 2004-08-04 10:00:00 31,232 -c–a-w C:\WINDOWS\system32\dllcache\sc.exe + 2004-08-04 10:00:00 69,632 -c–a-w C:\WINDOWS\system32\dllcache\scarddlg.dll - 2003-07-16 20:43:55 118,784 -c–a-w C:\WINDOWS\system32\dllcache\scardssp.dll + 2004-08-04 10:00:00 118,784 -c–a-w C:\WINDOWS\system32\dllcache\scardssp.dll + 2004-08-04 10:00:00 95,744 -c–a-w C:\WINDOWS\system32\dllcache\scardsvr.exe - 2003-07-16 20:43:56 169,984 -c–a-w C:\WINDOWS\system32\dllcache\sccbase.dll + 2004-08-04 10:00:00 169,984 -c–a-w C:\WINDOWS\system32\dllcache\sccbase.dll + 2004-08-04 10:00:00 171,008 -c–a-w C:\WINDOWS\system32\dllcache\sccsccp.dll + 2004-08-04 10:00:00 180,224 -c–a-w C:\WINDOWS\system32\dllcache\scecli.dll + 2004-08-04 10:00:00 313,856 -c–a-w C:\WINDOWS\system32\dllcache\scesrv.dll + 2004-08-04 07:56:44 190,976 -c–a-w C:\WINDOWS\system32\dllcache\schedsvc.dll + 2004-08-04 10:00:00 20,992 -c–a-w C:\WINDOWS\system32\dllcache\sclgntfy.dll + 2004-08-04 10:00:00 36,864 -c–a-w C:\WINDOWS\system32\dllcache\scrcons.exe - 2003-07-16 20:44:02 26,624 -c–a-w C:\WINDOWS\system32\dllcache\scredir.dll + 2004-08-04 10:00:00 26,624 -c–a-w C:\WINDOWS\system32\dllcache\scredir.dll + 2004-08-04 10:00:00 202,752 -c–a-w C:\WINDOWS\system32\dllcache\script.dll + 2004-08-04 10:00:00 188,416 -c–a-w C:\WINDOWS\system32\dllcache\script_a.dll + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\scrnsave.scr + 2004-08-04 10:00:00 159,744 -c–a-w C:\WINDOWS\system32\dllcache\scrobj.dll + 2004-08-04 10:00:00 151,552 -c–a-w C:\WINDOWS\system32\dllcache\scrrun.dll + 2004-08-04 10:00:00 77,312 -c–a-w C:\WINDOWS\system32\dllcache\sdbinst.exe - 2003-07-16 20:44:07 130,048 -c–a-w C:\WINDOWS\system32\dllcache\sdpblb.dll + 2004-08-04 10:00:00 130,048 -c–a-w C:\WINDOWS\system32\dllcache\sdpblb.dll + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\seclogon.dll + 2004-08-04 10:00:00 4,569 -c–a-w C:\WINDOWS\system32\dllcache\secupd.dat + 2004-08-04 10:00:00 55,808 -c–a-w C:\WINDOWS\system32\dllcache\secur32.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\security.dll + 2004-08-04 10:00:00 29,184 -c–a-w C:\WINDOWS\system32\dllcache\sendcmsg.dll + 2004-08-04 10:00:00 55,296 -c–a-w C:\WINDOWS\system32\dllcache\sendmail.dll + 2004-08-04 10:00:00 38,912 -c–a-w C:\WINDOWS\system32\dllcache\sens.dll + 2004-08-04 10:00:00 6,656 -c–a-w C:\WINDOWS\system32\dllcache\sensapi.dll - 2003-07-16 20:44:15 13,824 -c–a-w C:\WINDOWS\system32\dllcache\senscfg.dll + 2004-08-04 10:00:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\senscfg.dll - 2003-07-16 20:44:18 14,336 -c–a-w C:\WINDOWS\system32\dllcache\serialui.dll + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\serialui.dll + 2004-08-04 07:56:44 56,320 -c–a-w C:\WINDOWS\system32\dllcache\servdeps.dll + 2004-08-04 10:00:00 108,032 -c–a-w C:\WINDOWS\system32\dllcache\services.exe - 2003-07-16 20:44:24 14,848 -c–a-w C:\WINDOWS\system32\dllcache\serwvdrv.dll + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\serwvdrv.dll + 2004-08-04 10:00:00 140,800 -c–a-w C:\WINDOWS\system32\dllcache\sessmgr.exe + 2004-08-04 10:00:00 31,232 -c–a-w C:\WINDOWS\system32\dllcache\sethc.exe + 2004-08-04 10:00:00 23,040 -c–a-w C:\WINDOWS\system32\dllcache\setup.exe + 2004-08-04 10:00:00 774,144 -c–a-w C:\WINDOWS\system32\dllcache\setup_wm.exe + 2004-08-04 10:00:00 73,216 -c–a-w C:\WINDOWS\system32\dllcache\setup50.exe + 2004-08-04 10:00:00 983,552 -c–a-w C:\WINDOWS\system32\dllcache\setupapi.dll - 2003-07-16 20:44:29 414,208 -c–a-w C:\WINDOWS\system32\dllcache\setupdll.dll + 2004-08-04 10:00:00 414,208 -c–a-w C:\WINDOWS\system32\dllcache\setupdll.dll + 2004-08-04 10:00:00 101,376 -c–a-w C:\WINDOWS\system32\dllcache\setupqry.dll + 2004-08-04 10:00:00 5,120 -c–a-w C:\WINDOWS\system32\dllcache\sfc.dll - 2007-11-03 12:19:19 16,384 -c–a-w C:\WINDOWS\system32\dllcache\sfc.exe + 2004-08-04 10:00:00 9,728 -c–a-w C:\WINDOWS\system32\dllcache\sfc.exe + 2004-08-04 10:00:00 140,288 -c–a-w C:\WINDOWS\system32\dllcache\sfc_os.dll + 2004-08-04 10:00:00 1,580,544 -c–a-w C:\WINDOWS\system32\dllcache\sfcfiles.dll - 2003-07-16 20:44:35 23,552 -c–a-w C:\WINDOWS\system32\dllcache\sfmapi.dll + 2004-08-04 10:00:00 23,552 -c–a-w C:\WINDOWS\system32\dllcache\sfmapi.dll - 2007-11-03 12:19:19 21,504 -c–a-w C:\WINDOWS\system32\dllcache\shadow.exe + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\shadow.exe + 2004-08-04 10:00:00 549,376 -c–a-w C:\WINDOWS\system32\dllcache\shdoclc.dll - 2007-06-15 08:12:30 1,498,112 -c—-w C:\WINDOWS\system32\dllcache\shdocvw.dll + 2007-08-22 13:12:18 1,494,528 -c–a-w C:\WINDOWS\system32\dllcache\shdocvw.dll - 2003-07-16 20:44:38 5,120 -c–a-w C:\WINDOWS\system32\dllcache\shell.dll + 2004-08-04 10:00:00 5,120 -c–a-w C:\WINDOWS\system32\dllcache\shell.dll + 2004-08-04 10:00:00 25,088 -c–a-w C:\WINDOWS\system32\dllcache\shfolder.dll + 2004-08-04 10:00:00 68,096 -c–a-w C:\WINDOWS\system32\dllcache\shgina.dll + 2004-08-04 10:00:00 65,536 -c–a-w C:\WINDOWS\system32\dllcache\shimeng.dll + 2004-08-04 10:00:00 438,272 -c–a-w C:\WINDOWS\system32\dllcache\shimgvw.dll - 2007-06-15 08:12:30 474,112 -c—-w C:\WINDOWS\system32\dllcache\shlwapi.dll + 2007-08-22 13:12:18 474,112 -c–a-w C:\WINDOWS\system32\dllcache\shlwapi.dll + 2004-08-04 10:00:00 151,552 -c–a-w C:\WINDOWS\system32\dllcache\shmedia.dll + 2004-08-04 10:00:00 42,496 -c–a-w C:\WINDOWS\system32\dllcache\shmgrate.exe + 2004-08-04 10:00:00 77,824 -c–a-w C:\WINDOWS\system32\dllcache\shrpubw.exe + 2004-08-04 10:00:00 27,648 -c–a-w C:\WINDOWS\system32\dllcache\shscrap.dll + 2003-03-24 21:52:04 20,536 -c–a-w C:\WINDOWS\system32\dllcache\shtml.dll + 2003-03-24 21:52:04 16,437 -c–a-w C:\WINDOWS\system32\dllcache\shtml.exe + 2004-08-04 10:00:00 19,456 -c–a-w C:\WINDOWS\system32\dllcache\shutdown.exe + 2004-08-04 10:00:00 13,312 -c–a-w C:\WINDOWS\system32\dllcache\sigtab.dll + 2004-08-04 10:00:00 70,144 -c–a-w C:\WINDOWS\system32\dllcache\sigverif.exe - 2003-07-16 20:44:51 18,944 -c–a-w C:\WINDOWS\system32\dllcache\simptcp.dll + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\simptcp.dll - 2003-07-16 20:44:52 13,824 -c–a-w C:\WINDOWS\system32\dllcache\sisbkup.dll + 2004-08-04 10:00:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\sisbkup.dll - 2003-07-16 20:45:08 5,632 -c–a-w C:\WINDOWS\system32\dllcache\skdll.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\skdll.dll + 2004-08-04 10:00:00 26,112 -c–a-w C:\WINDOWS\system32\dllcache\skeys.exe + 2004-08-04 10:00:00 25,088 -c–a-w C:\WINDOWS\system32\dllcache\slayerxp.dll + 2004-08-04 10:00:00 306,176 -c–a-w C:\WINDOWS\system32\dllcache\slbcsp.dll + 2004-08-04 10:00:00 98,304 -c–a-w C:\WINDOWS\system32\dllcache\slbiop.dll - 2003-07-16 20:45:12 14,848 -c–a-w C:\WINDOWS\system32\dllcache\slbrccsp.dll + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\slbrccsp.dll - 2003-07-16 20:45:14 25,088 -c–a-w C:\WINDOWS\system32\dllcache\sm59w.dll + 2004-08-04 10:00:00 25,088 -c–a-w C:\WINDOWS\system32\dllcache\sm59w.dll - 2003-07-16 20:45:15 30,208 -c–a-w C:\WINDOWS\system32\dllcache\sm81w.dll + 2004-08-04 10:00:00 30,208 -c–a-w C:\WINDOWS\system32\dllcache\sm81w.dll - 2003-07-16 20:45:15 30,208 -c–a-w C:\WINDOWS\system32\dllcache\sm87w.dll + 2004-08-04 10:00:00 30,208 -c–a-w C:\WINDOWS\system32\dllcache\sm87w.dll - 2003-07-16 20:45:15 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm89w.dll + 2004-08-04 10:00:00 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm89w.dll - 2003-07-16 20:45:16 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm8aw.dll + 2004-08-04 10:00:00 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm8aw.dll - 2003-07-16 20:45:16 29,184 -c–a-w C:\WINDOWS\system32\dllcache\sm8cw.dll + 2004-08-04 10:00:00 29,184 -c–a-w C:\WINDOWS\system32\dllcache\sm8cw.dll - 2003-07-16 20:45:17 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm8dw.dll + 2004-08-04 10:00:00 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm8dw.dll - 2003-07-16 20:45:17 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm90w.dll + 2004-08-04 10:00:00 26,112 -c–a-w C:\WINDOWS\system32\dllcache\sm90w.dll - 2003-07-16 20:45:17 26,624 -c–a-w C:\WINDOWS\system32\dllcache\sm92w.dll + 2004-08-04 10:00:00 26,624 -c–a-w C:\WINDOWS\system32\dllcache\sm92w.dll - 2003-07-16 20:45:18 26,624 -c–a-w C:\WINDOWS\system32\dllcache\sm93w.dll + 2004-08-04 10:00:00 26,624 -c–a-w C:\WINDOWS\system32\dllcache\sm93w.dll - 2003-07-16 20:45:18 38,912 -c–a-w C:\WINDOWS\system32\dllcache\sm9aw.dll + 2004-08-04 10:00:00 38,912 -c–a-w C:\WINDOWS\system32\dllcache\sm9aw.dll - 2003-07-16 20:45:19 31,744 -c–a-w C:\WINDOWS\system32\dllcache\sma3w.dll + 2004-08-04 10:00:00 31,744 -c–a-w C:\WINDOWS\system32\dllcache\sma3w.dll - 2003-07-16 20:45:26 31,744 -c–a-w C:\WINDOWS\system32\dllcache\smb6w.dll + 2004-08-04 10:00:00 31,744 -c–a-w C:\WINDOWS\system32\dllcache\smb6w.dll + 2004-08-04 10:00:00 8,192 -c–a-w C:\WINDOWS\system32\dllcache\smbinst.exe - 2003-07-16 20:45:26 14,592 -c–a-w C:\WINDOWS\system32\dllcache\smclib.sys + 2004-08-04 10:00:00 14,592 -c–a-w C:\WINDOWS\system32\dllcache\smclib.sys + 2004-08-04 10:00:00 236,544 -c–a-w C:\WINDOWS\system32\dllcache\smi2smir.exe - 2003-07-16 20:45:28 15,872 -c–a-w C:\WINDOWS\system32\dllcache\smierrsm.dll + 2004-08-04 10:00:00 15,872 -c–a-w C:\WINDOWS\system32\dllcache\smierrsm.dll - 2003-07-16 20:45:28 5,632 -c–a-w C:\WINDOWS\system32\dllcache\smierrsy.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\smierrsy.dll - 2003-07-16 20:45:29 5,632 -c–a-w C:\WINDOWS\system32\dllcache\smimsgif.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\smimsgif.dll + 2004-08-04 10:00:00 363,008 -c–a-w C:\WINDOWS\system32\dllcache\smlogcfg.dll + 2004-08-04 10:00:00 89,600 -c–a-w C:\WINDOWS\system32\dllcache\smlogsvc.exe + 2004-08-04 10:00:00 50,688 -c–a-w C:\WINDOWS\system32\dllcache\smss.exe + 2004-08-04 10:00:00 456,704 -c–a-w C:\WINDOWS\system32\dllcache\smtpsvc.dll + 2004-08-04 10:00:00 131,584 -c–a-w C:\WINDOWS\system32\dllcache\sndrec32.exe - 2007-11-03 12:19:19 145,408 -c–a-w C:\WINDOWS\system32\dllcache\sndvol32.exe + 2004-08-04 10:00:00 138,752 -c–a-w C:\WINDOWS\system32\dllcache\sndvol32.exe + 2004-08-04 10:00:00 34,816 -c–a-w C:\WINDOWS\system32\dllcache\sniffpol.dll + 2004-08-04 10:00:00 32,768 -c–a-w C:\WINDOWS\system32\dllcache\snmp.exe + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\snmpapi.dll + 2004-08-04 10:00:00 259,072 -c–a-w C:\WINDOWS\system32\dllcache\snmpcl.dll + 2004-08-04 10:00:00 358,400 -c–a-w C:\WINDOWS\system32\dllcache\snmpincl.dll + 2004-08-04 10:00:00 6,144 -c–a-w C:\WINDOWS\system32\dllcache\snmpmib.dll + 2004-08-04 10:00:00 188,416 -c–a-w C:\WINDOWS\system32\dllcache\snmpsmir.dll + 2004-08-04 10:00:00 182,272 -c–a-w C:\WINDOWS\system32\dllcache\snmpsnap.dll - 2003-07-16 20:45:40 10,240 -c–a-w C:\WINDOWS\system32\dllcache\snmpstup.dll + 2004-08-04 10:00:00 10,240 -c–a-w C:\WINDOWS\system32\dllcache\snmpstup.dll + 2004-08-04 10:00:00 40,448 -c–a-w C:\WINDOWS\system32\dllcache\snmpthrd.dll + 2004-08-04 10:00:00 8,704 -c–a-w C:\WINDOWS\system32\dllcache\snmptrap.exe + 2004-08-04 10:00:00 130,048 -c–a-w C:\WINDOWS\system32\dllcache\softkbd.dll - 2003-07-16 20:23:14 143,422 -c–a-w C:\WINDOWS\system32\dllcache\softkey.dll + 2004-08-04 10:00:00 143,422 -c–a-w C:\WINDOWS\system32\dllcache\softkey.dll - 2003-07-16 20:45:43 5,632 -c–a-w C:\WINDOWS\system32\dllcache\softpub.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\softpub.dll - 2007-11-03 12:19:19 63,488 -c–a-w C:\WINDOWS\system32\dllcache\sol.exe + 2004-08-04 10:00:00 56,832 -c–a-w C:\WINDOWS\system32\dllcache\sol.exe - 2007-11-03 12:19:19 30,208 -c–a-w C:\WINDOWS\system32\dllcache\sort.exe + 2004-08-04 10:00:00 23,552 -c–a-w C:\WINDOWS\system32\dllcache\sort.exe + 2004-08-04 10:00:00 62,976 -c–a-w C:\WINDOWS\system32\dllcache\spgrmr.dll + 2004-08-04 10:00:00 538,624 -c–a-w C:\WINDOWS\system32\dllcache\spider.exe + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\spnpinst.exe + 2004-08-04 10:00:00 74,752 -c–a-w C:\WINDOWS\system32\dllcache\spoolss.dll + 2005-06-10 23:53:32 57,856 -c–a-w C:\WINDOWS\system32\dllcache\spoolsv.exe + 2004-08-04 10:00:00 193,024 -c–a-w C:\WINDOWS\system32\dllcache\spra041b.dll + 2004-08-04 10:00:00 192,512 -c–a-w C:\WINDOWS\system32\dllcache\spra0424.dll + 2004-08-04 10:00:00 757,248 -c–a-w C:\WINDOWS\system32\dllcache\sprb041b.dll + 2004-08-04 10:00:00 732,160 -c–a-w C:\WINDOWS\system32\dllcache\sprb0424.dll - 2003-07-16 20:46:21 9,728 -c–a-w C:\WINDOWS\system32\dllcache\sprestrt.exe + 2004-08-04 10:00:00 9,728 -c–a-w C:\WINDOWS\system32\dllcache\sprestrt.exe + 2004-08-04 10:00:00 250,880 -c–a-w C:\WINDOWS\system32\dllcache\sptip.dll + 2004-08-04 10:00:00 151,552 -c–a-w C:\WINDOWS\system32\dllcache\sqldb20.dll + 2004-08-04 10:00:00 462,848 -c–a-w C:\WINDOWS\system32\dllcache\sqlqp20.dll + 2004-08-04 10:00:00 110,592 -c–a-w C:\WINDOWS\system32\dllcache\sqlse20.dll + 2004-08-04 10:00:00 180,800 -c–a-w C:\WINDOWS\system32\dllcache\sqlunirl.dll + 2004-08-04 07:56:45 217,088 -c–a-w C:\WINDOWS\system32\dllcache\sqlxmlx.dll + 2004-08-04 06:06:25 73,472 -c–a-w C:\WINDOWS\system32\dllcache\sr.sys + 2004-08-04 07:56:45 58,434 -c–a-w C:\WINDOWS\system32\dllcache\srchctls.dll + 2004-08-04 07:56:45 725,566 -c–a-w C:\WINDOWS\system32\dllcache\srchui.dll + 2004-08-04 07:56:45 67,584 -c–a-w C:\WINDOWS\system32\dllcache\srclient.dll - 2007-11-03 12:19:19 53,760 -c–a-w C:\WINDOWS\system32\dllcache\srdiag.exe + 2004-08-04 10:00:00 47,104 -c–a-w C:\WINDOWS\system32\dllcache\srdiag.exe + 2004-08-04 07:56:45 239,104 -c–a-w C:\WINDOWS\system32\dllcache\srrstr.dll + 2004-08-04 07:56:45 170,496 -c–a-w C:\WINDOWS\system32\dllcache\srsvc.dll - 2003-07-16 20:46:33 101,376 -c–a-w C:\WINDOWS\system32\dllcache\srusbusd.dll + 2004-08-04 10:00:00 101,376 -c–a-w C:\WINDOWS\system32\dllcache\srusbusd.dll + 2004-12-07 19:32:34 96,768 -c–a-w C:\WINDOWS\system32\dllcache\srvsvc.dll + 2004-08-04 10:00:00 704,512 -c–a-w C:\WINDOWS\system32\dllcache\ss3dfo.scr + 2004-08-04 10:00:00 19,968 -c–a-w C:\WINDOWS\system32\dllcache\ssbezier.scr + 2004-08-04 10:00:00 34,816 -c–a-w C:\WINDOWS\system32\dllcache\ssdpapi.dll + 2004-08-04 10:00:00 71,680 -c–a-w C:\WINDOWS\system32\dllcache\ssdpsrv.dll + 2004-08-04 10:00:00 393,216 -c–a-w C:\WINDOWS\system32\dllcache\ssflwbox.scr + 2004-08-04 10:00:00 20,992 -c–a-w C:\WINDOWS\system32\dllcache\ssmarque.scr + 2004-08-04 10:00:00 47,104 -c–a-w C:\WINDOWS\system32\dllcache\ssmypics.scr + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\ssmyst.scr + 2004-08-04 10:00:00 610,304 -c–a-w C:\WINDOWS\system32\dllcache\sspipes.scr + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\ssstars.scr + 2004-08-04 10:00:00 679,936 -c–a-w C:\WINDOWS\system32\dllcache\sstext3d.scr + 2004-08-04 10:00:00 33,280 -c–a-w C:\WINDOWS\system32\dllcache\sstub.dll + 2004-08-04 10:00:00 22,016 -c–a-w C:\WINDOWS\system32\dllcache\startoc.dll + 2004-08-04 07:56:45 86,528 -c–a-w C:\WINDOWS\system32\dllcache\stdprov.dll + 2004-08-04 10:00:00 67,584 -c–a-w C:\WINDOWS\system32\dllcache\sti.dll + 2004-08-04 10:00:00 136,704 -c–a-w C:\WINDOWS\system32\dllcache\sti_ci.dll + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\stimon.exe + 2004-08-04 10:00:00 121,856 -c–a-w C:\WINDOWS\system32\dllcache\stobject.dll - 2003-07-16 20:46:55 4,208 -c–a-w C:\WINDOWS\system32\dllcache\storage.dll + 2004-08-04 10:00:00 4,208 -c–a-w C:\WINDOWS\system32\dllcache\storage.dll - 2006-08-21 16:52:08 246,814 -c—-w C:\WINDOWS\system32\dllcache\strmdll.dll + 2006-08-21 14:52:08 246,814 -c–a-w C:\WINDOWS\system32\dllcache\strmdll.dll + 2004-08-04 10:00:00 75,776 -c–a-w C:\WINDOWS\system32\dllcache\strmfilt.dll - 2007-11-03 12:19:19 15,872 -c–a-w C:\WINDOWS\system32\dllcache\subst.exe + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\subst.exe + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\svchost.exe - 2003-07-16 20:47:03 6,144 -c–a-w C:\WINDOWS\system32\dllcache\svcpack.dll + 2004-08-04 10:00:00 6,144 -c–a-w C:\WINDOWS\system32\dllcache\svcpack.dll - 2003-07-16 20:47:06 138,752 -c–a-w C:\WINDOWS\system32\dllcache\swprv.dll + 2004-08-04 10:00:00 138,752 -c–a-w C:\WINDOWS\system32\dllcache\swprv.dll - 2007-11-03 12:19:19 57,856 -c–a-w C:\WINDOWS\system32\dllcache\syncapp.exe + 2004-08-04 10:00:00 51,200 -c–a-w C:\WINDOWS\system32\dllcache\syncapp.exe + 2004-08-04 10:00:00 57,856 -c–a-w C:\WINDOWS\system32\dllcache\synceng.dll + 2004-08-04 10:00:00 191,488 -c–a-w C:\WINDOWS\system32\dllcache\syncui.dll - 2003-07-16 20:47:13 18,896 -c–a-w C:\WINDOWS\system32\dllcache\sysedit.exe + 2004-08-04 10:00:00 18,896 -c–a-w C:\WINDOWS\system32\dllcache\sysedit.exe - 2003-07-16 20:47:15 15,872 -c–a-w C:\WINDOWS\system32\dllcache\sysinv.dll + 2004-08-04 10:00:00 15,872 -c–a-w C:\WINDOWS\system32\dllcache\sysinv.dll - 2007-11-03 12:19:19 43,520 -c–a-w C:\WINDOWS\system32\dllcache\syskey.exe + 2004-08-04 10:00:00 36,864 -c–a-w C:\WINDOWS\system32\dllcache\syskey.exe + 2004-08-04 10:00:00 168,960 -c–a-w C:\WINDOWS\system32\dllcache\sysmod.dll + 2004-08-04 10:00:00 155,648 -c–a-w C:\WINDOWS\system32\dllcache\sysmod_a.dll + 2004-08-04 10:00:00 105,984 -c–a-w C:\WINDOWS\system32\dllcache\sysocmgr.exe + 2004-08-04 10:00:00 984,576 -c–a-w C:\WINDOWS\system32\dllcache\syssetup.dll - 2007-11-03 12:19:19 9,728 -c–a-w C:\WINDOWS\system32\dllcache\systray.exe + 2004-08-04 10:00:00 3,072 -c–a-w C:\WINDOWS\system32\dllcache\systray.exe + 2004-08-04 10:00:00 14,976 -c–a-w C:\WINDOWS\system32\dllcache\tape.sys - 2003-07-16 20:47:37 19,200 -c–a-w C:\WINDOWS\system32\dllcache\tapi.dll + 2004-08-04 10:00:00 19,200 -c–a-w C:\WINDOWS\system32\dllcache\tapi.dll + 2004-08-04 10:00:00 858,624 -c–a-w C:\WINDOWS\system32\dllcache\tapi3.dll + 2004-08-04 10:00:00 181,760 -c–a-w C:\WINDOWS\system32\dllcache\tapi32.dll - 2003-07-16 20:47:41 5,632 -c–a-w C:\WINDOWS\system32\dllcache\tapiperf.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\tapiperf.dll + 2005-07-08 16:27:56 249,344 -c–a-w C:\WINDOWS\system32\dllcache\tapisrv.dll - 2003-07-16 20:47:42 78,848 -c–a-w C:\WINDOWS\system32\dllcache\tapiui.dll + 2004-08-04 10:00:00 78,848 -c–a-w C:\WINDOWS\system32\dllcache\tapiui.dll - 2007-11-03 12:19:19 22,016 -c–a-w C:\WINDOWS\system32\dllcache\taskman.exe + 2004-08-04 10:00:00 15,360 -c–a-w C:\WINDOWS\system32\dllcache\taskman.exe + 2004-08-04 10:00:00 135,680 -c–a-w C:\WINDOWS\system32\dllcache\taskmgr.exe - 2007-11-03 12:19:19 18,944 -c–a-w C:\WINDOWS\system32\dllcache\tcmsetup.exe + 2004-08-04 10:00:00 12,288 -c–a-w C:\WINDOWS\system32\dllcache\tcmsetup.exe + 2004-08-04 10:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\tcpmib.dll + 2004-08-04 10:00:00 45,568 -c–a-w C:\WINDOWS\system32\dllcache\tcpmon.dll + 2004-08-04 10:00:00 45,568 -c–a-w C:\WINDOWS\system32\dllcache\tcpmonui.dll - 2007-11-03 12:19:19 26,112 -c–a-w C:\WINDOWS\system32\dllcache\tcpsvcs.exe + 2004-08-04 10:00:00 19,456 -c–a-w C:\WINDOWS\system32\dllcache\tcpsvcs.exe + 2003-03-24 21:52:04 32,827 -c–a-w C:\WINDOWS\system32\dllcache\tcptest.exe + 2003-03-24 21:52:06 16,384 -c–a-w C:\WINDOWS\system32\dllcache\tcptsat.dll - 2003-07-16 20:47:52 13,192 -c–a-w C:\WINDOWS\system32\dllcache\tdasync.sys + 2004-08-04 10:00:00 13,192 -c–a-w C:\WINDOWS\system32\dllcache\tdasync.sys + 2004-08-04 10:00:00 18,560 -c–a-w C:\WINDOWS\system32\dllcache\tdi.sys - 2003-07-16 20:47:54 21,896 -c–a-w C:\WINDOWS\system32\dllcache\tdipx.sys + 2004-08-04 10:00:00 21,896 -c–a-w C:\WINDOWS\system32\dllcache\tdipx.sys + 2004-08-04 08:01:07 12,040 -c–a-w C:\WINDOWS\system32\dllcache\tdpipe.sys - 2003-07-16 20:47:55 19,464 -c–a-w C:\WINDOWS\system32\dllcache\tdspx.sys + 2004-08-04 10:00:00 19,464 -c–a-w C:\WINDOWS\system32\dllcache\tdspx.sys + 2004-08-04 08:01:07 21,896 -c–a-w C:\WINDOWS\system32\dllcache\tdtcp.sys + 2005-05-10 23:45:48 75,776 -c–a-w C:\WINDOWS\system32\dllcache\telnet.exe + 2004-08-04 10:00:00 358,400 -c–a-w C:\WINDOWS\system32\dllcache\termmgr.dll + 2004-08-04 07:56:46 295,424 -c–a-w C:\WINDOWS\system32\dllcache\termsrv.dll - 2007-11-03 12:19:19 23,552 -c–a-w C:\WINDOWS\system32\dllcache\tftp.exe + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\tftp.exe - 2003-07-16 20:48:05 185,344 -c–a-w C:\WINDOWS\system32\dllcache\thawbrkr.dll + 2004-08-04 10:00:00 185,344 -c–a-w C:\WINDOWS\system32\dllcache\thawbrkr.dll + 2004-08-04 10:00:00 385,536 -c–a-w C:\WINDOWS\system32\dllcache\themeui.dll - 2007-11-03 12:19:19 50,688 -c–a-w C:\WINDOWS\system32\dllcache\tintlphr.exe + 2004-08-04 10:00:00 44,032 -c–a-w C:\WINDOWS\system32\dllcache\tintlphr.exe - 2007-11-03 12:19:19 461,824 -c–a-w C:\WINDOWS\system32\dllcache\tintsetp.exe + 2004-08-04 10:00:00 455,168 -c–a-w C:\WINDOWS\system32\dllcache\tintsetp.exe - 2003-07-16 20:23:16 10,240 -c–a-w C:\WINDOWS\system32\dllcache\tmigrate.dll + 2004-08-04 10:00:00 10,240 -c–a-w C:\WINDOWS\system32\dllcache\tmigrate.dll - 2003-07-16 20:48:14 13,888 -c–a-w C:\WINDOWS\system32\dllcache\toolhelp.dll + 2004-08-04 10:00:00 13,888 -c–a-w C:\WINDOWS\system32\dllcache\toolhelp.dll - 2003-07-16 20:48:17 3,374,640 -c–a-w C:\WINDOWS\system32\dllcache\tourP.exe + 2004-08-04 10:00:00 3,374,640 -c–a-w C:\WINDOWS\system32\dllcache\tourP.exe + 2004-08-04 10:00:00 347,136 -c–a-w C:\WINDOWS\system32\dllcache\tourstrt.exe + 2004-08-04 10:00:00 12,288 -c–a-w C:\WINDOWS\system32\dllcache\tracert.exe - 2007-11-03 12:19:19 38,400 -c–a-w C:\WINDOWS\system32\dllcache\tracert6.exe + 2004-08-04 10:00:00 31,744 -c–a-w C:\WINDOWS\system32\dllcache\tracert6.exe - 2003-07-16 20:48:21 31,232 -c–a-w C:\WINDOWS\system32\dllcache\traffic.dll + 2004-08-04 10:00:00 31,232 -c–a-w C:\WINDOWS\system32\dllcache\traffic.dll - 2003-07-16 20:48:24 40,960 -c–a-w C:\WINDOWS\system32\dllcache\trialoc.dll + 2004-08-04 10:00:00 40,960 -c–a-w C:\WINDOWS\system32\dllcache\trialoc.dll + 2004-08-04 07:56:46 153,088 -c–a-w C:\WINDOWS\system32\dllcache\triedit.dll + 2004-08-04 10:00:00 90,624 -c–a-w C:\WINDOWS\system32\dllcache\trkwks.dll - 2003-07-16 20:48:28 52,224 -c–a-w C:\WINDOWS\system32\dllcache\tsappcmp.dll + 2004-08-04 10:00:00 52,224 -c–a-w C:\WINDOWS\system32\dllcache\tsappcmp.dll + 2004-08-04 07:56:46 93,696 -c–a-w C:\WINDOWS\system32\dllcache\tscfgwmi.dll - 2007-11-03 12:19:19 21,504 -c–a-w C:\WINDOWS\system32\dllcache\tscon.exe + 2002-08-29 12:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\tscon.exe + 2004-08-04 10:00:00 44,544 -c–a-w C:\WINDOWS\system32\dllcache\tscupgrd.exe - 2003-07-16 20:48:31 15,360 -c–a-w C:\WINDOWS\system32\dllcache\tsd32.dll + 2004-08-04 10:00:00 15,360 -c–a-w C:\WINDOWS\system32\dllcache\tsd32.dll + 2004-08-04 10:00:00 12,168 -c–a-w C:\WINDOWS\system32\dllcache\tsddd.dll - 2007-11-03 12:19:19 21,504 -c–a-w C:\WINDOWS\system32\dllcache\tsdiscon.exe + 2002-08-29 12:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\tsdiscon.exe + 2004-08-04 10:00:00 279,040 -c–a-w C:\WINDOWS\system32\dllcache\tshoot.dll - 2007-11-03 12:19:19 23,040 -c–a-w C:\WINDOWS\system32\dllcache\tskill.exe + 2002-08-29 12:00:00 16,384 -c–a-w C:\WINDOWS\system32\dllcache\tskill.exe + 2004-08-04 10:00:00 121,856 -c–a-w C:\WINDOWS\system32\dllcache\tsoc.dll - 2007-11-03 12:19:19 20,992 -c–a-w C:\WINDOWS\system32\dllcache\tsprof.exe + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\tsprof.exe - 2007-11-03 12:19:19 23,552 -c–a-w C:\WINDOWS\system32\dllcache\tsshutdn.exe + 2002-08-29 12:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\tsshutdn.exe - 2003-07-16 20:48:39 94,784 -c–a-w C:\WINDOWS\system32\dllcache\twain.dll + 2004-08-04 10:00:00 94,784 -c–a-w C:\WINDOWS\system32\dllcache\twain.dll + 2004-08-04 10:00:00 50,688 -c–a-w C:\WINDOWS\system32\dllcache\twain_32.dll + 2004-08-04 10:00:00 44,032 -c–a-w C:\WINDOWS\system32\dllcache\twext.dll - 2003-07-16 20:48:40 49,680 -c–a-w C:\WINDOWS\system32\dllcache\twunk_16.exe + 2004-08-04 10:00:00 49,680 -c–a-w C:\WINDOWS\system32\dllcache\twunk_16.exe - 2007-11-03 12:19:19 32,256 -c–a-w C:\WINDOWS\system32\dllcache\twunk_32.exe + 2004-08-04 10:00:00 25,600 -c–a-w C:\WINDOWS\system32\dllcache\twunk_32.exe + 2005-07-26 04:39:49 101,376 -c–a-w C:\WINDOWS\system32\dllcache\txflog.dll - 2003-07-16 20:48:41 177,856 -c–a-w C:\WINDOWS\system32\dllcache\typelib.dll + 2004-08-04 10:00:00 177,856 -c–a-w C:\WINDOWS\system32\dllcache\typelib.dll + 2004-08-04 10:00:00 66,176 -c–a-w C:\WINDOWS\system32\dllcache\udfs.sys + 2004-08-04 10:00:00 25,600 -c–a-w C:\WINDOWS\system32\dllcache\udhisapi.dll - 2003-07-16 20:48:44 82,432 -c–a-w C:\WINDOWS\system32\dllcache\ufat.dll + 2004-08-04 10:00:00 82,432 -c–a-w C:\WINDOWS\system32\dllcache\ufat.dll + 2004-08-04 10:00:00 275,456 -c–a-w C:\WINDOWS\system32\dllcache\ulib.dll + 2004-08-04 10:00:00 35,840 -c–a-w C:\WINDOWS\system32\dllcache\umandlg.dll - 2003-07-16 20:48:47 13,312 -c–a-w C:\WINDOWS\system32\dllcache\umdmxfrm.dll + 2004-08-04 10:00:00 13,312 -c–a-w C:\WINDOWS\system32\dllcache\umdmxfrm.dll + 2005-08-23 03:35:42 123,392 -c–a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll - 2004-08-04 06:04:11 76,288 -c–a-w C:\WINDOWS\system32\dllcache\uniime.dll + 2004-08-04 10:00:00 76,288 -c–a-w C:\WINDOWS\system32\dllcache\uniime.dll + 2004-08-04 10:00:00 74,240 -c–a-w C:\WINDOWS\system32\dllcache\unimdmat.dll + 2004-08-04 10:00:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\uniplat.dll - 2007-11-03 12:19:19 10,752 -c–a-w C:\WINDOWS\system32\dllcache\unlodctr.exe + 2004-08-04 10:00:00 4,096 -c–a-w C:\WINDOWS\system32\dllcache\unlodctr.exe + 2004-08-04 10:00:00 208,896 -c–a-w C:\WINDOWS\system32\dllcache\unregmp2.exe - 2007-11-03 12:19:19 23,552 -c–a-w C:\WINDOWS\system32\dllcache\unsecapp.exe + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\unsecapp.exe + 2004-08-04 10:00:00 316,416 -c–a-w C:\WINDOWS\system32\dllcache\untfs.dll + 2004-08-04 10:00:00 150,528 -c–a-w C:\WINDOWS\system32\dllcache\uploadm.exe + 2004-08-04 10:00:00 132,608 -c–a-w C:\WINDOWS\system32\dllcache\upnp.dll + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\upnpcont.exe + 2004-08-04 10:00:00 239,616 -c–a-w C:\WINDOWS\system32\dllcache\upnpui.dll + 2004-08-04 10:00:00 18,432 -c–a-w C:\WINDOWS\system32\dllcache\ups.exe - 2003-07-16 20:49:14 17,920 -c–a-w C:\WINDOWS\system32\dllcache\ureg.dll + 2004-08-04 10:00:00 17,920 -c–a-w C:\WINDOWS\system32\dllcache\ureg.dll + 2004-08-04 10:00:00 12,672 -c–a-w C:\WINDOWS\system32\dllcache\usb8023.sys + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\usbmon.dll - 2003-07-16 20:49:22 47,872 -c–a-w C:\WINDOWS\system32\dllcache\user.exe + 2004-08-04 10:00:00 47,872 -c–a-w C:\WINDOWS\system32\dllcache\user.exe + 2004-08-04 10:00:00 723,456 -c–a-w C:\WINDOWS\system32\dllcache\userenv.dll + 2004-08-04 10:00:00 24,576 -c–a-w C:\WINDOWS\system32\dllcache\userinit.exe + 2004-08-04 10:00:00 406,528 -c–a-w C:\WINDOWS\system32\dllcache\usp10.dll - 2003-07-16 20:49:27 25,600 -c–a-w C:\WINDOWS\system32\dllcache\utildll.dll + 2004-08-04 10:00:00 25,600 -c–a-w C:\WINDOWS\system32\dllcache\utildll.dll + 2004-08-04 10:00:00 50,176 -c–a-w C:\WINDOWS\system32\dllcache\utilman.exe + 2004-08-04 10:00:00 218,624 -c–a-w C:\WINDOWS\system32\dllcache\uxtheme.dll + 2004-08-04 10:00:00 30,749 -c–a-w C:\WINDOWS\system32\dllcache\vbajet32.dll - 2006-11-08 01:03:36 413,696 -c—-w C:\WINDOWS\system32\dllcache\vbscript.dll + 2007-08-13 23:54:10 413,696 -c–a-w C:\WINDOWS\system32\dllcache\vbscript.dll - 2003-07-16 20:49:39 7,680 -c–a-w C:\WINDOWS\system32\dllcache\vcdex.dll + 2004-08-04 10:00:00 7,680 -c–a-w C:\WINDOWS\system32\dllcache\vcdex.dll + 2004-08-04 10:00:00 26,112 -c–a-w C:\WINDOWS\system32\dllcache\vdmdbg.dll + 2004-08-04 10:00:00 51,712 -c–a-w C:\WINDOWS\system32\dllcache\vdmredir.dll - 2003-07-16 20:49:41 9,008 -c–a-w C:\WINDOWS\system32\dllcache\ver.dll + 2004-08-04 10:00:00 9,008 -c–a-w C:\WINDOWS\system32\dllcache\ver.dll - 2003-07-16 20:49:44 13,312 -c–a-w C:\WINDOWS\system32\dllcache\verifier.dll + 2004-08-04 10:00:00 13,312 -c–a-w C:\WINDOWS\system32\dllcache\verifier.dll - 2007-11-03 12:19:19 104,960 -c–a-w C:\WINDOWS\system32\dllcache\verifier.exe + 2004-08-04 10:00:00 98,304 -c–a-w C:\WINDOWS\system32\dllcache\verifier.exe + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\version.dll - 2003-07-16 20:49:48 9,344 -c–a-w C:\WINDOWS\system32\dllcache\vga.dll + 2004-08-04 10:00:00 9,344 -c–a-w C:\WINDOWS\system32\dllcache\vga.dll + 2004-08-04 10:00:00 20,992 -c–a-w C:\WINDOWS\system32\dllcache\vga.sys - 2003-07-16 20:49:49 51,456 -c–a-w C:\WINDOWS\system32\dllcache\vga256.dll + 2004-08-04 10:00:00 51,456 -c–a-w C:\WINDOWS\system32\dllcache\vga256.dll - 2003-07-16 20:49:50 18,176 -c–a-w C:\WINDOWS\system32\dllcache\vga64k.dll + 2004-08-04 10:00:00 18,176 -c–a-w C:\WINDOWS\system32\dllcache\vga64k.dll + 2004-08-04 10:00:00 79,744 -c–a-w C:\WINDOWS\system32\dllcache\videoprt.sys + 2004-08-04 07:56:46 131,584 -c–a-w C:\WINDOWS\system32\dllcache\viewprov.dll - 2003-07-16 20:50:08 4,608 -c–a-w C:\WINDOWS\system32\dllcache\vjoy.dll + 2004-08-04 10:00:00 4,608 -c–a-w C:\WINDOWS\system32\dllcache\vjoy.dll - 2003-07-16 20:50:09 18,944 -c–a-w C:\WINDOWS\system32\dllcache\vmmreg32.dll + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\vmmreg32.dll - 2004-08-04 05:32:34 426,041 -c–a-w C:\WINDOWS\system32\dllcache\voicepad.dll + 2004-08-04 10:00:00 426,041 -c–a-w C:\WINDOWS\system32\dllcache\voicepad.dll - 2004-08-04 05:32:35 86,073 -c–a-w C:\WINDOWS\system32\dllcache\voicesub.dll + 2004-08-04 10:00:00 86,073 -c–a-w C:\WINDOWS\system32\dllcache\voicesub.dll + 2004-08-04 10:00:00 52,352 -c–a-w C:\WINDOWS\system32\dllcache\volsnap.sys - 2003-07-16 20:50:13 16,896 -c–a-w C:\WINDOWS\system32\dllcache\vss_ps.dll + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\vss_ps.dll - 2007-11-03 12:19:19 40,448 -c–a-w C:\WINDOWS\system32\dllcache\vssadmin.exe + 2004-08-04 10:00:00 33,792 -c–a-w C:\WINDOWS\system32\dllcache\vssadmin.exe + 2004-08-04 10:00:00 430,592 -c–a-w C:\WINDOWS\system32\dllcache\vssapi.dll + 2004-08-04 10:00:00 289,792 -c–a-w C:\WINDOWS\system32\dllcache\vssvc.exe - 2003-07-16 20:50:13 48,256 -c–a-w C:\WINDOWS\system32\dllcache\w32.dll + 2004-08-04 10:00:00 48,256 -c–a-w C:\WINDOWS\system32\dllcache\w32.dll + 2004-08-04 10:00:00 174,592 -c–a-w C:\WINDOWS\system32\dllcache\w32time.dll - 2007-11-03 12:19:19 56,320 -c–a-w C:\WINDOWS\system32\dllcache\w32tm.exe + 2004-08-04 10:00:00 49,664 -c–a-w C:\WINDOWS\system32\dllcache\w32tm.exe - 2003-07-16 20:50:15 22,016 -c–a-w C:\WINDOWS\system32\dllcache\w32topl.dll + 2004-08-04 10:00:00 22,016 -c–a-w C:\WINDOWS\system32\dllcache\w32topl.dll + 2004-08-04 10:00:00 15,872 -c–a-w C:\WINDOWS\system32\dllcache\w3ssl.dll + 2004-08-04 10:00:00 46,080 -c–a-w C:\WINDOWS\system32\dllcache\wab.exe + 2004-08-04 07:56:34 249,856 -c–a-w C:\WINDOWS\system32\dllcache\wab32res.dll + 2004-08-04 07:56:46 32,768 -c–a-w C:\WINDOWS\system32\dllcache\wabfind.dll + 2004-08-04 10:00:00 30,208 -c–a-w C:\WINDOWS\system32\dllcache\wabmig.exe + 2004-08-04 10:00:00 34,560 -c–a-w C:\WINDOWS\system32\dllcache\wanarp.sys + 2004-08-04 10:00:00 17,664 -c–a-w C:\WINDOWS\system32\dllcache\watchdog.sys - 2003-07-16 20:50:28 208,896 -c–a-w C:\WINDOWS\system32\dllcache\wavemsp.dll + 2004-08-04 10:00:00 208,896 -c–a-w C:\WINDOWS\system32\dllcache\wavemsp.dll - 2007-11-03 12:19:19 20,480 -c–a-w C:\WINDOWS\system32\dllcache\wb32.exe + 2004-08-04 10:00:00 12,288 -c–a-w C:\WINDOWS\system32\dllcache\wb32.exe + 2004-08-04 07:56:46 196,608 -c–a-w C:\WINDOWS\system32\dllcache\wbemcntl.dll + 2004-08-04 07:56:46 214,528 -c–a-w C:\WINDOWS\system32\dllcache\wbemcomn.dll + 2004-08-04 07:56:46 71,680 -c–a-w C:\WINDOWS\system32\dllcache\wbemcons.dll + 2004-08-04 07:56:46 530,944 -c–a-w C:\WINDOWS\system32\dllcache\wbemcore.dll + 2004-08-04 07:56:46 178,176 -c–a-w C:\WINDOWS\system32\dllcache\wbemdisp.dll + 2004-08-04 07:56:46 273,920 -c–a-w C:\WINDOWS\system32\dllcache\wbemess.dll + 2004-08-04 10:00:00 43,008 -c–a-w C:\WINDOWS\system32\dllcache\wbemperf.dll + 2004-08-04 07:56:46 18,944 -c–a-w C:\WINDOWS\system32\dllcache\wbemprox.dll + 2004-08-04 07:56:46 43,520 -c–a-w C:\WINDOWS\system32\dllcache\wbemsvc.dll + 2004-08-04 10:00:00 116,224 -c–a-w C:\WINDOWS\system32\dllcache\wbemtest.exe + 2004-08-04 07:56:46 197,120 -c–a-w C:\WINDOWS\system32\dllcache\wbemupgd.dll + 2006-03-24 04:37:50 49,152 -c–a-w C:\WINDOWS\system32\dllcache\wdigest.dll + 2006-01-04 03:35:05 68,096 -c–a-w C:\WINDOWS\system32\dllcache\webclnt.dll - 2003-07-16 20:51:09 40,448 -c–a-w C:\WINDOWS\system32\dllcache\webhits.dll + 2004-08-04 10:00:00 40,448 -c–a-w C:\WINDOWS\system32\dllcache\webhits.dll + 2004-08-04 10:00:00 135,680 -c–a-w C:\WINDOWS\system32\dllcache\webvw.dll - 2003-07-16 20:51:11 41,600 -c–a-w C:\WINDOWS\system32\dllcache\weitekp9.dll + 2004-08-04 10:00:00 41,600 -c–a-w C:\WINDOWS\system32\dllcache\weitekp9.dll - 2003-07-16 20:51:11 31,232 -c–a-w C:\WINDOWS\system32\dllcache\weitekp9.sys + 2004-08-04 10:00:00 31,232 -c–a-w C:\WINDOWS\system32\dllcache\weitekp9.sys + 2004-08-04 10:00:00 65,536 -c–a-w C:\WINDOWS\system32\dllcache\wextract.exe + 2004-08-04 10:00:00 433,664 -c–a-w C:\WINDOWS\system32\dllcache\wiaacmgr.exe + 2004-08-04 10:00:00 463,360 -c–a-w C:\WINDOWS\system32\dllcache\wiadefui.dll + 2004-08-04 10:00:00 124,416 -c–a-w C:\WINDOWS\system32\dllcache\wiadss.dll + 2004-08-04 10:00:00 75,776 -c–a-w C:\WINDOWS\system32\dllcache\wiascr.dll + 2004-08-04 10:00:00 589,312 -c–a-w C:\WINDOWS\system32\dllcache\wiashext.dll + 2004-08-04 10:00:00 111,104 -c–a-w C:\WINDOWS\system32\dllcache\wiavideo.dll - 2003-07-16 20:51:21 145,408 -c–a-w C:\WINDOWS\system32\dllcache\wiavusd.dll + 2004-08-04 10:00:00 145,408 -c–a-w C:\WINDOWS\system32\dllcache\wiavusd.dll - 2003-07-16 20:51:21 9,216 -c–a-w C:\WINDOWS\system32\dllcache\wifeman.dll + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\wifeman.dll + 2004-08-04 10:00:00 101,888 -c–a-w C:\WINDOWS\system32\dllcache\win32spl.dll - 2003-07-16 20:51:26 13,312 -c–a-w C:\WINDOWS\system32\dllcache\win87em.dll + 2004-08-04 10:00:00 13,312 -c–a-w C:\WINDOWS\system32\dllcache\win87em.dll + 2004-08-04 10:00:00 937,984 -c–a-w C:\WINDOWS\system32\dllcache\winbrand.dll - 2003-07-16 20:51:32 9,216 -c–a-w C:\WINDOWS\system32\dllcache\winfax.dll + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\winfax.dll - 2003-07-16 20:51:33 256,192 -c–a-w C:\WINDOWS\system32\dllcache\winhelp.exe + 2004-08-04 10:00:00 256,192 -c–a-w C:\WINDOWS\system32\dllcache\winhelp.exe + 2004-08-04 10:00:00 283,648 -c–a-w C:\WINDOWS\system32\dllcache\winhlp32.exe - 2007-11-03 12:19:19 14,848 -c–a-w C:\WINDOWS\system32\dllcache\winhstb.exe + 2004-08-04 10:00:00 8,192 -c–a-w C:\WINDOWS\system32\dllcache\winhstb.exe + 2004-08-04 10:00:00 351,232 -c–a-w C:\WINDOWS\system32\dllcache\winhttp.dll + 2004-08-04 10:00:00 32,768 -c–a-w C:\WINDOWS\system32\dllcache\winipsec.dll + 2004-08-04 10:00:00 502,272 -c–a-w C:\WINDOWS\system32\dllcache\winlogon.exe - 2007-11-03 12:19:19 19,968 -c–a-w C:\WINDOWS\system32\dllcache\winmgmt.exe + 2004-08-04 10:00:00 13,312 -c–a-w C:\WINDOWS\system32\dllcache\winmgmt.exe - 2007-11-03 12:19:19 126,464 -c–a-w C:\WINDOWS\system32\dllcache\winmine.exe + 2002-08-29 12:00:00 119,808 -c–a-w C:\WINDOWS\system32\dllcache\winmine.exe + 2004-08-04 10:00:00 176,128 -c–a-w C:\WINDOWS\system32\dllcache\winmm.dll - 2007-11-03 12:19:19 18,432 -c–a-w C:\WINDOWS\system32\dllcache\winmsd.exe + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\winmsd.exe - 2003-07-16 20:51:43 5,120 -c–a-w C:\WINDOWS\system32\dllcache\winnls.dll + 2004-08-04 10:00:00 5,120 -c–a-w C:\WINDOWS\system32\dllcache\winnls.dll + 2004-08-04 10:00:00 764,928 -c–a-w C:\WINDOWS\system32\dllcache\winntbbu.dll + 2004-08-04 10:00:00 16,896 -c–a-w C:\WINDOWS\system32\dllcache\winrnr.dll + 2004-08-04 10:00:00 99,328 -c–a-w C:\WINDOWS\system32\dllcache\winscard.dll + 2004-08-04 10:00:00 17,408 -c–a-w C:\WINDOWS\system32\dllcache\winshfhc.dll + 2004-08-04 10:00:00 53,760 -c–a-w C:\WINDOWS\system32\dllcache\winsta.dll - 2003-07-16 20:51:54 18,944 -c–a-w C:\WINDOWS\system32\dllcache\winstrm.dll + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\winstrm.dll + 2004-08-04 10:00:00 176,640 -c–a-w C:\WINDOWS\system32\dllcache\wintrust.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\winver.exe + 2004-08-04 10:00:00 172,032 -c–a-w C:\WINDOWS\system32\dllcache\wldap32.dll

medicman151

Post #17November 11, 2007, 7:21 PM UTC

+ 2004-08-04 10:00:00 92,672 -c–a-w C:\WINDOWS\system32\dllcache\wlnotify.dll + 2004-08-04 10:00:00 408,064 -c–a-w C:\WINDOWS\system32\dllcache\wmadmod.dll + 2004-08-04 10:00:00 670,720 -c–a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll + 2004-08-04 10:00:00 230,400 -c–a-w C:\WINDOWS\system32\dllcache\wmasf.dll + 2004-08-04 10:00:00 27,136 -c–a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll + 2004-08-04 10:00:00 23,552 -c–a-w C:\WINDOWS\system32\dllcache\wmdmps.dll - 2003-07-16 20:52:10 51,200 -c–a-w C:\WINDOWS\system32\dllcache\wmerrenu.dll + 2004-08-04 10:00:00 51,200 -c–a-w C:\WINDOWS\system32\dllcache\wmerrenu.dll + 2004-08-04 10:00:00 168,448 -c–a-w C:\WINDOWS\system32\dllcache\wmerror.dll + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\wmi.dll + 2004-08-04 10:00:00 196,608 -c–a-w C:\WINDOWS\system32\dllcache\wmiadap.exe + 2004-08-04 07:56:35 6,656 -c–a-w C:\WINDOWS\system32\dllcache\wmiapres.dll + 2004-08-04 07:56:46 89,088 -c–a-w C:\WINDOWS\system32\dllcache\wmiaprpl.dll + 2004-08-04 10:00:00 126,464 -c–a-w C:\WINDOWS\system32\dllcache\wmiapsrv.exe + 2004-08-04 07:56:46 60,928 -c–a-w C:\WINDOWS\system32\dllcache\wmicookr.dll + 2004-08-04 07:56:46 140,800 -c–a-w C:\WINDOWS\system32\dllcache\wmidcprv.dll + 2004-08-04 10:00:00 151,552 -c–a-w C:\WINDOWS\system32\dllcache\wmidx.dll - 2003-07-16 20:52:17 4,352 -c–a-w C:\WINDOWS\system32\dllcache\wmilib.sys + 2004-08-04 10:00:00 4,352 -c–a-w C:\WINDOWS\system32\dllcache\wmilib.sys + 2004-08-04 07:56:46 156,672 -c–a-w C:\WINDOWS\system32\dllcache\wmipcima.dll + 2004-08-04 07:56:46 132,096 -c–a-w C:\WINDOWS\system32\dllcache\wmipdskq.dll + 2004-08-04 07:56:46 62,464 -c–a-w C:\WINDOWS\system32\dllcache\wmipiprt.dll + 2004-08-04 07:56:46 62,976 -c–a-w C:\WINDOWS\system32\dllcache\wmipjobj.dll - 2003-07-16 20:52:26 18,944 -c–a-w C:\WINDOWS\system32\dllcache\wmiprop.dll + 2004-08-04 10:00:00 18,944 -c–a-w C:\WINDOWS\system32\dllcache\wmiprop.dll + 2004-08-04 07:56:46 144,896 -c–a-w C:\WINDOWS\system32\dllcache\wmiprov.dll + 2004-08-04 07:56:46 437,248 -c–a-w C:\WINDOWS\system32\dllcache\wmiprvsd.dll + 2004-08-04 10:00:00 218,112 -c–a-w C:\WINDOWS\system32\dllcache\wmiprvse.exe + 2004-08-04 07:56:46 41,472 -c–a-w C:\WINDOWS\system32\dllcache\wmipsess.dll + 2004-08-04 07:56:46 144,896 -c–a-w C:\WINDOWS\system32\dllcache\wmisvc.dll + 2004-08-04 07:56:46 95,232 -c–a-w C:\WINDOWS\system32\dllcache\wmiutils.dll + 2004-08-04 07:56:46 167,936 -c–a-w C:\WINDOWS\system32\dllcache\wmm2ae.dll + 2004-08-04 07:56:46 4,096 -c–a-w C:\WINDOWS\system32\dllcache\wmm2eres.dll + 2004-08-04 07:56:46 7,680 -c–a-w C:\WINDOWS\system32\dllcache\wmm2ext.dll + 2004-08-04 07:56:46 402,432 -c–a-w C:\WINDOWS\system32\dllcache\wmm2filt.dll + 2004-08-04 07:56:46 502,272 -c–a-w C:\WINDOWS\system32\dllcache\wmm2fxa.dll + 2004-08-04 07:56:46 325,632 -c–a-w C:\WINDOWS\system32\dllcache\wmm2fxb.dll + 2004-08-04 07:56:46 4,256,768 -c–a-w C:\WINDOWS\system32\dllcache\wmm2res.dll + 2004-08-04 07:56:46 5,632 -c–a-w C:\WINDOWS\system32\dllcache\wmm2res2.dll + 2004-08-04 10:00:00 1,050,624 -c–a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll + 2007-04-30 07:22:16 4,734,976 -c–a-w C:\WINDOWS\system32\dllcache\wmp.dll + 2004-08-04 10:00:00 114,688 -c–a-w C:\WINDOWS\system32\dllcache\wmpasf.dll + 2004-08-04 10:00:00 98,304 -c–a-w C:\WINDOWS\system32\dllcache\wmpband.dll + 2004-08-04 10:00:00 20,480 -c–a-w C:\WINDOWS\system32\dllcache\wmpcd.dll + 2004-08-04 10:00:00 20,480 -c–a-w C:\WINDOWS\system32\dllcache\wmpcore.dll + 2004-08-04 10:00:00 233,472 -c–a-w C:\WINDOWS\system32\dllcache\wmpdxm.dll + 2004-08-04 10:00:00 73,728 -c–a-w C:\WINDOWS\system32\dllcache\wmplayer.exe + 2004-08-04 10:00:00 2,940,928 -c–a-w C:\WINDOWS\system32\dllcache\wmploc.dll + 2004-08-04 07:56:46 221,184 -c–a-w C:\WINDOWS\system32\dllcache\wmpns.dll + 2004-08-04 10:00:00 102,400 -c–a-w C:\WINDOWS\system32\dllcache\wmpshell.dll + 2004-08-04 10:00:00 20,480 -c–a-w C:\WINDOWS\system32\dllcache\wmpui.dll + 2004-08-04 10:00:00 759,296 -c–a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll + 2004-08-04 10:00:00 115,200 -c–a-w C:\WINDOWS\system32\dllcache\wmsdmoe.dll + 2004-08-04 10:00:00 1,119,744 -c–a-w C:\WINDOWS\system32\dllcache\wmsdmoe2.dll + 2004-08-04 10:00:00 484,864 -c–a-w C:\WINDOWS\system32\dllcache\wmspdmod.dll + 2004-08-04 10:00:00 896,512 -c–a-w C:\WINDOWS\system32\dllcache\wmspdmoe.dll + 2004-08-04 10:00:00 303,616 -c–a-w C:\WINDOWS\system32\dllcache\wmstream.dll - 2006-10-19 01:47:22 2,450,944 -c—-w C:\WINDOWS\system32\dllcache\wmvcore.dll + 2006-12-07 22:02:24 2,174,976 -c–a-w C:\WINDOWS\system32\dllcache\wmvcore.dll + 2004-08-04 10:00:00 809,984 -c–a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll + 2004-08-04 10:00:00 1,001,472 -c–a-w C:\WINDOWS\system32\dllcache\wmvdmoe2.dll + 2004-08-04 10:00:00 214,528 -c–a-w C:\WINDOWS\system32\dllcache\wordpad.exe + 2004-08-04 10:00:00 264,192 -c–a-w C:\WINDOWS\system32\dllcache\wow32.dll - 2003-07-16 20:52:59 10,368 -c–a-w C:\WINDOWS\system32\dllcache\wowexec.exe + 2004-08-04 10:00:00 10,368 -c–a-w C:\WINDOWS\system32\dllcache\wowexec.exe + 2004-08-04 10:00:00 32,256 -c–a-w C:\WINDOWS\system32\dllcache\wpabaln.exe + 2004-08-04 10:00:00 32,256 -c–a-w C:\WINDOWS\system32\dllcache\wpnpinst.exe - 2007-11-03 12:19:19 12,288 -c–a-w C:\WINDOWS\system32\dllcache\write.exe + 2004-08-04 10:00:00 5,632 -c–a-w C:\WINDOWS\system32\dllcache\write.exe + 2004-08-04 10:00:00 82,944 -c–a-w C:\WINDOWS\system32\dllcache\ws2_32.dll + 2004-08-04 10:00:00 19,968 -c–a-w C:\WINDOWS\system32\dllcache\ws2help.dll - 2003-07-16 20:53:06 12,032 -c–a-w C:\WINDOWS\system32\dllcache\ws2ifsl.sys + 2004-08-04 10:00:00 12,032 -c–a-w C:\WINDOWS\system32\dllcache\ws2ifsl.sys + 2004-08-04 10:00:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\wscntfy.exe + 2004-08-04 10:00:00 114,688 -c–a-w C:\WINDOWS\system32\dllcache\wscript.exe + 2004-08-04 10:00:00 81,408 -c–a-w C:\WINDOWS\system32\dllcache\wscsvc.dll - 2003-07-16 20:53:10 9,216 -c–a-w C:\WINDOWS\system32\dllcache\wshatm.dll + 2004-08-04 10:00:00 9,216 -c–a-w C:\WINDOWS\system32\dllcache\wshatm.dll + 2004-08-04 10:00:00 28,672 -c–a-w C:\WINDOWS\system32\dllcache\wshcon.dll + 2004-08-04 10:00:00 65,536 -c–a-w C:\WINDOWS\system32\dllcache\wshext.dll + 2004-08-04 10:00:00 14,336 -c–a-w C:\WINDOWS\system32\dllcache\wship6.dll - 2003-07-16 20:53:13 11,776 -c–a-w C:\WINDOWS\system32\dllcache\wshisn.dll + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\wshisn.dll - 2003-07-16 20:53:13 7,168 -c–a-w C:\WINDOWS\system32\dllcache\wshnetbs.dll + 2004-08-04 10:00:00 7,168 -c–a-w C:\WINDOWS\system32\dllcache\wshnetbs.dll + 2004-08-04 10:00:00 11,776 -c–a-w C:\WINDOWS\system32\dllcache\wshrm.dll + 2004-08-04 10:00:00 19,968 -c–a-w C:\WINDOWS\system32\dllcache\wshtcpip.dll + 2004-08-04 10:00:00 42,496 -c–a-w C:\WINDOWS\system32\dllcache\wsnmp32.dll + 2004-08-04 10:00:00 22,528 -c–a-w C:\WINDOWS\system32\dllcache\wsock32.dll + 2004-08-04 10:00:00 50,688 -c–a-w C:\WINDOWS\system32\dllcache\wstdecod.dll + 2004-08-04 10:00:00 18,432 -c–a-w C:\WINDOWS\system32\dllcache\wtsapi32.dll - 2007-07-30 23:19:36 549,720 -c–a-w C:\WINDOWS\system32\dllcache\wuapi.dll + 2007-04-17 03:45:48 549,720 -c–a-w C:\WINDOWS\system32\dllcache\wuapi.dll - 2007-07-30 23:19:16 53,080 -c–a-w C:\WINDOWS\system32\dllcache\wuauclt.exe + 2007-07-31 00:19:16 53,080 -c–a-w C:\WINDOWS\system32\dllcache\wuauclt.exe + 2004-08-04 10:00:00 165,888 -c–a-w C:\WINDOWS\system32\dllcache\wuauclt1.exe - 2007-07-30 23:19:42 1,712,984 -c–a-w C:\WINDOWS\system32\dllcache\wuaueng.dll + 2007-07-31 00:19:42 1,712,984 -c–a-w C:\WINDOWS\system32\dllcache\wuaueng.dll + 2004-08-04 10:00:00 183,296 -c–a-w C:\WINDOWS\system32\dllcache\wuaueng1.dll + 2004-08-04 07:56:46 6,656 -c–a-w C:\WINDOWS\system32\dllcache\wuauserv.dll - 2007-07-30 23:19:32 325,976 -c–a-w C:\WINDOWS\system32\dllcache\wucltui.dll + 2007-07-31 00:19:32 325,976 -c–a-w C:\WINDOWS\system32\dllcache\wucltui.dll - 2007-11-03 12:19:19 38,912 -c–a-w C:\WINDOWS\system32\dllcache\wupdmgr.exe + 2004-08-04 10:00:00 32,256 -c–a-w C:\WINDOWS\system32\dllcache\wupdmgr.exe - 2007-07-30 23:18:40 33,624 -c–a-w C:\WINDOWS\system32\dllcache\wups.dll + 2007-04-17 03:47:36 33,624 -c–a-w C:\WINDOWS\system32\dllcache\wups.dll - 2007-07-30 23:19:28 203,096 -c–a-w C:\WINDOWS\system32\dllcache\wuweb.dll + 2007-07-31 00:19:46 203,096 -c–a-w C:\WINDOWS\system32\dllcache\wuweb.dll + 2004-08-04 10:00:00 378,368 -c–a-w C:\WINDOWS\system32\dllcache\wzcdlg.dll + 2004-08-04 10:00:00 91,648 -c–a-w C:\WINDOWS\system32\dllcache\xactsrv.dll + 2004-08-04 10:00:00 30,720 -c–a-w C:\WINDOWS\system32\dllcache\xcopy.exe + 2004-08-04 10:00:00 174,200 -c–a-w C:\WINDOWS\system32\dllcache\xenroll.dll + 2004-08-04 10:00:00 129,536 -c–a-w C:\WINDOWS\system32\dllcache\xmlprov.dll + 2004-08-04 10:00:00 50,176 -c–a-w C:\WINDOWS\system32\dllcache\xmlprovi.dll + 2006-03-01 19:42:42 11,776 -c–a-w C:\WINDOWS\system32\dllcache\xolehlp.dll + 2004-08-04 10:00:00 438,784 -c–a-w C:\WINDOWS\system32\dllcache\xpob2res.dll + 2004-08-04 10:00:00 187,392 -c–a-w C:\WINDOWS\system32\dllcache\xpsp1res.dll + 2004-08-04 10:00:00 2,897,920 -c–a-w C:\WINDOWS\system32\dllcache\xpsp2res.dll + 2004-08-04 10:00:00 337,920 -c–a-w C:\WINDOWS\system32\dllcache\zipfldr.dll - 2003-07-16 20:54:48 8,261 -c–a-w C:\WINDOWS\system32\dllcache\zoneoc.dll + 2004-08-04 10:00:00 8,261 -c–a-w C:\WINDOWS\system32\dllcache\zoneoc.dll - 2007-11-03 12:19:20 11,776 —-a-w C:\WINDOWS\system32\dllhost.exe + 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\dllhost.exe - 2007-11-03 12:19:20 11,264 —-a-w C:\WINDOWS\system32\dllhst3g.exe + 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\dllhst3g.exe - 2007-11-03 12:19:20 231,424 —-a-w C:\WINDOWS\system32\dmadmin.exe + 2004-08-04 10:00:00 224,768 —-a-w C:\WINDOWS\system32\dmadmin.exe - 2004-08-04 07:56:42 28,672 —-a-w C:\WINDOWS\system32\dmband.dll + 2004-08-04 10:00:00 28,672 —-a-w C:\WINDOWS\system32\dmband.dll - 2004-08-04 07:56:42 61,440 —-a-w C:\WINDOWS\system32\dmcompos.dll + 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\dmcompos.dll - 2003-07-16 20:27:02 330,752 —-a-w C:\WINDOWS\system32\dmconfig.dll + 2004-08-04 10:00:00 330,752 —-a-w C:\WINDOWS\system32\dmconfig.dll - 2003-07-16 20:27:02 273,920 —-a-w C:\WINDOWS\system32\dmdlgs.dll + 2004-08-04 10:00:00 273,920 —-a-w C:\WINDOWS\system32\dmdlgs.dll - 2004-08-04 07:56:42 200,704 —-a-w C:\WINDOWS\system32\dmdskmgr.dll + 2004-08-04 10:00:00 200,704 —-a-w C:\WINDOWS\system32\dmdskmgr.dll - 2003-07-16 20:27:03 118,784 —-a-w C:\WINDOWS\system32\dmdskres.dll + 2004-08-04 10:00:00 118,784 —-a-w C:\WINDOWS\system32\dmdskres.dll - 2004-08-04 07:56:42 181,248 —-a-w C:\WINDOWS\system32\dmime.dll + 2004-08-04 10:00:00 181,248 —-a-w C:\WINDOWS\system32\dmime.dll - 2003-07-16 20:27:03 18,432 —-a-w C:\WINDOWS\system32\dmintf.dll + 2004-08-04 10:00:00 18,432 —-a-w C:\WINDOWS\system32\dmintf.dll - 2004-08-04 07:56:42 35,840 —-a-w C:\WINDOWS\system32\dmloader.dll + 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\dmloader.dll - 2003-07-16 20:27:04 19,456 —-a-w C:\WINDOWS\system32\dmocx.dll + 2004-08-04 10:00:00 19,456 —-a-w C:\WINDOWS\system32\dmocx.dll - 2007-11-03 12:19:20 22,528 —-a-w C:\WINDOWS\system32\dmremote.exe + 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\dmremote.exe - 2004-08-04 07:56:42 82,432 —-a-w C:\WINDOWS\system32\dmscript.dll + 2004-08-04 10:00:00 82,432 —-a-w C:\WINDOWS\system32\dmscript.dll - 2004-08-04 07:56:42 23,552 —-a-w C:\WINDOWS\system32\dmserver.dll + 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\dmserver.dll - 2004-08-04 07:56:42 105,984 —-a-w C:\WINDOWS\system32\dmstyle.dll + 2004-08-04 10:00:00 105,984 —-a-w C:\WINDOWS\system32\dmstyle.dll - 2004-08-04 07:56:42 103,424 —-a-w C:\WINDOWS\system32\dmsynth.dll + 2004-08-04 10:00:00 103,424 —-a-w C:\WINDOWS\system32\dmsynth.dll - 2004-08-04 07:56:42 104,448 —-a-w C:\WINDOWS\system32\dmusic.dll + 2004-08-04 10:00:00 104,448 —-a-w C:\WINDOWS\system32\dmusic.dll - 2004-08-04 07:56:42 52,224 —-a-w C:\WINDOWS\system32\dmutil.dll + 2004-08-04 10:00:00 52,224 —-a-w C:\WINDOWS\system32\dmutil.dll - 2004-08-04 07:56:42 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll + 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll - 2003-07-16 20:27:08 46,080 —-a-w C:\WINDOWS\system32\docprop.dll + 2004-08-04 10:00:00 46,080 —-a-w C:\WINDOWS\system32\docprop.dll - 2004-08-04 07:56:42 48,128 —-a-w C:\WINDOWS\system32\docprop2.dll + 2004-08-04 10:00:00 48,128 —-a-w C:\WINDOWS\system32\docprop2.dll - 2007-11-03 12:19:20 17,408 —-a-w C:\WINDOWS\system32\doskey.exe + 2004-08-04 10:00:00 10,752 —-a-w C:\WINDOWS\system32\doskey.exe - 2004-08-04 05:51:21 53,840 —-a-w C:\WINDOWS\system32\dosx.exe + 2004-08-04 10:00:00 53,840 —-a-w C:\WINDOWS\system32\dosx.exe - 2004-08-04 06:13:53 97,280 —-a-w C:\WINDOWS\system32\dpcdll.dll + 2004-08-04 10:00:00 97,280 —-a-w C:\WINDOWS\system32\dpcdll.dll - 2003-07-16 20:27:11 33,040 —-a-w C:\WINDOWS\system32\dplay.dll + 2004-08-04 10:00:00 33,040 —-a-w C:\WINDOWS\system32\dplay.dll - 2007-11-03 12:19:20 36,864 —-a-w C:\WINDOWS\system32\dplaysvr.exe + 2004-08-04 10:00:00 30,208 —-a-w C:\WINDOWS\system32\dplaysvr.exe - 2004-08-04 07:56:42 229,888 —-a-w C:\WINDOWS\system32\dplayx.dll + 2004-08-04 10:00:00 229,888 —-a-w C:\WINDOWS\system32\dplayx.dll - 2004-08-04 07:56:42 23,552 —-a-w C:\WINDOWS\system32\dpmodemx.dll + 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\dpmodemx.dll - 2004-08-04 07:56:03 3,584 —-a-w C:\WINDOWS\system32\dpnaddr.dll + 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\dpnaddr.dll - 2004-08-04 07:56:42 375,296 —-a-w C:\WINDOWS\system32\dpnet.dll + 2004-08-04 10:00:00 375,296 —-a-w C:\WINDOWS\system32\dpnet.dll - 2004-08-04 07:56:42 35,328 —-a-w C:\WINDOWS\system32\dpnhpast.dll + 2004-08-04 10:00:00 35,328 —-a-w C:\WINDOWS\system32\dpnhpast.dll - 2004-08-04 07:56:42 60,928 —-a-w C:\WINDOWS\system32\dpnhupnp.dll + 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\dpnhupnp.dll - 2004-08-04 07:56:03 3,584 —-a-w C:\WINDOWS\system32\dpnlobby.dll + 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\dpnlobby.dll - 2003-07-16 20:27:14 62,464 —-a-w C:\WINDOWS\system32\dpnmodem.dll + 2004-08-04 10:00:00 62,464 —-a-w C:\WINDOWS\system32\dpnmodem.dll - 2007-11-03 12:19:20 25,088 —-a-w C:\WINDOWS\system32\dpnsvr.exe + 2004-08-04 10:00:00 18,432 —-a-w C:\WINDOWS\system32\dpnsvr.exe - 2003-07-16 20:27:15 61,952 —-a-w C:\WINDOWS\system32\dpnwsock.dll + 2004-08-04 10:00:00 61,952 —-a-w C:\WINDOWS\system32\dpnwsock.dll - 2003-07-16 20:27:15 53,520 —-a-w C:\WINDOWS\system32\dpserial.dll + 2004-08-04 10:00:00 53,520 —-a-w C:\WINDOWS\system32\dpserial.dll - 2004-08-04 07:56:42 21,504 —-a-w C:\WINDOWS\system32\dpvacm.dll + 2004-08-04 10:00:00 21,504 —-a-w C:\WINDOWS\system32\dpvacm.dll - 2004-08-04 07:56:42 212,480 —-a-w C:\WINDOWS\system32\dpvoice.dll + 2004-08-04 10:00:00 212,480 —-a-w C:\WINDOWS\system32\dpvoice.dll - 2007-11-03 12:19:20 90,112 —-a-w C:\WINDOWS\system32\dpvsetup.exe + 2004-08-04 10:00:00 83,456 —-a-w C:\WINDOWS\system32\dpvsetup.exe - 2004-08-04 07:56:42 116,736 —-a-w C:\WINDOWS\system32\dpvvox.dll + 2004-08-04 10:00:00 116,736 —-a-w C:\WINDOWS\system32\dpvvox.dll - 2003-07-16 20:27:17 42,768 —-a-w C:\WINDOWS\system32\dpwsock.dll + 2004-08-04 10:00:00 42,768 —-a-w C:\WINDOWS\system32\dpwsock.dll - 2004-08-04 07:56:42 57,344 —-a-w C:\WINDOWS\system32\dpwsockx.dll + 2004-08-04 10:00:00 57,344 —-a-w C:\WINDOWS\system32\dpwsockx.dll - 2004-08-04 06:07:38 187,776 —-a-w C:\WINDOWS\system32\drivers\acpi.sys + 2004-08-04 10:00:00 187,776 —-a-w C:\WINDOWS\system32\drivers\acpi.sys - 2003-07-16 20:23:47 11,648 —-a-w C:\WINDOWS\system32\drivers\acpiec.sys + 2004-08-04 10:00:00 11,648 —-a-w C:\WINDOWS\system32\drivers\acpiec.sys - 2004-08-04 06:14:14 138,496 —-a-w C:\WINDOWS\system32\drivers\afd.sys + 2004-08-04 10:00:00 138,496 —-a-w C:\WINDOWS\system32\drivers\afd.sys - 2004-08-04 05:59:19 36,992 —-a-w C:\WINDOWS\system32\drivers\amdk6.sys + 2004-08-04 10:00:00 36,992 —-a-w C:\WINDOWS\system32\drivers\amdk6.sys - 2004-08-04 05:59:20 37,376 —-a-w C:\WINDOWS\system32\drivers\amdk7.sys + 2004-08-04 10:00:00 37,376 —-a-w C:\WINDOWS\system32\drivers\amdk7.sys - 2004-08-04 05:58:29 60,800 —-a-w C:\WINDOWS\system32\drivers\arp1394.sys + 2004-08-04 10:00:00 60,800 —-a-w C:\WINDOWS\system32\drivers\arp1394.sys - 2004-08-04 06:05:03 14,336 —-a-w C:\WINDOWS\system32\drivers\asyncmac.sys + 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\drivers\asyncmac.sys - 2004-08-04 02:59:42 95,360 —-a-w C:\WINDOWS\system32\drivers\atapi.sys + 2004-08-04 10:00:00 95,360 —-a-w C:\WINDOWS\system32\drivers\atapi.sys - 2004-08-04 05:58:30 59,904 —-a-w C:\WINDOWS\system32\drivers\atmarpc.sys + 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\drivers\atmarpc.sys - 2003-07-16 20:24:32 31,360 —-a-w C:\WINDOWS\system32\drivers\atmepvc.sys + 2004-08-04 10:00:00 31,360 —-a-w C:\WINDOWS\system32\drivers\atmepvc.sys - 2004-08-04 05:58:34 55,936 —-a-w C:\WINDOWS\system32\drivers\atmlane.sys + 2004-08-04 10:00:00 55,936 —-a-w C:\WINDOWS\system32\drivers\atmlane.sys - 2003-07-16 20:24:33 352,256 —-a-w C:\WINDOWS\system32\drivers\atmuni.sys + 2004-08-04 10:00:00 352,256 —-a-w C:\WINDOWS\system32\drivers\atmuni.sys + 2007-11-11 00:25:40 821,856 —-a-w C:\WINDOWS\system32\drivers\avg7core.sys + 2007-11-11 00:25:46 4,224 —-a-w C:\WINDOWS\system32\drivers\avg7rsw.sys + 2007-11-11 00:25:46 27,776 —-a-w C:\WINDOWS\system32\drivers\avg7rsxp.sys + 2007-11-11 00:25:47 3,968 —-a-w C:\WINDOWS\system32\drivers\avgclean.sys + 2007-11-11 00:25:46 19,904 —-a-w C:\WINDOWS\system32\drivers\avgmfx86.sys + 2007-11-11 00:25:46 4,960 —-a-w C:\WINDOWS\system32\drivers\avgtdi.sys - 2003-07-16 20:24:45 4,224 —-a-w C:\WINDOWS\system32\drivers\beep.sys + 2004-08-04 10:00:00 4,224 —-a-w C:\WINDOWS\system32\drivers\beep.sys - 2004-08-04 05:59:57 71,552 —-a-w C:\WINDOWS\system32\drivers\bridge.sys + 2004-08-04 10:00:00 71,552 —-a-w C:\WINDOWS\system32\drivers\bridge.sys - 2004-08-04 06:10:38 17,024 ——w C:\WINDOWS\system32\drivers\bthenum.sys + 2004-08-04 10:00:00 17,024 —-a-w C:\WINDOWS\system32\drivers\bthenum.sys - 2004-08-04 06:10:38 38,016 ——w C:\WINDOWS\system32\drivers\bthmodem.sys + 2004-08-04 10:00:00 38,016 —-a-w C:\WINDOWS\system32\drivers\bthmodem.sys - 2004-08-04 05:58:38 100,992 ——w C:\WINDOWS\system32\drivers\bthpan.sys + 2004-08-04 10:00:00 100,992 —-a-w C:\WINDOWS\system32\drivers\bthpan.sys - 2004-08-04 06:10:37 274,304 ——w C:\WINDOWS\system32\drivers\bthport.sys + 2004-08-04 10:00:00 274,304 —-a-w C:\WINDOWS\system32\drivers\bthport.sys - 2004-08-04 06:10:37 35,456 ——w C:\WINDOWS\system32\drivers\bthprint.sys + 2004-08-04 10:00:00 35,456 —-a-w C:\WINDOWS\system32\drivers\bthprint.sys - 2004-08-04 06:10:34 18,944 ——w C:\WINDOWS\system32\drivers\bthusb.sys + 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\drivers\bthusb.sys - 2003-07-16 20:25:07 13,952 —-a-w C:\WINDOWS\system32\drivers\cbidf2k.sys + 2004-08-04 10:00:00 13,952 —-a-w C:\WINDOWS\system32\drivers\cbidf2k.sys - 2003-07-16 20:27:31 18,688 —-a-w C:\WINDOWS\system32\drivers\cdaudio.sys + 2004-08-04 10:00:00 18,688 —-a-w C:\WINDOWS\system32\drivers\cdaudio.sys - 2004-08-04 06:14:10 63,744 —-a-w C:\WINDOWS\system32\drivers\cdfs.sys + 2004-08-04 10:00:00 63,744 —-a-w C:\WINDOWS\system32\drivers\cdfs.sys - 2004-08-04 05:59:52 49,536 —-a-w C:\WINDOWS\system32\drivers\cdrom.sys + 2004-08-04 10:00:00 49,536 —-a-w C:\WINDOWS\system32\drivers\cdrom.sys + 2004-12-13 21:14:00 39,904 —-a-w C:\WINDOWS\system32\drivers\cercsr6.sys - 2003-07-16 20:27:31 262,528 —-a-w C:\WINDOWS\system32\drivers\cinemst2.sys + 2004-08-04 10:00:00 262,528 —-a-w C:\WINDOWS\system32\drivers\cinemst2.sys - 2004-08-04 06:14:26 49,664 —-a-w C:\WINDOWS\system32\drivers\classpnp.sys + 2004-08-04 10:00:00 49,664 —-a-w C:\WINDOWS\system32\drivers\classpnp.sys - 2003-07-16 20:27:31 11,776 —-a-w C:\WINDOWS\system32\drivers\cpqdap01.sys + 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\drivers\cpqdap01.sys - 2004-08-04 05:59:20 36,480 —-a-w C:\WINDOWS\system32\drivers\crusoe.sys + 2004-08-04 10:00:00 36,480 —-a-w C:\WINDOWS\system32\drivers\crusoe.sys - 2004-08-04 05:59:54 36,352 —-a-w C:\WINDOWS\system32\drivers\disk.sys + 2004-08-04 10:00:00 36,352 —-a-w C:\WINDOWS\system32\drivers\disk.sys - 2004-08-04 05:59:52 14,208 —-a-w C:\WINDOWS\system32\drivers\diskdump.sys + 2004-08-04 10:00:00 14,208 —-a-w C:\WINDOWS\system32\drivers\diskdump.sys - 2004-08-04 06:07:17 799,744 —-a-w C:\WINDOWS\system32\drivers\dmboot.sys + 2004-08-04 10:00:00 799,744 —-a-w C:\WINDOWS\system32\drivers\dmboot.sys - 2004-08-04 06:07:16 153,344 —-a-w C:\WINDOWS\system32\drivers\dmio.sys + 2004-08-04 10:00:00 153,344 —-a-w C:\WINDOWS\system32\drivers\dmio.sys - 2003-07-16 20:27:04 5,888 —-a-w C:\WINDOWS\system32\drivers\dmload.sys + 2004-08-04 10:00:00 5,888 —-a-w C:\WINDOWS\system32\drivers\dmload.sys - 2004-08-04 03:07:58 60,288 —-a-w C:\WINDOWS\system32\drivers\drmk.sys + 2004-08-04 04:08:00 60,288 —-a-w C:\WINDOWS\system32\drivers\drmk.sys - 2003-07-16 20:27:46 10,496 —-a-w C:\WINDOWS\system32\drivers\dxapi.sys + 2004-08-04 10:00:00 10,496 —-a-w C:\WINDOWS\system32\drivers\dxapi.sys - 2004-08-04 06:00:54 71,040 —-a-w C:\WINDOWS\system32\drivers\dxg.sys + 2004-08-04 10:00:00 71,040 —-a-w C:\WINDOWS\system32\drivers\dxg.sys - 2003-07-16 20:27:47 3,328 —-a-w C:\WINDOWS\system32\drivers\dxgthk.sys + 2004-08-04 10:00:00 3,328 —-a-w C:\WINDOWS\system32\drivers\dxgthk.sys - 2004-08-04 06:14:16 143,360 —-a-w C:\WINDOWS\system32\drivers\fastfat.sys + 2004-08-04 10:00:00 143,360 —-a-w C:\WINDOWS\system32\drivers\fastfat.sys - 2004-08-04 05:59:27 27,392 —-a-w C:\WINDOWS\system32\drivers\fdc.sys + 2004-08-04 10:00:00 27,392 —-a-w C:\WINDOWS\system32\drivers\fdc.sys - 2003-07-16 20:28:22 34,944 —-a-w C:\WINDOWS\system32\drivers\fips.sys + 2004-08-04 10:00:00 34,944 —-a-w C:\WINDOWS\system32\drivers\fips.sys - 2004-08-04 05:59:27 20,480 —-a-w C:\WINDOWS\system32\drivers\flpydisk.sys + 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\drivers\flpydisk.sys - 2003-07-16 20:28:36 7,936 —-a-w C:\WINDOWS\system32\drivers\fs_rec.sys + 2004-08-04 10:00:00 7,936 —-a-w C:\WINDOWS\system32\drivers\fs_rec.sys - 2003-07-16 20:27:31 12,160 —-a-w C:\WINDOWS\system32\drivers\fsvga.sys + 2004-08-04 10:00:00 12,160 —-a-w C:\WINDOWS\system32\drivers\fsvga.sys - 2003-07-16 20:28:36 125,056 —-a-w C:\WINDOWS\system32\drivers\ftdisk.sys + 2004-08-04 10:00:00 125,056 —-a-w C:\WINDOWS\system32\drivers\ftdisk.sys - 2004-08-04 03:08:22 10,624 —-a-w C:\WINDOWS\system32\drivers\gameenum.sys + 2004-08-04 10:00:00 10,624 —-a-w C:\WINDOWS\system32\drivers\gameenum.sys - 2004-08-04 06:10:36 25,600 ——w C:\WINDOWS\system32\drivers\hidbth.sys + 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\system32\drivers\hidbth.sys - 2004-08-04 06:08:19 36,224 —-a-w C:\WINDOWS\system32\drivers\hidclass.sys + 2004-08-04 10:00:00 36,224 —-a-w C:\WINDOWS\system32\drivers\hidclass.sys - 2004-08-04 06:08:16 24,960 —-a-w C:\WINDOWS\system32\drivers\hidparse.sys + 2004-08-04 10:00:00 24,960 —-a-w C:\WINDOWS\system32\drivers\hidparse.sys - 2003-07-16 20:29:24 9,600 —-a-w C:\WINDOWS\system32\drivers\hidusb.sys + 2004-08-04 10:00:00 9,600 —-a-w C:\WINDOWS\system32\drivers\hidusb.sys - 2004-08-04 06:14:36 52,736 —-a-w C:\WINDOWS\system32\drivers\i8042prt.sys + 2004-08-04 10:00:00 52,736 —-a-w C:\WINDOWS\system32\drivers\i8042prt.sys - 2004-08-04 06:00:15 41,856 —-a-w C:\WINDOWS\system32\drivers\imapi.sys + 2004-08-04 10:00:00 41,856 —-a-w C:\WINDOWS\system32\drivers\imapi.sys - 2004-08-04 05:59:41 5,504 —-a-w C:\WINDOWS\system32\drivers\intelide.sys + 2004-08-04 10:00:00 5,504 —-a-w C:\WINDOWS\system32\drivers\intelide.sys - 2004-08-04 05:59:19 36,096 ——w C:\WINDOWS\system32\drivers\intelppm.sys + 2004-08-04 10:00:00 36,096 —-a-w C:\WINDOWS\system32\drivers\intelppm.sys - 2004-08-04 06:00:06 29,056 ——w C:\WINDOWS\system32\drivers\ip6fw.sys + 2004-08-04 10:00:00 29,056 —-a-w C:\WINDOWS\system32\drivers\ip6fw.sys - 2003-07-16 20:30:32 32,896 —-a-w C:\WINDOWS\system32\drivers\ipfltdrv.sys + 2004-08-04 10:00:00 32,896 —-a-w C:\WINDOWS\system32\drivers\ipfltdrv.sys - 2004-08-04 06:04:45 20,992 —-a-w C:\WINDOWS\system32\drivers\ipinip.sys + 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\drivers\ipinip.sys - 2004-08-04 06:14:28 74,752 —-a-w C:\WINDOWS\system32\drivers\ipsec.sys + 2004-08-04 10:00:00 74,752 —-a-w C:\WINDOWS\system32\drivers\ipsec.sys - 2001-08-17 17:58:02 35,840 —-a-w C:\WINDOWS\system32\drivers\isapnp.sys + 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\drivers\isapnp.sys - 2004-08-04 05:58:32 24,576 —-a-w C:\WINDOWS\system32\drivers\kbdclass.sys + 2004-08-04 10:00:00 24,576 —-a-w C:\WINDOWS\system32\drivers\kbdclass.sys - 2004-08-04 03:15:22 140,928 —-a-w C:\WINDOWS\system32\drivers\ks.sys + 2004-08-04 04:15:22 140,928 —-a-w C:\WINDOWS\system32\drivers\ks.sys - 2004-08-04 05:59:47 92,032 —-a-w C:\WINDOWS\system32\drivers\ksecdd.sys + 2004-08-04 10:00:00 92,032 —-a-w C:\WINDOWS\system32\drivers\ksecdd.sys - 2003-07-16 20:32:29 7,680 —-a-w C:\WINDOWS\system32\drivers\mcd.sys + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\drivers\mcd.sys - 2004-08-04 06:07:44 63,744 —-a-w C:\WINDOWS\system32\drivers\mf.sys + 2004-08-04 10:00:00 63,744 —-a-w C:\WINDOWS\system32\drivers\mf.sys - 2003-07-16 20:33:57 4,224 —-a-w C:\WINDOWS\system32\drivers\mnmdd.sys + 2004-08-04 10:00:00 4,224 —-a-w C:\WINDOWS\system32\drivers\mnmdd.sys - 2004-08-04 06:08:05 30,080 —-a-w C:\WINDOWS\system32\drivers\modem.sys + 2004-08-04 10:00:00 30,080 —-a-w C:\WINDOWS\system32\drivers\modem.sys - 2004-08-04 05:58:32 23,040 —-a-w C:\WINDOWS\system32\drivers\mouclass.sys + 2004-08-04 10:00:00 23,040 —-a-w C:\WINDOWS\system32\drivers\mouclass.sys - 2004-08-04 05:58:30 42,240 —-a-w C:\WINDOWS\system32\drivers\mountmgr.sys + 2004-08-04 10:00:00 42,240 —-a-w C:\WINDOWS\system32\drivers\mountmgr.sys - 2004-08-04 06:00:56 181,248 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys + 2004-08-04 10:00:00 181,248 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys - 2004-08-04 06:00:41 19,072 —-a-w C:\WINDOWS\system32\drivers\msfs.sys + 2004-08-04 10:00:00 19,072 —-a-w C:\WINDOWS\system32\drivers\msfs.sys - 2004-08-04 06:04:12 35,072 —-a-w C:\WINDOWS\system32\drivers\msgpc.sys + 2004-08-04 10:00:00 35,072 —-a-w C:\WINDOWS\system32\drivers\msgpc.sys - 2004-08-04 05:58:41 7,552 —-a-w C:\WINDOWS\system32\drivers\mskssrv.sys + 2004-08-04 10:00:00 7,552 —-a-w C:\WINDOWS\system32\drivers\mskssrv.sys - 2004-08-04 05:58:38 5,376 —-a-w C:\WINDOWS\system32\drivers\mspclock.sys + 2004-08-04 10:00:00 5,376 —-a-w C:\WINDOWS\system32\drivers\mspclock.sys - 2004-08-04 05:58:40 4,992 —-a-w C:\WINDOWS\system32\drivers\mspqm.sys + 2004-08-04 10:00:00 4,992 —-a-w C:\WINDOWS\system32\drivers\mspqm.sys - 2004-08-04 06:07:47 15,488 ——w C:\WINDOWS\system32\drivers\mssmbios.sys + 2004-08-04 10:00:00 15,488 —-a-w C:\WINDOWS\system32\drivers\mssmbios.sys - 2004-08-04 06:15:20 107,904 —-a-w C:\WINDOWS\system32\drivers\mup.sys + 2004-08-04 10:00:00 107,904 —-a-w C:\WINDOWS\system32\drivers\mup.sys - 2004-08-04 06:14:28 182,912 —-a-w C:\WINDOWS\system32\drivers\ndis.sys + 2004-08-04 10:00:00 182,912 —-a-w C:\WINDOWS\system32\drivers\ndis.sys - 2003-07-16 20:37:23 9,600 —-a-w C:\WINDOWS\system32\drivers\ndistapi.sys + 2004-08-04 10:00:00 9,600 —-a-w C:\WINDOWS\system32\drivers\ndistapi.sys - 2004-08-04 06:03:12 12,928 —-a-w C:\WINDOWS\system32\drivers\ndisuio.sys + 2004-08-04 10:00:00 12,928 —-a-w C:\WINDOWS\system32\drivers\ndisuio.sys - 2004-08-04 06:14:31 91,776 —-a-w C:\WINDOWS\system32\drivers\ndiswan.sys + 2004-08-04 10:00:00 91,776 —-a-w C:\WINDOWS\system32\drivers\ndiswan.sys - 2003-07-16 20:37:24 38,016 —-a-w C:\WINDOWS\system32\drivers\ndproxy.sys + 2004-08-04 10:00:00 38,016 —-a-w C:\WINDOWS\system32\drivers\ndproxy.sys - 2004-08-04 06:03:21 34,560 —-a-w C:\WINDOWS\system32\drivers\netbios.sys + 2004-08-04 10:00:00 34,560 —-a-w C:\WINDOWS\system32\drivers\netbios.sys - 2004-08-04 06:14:37 162,816 —-a-w C:\WINDOWS\system32\drivers\netbt.sys + 2004-08-04 10:00:00 162,816 —-a-w C:\WINDOWS\system32\drivers\netbt.sys - 2004-08-04 05:58:29 61,824 —-a-w C:\WINDOWS\system32\drivers\nic1394.sys + 2004-08-04 10:00:00 61,824 —-a-w C:\WINDOWS\system32\drivers\nic1394.sys - 2003-07-16 20:27:31 12,032 —-a-w C:\WINDOWS\system32\drivers\nikedrv.sys + 2004-08-04 10:00:00 12,032 —-a-w C:\WINDOWS\system32\drivers\nikedrv.sys - 2004-08-04 05:59:50 40,320 —-a-w C:\WINDOWS\system32\drivers\nmnt.sys + 2004-08-04 10:00:00 40,320 —-a-w C:\WINDOWS\system32\drivers\nmnt.sys - 2004-08-04 06:00:43 30,848 —-a-w C:\WINDOWS\system32\drivers\npfs.sys + 2004-08-04 10:00:00 30,848 —-a-w C:\WINDOWS\system32\drivers\npfs.sys - 2003-07-16 20:40:07 12,416 —-a-w C:\WINDOWS\system32\drivers\nwlnkflt.sys + 2004-08-04 10:00:00 12,416 —-a-w C:\WINDOWS\system32\drivers\nwlnkflt.sys - 2003-07-16 20:40:07 32,512 —-a-w C:\WINDOWS\system32\drivers\nwlnkfwd.sys + 2004-08-04 10:00:00 32,512 —-a-w C:\WINDOWS\system32\drivers\nwlnkfwd.sys - 2004-08-04 06:03:35 88,448 —-a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys + 2004-08-04 10:00:00 88,448 —-a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys - 2003-07-16 20:40:08 63,232 —-a-w C:\WINDOWS\system32\drivers\nwlnknb.sys + 2004-08-04 10:00:00 63,232 —-a-w C:\WINDOWS\system32\drivers\nwlnknb.sys - 2003-07-16 20:40:09 55,936 —-a-w C:\WINDOWS\system32\drivers\nwlnkspx.sys + 2004-08-04 10:00:00 55,936 —-a-w C:\WINDOWS\system32\drivers\nwlnkspx.sys - 2003-07-16 20:40:47 3,456 —-a-w C:\WINDOWS\system32\drivers\oprghdlr.sys + 2004-08-04 10:00:00 3,456 —-a-w C:\WINDOWS\system32\drivers\oprghdlr.sys - 2004-08-04 05:59:19 42,496 —-a-w C:\WINDOWS\system32\drivers\p3.sys + 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\drivers\p3.sys - 2004-08-04 05:59:06 80,128 —-a-w C:\WINDOWS\system32\drivers\parport.sys + 2004-08-04 10:00:00 80,128 —-a-w C:\WINDOWS\system32\drivers\parport.sys - 2003-07-16 20:41:02 18,688 —-a-w C:\WINDOWS\system32\drivers\partmgr.sys + 2004-08-04 10:00:00 18,688 —-a-w C:\WINDOWS\system32\drivers\partmgr.sys - 2003-07-16 20:41:02 6,784 —-a-w C:\WINDOWS\system32\drivers\parvdm.sys + 2004-08-04 10:00:00 6,784 —-a-w C:\WINDOWS\system32\drivers\parvdm.sys - 2004-08-04 03:07:46 68,224 —-a-w C:\WINDOWS\system32\drivers\pci.sys + 2004-08-04 10:00:00 68,224 —-a-w C:\WINDOWS\system32\drivers\pci.sys - 2001-08-17 17:51:52 3,328 —-a-w C:\WINDOWS\system32\drivers\pciide.sys + 2004-08-04 10:00:00 3,328 —-a-w C:\WINDOWS\system32\drivers\pciide.sys - 2004-08-04 02:59:42 25,088 —-a-w C:\WINDOWS\system32\drivers\pciidex.sys + 2004-08-04 10:00:00 25,088 —-a-w C:\WINDOWS\system32\drivers\pciidex.sys - 2004-08-04 06:07:46 119,936 —-a-w C:\WINDOWS\system32\drivers\pcmcia.sys + 2004-08-04 10:00:00 119,936 —-a-w C:\WINDOWS\system32\drivers\pcmcia.sys - 2004-03-16 15:58:20 136,960 —-a-w C:\WINDOWS\system32\drivers\portcls.sys + 2004-08-04 04:15:50 145,792 —-a-w C:\WINDOWS\system32\drivers\portcls.sys - 2004-08-04 05:59:17 35,328 —-a-w C:\WINDOWS\system32\drivers\processr.sys + 2004-08-04 10:00:00 35,328 —-a-w C:\WINDOWS\system32\drivers\processr.sys - 2004-08-04 06:04:19 69,120 —-a-w C:\WINDOWS\system32\drivers\psched.sys + 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\drivers\psched.sys - 2003-07-16 20:42:18 17,792 —-a-w C:\WINDOWS\system32\drivers\ptilink.sys + 2004-08-04 10:00:00 17,792 —-a-w C:\WINDOWS\system32\drivers\ptilink.sys - 2003-07-16 20:42:37 8,832 —-a-w C:\WINDOWS\system32\drivers\rasacd.sys + 2004-08-04 10:00:00 8,832 —-a-w C:\WINDOWS\system32\drivers\rasacd.sys - 2004-08-04 06:14:22 51,328 —-a-w C:\WINDOWS\system32\drivers\rasl2tp.sys + 2004-08-04 10:00:00 51,328 —-a-w C:\WINDOWS\system32\drivers\rasl2tp.sys - 2004-08-04 06:05:07 41,472 —-a-w C:\WINDOWS\system32\drivers\raspppoe.sys + 2004-08-04 10:00:00 41,472 —-a-w C:\WINDOWS\system32\drivers\raspppoe.sys - 2004-08-04 06:14:26 48,384 —-a-w C:\WINDOWS\system32\drivers\raspptp.sys + 2004-08-04 10:00:00 48,384 —-a-w C:\WINDOWS\system32\drivers\raspptp.sys - 2003-07-16 20:42:45 16,512 —-a-w C:\WINDOWS\system32\drivers\raspti.sys + 2004-08-04 10:00:00 16,512 —-a-w C:\WINDOWS\system32\drivers\raspti.sys - 2003-07-16 20:42:49 34,432 —-a-w C:\WINDOWS\system32\drivers\rawwan.sys + 2004-08-04 10:00:00 34,432 —-a-w C:\WINDOWS\system32\drivers\rawwan.sys - 2003-07-16 20:42:52 4,224 —-a-w C:\WINDOWS\system32\drivers\rdpcdd.sys + 2004-08-04 10:00:00 4,224 —-a-w C:\WINDOWS\system32\drivers\rdpcdd.sys - 2004-08-04 06:10:39 59,648 ——w C:\WINDOWS\system32\drivers\rfcomm.sys + 2004-08-04 10:00:00 59,648 —-a-w C:\WINDOWS\system32\drivers\rfcomm.sys - 2003-07-16 20:27:31 12,032 —-a-w C:\WINDOWS\system32\drivers\rio8drv.sys + 2004-08-04 10:00:00 12,032 —-a-w C:\WINDOWS\system32\drivers\rio8drv.sys - 2003-07-16 20:27:31 12,032 —-a-w C:\WINDOWS\system32\drivers\riodrv.sys + 2004-08-04 10:00:00 12,032 —-a-w C:\WINDOWS\system32\drivers\riodrv.sys - 2004-08-04 06:04:31 30,080 —-a-w C:\WINDOWS\system32\drivers\rndismp.sys + 2004-08-04 10:00:00 30,080 —-a-w C:\WINDOWS\system32\drivers\rndismp.sys - 2003-07-16 20:43:20 5,888 —-a-w C:\WINDOWS\system32\drivers\rootmdm.sys + 2004-08-04 10:00:00 5,888 —-a-w C:\WINDOWS\system32\drivers\rootmdm.sys - 2004-08-04 05:59:41 96,256 —-a-w C:\WINDOWS\system32\drivers\scsiport.sys + 2004-08-04 10:00:00 96,256 —-a-w C:\WINDOWS\system32\drivers\scsiport.sys - 2004-08-04 06:07:47 67,584 ——w C:\WINDOWS\system32\drivers\sdbus.sys + 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\drivers\sdbus.sys - 2003-07-16 20:44:08 27,440 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys + 2004-08-04 10:00:00 27,440 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys - 2004-08-04 05:59:07 15,488 —-a-w C:\WINDOWS\system32\drivers\serenum.sys + 2004-08-04 10:00:00 15,488 —-a-w C:\WINDOWS\system32\drivers\serenum.sys - 2004-08-04 06:15:52 64,896 —-a-w C:\WINDOWS\system32\drivers\serial.sys + 2004-08-04 10:00:00 64,896 —-a-w C:\WINDOWS\system32\drivers\serial.sys - 2004-08-04 05:59:54 11,136 ——w C:\WINDOWS\system32\drivers\sffdisk.sys + 2004-08-04 10:00:00 11,136 —-a-w C:\WINDOWS\system32\drivers\sffdisk.sys - 2004-08-04 05:59:54 10,240 ——w C:\WINDOWS\system32\drivers\sffp_sd.sys + 2004-08-04 10:00:00 10,240 —-a-w C:\WINDOWS\system32\drivers\sffp_sd.sys - 2004-08-04 05:59:54 11,392 —-a-w C:\WINDOWS\system32\drivers\sfloppy.sys + 2004-08-04 10:00:00 11,392 —-a-w C:\WINDOWS\system32\drivers\sfloppy.sys - 2004-08-04 06:07:36 6,016 ——w C:\WINDOWS\system32\drivers\smbali.sys + 2004-08-04 10:00:00 6,016 —-a-w C:\WINDOWS\system32\drivers\smbali.sys - 2003-07-16 20:45:26 14,592 —-a-w C:\WINDOWS\system32\drivers\smclib.sys + 2004-08-04 10:00:00 14,592 —-a-w C:\WINDOWS\system32\drivers\smclib.sys - 2004-08-04 06:09:55 25,472 —-a-w C:\WINDOWS\system32\drivers\sonydcam.sys + 2004-08-04 10:00:00 25,472 —-a-w C:\WINDOWS\system32\drivers\sonydcam.sys - 2004-08-04 03:08:02 48,640 —-a-w C:\WINDOWS\system32\drivers\stream.sys + 2004-08-04 04:08:04 48,640 —-a-w C:\WINDOWS\system32\drivers\stream.sys - 2004-08-04 02:58:42 4,352 —-a-w C:\WINDOWS\system32\drivers\swenum.sys + 2004-08-04 10:00:00 4,352 —-a-w C:\WINDOWS\system32\drivers\swenum.sys - 2001-08-17 21:00:52 54,272 —-a-w C:\WINDOWS\system32\drivers\swmidi.sys + 2004-08-04 10:00:00 54,272 —-a-w C:\WINDOWS\system32\drivers\swmidi.sys - 2004-08-04 06:15:55 60,800 —-a-w C:\WINDOWS\system32\drivers\sysaudio.sys + 2004-08-04 10:00:00 60,800 —-a-w C:\WINDOWS\system32\drivers\sysaudio.sys - 2004-08-04 05:59:59 14,976 —-a-w C:\WINDOWS\system32\drivers\tape.sys + 2004-08-04 10:00:00 14,976 —-a-w C:\WINDOWS\system32\drivers\tape.sys - 2004-08-04 06:07:48 18,560 —-a-w C:\WINDOWS\system32\drivers\tdi.sys + 2004-08-04 10:00:00 18,560 —-a-w C:\WINDOWS\system32\drivers\tdi.sys - 2003-07-16 20:27:31 51,712 —-a-w C:\WINDOWS\system32\drivers\tosdvd.sys + 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\drivers\tosdvd.sys - 2003-07-16 20:27:31 21,376 —-a-w C:\WINDOWS\system32\drivers\tsbvcap.sys + 2004-08-04 10:00:00 21,376 —-a-w C:\WINDOWS\system32\drivers\tsbvcap.sys - 2004-08-04 06:03:17 12,416 —-a-w C:\WINDOWS\system32\drivers\tunmp.sys + 2004-08-04 10:00:00 12,416 —-a-w C:\WINDOWS\system32\drivers\tunmp.sys - 2004-08-04 06:00:31 66,176 —-a-w C:\WINDOWS\system32\drivers\udfs.sys + 2004-08-04 10:00:00 66,176 —-a-w C:\WINDOWS\system32\drivers\udfs.sys - 2004-08-04 06:04:32 12,672 —-a-w C:\WINDOWS\system32\drivers\usb8023.sys + 2004-08-04 10:00:00 12,672 —-a-w C:\WINDOWS\system32\drivers\usb8023.sys - 2003-07-16 20:27:31 23,808 —-a-w C:\WINDOWS\system32\drivers\usbcamd.sys + 2004-08-04 10:00:00 23,808 —-a-w C:\WINDOWS\system32\drivers\usbcamd.sys - 2003-07-16 20:27:31 23,936 —-a-w C:\WINDOWS\system32\drivers\usbcamd2.sys + 2004-08-04 10:00:00 23,936 —-a-w C:\WINDOWS\system32\drivers\usbcamd2.sys - 2004-08-04 06:08:46 31,616 —-a-w C:\WINDOWS\system32\drivers\usbccgp.sys + 2004-08-04 10:00:00 31,616 —-a-w C:\WINDOWS\system32\drivers\usbccgp.sys - 2003-07-16 20:49:17 4,736 —-a-w C:\WINDOWS\system32\drivers\usbd.sys + 2004-08-04 10:00:00 4,736 —-a-w C:\WINDOWS\system32\drivers\usbd.sys - 2004-08-04 06:08:37 26,624 —-a-w C:\WINDOWS\system32\drivers\usbehci.sys + 2004-08-04 10:00:00 26,624 —-a-w C:\WINDOWS\system32\drivers\usbehci.sys - 2004-08-04 03:08:42 57,600 —-a-w C:\WINDOWS\system32\drivers\usbhub.sys + 2004-08-04 10:00:00 57,600 —-a-w C:\WINDOWS\system32\drivers\usbhub.sys - 2004-08-04 06:08:57 16,000 —-a-w C:\WINDOWS\system32\drivers\usbintel.sys + 2004-08-04 10:00:00 16,000 —-a-w C:\WINDOWS\system32\drivers\usbintel.sys - 2004-08-04 03:08:42 142,976 —-a-w C:\WINDOWS\system32\drivers\usbport.sys + 2004-08-04 10:00:00 142,976 —-a-w C:\WINDOWS\system32\drivers\usbport.sys - 2004-08-04 06:08:46 26,496 —-a-w C:\WINDOWS\system32\drivers\usbstor.sys + 2004-08-04 10:00:00 26,496 —-a-w C:\WINDOWS\system32\drivers\usbstor.sys - 2004-08-04 03:08:38 20,480 —-a-w C:\WINDOWS\system32\drivers\usbuhci.sys + 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\drivers\usbuhci.sys - 2003-07-16 20:27:31 58,112 —-a-w C:\WINDOWS\system32\drivers\vdmindvd.sys + 2004-08-04 10:00:00 58,112 —-a-w C:\WINDOWS\system32\drivers\vdmindvd.sys - 2004-08-04 06:07:06 20,992 —-a-w C:\WINDOWS\system32\drivers\vga.sys + 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\drivers\vga.sys - 2004-08-04 06:07:05 79,744 —-a-w C:\WINDOWS\system32\drivers\videoprt.sys + 2004-08-04 10:00:00 79,744 —-a-w C:\WINDOWS\system32\drivers\videoprt.sys - 2004-08-04 06:00:16 52,352 —-a-w C:\WINDOWS\system32\drivers\volsnap.sys + 2004-08-04 10:00:00 52,352 —-a-w C:\WINDOWS\system32\drivers\volsnap.sys - 2004-08-04 06:04:57 34,560 —-a-w C:\WINDOWS\system32\drivers\wanarp.sys + 2004-08-04 10:00:00 34,560 —-a-w C:\WINDOWS\system32\drivers\wanarp.sys - 2003-07-16 20:52:17 4,352 —-a-w C:\WINDOWS\system32\drivers\wmilib.sys + 2004-08-04 10:00:00 4,352 —-a-w C:\WINDOWS\system32\drivers\wmilib.sys - 2003-07-16 20:53:06 12,032 —-a-w C:\WINDOWS\system32\drivers\ws2ifsl.sys + 2004-08-04 10:00:00 12,032 —-a-w C:\WINDOWS\system32\drivers\ws2ifsl.sys - 2004-08-04 07:57:04 299,520 —-a-w C:\WINDOWS\system32\drmclien.dll + 2004-08-04 10:00:00 299,520 —-a-w C:\WINDOWS\system32\drmclien.dll - 2004-08-04 07:56:42 87,040 —-a-w C:\WINDOWS\system32\drmstor.dll + 2004-08-04 10:00:00 87,040 —-a-w C:\WINDOWS\system32\drmstor.dll - 2006-10-19 00:00:46 256,512 ——w C:\WINDOWS\system32\drmupgds.exe + 2006-10-19 00:00:46 249,856 —-a-w C:\WINDOWS\system32\drmupgds.exe - 2006-10-19 01:47:10 991,744 —-a-w C:\WINDOWS\system32\drmv2clt.dll + 2004-08-04 10:00:00 695,296 —-a-w C:\WINDOWS\system32\drmv2clt.dll - 2004-08-04 07:56:42 14,336 —-a-w C:\WINDOWS\system32\drprov.dll + 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\drprov.dll - 2003-07-16 20:27:35 4,656 —-a-w C:\WINDOWS\system32\ds16gt.dLL + 2004-08-04 10:00:00 4,656 —-a-w C:\WINDOWS\system32\ds16gt.dLL - 2004-08-04 07:56:42 16,384 —-a-w C:\WINDOWS\system32\ds32gt.dll + 2004-08-04 10:00:00 16,384 —-a-w C:\WINDOWS\system32\ds32gt.dll - 2003-07-16 20:27:35 62,976 —-a-w C:\WINDOWS\system32\dsauth.dll + 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\dsauth.dll - 2004-08-04 07:56:42 181,760 —-a-w C:\WINDOWS\system32\dsdmo.dll + 2004-08-04 10:00:00 181,760 —-a-w C:\WINDOWS\system32\dsdmo.dll - 2004-08-04 07:56:42 71,680 —-a-w C:\WINDOWS\system32\dsdmoprp.dll + 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\dsdmoprp.dll - 2004-08-04 07:56:42 92,672 —-a-w C:\WINDOWS\system32\dskquota.dll + 2004-08-04 10:00:00 92,672 —-a-w C:\WINDOWS\system32\dskquota.dll - 2003-07-16 20:27:37 144,384 —-a-w C:\WINDOWS\system32\dskquoui.dll + 2004-08-04 10:00:00 144,384 —-a-w C:\WINDOWS\system32\dskquoui.dll - 2004-08-04 07:56:42 367,616 —-a-w C:\WINDOWS\system32\dsound.dll + 2004-08-04 10:00:00 367,616 —-a-w C:\WINDOWS\system32\dsound.dll - 2004-08-04 07:56:42 1,294,336 —-a-w C:\WINDOWS\system32\dsound3d.dll + 2004-08-04 10:00:00 1,294,336 —-a-w C:\WINDOWS\system32\dsound3d.dll - 2004-08-04 07:56:42 142,336 —-a-w C:\WINDOWS\system32\dsprop.dll + 2004-08-04 10:00:00 142,336 —-a-w C:\WINDOWS\system32\dsprop.dll - 2004-08-04 07:56:04 4,096 —-a-w C:\WINDOWS\system32\dsprpres.dll + 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\dsprpres.dll - 2004-08-04 07:56:42 239,104 —-a-w C:\WINDOWS\system32\dsquery.dll + 2004-08-04 10:00:00 239,104 —-a-w C:\WINDOWS\system32\dsquery.dll - 2003-07-16 20:27:41 218,003 —-a-w C:\WINDOWS\system32\dssec.dat + 2004-08-04 10:00:00 218,003 —-a-w C:\WINDOWS\system32\dssec.dat - 2004-08-04 07:56:42 51,200 —-a-w C:\WINDOWS\system32\dssec.dll + 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\dssec.dll - 2004-08-04 05:31:43 137,216 —-a-w C:\WINDOWS\system32\dssenh.dll + 2004-08-04 10:00:00 137,216 —-a-w C:\WINDOWS\system32\dssenh.dll - 2004-08-04 07:56:42 113,152 —-a-w C:\WINDOWS\system32\dsuiext.dll + 2004-08-04 10:00:00 113,152 —-a-w C:\WINDOWS\system32\dsuiext.dll - 2004-08-04 07:56:42 19,456 —-a-w C:\WINDOWS\system32\dswave.dll + 2004-08-04 10:00:00 19,456 —-a-w C:\WINDOWS\system32\dswave.dll - 2007-11-03 12:19:20 17,408 —-a-w C:\WINDOWS\system32\dumprep.exe + 2004-08-04 10:00:00 10,752 —-a-w C:\WINDOWS\system32\dumprep.exe - 2004-08-04 07:56:42 304,128 —-a-w C:\WINDOWS\system32\duser.dll + 2004-08-04 10:00:00 304,128 —-a-w C:\WINDOWS\system32\duser.dll - 2007-11-03 12:19:20 61,952 —-a-w C:\WINDOWS\system32\dvdplay.exe + 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\dvdplay.exe - 2007-11-03 12:19:20 24,576 —-a-w C:\WINDOWS\system32\dvdupgrd.exe + 2004-08-04 10:00:00 17,920 —-a-w C:\WINDOWS\system32\dvdupgrd.exe - 2007-11-03 12:19:20 188,416 —-a-w C:\WINDOWS\system32\dwwin.exe + 2004-08-04 10:00:00 180,224 —-a-w C:\WINDOWS\system32\dwwin.exe - 2004-08-04 07:56:42 619,008 —-a-w C:\WINDOWS\system32\dx7vb.dll + 2004-08-04 10:00:00 619,008 —-a-w C:\WINDOWS\system32\dx7vb.dll - 2004-08-04 07:56:42 1,227,264 —-a-w C:\WINDOWS\system32\dx8vb.dll + 2004-08-04 10:00:00 1,227,264 —-a-w C:\WINDOWS\system32\dx8vb.dll - 2007-11-03 12:19:21 1,306,624 —-a-w C:\WINDOWS\system32\dxdiag.exe + 2004-08-04 10:00:00 1,298,432 —-a-w C:\WINDOWS\system32\dxdiag.exe - 2004-08-04 07:56:42 2,113,536 ——w C:\WINDOWS\system32\dxdiagn.dll + 2004-08-04 10:00:00 2,113,536 —-a-w C:\WINDOWS\system32\dxdiagn.dll - 2006-08-22 11:05:26 498,742 —-a-w C:\WINDOWS\system32\dxmasf.dll + 2006-08-22 09:05:26 498,742 —-a-w C:\WINDOWS\system32\dxmasf.dll - 2006-10-17 15:58:06 346,624 —-a-w C:\WINDOWS\system32\dxtmsft.dll + 2007-08-13 23:35:46 346,624 —-a-w C:\WINDOWS\system32\dxtmsft.dll + 2004-08-04 10:00:00 514,587 —-a-w C:\WINDOWS\system32\edb500.dll - 2003-07-16 20:27:50 69,886 —-a-w C:\WINDOWS\system32\edit.com + 2004-08-04 10:00:00 69,886 —-a-w C:\WINDOWS\system32\edit.com - 2003-07-16 20:27:50 12,642 —-a-w C:\WINDOWS\system32\edlin.exe + 2004-08-04 10:00:00 12,642 —-a-w C:\WINDOWS\system32\edlin.exe - 2004-08-04 07:56:42 183,296 —-a-w C:\WINDOWS\system32\els.dll + 2004-08-04 10:00:00 183,296 —-a-w C:\WINDOWS\system32\els.dll - 2006-01-06 08:02:33 21,640 —-a-w C:\WINDOWS\system32\emptyregdb.dat + 2007-11-08 01:37:57 22,720 —-a-w C:\WINDOWS\system32\emptyregdb.dat - 2004-08-04 07:56:42 20,480 —-a-w C:\WINDOWS\system32\encapi.dll + 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\encapi.dll - 2004-08-04 07:56:42 186,368 —-a-w C:\WINDOWS\system32\encdec.dll + 2004-08-04 10:00:00 186,368 —-a-w C:\WINDOWS\system32\encdec.dll - 2004-08-04 07:56:42 23,040 —-a-w C:\WINDOWS\system32\ersvc.dll + 2004-08-04 10:00:00 23,040 —-a-w C:\WINDOWS\system32\ersvc.dll + 2005-07-26 04:39:45 243,200 —-a-w C:\WINDOWS\system32\es.dll - 2003-07-16 20:27:59 1,114,896 —-a-w C:\WINDOWS\system32\esent97.dll + 2004-08-04 10:00:00 1,114,896 —-a-w C:\WINDOWS\system32\esent97.dll - 2003-07-16 20:27:59 17,408 —-a-w C:\WINDOWS\system32\esentprf.dll + 2004-08-04 10:00:00 17,408 —-a-w C:\WINDOWS\system32\esentprf.dll - 2007-11-03 12:19:21 46,080 —-a-w C:\WINDOWS\system32\esentutl.exe + 2004-08-04 10:00:00 39,424 —-a-w C:\WINDOWS\system32\esentutl.exe - 2007-11-03 12:19:21 199,680 —-a-w C:\WINDOWS\system32\eudcedit.exe + 2004-08-04 10:00:00 193,024 —-a-w C:\WINDOWS\system32\eudcedit.exe - 2003-07-16 20:28:03 33,280 —-a-w C:\WINDOWS\system32\eventcls.dll + 2004-08-04 10:00:00 33,280 —-a-w C:\WINDOWS\system32\eventcls.dll - 2004-08-04 07:56:42 55,808 —-a-w C:\WINDOWS\system32\eventlog.dll + 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\eventlog.dll - 2007-11-03 12:19:21 15,360 —-a-w C:\WINDOWS\system32\eventvwr.exe + 2004-08-04 10:00:00 8,704 —-a-w C:\WINDOWS\system32\eventvwr.exe - 2003-07-16 20:28:08 8,424 —-a-w C:\WINDOWS\system32\exe2bin.exe + 2004-08-04 10:00:00 8,424 —-a-w C:\WINDOWS\system32\exe2bin.exe - 2007-11-03 12:19:21 22,528 —-a-w C:\WINDOWS\system32\expand.exe + 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\expand.exe - 2004-08-04 07:56:42 380,957 —-a-w C:\WINDOWS\system32\expsrv.dll + 2004-08-04 10:00:00 380,957 —-a-w C:\WINDOWS\system32\expsrv.dll - 2007-11-03 12:19:21 52,224 —-a-w C:\WINDOWS\system32\extrac32.exe + 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\extrac32.exe - 2003-07-16 20:28:12 121,856 —-a-w C:\WINDOWS\system32\exts.dll + 2004-08-04 10:00:00 121,856 —-a-w C:\WINDOWS\system32\exts.dll - 2004-08-04 07:56:42 80,384 —-a-w C:\WINDOWS\system32\faultrep.dll + 2004-08-04 10:00:00 80,384 —-a-w C:\WINDOWS\system32\faultrep.dll - 2004-08-04 07:56:49 27,648 ——w C:\WINDOWS\system32\faxpatch.exe + 2004-08-04 07:56:50 20,992 —-a-w C:\WINDOWS\system32\faxpatch.exe - 2007-11-03 12:19:21 21,504 —-a-w C:\WINDOWS\system32\fc.exe + 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\fc.exe - 2004-08-04 07:56:42 21,504 —-a-w C:\WINDOWS\system32\feclient.dll + 2004-08-04 10:00:00 21,504 —-a-w C:\WINDOWS\system32\feclient.dll - 2004-08-04 07:56:42 337,920 —-a-w C:\WINDOWS\system32\filemgmt.dll + 2004-08-04 10:00:00 337,920 —-a-w C:\WINDOWS\system32\filemgmt.dll - 2007-11-03 12:19:21 15,872 —-a-w C:\WINDOWS\system32\find.exe + 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\find.exe - 2007-11-03 12:19:21 33,792 —-a-w C:\WINDOWS\system32\findstr.exe + 2004-08-04 10:00:00 27,136 —-a-w C:\WINDOWS\system32\findstr.exe - 2007-11-03 12:19:21 15,872 —-a-w C:\WINDOWS\system32\finger.exe + 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\finger.exe - 2007-11-03 12:19:21 9,728 —-a-w C:\WINDOWS\system32\fixmapi.exe + 2004-08-04 10:00:00 3,072 —-a-w C:\WINDOWS\system32\fixmapi.exe - 2004-08-04 07:56:42 87,552 —-a-w C:\WINDOWS\system32\fldrclnr.dll + 2004-08-04 10:00:00 87,552 —-a-w C:\WINDOWS\system32\fldrclnr.dll - 2007-11-03 12:19:21 29,696 —-a-w C:\WINDOWS\system32\fltmc.exe + 2006-08-21 09:14:58 23,040 —-a-w C:\WINDOWS\system32\fltmc.exe - 2003-07-16 20:28:25 16,384 —-a-w C:\WINDOWS\system32\fmifs.dll + 2004-08-04 10:00:00 16,384 —-a-w C:\WINDOWS\system32\fmifs.dll - 2007-09-29 20:21:15 92,680 —-a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2007-11-11 03:24:13 92,680 —-a-w C:\WINDOWS\system32\FNTCACHE.DAT - 2004-08-04 07:56:42 382,976 —-a-w C:\WINDOWS\system32\fontext.dll + 2004-08-04 10:00:00 382,976 —-a-w C:\WINDOWS\system32\fontext.dll - 2007-11-03 12:19:21 27,648 —-a-w C:\WINDOWS\system32\fontview.exe + 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\fontview.exe - 2007-11-03 12:19:21 13,824 —-a-w C:\WINDOWS\system32\forcedos.exe + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\forcedos.exe - 2003-07-16 20:28:29 25,600 —-a-w C:\WINDOWS\system32\format.com + 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\system32\format.com - 2004-08-04 07:56:06 9,344 —-a-w C:\WINDOWS\system32\framebuf.dll + 2004-08-04 10:00:00 9,344 —-a-w C:\WINDOWS\system32\framebuf.dll - 2007-11-03 12:19:21 61,952 —-a-w C:\WINDOWS\system32\freecell.exe + 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\freecell.exe - 2004-08-04 07:56:49 199,680 ——w C:\WINDOWS\system32\fsquirt.exe + 2004-08-04 10:00:00 193,024 —-a-w C:\WINDOWS\system32\fsquirt.exe - 2003-07-16 20:28:34 81,408 —-a-w C:\WINDOWS\system32\fsusd.dll + 2004-08-04 10:00:00 81,408 —-a-w C:\WINDOWS\system32\fsusd.dll - 2007-11-03 12:19:21 62,976 —-a-w C:\WINDOWS\system32\fsutil.exe + 2004-08-04 10:00:00 56,320 —-a-w C:\WINDOWS\system32\fsutil.exe - 2007-11-03 12:19:21 49,152 —-a-w C:\WINDOWS\system32\ftp.exe + 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\ftp.exe - 2003-07-16 20:28:37 176,128 —-a-w C:\WINDOWS\system32\ftsrch.dll + 2004-08-04 10:00:00 176,128 —-a-w C:\WINDOWS\system32\ftsrch.dll - 2004-08-04 07:56:42 60,416 ——w C:\WINDOWS\system32\fwcfg.dll + 2004-08-04 10:00:00 60,416 —-a-w C:\WINDOWS\system32\fwcfg.dll - 2003-07-16 20:28:49 76,800 —-a-w C:\WINDOWS\system32\gcdef.dll + 2004-08-04 10:00:00 76,800 —-a-w C:\WINDOWS\system32\gcdef.dll - 2003-07-16 20:28:49 24,576 —-a-w C:\WINDOWS\system32\gdi.exe + 2004-08-04 10:00:00 24,576 —-a-w C:\WINDOWS\system32\gdi.exe - 2003-07-16 20:28:54 285,184 —-a-w C:\WINDOWS\system32\glmf32.dll + 2004-08-04 10:00:00 285,184 —-a-w C:\WINDOWS\system32\glmf32.dll - 2004-08-04 07:56:42 122,880 —-a-w C:\WINDOWS\system32\glu32.dll + 2004-08-04 10:00:00 122,880 —-a-w C:\WINDOWS\system32\glu32.dll - 2003-07-16 20:28:57 101,888 —-a-w C:\WINDOWS\system32\gpkcsp.dll + 2004-08-04 10:00:00 101,888 —-a-w C:\WINDOWS\system32\gpkcsp.dll - 2004-08-04 07:56:07 9,728 —-a-w C:\WINDOWS\system32\gpkrsrc.dll + 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\gpkrsrc.dll - 2003-07-16 20:29:01 26,112 —-a-w C:\WINDOWS\system32\graftabl.com + 2004-08-04 10:00:00 26,112 —-a-w C:\WINDOWS\system32\graftabl.com - 2003-07-16 20:29:01 19,694 —-a-w C:\WINDOWS\system32\graphics.com + 2004-08-04 10:00:00 19,694 —-a-w C:\WINDOWS\system32\graphics.com - 2007-11-03 12:19:21 46,080 —-a-w C:\WINDOWS\system32\grpconv.exe + 2004-08-04 10:00:00 39,424 —-a-w C:\WINDOWS\system32\grpconv.exe - 2004-08-04 07:56:42 614,912 —-a-w C:\WINDOWS\system32\h323msp.dll + 2004-08-04 10:00:00 614,912 —-a-w C:\WINDOWS\system32\h323msp.dll - 2004-08-04 05:59:09 131,968 —-a-w C:\WINDOWS\system32\HAL.DLL + 2004-08-04 10:00:00 131,968 —-a-w C:\WINDOWS\system32\hal.dll - 2004-08-04 07:56:42 7,168 —-a-w C:\WINDOWS\system32\hccoin.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\hccoin.dll - 2004-08-12 21:45:52 68,608 ——w C:\WINDOWS\system32\Hdaudpropshortcut.exe + 2004-08-12 21:45:52 61,952 —-a-w C:\WINDOWS\system32\Hdaudpropshortcut.exe - 2007-11-03 12:19:21 21,504 —-a-w C:\WINDOWS\system32\help.exe + 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\help.exe - 2004-08-04 07:56:42 20,992 —-a-w C:\WINDOWS\system32\hid.dll + 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\hid.dll - 2003-07-16 20:29:25 4,768 —-a-w C:\WINDOWS\system32\himem.sys + 2004-08-04 10:00:00 4,768 —-a-w C:\WINDOWS\system32\himem.sys - 2005-06-21 23:44:34 135,168 ——w C:\WINDOWS\system32\hkcmd.exe + 2005-06-21 23:44:34 126,976 —-a-w C:\WINDOWS\system32\hkcmd.exe - 2006-07-21 08:30:50 72,704 —-a-w C:\WINDOWS\system32\hlink.dll + 2006-07-21 08:24:43 72,704 —-a-w C:\WINDOWS\system32\hlink.dll - 2004-08-04 07:56:42 344,064 —-a-w C:\WINDOWS\system32\hnetcfg.dll + 2004-08-04 10:00:00 344,064 —-a-w C:\WINDOWS\system32\hnetcfg.dll - 2003-07-16 20:29:29 14,848 —-a-w C:\WINDOWS\system32\hnetmon.dll + 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\hnetmon.dll - 2004-08-04 07:56:42 330,752 —-a-w C:\WINDOWS\system32\hnetwiz.dll + 2004-08-04 10:00:00 330,752 —-a-w C:\WINDOWS\system32\hnetwiz.dll - 2007-11-03 12:19:21 14,336 —-a-w C:\WINDOWS\system32\hostname.exe + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\hostname.exe - 2004-08-04 07:56:42 144,896 —-a-w C:\WINDOWS\system32\hotplug.dll + 2004-08-04 10:00:00 144,896 —-a-w C:\WINDOWS\system32\hotplug.dll - 2004-08-04 07:56:42 24,576 ——w C:\WINDOWS\system32\httpapi.dll + 2004-08-04 10:00:00 24,576 —-a-w C:\WINDOWS\system32\httpapi.dll - 2004-08-04 07:56:42 41,984 —-a-w C:\WINDOWS\system32\htui.dll + 2004-08-04 10:00:00 41,984 —-a-w C:\WINDOWS\system32\htui.dll - 2003-07-16 20:29:51 23,552 —-a-w C:\WINDOWS\system32\iasacct.dll + 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\iasacct.dll - 2003-07-16 20:29:51 41,472 —-a-w C:\WINDOWS\system32\iasads.dll + 2004-08-04 10:00:00 41,472 —-a-w C:\WINDOWS\system32\iasads.dll - 2003-07-16 20:29:52 32,256 —-a-w C:\WINDOWS\system32\iashlpr.dll + 2004-08-04 10:00:00 32,256 —-a-w C:\WINDOWS\system32\iashlpr.dll - 2003-07-16 20:29:52 62,464 —-a-w C:\WINDOWS\system32\iasnap.dll + 2004-08-04 10:00:00 62,464 —-a-w C:\WINDOWS\system32\iasnap.dll - 2003-07-16 20:29:52 17,920 —-a-w C:\WINDOWS\system32\iaspolcy.dll + 2004-08-04 10:00:00 17,920 —-a-w C:\WINDOWS\system32\iaspolcy.dll - 2004-08-04 07:56:42 119,808 —-a-w C:\WINDOWS\system32\iasrad.dll + 2004-08-04 10:00:00 119,808 —-a-w C:\WINDOWS\system32\iasrad.dll - 2003-07-16 20:29:53 141,312 —-a-w C:\WINDOWS\system32\iasrecst.dll + 2004-08-04 10:00:00 141,312 —-a-w C:\WINDOWS\system32\iasrecst.dll - 2003-07-16 20:29:53 86,528 —-a-w C:\WINDOWS\system32\iassam.dll + 2004-08-04 10:00:00 86,528 —-a-w C:\WINDOWS\system32\iassam.dll - 2003-07-16 20:29:54 247,808 —-a-w C:\WINDOWS\system32\iassdo.dll + 2004-08-04 10:00:00 247,808 —-a-w C:\WINDOWS\system32\iassdo.dll

medicman151

Post #18November 11, 2007, 7:22 PM UTC

- 2003-07-16 20:29:54 59,392 —-a-w C:\WINDOWS\system32\iassvcs.dll + 2004-08-04 10:00:00 59,392 —-a-w C:\WINDOWS\system32\iassvcs.dll - 2004-08-04 07:56:42 80,384 —-a-w C:\WINDOWS\system32\iccvid.dll + 2004-08-04 10:00:00 80,384 —-a-w C:\WINDOWS\system32\iccvid.dll - 2004-08-04 07:56:07 3,584 —-a-w C:\WINDOWS\system32\icmp.dll + 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\icmp.dll - 2003-07-16 20:29:57 54,784 —-a-w C:\WINDOWS\system32\icmui.dll + 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\system32\icmui.dll - 2004-08-04 07:56:42 120,832 —-a-w C:\WINDOWS\system32\idq.dll + 2004-08-04 10:00:00 120,832 —-a-w C:\WINDOWS\system32\idq.dll - 2007-11-03 12:19:22 70,144 —-a-w C:\WINDOWS\system32\ie4uinit.exe + 2007-08-17 10:20:54 63,488 ——w C:\WINDOWS\system32\ie4uinit.exe - 2006-11-08 01:03:36 191,488 —-a-w C:\WINDOWS\system32\iepeers.dll + 2007-08-13 23:54:10 191,488 —-a-w C:\WINDOWS\system32\iepeers.dll - 2007-11-03 12:19:22 20,480 —-a-w C:\WINDOWS\system32\ieudinit.exe + 2007-08-17 10:20:54 13,824 —-a-w C:\WINDOWS\system32\ieudinit.exe - 2006-11-08 01:03:36 180,736 ——w C:\WINDOWS\system32\ieui.dll + 2007-08-13 22:54:10 180,736 —-a-w C:\WINDOWS\system32\ieui.dll - 2007-11-03 12:19:22 121,344 —-a-w C:\WINDOWS\system32\iexpress.exe + 2004-08-04 10:00:00 114,688 —-a-w C:\WINDOWS\system32\iexpress.exe - 2004-08-04 07:56:42 135,680 —-a-w C:\WINDOWS\system32\ifmon.dll + 2004-08-04 10:00:00 135,680 —-a-w C:\WINDOWS\system32\ifmon.dll - 2003-07-16 20:30:14 70,656 —-a-w C:\WINDOWS\system32\ifsutil.dll + 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\ifsutil.dll - 2005-06-21 23:48:18 163,840 ——w C:\WINDOWS\system32\igfxtray.exe + 2005-06-21 23:48:18 155,648 —-a-w C:\WINDOWS\system32\igfxtray.exe - 2004-08-04 07:56:42 8,192 —-a-w C:\WINDOWS\system32\igmpagnt.dll + 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\igmpagnt.dll - 2004-08-04 07:56:42 144,384 —-a-w C:\WINDOWS\system32\imagehlp.dll + 2004-08-04 10:00:00 144,384 —-a-w C:\WINDOWS\system32\imagehlp.dll - 2007-11-03 12:19:22 156,672 —-a-w C:\WINDOWS\system32\imapi.exe + 2004-08-04 10:00:00 150,016 —-a-w C:\WINDOWS\system32\imapi.exe - 2004-08-04 07:56:42 36,921 —-a-w C:\WINDOWS\system32\imeshare.dll + 2004-08-04 10:00:00 36,921 —-a-w C:\WINDOWS\system32\imeshare.dll - 2004-08-04 07:56:42 110,080 —-a-w C:\WINDOWS\system32\imm32.dll + 2004-08-04 10:00:00 110,080 —-a-w C:\WINDOWS\system32\imm32.dll - 2003-07-16 20:30:22 110,592 —-a-w C:\WINDOWS\system32\inetcplc.dll + 2004-08-04 10:00:00 110,592 —-a-w C:\WINDOWS\system32\inetcplc.dll - 2004-08-04 07:56:42 33,280 —-a-w C:\WINDOWS\system32\inetmib1.dll + 2004-08-04 10:00:00 33,280 —-a-w C:\WINDOWS\system32\inetmib1.dll - 2004-08-04 07:56:42 75,264 —-a-w C:\WINDOWS\system32\inetpp.dll + 2004-08-04 10:00:00 75,264 —-a-w C:\WINDOWS\system32\inetpp.dll - 2004-08-04 07:56:42 15,872 —-a-w C:\WINDOWS\system32\inetppui.dll + 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\inetppui.dll - 2003-07-16 20:30:25 450,560 —-a-w C:\WINDOWS\system32\infosoft.dll + 2004-08-04 10:00:00 450,560 —-a-w C:\WINDOWS\system32\infosoft.dll - 2004-08-04 07:56:42 147,456 —-a-w C:\WINDOWS\system32\initpki.dll + 2004-08-04 10:00:00 147,456 —-a-w C:\WINDOWS\system32\initpki.dll - 2004-08-04 07:56:42 123,392 —-a-w C:\WINDOWS\system32\input.dll + 2004-08-04 10:00:00 123,392 —-a-w C:\WINDOWS\system32\input.dll - 2006-11-07 07:26:24 92,672 —-a-w C:\WINDOWS\system32\inseng.dll + 2007-08-13 23:39:02 92,672 —-a-w C:\WINDOWS\system32\inseng.dll - 2003-07-16 20:30:31 30,720 —-a-w C:\WINDOWS\system32\iologmsg.dll + 2004-08-04 10:00:00 30,720 —-a-w C:\WINDOWS\system32\iologmsg.dll - 2007-11-03 12:19:22 62,464 —-a-w C:\WINDOWS\system32\ipconfig.exe + 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\ipconfig.exe - 2003-07-16 20:30:33 154,112 —-a-w C:\WINDOWS\system32\ipmontr.dll + 2004-08-04 10:00:00 154,112 —-a-w C:\WINDOWS\system32\ipmontr.dll - 2004-08-04 07:56:42 331,264 —-a-w C:\WINDOWS\system32\ipnathlp.dll + 2004-08-04 10:00:00 331,264 —-a-w C:\WINDOWS\system32\ipnathlp.dll - 2004-08-04 07:56:42 330,752 —-a-w C:\WINDOWS\system32\ippromon.dll + 2004-08-04 10:00:00 330,752 —-a-w C:\WINDOWS\system32\ippromon.dll - 2003-07-16 20:30:43 3,584 —-a-w C:\WINDOWS\system32\iprop.dll + 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\iprop.dll - 2003-07-16 20:30:43 4,096 —-a-w C:\WINDOWS\system32\iprtprio.dll + 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\iprtprio.dll - 2003-07-16 20:30:43 169,984 —-a-w C:\WINDOWS\system32\iprtrmgr.dll + 2004-08-04 10:00:00 169,984 —-a-w C:\WINDOWS\system32\iprtrmgr.dll - 2007-11-03 12:19:22 50,688 —-a-w C:\WINDOWS\system32\ipsec6.exe + 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\ipsec6.exe - 2004-08-04 07:56:42 349,696 —-a-w C:\WINDOWS\system32\ipsecsnp.dll + 2004-08-04 10:00:00 349,696 —-a-w C:\WINDOWS\system32\ipsecsnp.dll - 2004-08-04 07:56:42 182,784 —-a-w C:\WINDOWS\system32\ipsecsvc.dll + 2004-08-04 10:00:00 182,784 —-a-w C:\WINDOWS\system32\ipsecsvc.dll - 2004-08-04 07:56:42 384,000 —-a-w C:\WINDOWS\system32\ipsmsnap.dll + 2004-08-04 10:00:00 384,000 —-a-w C:\WINDOWS\system32\ipsmsnap.dll - 2007-11-03 12:19:23 59,904 —-a-w C:\WINDOWS\system32\ipv6.exe + 2004-08-04 10:00:00 53,248 —-a-w C:\WINDOWS\system32\ipv6.exe - 2004-08-04 07:56:42 59,904 —-a-w C:\WINDOWS\system32\ipv6mon.dll + 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\ipv6mon.dll - 2003-07-16 20:30:47 83,968 —-a-w C:\WINDOWS\system32\ipxmontr.dll + 2004-08-04 10:00:00 83,968 —-a-w C:\WINDOWS\system32\ipxmontr.dll - 2003-07-16 20:30:47 69,120 —-a-w C:\WINDOWS\system32\ipxpromn.dll + 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\ipxpromn.dll - 2003-07-16 20:30:47 21,504 —-a-w C:\WINDOWS\system32\ipxrip.dll + 2004-08-04 10:00:00 21,504 —-a-w C:\WINDOWS\system32\ipxrip.dll - 2007-11-03 12:19:23 30,208 —-a-w C:\WINDOWS\system32\ipxroute.exe + 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\ipxroute.exe - 2003-07-16 20:30:48 39,936 —-a-w C:\WINDOWS\system32\ipxrtmgr.dll + 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\ipxrtmgr.dll - 2003-07-16 20:30:48 66,560 —-a-w C:\WINDOWS\system32\ipxsap.dll + 2004-08-04 10:00:00 66,560 —-a-w C:\WINDOWS\system32\ipxsap.dll - 2003-07-16 20:30:49 20,992 —-a-w C:\WINDOWS\system32\ipxwan.dll + 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\ipxwan.dll - 2003-07-16 20:30:49 199,168 —-a-w C:\WINDOWS\system32\ir32_32.dll + 2004-08-04 10:00:00 199,168 —-a-w C:\WINDOWS\system32\ir32_32.dll - 2004-08-04 07:56:42 120,320 ——w C:\WINDOWS\system32\ir41_qc.dll + 2004-08-04 10:00:00 120,320 —-a-w C:\WINDOWS\system32\ir41_qc.dll - 2004-08-04 07:56:42 338,432 ——w C:\WINDOWS\system32\ir41_qcx.dll + 2004-08-04 10:00:00 338,432 —-a-w C:\WINDOWS\system32\ir41_qcx.dll - 2004-08-04 07:56:42 755,200 ——w C:\WINDOWS\system32\ir50_32.dll + 2004-08-04 10:00:00 755,200 —-a-w C:\WINDOWS\system32\ir50_32.dll - 2004-08-04 07:56:42 200,192 ——w C:\WINDOWS\system32\ir50_qc.dll + 2004-08-04 10:00:00 200,192 —-a-w C:\WINDOWS\system32\ir50_qc.dll - 2004-08-04 07:56:42 183,808 ——w C:\WINDOWS\system32\ir50_qcx.dll + 2004-08-04 10:00:00 183,808 —-a-w C:\WINDOWS\system32\ir50_qcx.dll - 2004-08-03 22:04:40 185,624 —-a-w C:\WINDOWS\system32\iuengine.dll + 2004-08-04 10:00:00 192,000 —-a-w C:\WINDOWS\system32\iuengine.dll - 2004-08-04 07:56:42 54,272 —-a-w C:\WINDOWS\system32\ixsso.dll + 2004-08-04 10:00:00 54,272 —-a-w C:\WINDOWS\system32\ixsso.dll - 2004-08-04 07:56:42 47,616 —-a-w C:\WINDOWS\system32\iyuv_32.dll + 2004-08-04 10:00:00 47,616 —-a-w C:\WINDOWS\system32\iyuv_32.dll - 2007-11-03 12:19:23 143,360 —-a-w C:\WINDOWS\system32\java.exe + 2007-11-03 12:19:24 135,168 —-a-w C:\WINDOWS\system32\java.exe - 2007-11-03 12:19:23 143,360 —-a-w C:\WINDOWS\system32\javaw.exe + 2007-11-03 12:19:24 135,168 —-a-w C:\WINDOWS\system32\javaw.exe - 2007-11-03 12:19:23 147,456 —-a-w C:\WINDOWS\system32\javaws.exe + 2007-11-03 12:19:24 139,264 —-a-w C:\WINDOWS\system32\javaws.exe - 2003-07-16 20:31:01 362,496 —-a-w C:\WINDOWS\system32\jet500.dll + 2004-08-04 10:00:00 362,496 —-a-w C:\WINDOWS\system32\jet500.dll - 2003-07-16 20:31:01 44,544 —-a-w C:\WINDOWS\system32\jgaw400.dll + 2004-08-04 10:00:00 44,544 —-a-w C:\WINDOWS\system32\jgaw400.dll - 2006-05-27 05:19:50 163,840 —-a-w C:\WINDOWS\system32\JGDW400.DLL + 2006-06-01 18:47:07 163,840 —-a-w C:\WINDOWS\system32\jgdw400.dll - 2003-07-16 20:31:02 35,840 —-a-w C:\WINDOWS\system32\jgmd400.dll + 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\jgmd400.dll - 2006-04-06 23:15:48 27,648 —-a-w C:\WINDOWS\system32\JGPL400.DLL + 2006-06-01 18:47:07 27,648 —-a-w C:\WINDOWS\system32\jgpl400.dll - 2003-07-16 20:31:02 45,568 —-a-w C:\WINDOWS\system32\jgsd400.dll + 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\jgsd400.dll - 2003-07-16 20:31:02 65,536 —-a-w C:\WINDOWS\system32\jgsh400.dll + 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\jgsh400.dll - 2003-07-16 20:31:03 47,952 —-a-w C:\WINDOWS\system32\jobexec.dll + 2004-08-04 10:00:00 47,952 —-a-w C:\WINDOWS\system32\jobexec.dll - 2006-10-17 16:00:00 491,520 —-a-w C:\WINDOWS\system32\jscript.dll + 2007-08-13 23:38:04 491,520 —-a-w C:\WINDOWS\system32\jscript.dll - 2007-11-03 12:19:11 102,400 —-a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe + 2007-11-05 02:36:39 94,208 —-a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe - 2003-07-16 20:31:06 14,710 —-a-w C:\WINDOWS\system32\kb16.com + 2004-08-04 10:00:00 14,710 —-a-w C:\WINDOWS\system32\kb16.com - 2003-07-16 20:31:08 6,656 —-a-r C:\WINDOWS\system32\KBDAL.DLL + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdal.dll - 2003-07-16 20:31:09 5,632 —-a-r C:\WINDOWS\system32\kbdaze.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdaze.dll - 2003-07-16 20:31:09 5,632 —-a-r C:\WINDOWS\system32\kbdazel.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdazel.dll - 2003-07-16 20:31:10 6,144 —-a-w C:\WINDOWS\system32\kbdbe.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdbe.dll - 2003-07-16 20:31:10 6,144 —-a-w C:\WINDOWS\system32\kbdbene.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdbene.dll - 2003-07-16 20:31:10 5,632 —-a-r C:\WINDOWS\system32\kbdblr.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdblr.dll - 2003-07-16 20:31:11 6,144 —-a-w C:\WINDOWS\system32\kbdbr.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdbr.dll - 2003-07-16 20:31:11 5,632 —-a-r C:\WINDOWS\system32\kbdbu.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdbu.dll - 2003-07-16 20:31:11 6,144 —-a-w C:\WINDOWS\system32\kbdca.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdca.dll - 2003-07-16 20:31:11 7,680 —-a-w C:\WINDOWS\system32\kbdcan.dll + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\kbdcan.dll - 2003-07-16 20:31:12 6,656 —-a-r C:\WINDOWS\system32\kbdcr.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdcr.dll - 2003-07-16 20:31:12 7,168 —-a-r C:\WINDOWS\system32\kbdcz.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdcz.dll - 2003-07-16 20:31:13 6,656 —-a-r C:\WINDOWS\system32\kbdcz1.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdcz1.dll - 2003-07-16 20:31:13 6,656 —-a-r C:\WINDOWS\system32\kbdcz2.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdcz2.dll - 2003-07-16 20:31:13 6,144 —-a-w C:\WINDOWS\system32\kbdda.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdda.dll - 2003-07-16 20:31:14 5,120 —-a-w C:\WINDOWS\system32\kbddv.dll + 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\kbddv.dll - 2003-07-16 20:31:14 6,144 —-a-w C:\WINDOWS\system32\kbdes.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdes.dll - 2003-07-16 20:31:15 6,144 —-a-r C:\WINDOWS\system32\kbdest.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdest.dll - 2003-07-16 20:31:15 6,144 —-a-w C:\WINDOWS\system32\kbdfc.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfc.dll - 2003-07-16 20:31:16 6,144 —-a-w C:\WINDOWS\system32\kbdfi.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfi.dll - 2004-08-04 07:56:10 7,168 ——w C:\WINDOWS\system32\kbdfi1.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdfi1.dll - 2003-07-16 20:31:16 6,144 —-a-w C:\WINDOWS\system32\kbdfo.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfo.dll - 2003-07-16 20:31:16 6,144 —-a-w C:\WINDOWS\system32\kbdfr.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdfr.dll - 2003-07-16 20:31:17 5,632 —-a-w C:\WINDOWS\system32\kbdgae.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdgae.dll - 2003-07-16 20:31:17 6,144 —-a-r C:\WINDOWS\system32\kbdgkl.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdgkl.dll - 2003-07-16 20:31:17 6,144 —-a-w C:\WINDOWS\system32\kbdgr.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdgr.dll - 2003-07-16 20:31:18 6,144 —-a-w C:\WINDOWS\system32\kbdgr1.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdgr1.dll - 2003-07-16 20:31:18 5,632 —-a-r C:\WINDOWS\system32\kbdhe.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhe.dll - 2003-07-16 20:31:18 5,632 —-a-r C:\WINDOWS\system32\kbdhe220.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhe220.dll - 2003-07-16 20:31:19 5,632 —-a-r C:\WINDOWS\system32\kbdhe319.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhe319.dll - 2003-07-16 20:31:19 6,144 —-a-r C:\WINDOWS\system32\kbdhela2.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdhela2.dll - 2003-07-16 20:31:20 6,656 —-a-r C:\WINDOWS\system32\kbdhela3.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdhela3.dll - 2003-07-16 20:31:20 8,192 —-a-r C:\WINDOWS\system32\kbdhept.dll + 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\kbdhept.dll - 2003-07-16 20:31:20 6,656 —-a-r C:\WINDOWS\system32\kbdhu.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdhu.dll - 2003-07-16 20:31:21 5,632 —-a-r C:\WINDOWS\system32\kbdhu1.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdhu1.dll - 2003-07-16 20:31:21 6,144 —-a-w C:\WINDOWS\system32\kbdic.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdic.dll - 2004-08-04 07:56:10 6,144 ——w C:\WINDOWS\system32\kbdinbe1.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdinbe1.dll - 2004-08-04 07:56:10 6,656 ——w C:\WINDOWS\system32\kbdinben.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdinben.dll - 2004-08-04 07:56:10 6,656 ——w C:\WINDOWS\system32\kbdinmal.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdinmal.dll - 2003-07-16 20:31:24 5,632 —-a-w C:\WINDOWS\system32\kbdir.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdir.dll - 2003-07-16 20:31:24 5,632 —-a-w C:\WINDOWS\system32\kbdit.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdit.dll - 2003-07-16 20:31:25 5,632 —-a-w C:\WINDOWS\system32\kbdit142.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdit142.dll - 2003-07-16 20:31:25 5,632 —-a-r C:\WINDOWS\system32\kbdkaz.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdkaz.dll - 2003-07-16 20:31:25 5,632 —-a-r C:\WINDOWS\system32\kbdkyr.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdkyr.dll - 2003-07-16 20:31:26 6,656 —-a-w C:\WINDOWS\system32\kbdla.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdla.dll - 2003-07-16 20:31:26 5,632 —-a-r C:\WINDOWS\system32\kbdlt.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdlt.dll - 2003-07-16 20:31:27 5,632 —-a-r C:\WINDOWS\system32\kbdlt1.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdlt1.dll - 2003-07-16 20:31:27 6,144 —-a-r C:\WINDOWS\system32\kbdlv.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdlv.dll - 2003-07-16 20:31:27 6,144 —-a-r C:\WINDOWS\system32\kbdlv1.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdlv1.dll - 2003-07-16 20:31:28 6,144 —-a-w C:\WINDOWS\system32\kbdmac.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdmac.dll - 2004-08-04 07:56:10 5,632 ——w C:\WINDOWS\system32\kbdmaori.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdmaori.dll - 2004-08-04 07:56:10 6,144 ——w C:\WINDOWS\system32\kbdmlt47.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdmlt47.dll - 2004-08-04 07:56:10 6,144 ——w C:\WINDOWS\system32\kbdmlt48.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdmlt48.dll - 2003-07-16 20:31:28 5,632 —-a-r C:\WINDOWS\system32\kbdmon.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdmon.dll - 2003-07-16 20:31:28 6,144 —-a-w C:\WINDOWS\system32\kbdne.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdne.dll - 2003-07-16 20:31:29 7,168 —-a-w C:\WINDOWS\system32\kbdnec.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdnec.dll - 2003-07-16 20:31:30 6,144 —-a-w C:\WINDOWS\system32\kbdno.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdno.dll - 2004-08-04 07:56:10 7,168 ——w C:\WINDOWS\system32\kbdno1.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdno1.dll - 2003-07-16 20:31:30 6,656 —-a-r C:\WINDOWS\system32\kbdpl.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdpl.dll - 2003-07-16 20:31:30 5,632 —-a-r C:\WINDOWS\system32\kbdpl1.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdpl1.dll - 2003-07-16 20:31:31 6,144 —-a-w C:\WINDOWS\system32\kbdpo.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdpo.dll - 2003-07-16 20:31:31 5,632 —-a-r C:\WINDOWS\system32\kbdro.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdro.dll - 2003-07-16 20:31:31 5,632 —-a-r C:\WINDOWS\system32\kbdru.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdru.dll - 2003-07-16 20:31:32 5,632 —-a-r C:\WINDOWS\system32\kbdru1.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdru1.dll - 2003-07-16 20:31:32 6,144 —-a-w C:\WINDOWS\system32\kbdsf.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdsf.dll - 2003-07-16 20:31:32 6,656 —-a-w C:\WINDOWS\system32\kbdsg.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdsg.dll - 2003-07-16 20:31:32 6,656 —-a-r C:\WINDOWS\system32\kbdsl.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdsl.dll - 2003-07-16 20:31:33 6,656 —-a-r C:\WINDOWS\system32\kbdsl1.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdsl1.dll - 2004-08-04 07:56:10 7,680 ——w C:\WINDOWS\system32\kbdsmsfi.dll + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\kbdsmsfi.dll - 2004-08-04 07:56:10 7,680 ——w C:\WINDOWS\system32\kbdsmsno.dll + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\kbdsmsno.dll - 2003-07-16 20:31:33 6,144 —-a-w C:\WINDOWS\system32\kbdsp.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdsp.dll - 2003-07-16 20:31:33 6,144 —-a-w C:\WINDOWS\system32\kbdsw.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdsw.dll - 2003-07-16 20:31:34 5,632 —-a-r C:\WINDOWS\system32\kbdtat.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdtat.dll - 2003-07-16 20:31:36 6,144 —-a-r C:\WINDOWS\system32\kbdtuf.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdtuf.dll - 2003-07-16 20:31:36 6,144 —-a-r C:\WINDOWS\system32\kbdtuq.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdtuq.dll - 2003-07-16 20:31:36 5,632 —-a-w C:\WINDOWS\system32\kbduk.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbduk.dll - 2004-08-04 07:56:10 7,168 ——w C:\WINDOWS\system32\kbdukx.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\kbdukx.dll - 2003-07-16 20:31:37 5,632 —-a-r C:\WINDOWS\system32\kbdur.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdur.dll - 2003-07-16 20:31:37 5,632 —-a-w C:\WINDOWS\system32\kbdus.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdus.dll - 2003-07-16 20:31:38 6,144 —-a-w C:\WINDOWS\system32\kbdusl.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdusl.dll - 2003-07-16 20:31:38 6,144 —-a-w C:\WINDOWS\system32\kbdusr.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdusr.dll - 2003-07-16 20:31:38 6,144 —-a-w C:\WINDOWS\system32\kbdusx.dll + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\kbdusx.dll - 2003-07-16 20:31:39 5,632 —-a-r C:\WINDOWS\system32\kbduzb.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbduzb.dll - 2003-07-16 20:31:39 5,632 —-a-r C:\WINDOWS\system32\kbdycc.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\kbdycc.dll - 2003-07-16 20:31:40 6,656 —-a-r C:\WINDOWS\system32\kbdycl.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\kbdycl.dll - 2004-08-04 05:59:23 7,424 —-a-w C:\WINDOWS\system32\kd1394.dll + 2004-08-04 10:00:00 7,424 —-a-w C:\WINDOWS\system32\kd1394.dll - 2003-07-16 20:31:40 7,040 —-a-w C:\WINDOWS\system32\kdcom.dll + 2004-08-04 10:00:00 7,040 —-a-w C:\WINDOWS\system32\kdcom.dll - 2003-07-16 20:31:42 42,809 —-a-w C:\WINDOWS\system32\key01.sys + 2004-08-04 10:00:00 42,809 —-a-w C:\WINDOWS\system32\key01.sys - 2003-07-16 20:31:44 42,537 —-a-w C:\WINDOWS\system32\keyboard.sys + 2004-08-04 10:00:00 42,537 —-a-w C:\WINDOWS\system32\keyboard.sys - 2004-08-04 07:56:42 150,528 —-a-w C:\WINDOWS\system32\keymgr.dll + 2004-08-04 10:00:00 150,528 —-a-w C:\WINDOWS\system32\keymgr.dll - 2004-08-04 05:49:32 92,224 —-a-w C:\WINDOWS\system32\krnl386.exe + 2004-08-04 10:00:00 92,224 —-a-w C:\WINDOWS\system32\krnl386.exe - 2004-08-04 04:56:42 4,096 —-a-w C:\WINDOWS\system32\ksuser.dll + 2004-08-04 05:56:44 4,096 —-a-w C:\WINDOWS\system32\ksuser.dll - 2007-11-03 12:19:23 16,384 —-a-w C:\WINDOWS\system32\label.exe + 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\label.exe - 2003-07-16 20:31:50 89,600 —-a-w C:\WINDOWS\system32\langwrbk.dll + 2004-08-04 10:00:00 89,600 —-a-w C:\WINDOWS\system32\langwrbk.dll - 2006-10-19 01:47:14 11,264 —-a-w C:\WINDOWS\system32\LAPRXY.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\laprxy.dll - 2007-04-24 18:32:06 1,485,696 ——w C:\WINDOWS\system32\LegitCheckControl.dll + 2007-10-11 19:12:48 1,468,968 —-a-w C:\WINDOWS\system32\LegitCheckControl.DLL - 2004-08-04 07:56:44 423,936 —-a-w C:\WINDOWS\system32\licdll.dll + 2004-08-04 10:00:00 423,936 —-a-w C:\WINDOWS\system32\licdll.dll - 2007-11-03 12:19:23 36,352 —-a-w C:\WINDOWS\system32\lights.exe + 2004-08-04 10:00:00 29,696 —-a-w C:\WINDOWS\system32\lights.exe - 2004-08-04 07:56:42 13,824 —-a-w C:\WINDOWS\system32\lmhsvc.dll + 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\lmhsvc.dll - 2004-08-04 07:56:42 399,872 —-a-w C:\WINDOWS\system32\lmrt.dll + 2004-08-04 10:00:00 399,872 —-a-w C:\WINDOWS\system32\lmrt.dll - 2007-11-03 12:19:23 31,744 —-a-w C:\WINDOWS\system32\lnkstub.exe + 2004-08-04 10:00:00 25,088 —-a-w C:\WINDOWS\system32\lnkstub.exe - 2004-08-04 07:56:42 97,280 —-a-w C:\WINDOWS\system32\loadperf.dll + 2004-08-04 10:00:00 97,280 —-a-w C:\WINDOWS\system32\loadperf.dll - 2004-08-04 07:56:42 221,696 —-a-w C:\WINDOWS\system32\localsec.dll + 2004-08-04 10:00:00 221,696 —-a-w C:\WINDOWS\system32\localsec.dll - 2004-08-04 07:56:42 341,504 —-a-w C:\WINDOWS\system32\localspl.dll + 2004-08-04 10:00:00 341,504 —-a-w C:\WINDOWS\system32\localspl.dll - 2004-08-04 07:56:42 11,776 —-a-w C:\WINDOWS\system32\localui.dll + 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\localui.dll - 2007-11-03 12:19:23 81,920 —-a-w C:\WINDOWS\system32\locator.exe + 2004-08-04 10:00:00 75,264 —-a-w C:\WINDOWS\system32\locator.exe - 2007-11-03 12:19:23 11,776 —-a-w C:\WINDOWS\system32\lodctr.exe + 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\lodctr.exe - 2007-11-03 12:19:23 107,520 —-a-w C:\WINDOWS\system32\logagent.exe + 2004-08-04 10:00:00 103,936 —-a-w C:\WINDOWS\system32\logagent.exe - 2003-07-16 20:32:11 50,176 —-a-w C:\WINDOWS\system32\loghours.dll + 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\loghours.dll - 2004-08-04 07:56:50 66,048 ——w C:\WINDOWS\system32\logman.exe + 2004-08-04 10:00:00 59,392 —-a-w C:\WINDOWS\system32\logman.exe - 2007-11-03 12:19:23 22,016 —-a-w C:\WINDOWS\system32\logoff.exe + 2002-08-29 12:00:00 15,360 —-a-w C:\WINDOWS\system32\logoff.exe - 2007-11-03 12:19:23 227,328 —-a-w C:\WINDOWS\system32\logon.scr + 2004-08-04 10:00:00 220,672 —-a-w C:\WINDOWS\system32\logon.scr - 2007-11-03 12:19:24 521,216 —-a-w C:\WINDOWS\system32\logonui.exe + 2004-08-04 10:00:00 514,560 —-a-w C:\WINDOWS\system32\logonui.exe - 2004-08-04 07:56:42 22,016 —-a-w C:\WINDOWS\system32\lpk.dll + 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\lpk.dll - 2007-11-03 12:19:24 12,800 —-a-w C:\WINDOWS\system32\lpq.exe + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\lpq.exe - 2007-11-03 12:19:24 14,848 —-a-w C:\WINDOWS\system32\lpr.exe + 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\lpr.exe - 2004-08-04 07:56:42 10,240 —-a-w C:\WINDOWS\system32\lprhelp.dll + 2004-08-04 10:00:00 10,240 —-a-w C:\WINDOWS\system32\lprhelp.dll - 2003-07-16 20:32:15 9,216 —-a-w C:\WINDOWS\system32\lprmonui.dll + 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\lprmonui.dll - 2004-08-04 07:56:50 13,312 —-a-w C:\WINDOWS\system32\lsass.exe + 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\lsass.exe - 2003-07-16 20:32:20 9,936 —-a-w C:\WINDOWS\system32\lzexpand.dll + 2004-08-04 10:00:00 9,936 —-a-w C:\WINDOWS\system32\lzexpand.dll - 2007-11-03 12:19:11 102,400 —-a-w C:\WINDOWS\system32\Macromed\Flash\GetFlash.exe + 2007-11-03 12:19:12 94,208 —-a-w C:\WINDOWS\system32\Macromed\Flash\GetFlash.exe - 2003-07-16 20:32:23 8,192 —-a-w C:\WINDOWS\system32\mag_hook.dll + 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mag_hook.dll - 2007-11-03 12:19:24 79,360 —-a-w C:\WINDOWS\system32\magnify.exe + 2004-08-04 10:00:00 72,704 —-a-w C:\WINDOWS\system32\magnify.exe - 2007-11-03 12:19:24 92,160 —-a-w C:\WINDOWS\system32\makecab.exe + 2004-08-04 10:00:00 85,504 —-a-w C:\WINDOWS\system32\makecab.exe - 2003-07-16 20:32:26 112,128 —-a-w C:\WINDOWS\system32\mapi32.dll + 2004-08-04 10:00:00 112,128 —-a-w C:\WINDOWS\system32\mapi32.dll - 2003-07-16 20:32:26 112,128 —-a-w C:\WINDOWS\system32\mapistub.dll + 2004-08-04 10:00:00 112,128 —-a-w C:\WINDOWS\system32\mapistub.dll - 2004-08-04 07:56:42 14,848 —-a-w C:\WINDOWS\system32\mcastmib.dll + 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\mcastmib.dll - 2003-07-16 20:32:29 10,240 —-a-w C:\WINDOWS\system32\mcd32.dll + 2004-08-04 10:00:00 10,240 —-a-w C:\WINDOWS\system32\mcd32.dll - 2003-07-16 20:32:29 10,496 —-a-w C:\WINDOWS\system32\mcdsrv32.dll + 2004-08-04 10:00:00 10,496 —-a-w C:\WINDOWS\system32\mcdsrv32.dll - 2003-07-16 20:32:30 4,608 —-a-w C:\WINDOWS\system32\mchgrcoi.dll + 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\mchgrcoi.dll - 2004-08-04 07:56:42 84,480 —-a-w C:\WINDOWS\system32\mciavi32.dll + 2004-08-04 10:00:00 84,480 —-a-w C:\WINDOWS\system32\mciavi32.dll - 2003-07-16 20:32:31 17,408 —-a-w C:\WINDOWS\system32\mcicda.dll + 2004-08-04 10:00:00 17,408 —-a-w C:\WINDOWS\system32\mcicda.dll - 2003-07-16 20:32:31 8,192 —-a-w C:\WINDOWS\system32\mciole16.dll + 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mciole16.dll - 2003-07-16 20:32:32 7,680 —-a-w C:\WINDOWS\system32\mciole32.dll + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\mciole32.dll - 2004-08-04 07:56:42 35,328 —-a-w C:\WINDOWS\system32\mciqtz32.dll + 2004-08-04 10:00:00 35,328 —-a-w C:\WINDOWS\system32\mciqtz32.dll - 2004-08-04 07:56:42 23,040 —-a-w C:\WINDOWS\system32\mciseq.dll + 2004-08-04 10:00:00 23,040 —-a-w C:\WINDOWS\system32\mciseq.dll - 2004-08-04 07:56:42 23,552 —-a-w C:\WINDOWS\system32\mciwave.dll + 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\mciwave.dll - 2003-07-16 20:32:34 50,176 —-a-w C:\WINDOWS\system32\mdhcp.dll + 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\mdhcp.dll - 2004-08-04 07:56:42 118,272 —-a-w C:\WINDOWS\system32\mdminst.dll + 2004-08-04 10:00:00 118,272 —-a-w C:\WINDOWS\system32\mdminst.dll - 2003-07-16 20:27:31 147,968 —-a-w C:\WINDOWS\system32\mdwmdmsp.dll + 2004-08-04 10:00:00 147,968 —-a-w C:\WINDOWS\system32\mdwmdmsp.dll - 2003-07-16 20:33:29 39,274 —-a-w C:\WINDOWS\system32\mem.exe + 2004-08-04 10:00:00 39,274 —-a-w C:\WINDOWS\system32\mem.exe - 2003-07-16 20:33:32 924,432 —-a-w C:\WINDOWS\system32\mfc40.dll + 2004-08-04 10:00:00 924,432 —-a-w C:\WINDOWS\system32\mfc40.dll - 2004-08-04 07:56:42 1,028,096 —-a-w C:\WINDOWS\system32\mfc42.dll + 2004-08-04 10:00:00 1,028,096 —-a-w C:\WINDOWS\system32\mfc42.dll - 2004-08-04 07:56:42 22,528 —-a-w C:\WINDOWS\system32\mfcsubs.dll + 2004-08-04 10:00:00 22,528 —-a-w C:\WINDOWS\system32\mfcsubs.dll - 2004-08-04 07:56:42 14,848 —-a-w C:\WINDOWS\system32\mgmtapi.dll + 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\mgmtapi.dll - 2003-07-16 20:33:39 46,258 —-a-w C:\WINDOWS\system32\mib.bin + 2004-08-04 10:00:00 46,258 —-a-w C:\WINDOWS\system32\mib.bin - 2004-08-04 07:56:42 18,944 —-a-w C:\WINDOWS\system32\midimap.dll + 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\midimap.dll - 2004-08-04 07:56:42 60,928 —-a-w C:\WINDOWS\system32\miglibnt.dll + 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\miglibnt.dll - 2007-11-03 12:19:24 58,368 —-a-w C:\WINDOWS\system32\migpwd.exe + 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\migpwd.exe - 2003-07-16 20:33:48 18,944 —-a-w C:\WINDOWS\system32\mimefilt.dll + 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\mimefilt.dll - 2003-07-16 20:33:50 673,088 —-a-w C:\WINDOWS\system32\mlang.dat + 2004-08-04 10:00:00 673,088 —-a-w C:\WINDOWS\system32\mlang.dat - 2004-08-04 07:56:42 586,240 —-a-w C:\WINDOWS\system32\mlang.dll + 2004-08-04 10:00:00 586,240 —-a-w C:\WINDOWS\system32\mlang.dll - 2003-07-16 20:33:51 3,584 —-a-w C:\WINDOWS\system32\mll_hp.dll + 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\mll_hp.dll - 2003-07-16 20:33:51 7,680 —-a-w C:\WINDOWS\system32\mll_mtf.dll + 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\mll_mtf.dll - 2003-07-16 20:33:51 5,632 —-a-w C:\WINDOWS\system32\mll_qic.dll + 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\mll_qic.dll - 2007-11-03 12:19:24 821,760 —-a-w C:\WINDOWS\system32\mmc.exe + 2004-08-04 10:00:00 815,104 —-a-w C:\WINDOWS\system32\mmc.exe - 2004-08-04 07:56:42 70,656 —-a-w C:\WINDOWS\system32\mmcbase.dll + 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\mmcbase.dll - 2004-08-04 07:56:42 1,192,960 —-a-w C:\WINDOWS\system32\mmcndmgr.dll + 2004-08-04 10:00:00 1,192,960 —-a-w C:\WINDOWS\system32\mmcndmgr.dll - 2004-08-04 07:56:42 50,688 —-a-w C:\WINDOWS\system32\mmcshext.dll + 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\mmcshext.dll - 2003-07-16 20:33:54 12,288 —-a-w C:\WINDOWS\system32\mmdrv.dll + 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\mmdrv.dll - 2004-08-04 05:51:11 68,768 —-a-w C:\WINDOWS\system32\mmsystem.dll + 2004-08-04 10:00:00 68,768 —-a-w C:\WINDOWS\system32\mmsystem.dll - 2003-07-16 20:33:56 119,808 —-a-w C:\WINDOWS\system32\mmutilse.dll + 2004-08-04 10:00:00 119,808 —-a-w C:\WINDOWS\system32\mmutilse.dll - 2007-11-03 12:19:24 40,960 —-a-w C:\WINDOWS\system32\mnmsrvc.exe + 2004-08-04 10:00:00 32,768 —-a-w C:\WINDOWS\system32\mnmsrvc.exe - 2004-08-04 07:56:42 207,360 —-a-w C:\WINDOWS\system32\mobsync.dll + 2004-08-04 10:00:00 207,360 —-a-w C:\WINDOWS\system32\mobsync.dll - 2007-11-03 12:19:24 150,016 —-a-w C:\WINDOWS\system32\mobsync.exe + 2004-08-04 10:00:00 143,360 —-a-w C:\WINDOWS\system32\mobsync.exe - 2003-07-16 20:33:59 19,456 —-a-w C:\WINDOWS\system32\mode.com + 2004-08-04 10:00:00 19,456 —-a-w C:\WINDOWS\system32\mode.com - 2004-08-04 07:56:42 153,600 —-a-w C:\WINDOWS\system32\modemui.dll + 2004-08-04 10:00:00 153,600 —-a-w C:\WINDOWS\system32\modemui.dll - 2003-07-16 20:34:01 10,112 —-a-w C:\WINDOWS\system32\modex.dll + 2004-08-04 10:00:00 10,112 —-a-w C:\WINDOWS\system32\modex.dll - 2003-07-16 20:34:05 15,872 —-a-w C:\WINDOWS\system32\more.com + 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\more.com - 2004-08-04 07:56:11 216,064 —-a-w C:\WINDOWS\system32\moricons.dll + 2004-08-04 10:00:00 216,064 —-a-w C:\WINDOWS\system32\moricons.dll - 2007-11-03 12:19:24 14,848 —-a-w C:\WINDOWS\system32\mountvol.exe + 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\mountvol.exe - 2006-10-19 01:47:14 4,096 —-a-w C:\WINDOWS\system32\MP43DMOD.dll + 2004-08-04 10:00:00 310,272 —-a-w C:\WINDOWS\system32\mp43dmod.dll - 2006-10-19 01:47:14 4,096 —-a-w C:\WINDOWS\system32\MP4SDMOD.dll + 2004-08-04 10:00:00 384,512 —-a-w C:\WINDOWS\system32\mp4sdmod.dll - 2006-10-19 01:47:14 4,096 —-a-w C:\WINDOWS\system32\MPG4DMOD.dll + 2004-08-04 10:00:00 240,640 —-a-w C:\WINDOWS\system32\mpg4dmod.dll - 2007-11-03 12:19:24 130,048 —-a-w C:\WINDOWS\system32\mplay32.exe + 2004-08-04 10:00:00 123,392 —-a-w C:\WINDOWS\system32\mplay32.exe - 2007-11-03 12:19:24 28,672 —-a-w C:\WINDOWS\system32\mpnotify.exe + 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\mpnotify.exe - 2004-08-04 07:56:42 59,904 —-a-w C:\WINDOWS\system32\mpr.dll + 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\mpr.dll - 2004-08-04 07:56:42 87,040 —-a-w C:\WINDOWS\system32\mprapi.dll + 2004-08-04 10:00:00 87,040 —-a-w C:\WINDOWS\system32\mprapi.dll - 2003-07-16 20:34:21 69,120 —-a-w C:\WINDOWS\system32\mprddm.dll + 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\mprddm.dll - 2003-07-16 20:34:21 49,152 —-a-w C:\WINDOWS\system32\mprdim.dll + 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\mprdim.dll - 2003-07-16 20:34:22 99,840 —-a-w C:\WINDOWS\system32\mprmsg.dll + 2004-08-04 10:00:00 99,840 —-a-w C:\WINDOWS\system32\mprmsg.dll - 2003-07-16 20:34:22 47,104 —-a-w C:\WINDOWS\system32\mprui.dll + 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\mprui.dll - 2007-11-03 12:19:24 19,456 —-a-w C:\WINDOWS\system32\mrinfo.exe + 2004-08-04 10:00:00 12,800 —-a-w C:\WINDOWS\system32\mrinfo.exe - 2007-09-28 05:19:39 18,089,592 —-a-w C:\WINDOWS\system32\MRT.exe + 2007-09-28 02:19:40 18,089,592 —-a-w C:\WINDOWS\system32\MRT.exe - 2003-07-16 20:34:58 102,912 —-a-w C:\WINDOWS\system32\msaatext.dll + 2004-08-04 10:00:00 102,912 —-a-w C:\WINDOWS\system32\msaatext.dll - 2003-07-16 20:34:59 61,168 —-a-w C:\WINDOWS\system32\msacm.dll + 2004-08-04 10:00:00 61,168 —-a-w C:\WINDOWS\system32\msacm.dll - 2004-08-04 07:56:42 71,680 —-a-w C:\WINDOWS\system32\msacm32.dll + 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\msacm32.dll - 2004-08-04 07:56:12 3,584 —-a-w C:\WINDOWS\system32\msafd.dll + 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\msafd.dll - 2004-08-04 07:56:42 86,016 —-a-w C:\WINDOWS\system32\msapsspc.dll + 2004-08-04 10:00:00 86,016 —-a-w C:\WINDOWS\system32\msapsspc.dll - 2004-08-04 07:56:42 57,344 —-a-w C:\WINDOWS\system32\msasn1.dll + 2004-08-04 10:00:00 57,344 —-a-w C:\WINDOWS\system32\msasn1.dll - 2003-07-16 20:35:10 65,024 —-a-w C:\WINDOWS\system32\msaudite.dll + 2004-08-04 10:00:00 65,024 —-a-w C:\WINDOWS\system32\msaudite.dll - 2003-07-16 20:35:11 7,168 —-a-w C:\WINDOWS\system32\mscat32.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\mscat32.dll - 2004-08-04 07:56:12 12,288 —-a-w C:\WINDOWS\system32\mscpx32r.dll + 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\mscpx32r.dLL - 2004-08-04 07:56:42 36,864 —-a-w C:\WINDOWS\system32\mscpxl32.dll + 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\mscpxl32.dLL - 2004-08-04 07:56:42 294,400 —-a-w C:\WINDOWS\system32\msctf.dll + 2004-08-04 10:00:00 294,400 —-a-w C:\WINDOWS\system32\MSCTF.dll - 2004-08-04 07:56:42 69,120 —-a-w C:\WINDOWS\system32\msctfp.dll + 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\MSCTFP.dll - 2004-08-04 07:56:42 118,784 ——w C:\WINDOWS\system32\msdadiag.dll + 2004-08-04 10:00:00 118,784 —-a-w C:\WINDOWS\system32\msdadiag.dll - 2004-08-04 07:56:43 151,552 —-a-w C:\WINDOWS\system32\msdart.dll + 2004-08-04 10:00:00 151,552 —-a-w C:\WINDOWS\system32\msdart.dll - 2004-08-04 07:56:43 14,336 —-a-w C:\WINDOWS\system32\msdmo.dll + 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\msdmo.dll - 2007-11-03 12:19:24 12,800 —-a-w C:\WINDOWS\system32\msdtc.exe + 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\msdtc.exe - 2004-08-04 07:56:13 4,126 —-a-w C:\WINDOWS\system32\msdxmlc.dll + 2004-08-04 10:00:00 4,126 —-a-w C:\WINDOWS\system32\msdxmlc.dll - 2003-07-16 20:35:36 94,282 —-a-w C:\WINDOWS\system32\msencode.dll + 2004-08-04 10:00:00 94,282 —-a-w C:\WINDOWS\system32\msencode.dll - 2004-08-04 07:56:43 512,029 —-a-w C:\WINDOWS\system32\msexch40.dll + 2004-08-04 10:00:00 512,029 —-a-w C:\WINDOWS\system32\msexch40.dll - 2004-08-04 07:56:43 319,517 —-a-w C:\WINDOWS\system32\msexcl40.dll + 2004-08-04 10:00:00 319,517 —-a-w C:\WINDOWS\system32\msexcl40.dll - 2006-10-17 15:58:32 18,944 ——w C:\WINDOWS\system32\msfeedssync.exe + 2007-08-13 23:36:40 12,288 —-a-w C:\WINDOWS\system32\msfeedssync.exe - 2007-11-03 12:19:24 27,648 —-a-w C:\WINDOWS\system32\msg.exe + 2002-08-29 12:00:00 20,992 —-a-w C:\WINDOWS\system32\msg.exe - 2004-08-04 07:56:43 994,304 —-a-w C:\WINDOWS\system32\msgina.dll + 2004-08-04 10:00:00 994,304 —-a-w C:\WINDOWS\system32\msgina.dll - 2004-08-04 07:56:43 33,792 —-a-w C:\WINDOWS\system32\msgsvc.dll + 2004-08-04 10:00:00 33,792 —-a-w C:\WINDOWS\system32\msgsvc.dll - 2007-11-03 12:19:24 133,632 —-a-w C:\WINDOWS\system32\mshearts.exe + 2002-08-29 12:00:00 126,976 —-a-w C:\WINDOWS\system32\mshearts.exe - 2007-08-20 10:04:41 3,584,512 —-a-w C:\WINDOWS\system32\mshtml.dll + 2007-08-20 20:34:42 3,584,512 —-a-w C:\WINDOWS\system32\mshtml.dll - 2004-08-04 07:56:43 51,712 —-a-w C:\WINDOWS\system32\msident.dll + 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\msident.dll - 2004-08-04 07:56:43 6,656 —-a-w C:\WINDOWS\system32\msidle.dll + 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\msidle.dll - 2003-07-16 20:35:59 14,848 —-a-w C:\WINDOWS\system32\msidntld.dll + 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\msidntld.dll - 2004-08-04 07:56:43 248,832 —-a-w C:\WINDOWS\system32\msieftp.dll + 2004-08-04 10:00:00 248,832 —-a-w C:\WINDOWS\system32\msieftp.dll - 2007-11-03 12:19:24 85,504 —-a-w C:\WINDOWS\system32\msiexec.exe + 2005-05-04 19:45:36 78,848 —-a-w C:\WINDOWS\system32\msiexec.exe - 2005-05-04 22:45:36 271,360 —-a-w C:\WINDOWS\system32\msihnd.dll + 2005-05-04 19:45:36 271,360 —-a-w C:\WINDOWS\system32\msihnd.dll - 2004-08-04 07:56:43 4,608 —-a-w C:\WINDOWS\system32\msimg32.dll + 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\msimg32.dll - 2005-05-04 22:45:36 884,736 —-a-w C:\WINDOWS\system32\msimsg.dll + 2005-05-04 19:45:36 884,736 —-a-w C:\WINDOWS\system32\msimsg.dll - 2004-08-04 07:56:43 159,232 —-a-w C:\WINDOWS\system32\msimtf.dll + 2004-08-04 10:00:00 159,232 —-a-w C:\WINDOWS\system32\MSIMTF.dll + 2004-08-04 10:00:00 40,960 —-a-w C:\WINDOWS\system32\msiregmv.exe - 2005-05-04 22:45:36 15,360 —-a-w C:\WINDOWS\system32\msisip.dll + 2005-05-04 19:45:36 15,360 —-a-w C:\WINDOWS\system32\msisip.dll - 2004-08-04 07:56:43 1,507,356 —-a-w C:\WINDOWS\system32\msjet40.dll + 2004-08-04 10:00:00 1,507,356 —-a-w C:\WINDOWS\system32\msjet40.dll - 2004-07-17 18:34:46 358,976 —-a-w C:\WINDOWS\system32\msjetoledb40.dll + 2004-08-04 10:00:00 358,976 —-a-w C:\WINDOWS\system32\msjetoledb40.dll - 2004-08-04 07:56:43 151,583 —-a-w C:\WINDOWS\system32\msjint40.dll + 2004-08-04 10:00:00 151,583 —-a-w C:\WINDOWS\system32\msjint40.dll - 2004-08-04 07:56:43 53,279 —-a-w C:\WINDOWS\system32\msjter40.dll + 2004-08-04 10:00:00 53,279 —-a-w C:\WINDOWS\system32\msjter40.dll - 2004-08-04 07:56:43 241,693 —-a-w C:\WINDOWS\system32\msjtes40.dll + 2004-08-04 10:00:00 241,693 —-a-w C:\WINDOWS\system32\msjtes40.dll - 2004-08-04 07:56:43 25,088 —-a-w C:\WINDOWS\system32\mslbui.dll + 2004-08-04 10:00:00 25,088 —-a-w C:\WINDOWS\system32\mslbui.dll - 2004-08-04 07:56:43 213,023 —-a-w C:\WINDOWS\system32\msltus40.dll + 2004-08-04 10:00:00 213,023 —-a-w C:\WINDOWS\system32\msltus40.dll - 2006-10-19 01:47:16 179,712 —-a-w C:\WINDOWS\system32\msnetobj.dll + 2004-08-04 10:00:00 259,072 —-a-w C:\WINDOWS\system32\msnetobj.dll - 2004-08-04 07:56:43 290,816 —-a-w C:\WINDOWS\system32\msnsspc.dll + 2004-08-04 10:00:00 290,816 —-a-w C:\WINDOWS\system32\msnsspc.dll - 2003-07-16 20:36:27 33,280 —-a-w C:\WINDOWS\system32\msobjs.dll + 2004-08-04 10:00:00 33,280 —-a-w C:\WINDOWS\system32\msobjs.dll - 2004-08-04 07:56:18 20,480 —-a-w C:\WINDOWS\system32\msorc32r.dll + 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\msorc32r.dll - 2004-08-04 07:56:43 143,360 —-a-w C:\WINDOWS\system32\msorcl32.dll + 2004-08-04 10:00:00 143,360 —-a-w C:\WINDOWS\system32\msorcl32.dll - 2007-11-03 12:19:24 349,696 —-a-w C:\WINDOWS\system32\mspaint.exe + 2004-08-04 10:00:00 343,040 —-a-w C:\WINDOWS\system32\mspaint.exe - 2004-08-04 07:56:43 30,208 —-a-w C:\WINDOWS\system32\mspatcha.dll + 2004-08-04 10:00:00 30,208 —-a-w C:\WINDOWS\system32\mspatcha.dll - 2004-08-04 07:56:43 348,189 —-a-w C:\WINDOWS\system32\mspbde40.dll + 2004-08-04 10:00:00 348,189 —-a-w C:\WINDOWS\system32\mspbde40.dll - 2006-10-19 01:47:16 27,136 ——w C:\WINDOWS\system32\mspmsnsv.dll + 2004-08-04 10:00:00 52,224 —-a-w C:\WINDOWS\system32\mspmsnsv.dll - 2006-10-19 01:47:16 175,616 —-a-w C:\WINDOWS\system32\mspmsp.dll + 2004-08-04 10:00:00 201,728 —-a-w C:\WINDOWS\system32\mspmsp.dll - 2003-07-16 20:36:35 41,984 —-a-w C:\WINDOWS\system32\msports.dll + 2004-08-04 10:00:00 41,984 —-a-w C:\WINDOWS\system32\msports.dll - 2004-08-04 07:56:18 48,128 —-a-w C:\WINDOWS\system32\msprivs.dll + 2004-08-04 10:00:00 48,128 —-a-w C:\WINDOWS\system32\msprivs.dll - 2003-07-16 20:36:39 69,632 —-a-w C:\WINDOWS\system32\msr2c.dll + 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\msr2c.dll - 2003-07-16 20:36:40 7,168 —-a-w C:\WINDOWS\system32\msr2cenu.dll + 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\msr2cenu.dll - 2003-07-16 20:36:40 60,416 —-a-w C:\WINDOWS\system32\msratelc.dll + 2004-08-04 10:00:00 60,416 —-a-w C:\WINDOWS\system32\msratelc.dll - 2003-07-16 20:36:41 73,802 —-a-w C:\WINDOWS\system32\msrclr40.dll + 2004-08-04 10:00:00 73,802 —-a-w C:\WINDOWS\system32\msrclr40.dll - 2004-08-04 07:56:43 421,919 —-a-w C:\WINDOWS\system32\msrd2x40.dll + 2004-08-04 10:00:00 421,919 —-a-w C:\WINDOWS\system32\msrd2x40.dll - 2004-08-04 07:56:43 315,423 —-a-w C:\WINDOWS\system32\msrd3x40.dll + 2004-08-04 10:00:00 315,423 —-a-w C:\WINDOWS\system32\msrd3x40.dll - 2003-07-16 20:36:42 28,746 —-a-w C:\WINDOWS\system32\msrecr40.dll + 2004-08-04 10:00:00 28,746 —-a-w C:\WINDOWS\system32\msrecr40.dll - 2004-08-04 07:56:43 552,989 —-a-w C:\WINDOWS\system32\msrepl40.dll + 2004-08-04 10:00:00 552,989 —-a-w C:\WINDOWS\system32\msrepl40.dll - 2004-08-04 07:56:43 11,264 —-a-w C:\WINDOWS\system32\msrle32.dll + 2004-08-04 10:00:00 11,264 —-a-w C:\WINDOWS\system32\msrle32.dll - 2004-08-04 07:56:43 134,656 —-a-w C:\WINDOWS\system32\mssap.dll + 2004-08-04 10:00:00 134,656 —-a-w C:\WINDOWS\system32\mssap.dll - 2006-12-04 20:21:50 414,720 —-a-w C:\WINDOWS\system32\msscp.dll + 2004-08-04 10:00:00 356,352 —-a-w C:\WINDOWS\system32\msscp.dll - 2003-07-16 20:36:45 35,840 —-a-w C:\WINDOWS\system32\mssign32.dll + 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\mssign32.dll - 2003-07-16 20:36:46 4,608 —-a-w C:\WINDOWS\system32\mssip32.dll + 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\mssip32.dll

medicman151

Post #19November 11, 2007, 7:22 PM UTC

- 2003-07-16 20:36:47 13,312 —-a-w C:\WINDOWS\system32\msswch.dll
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\msswch.dll
- 2007-11-03 12:19:24 13,312 —-a-w C:\WINDOWS\system32\msswchx.exe
+ 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\msswchx.exe
- 2004-08-04 07:56:43 258,077 —-a-w C:\WINDOWS\system32\mstext40.dll
+ 2004-08-04 10:00:00 258,077 —-a-w C:\WINDOWS\system32\mstext40.dll
- 2007-11-03 12:19:24 18,944 —-a-w C:\WINDOWS\system32\mstinit.exe
+ 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\mstinit.exe
- 2004-08-04 07:56:43 115,712 —-a-w C:\WINDOWS\system32\mstlsapi.dll
+ 2004-08-04 10:00:00 115,712 —-a-w C:\WINDOWS\system32\mstlsapi.dll
- 2007-11-03 12:19:24 414,208 —-a-w C:\WINDOWS\system32\mstsc.exe
+ 2004-08-04 10:00:00 407,552 —-a-w C:\WINDOWS\system32\mstsc.exe
- 2004-08-04 07:56:43 195,072 —-a-w C:\WINDOWS\system32\msutb.dll
+ 2004-08-04 10:00:00 195,072 —-a-w C:\WINDOWS\system32\msutb.dll
- 2004-08-04 07:56:43 129,536 —-a-w C:\WINDOWS\system32\msv1_0.dll
+ 2004-08-04 10:00:00 129,536 —-a-w C:\WINDOWS\system32\msv1_0.dll
- 2003-07-16 20:36:54 1,355,776 —-a-w C:\WINDOWS\system32\msvbvm50.dll
+ 2004-08-04 10:00:00 1,355,776 —-a-w C:\WINDOWS\system32\msvbvm50.dll
- 2004-08-04 07:56:43 1,392,671 —-a-w C:\WINDOWS\system32\msvbvm60.dll
+ 2004-08-04 10:00:00 1,392,671 —-a-w C:\WINDOWS\system32\msvbvm60.dll
- 2004-08-04 07:56:43 54,784 —-a-w C:\WINDOWS\system32\msvcirt.dll
+ 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\system32\msvcirt.dll
- 2003-07-16 20:36:55 565,760 —-a-w C:\WINDOWS\system32\msvcp50.dll
+ 2004-08-04 10:00:00 565,760 —-a-w C:\WINDOWS\system32\msvcp50.dll
- 2004-08-04 07:56:43 413,696 —-a-w C:\WINDOWS\system32\msvcp60.dll
+ 2004-08-04 10:00:00 413,696 —-a-w C:\WINDOWS\system32\msvcp60.dll
- 2004-08-04 07:56:43 343,040 —-a-w C:\WINDOWS\system32\msvcrt.dll
+ 2004-08-04 10:00:00 343,040 —-a-w C:\WINDOWS\system32\msvcrt.dll
- 2003-07-16 20:36:57 253,952 —-a-w C:\WINDOWS\system32\msvcrt20.dll
+ 2004-08-04 10:00:00 253,952 —-a-w C:\WINDOWS\system32\msvcrt20.dll
- 2004-08-04 05:58:25 61,440 —-a-w C:\WINDOWS\system32\msvcrt40.dll
+ 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\msvcrt40.dll
- 2004-08-04 07:56:43 120,832 —-a-w C:\WINDOWS\system32\msvfw32.dll
+ 2004-08-04 10:00:00 120,832 —-a-w C:\WINDOWS\system32\msvfw32.dll
- 2003-07-16 20:36:58 25,600 —-a-w C:\WINDOWS\system32\msvidc32.dll
+ 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\system32\msvidc32.dll
- 2004-08-04 07:56:43 1,428,480 —-a-w C:\WINDOWS\system32\msvidctl.dll
+ 2004-08-04 10:00:00 1,428,480 —-a-w C:\WINDOWS\system32\msvidctl.dll
- 2003-07-16 20:36:58 126,912 —-a-w C:\WINDOWS\system32\msvideo.dll
+ 2004-08-04 10:00:00 126,912 —-a-w C:\WINDOWS\system32\msvideo.dll
- 2004-08-04 07:56:43 72,704 —-a-w C:\WINDOWS\system32\msw3prt.dll
+ 2004-08-04 10:00:00 72,704 —-a-w C:\WINDOWS\system32\msw3prt.dll
- 2004-08-04 07:56:44 831,519 —-a-w C:\WINDOWS\system32\mswdat10.dll
+ 2004-08-04 10:00:00 831,519 —-a-w C:\WINDOWS\system32\mswdat10.dll
- 2004-08-04 07:56:44 204,288 —-a-w C:\WINDOWS\system32\mswebdvd.dll
+ 2004-08-04 10:00:00 204,288 —-a-w C:\WINDOWS\system32\mswebdvd.dll
- 2006-10-19 01:47:16 321,536 —-a-w C:\WINDOWS\system32\mswmdm.dll
+ 2004-08-04 10:00:00 245,760 —-a-w C:\WINDOWS\system32\mswmdm.dll
- 2004-08-04 07:56:44 245,248 —-a-w C:\WINDOWS\system32\mswsock.dll
+ 2004-08-04 10:00:00 245,248 —-a-w C:\WINDOWS\system32\mswsock.dll
- 2004-08-04 07:56:44 614,429 —-a-w C:\WINDOWS\system32\mswstr10.dll
+ 2004-08-04 10:00:00 614,429 —-a-w C:\WINDOWS\system32\mswstr10.dll
- 2004-08-04 07:56:44 348,189 —-a-w C:\WINDOWS\system32\msxbde40.dll
+ 2004-08-04 10:00:00 348,189 —-a-w C:\WINDOWS\system32\msxbde40.dll
- 2004-08-04 07:56:44 506,368 —-a-w C:\WINDOWS\system32\msxml.dll
+ 2004-08-04 10:00:00 506,368 —-a-w C:\WINDOWS\system32\msxml.dll
- 2004-08-04 07:56:44 701,440 —-a-w C:\WINDOWS\system32\msxml2.dll
+ 2004-08-04 10:00:00 701,440 —-a-w C:\WINDOWS\system32\msxml2.dll
- 2003-07-16 20:37:03 37,916 —-a-w C:\WINDOWS\system32\msxml2r.dll
+ 2004-08-04 10:00:00 37,916 —-a-w C:\WINDOWS\system32\msxml2r.dll
- 2003-07-16 20:37:04 44,032 —-a-w C:\WINDOWS\system32\msxml3r.dll
+ 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\msxml3r.dll
- 2003-07-16 20:37:05 26,624 —-a-w C:\WINDOWS\system32\msxmlr.dll
+ 2004-08-04 10:00:00 26,624 —-a-w C:\WINDOWS\system32\msxmlr.dll
- 2004-08-04 07:56:44 17,408 —-a-w C:\WINDOWS\system32\msyuv.dll
+ 2004-08-04 10:00:00 17,408 —-a-w C:\WINDOWS\system32\msyuv.dll
- 2003-07-16 20:29:21 87,552 —-a-w C:\WINDOWS\system32\mui\0009\hhctrlui.dll
+ 2004-08-04 10:00:00 87,552 —-a-w C:\WINDOWS\system32\mui\0009\hhctrlui.dll
- 2004-08-04 07:56:22 405,504 ——w C:\WINDOWS\system32\mui\041b\xpob2res.dll
+ 2004-08-04 10:00:00 405,504 —-a-w C:\WINDOWS\system32\mui\041b\xpob2res.dll
- 2004-08-04 07:56:29 193,024 ——w C:\WINDOWS\system32\mui\041b\xpsp1res.dll
+ 2004-08-04 10:00:00 193,024 —-a-w C:\WINDOWS\system32\mui\041b\xpsp1res.dll
- 2004-08-04 07:56:29 757,248 ——w C:\WINDOWS\system32\mui\041b\xpsp2res.dll
+ 2004-08-04 10:00:00 757,248 —-a-w C:\WINDOWS\system32\mui\041b\xpsp2res.dll
- 2004-08-04 07:56:22 408,576 ——w C:\WINDOWS\system32\mui\0424\xpob2res.dll
+ 2004-08-04 10:00:00 408,576 —-a-w C:\WINDOWS\system32\mui\0424\xpob2res.dll
- 2004-08-04 07:56:29 192,512 ——w C:\WINDOWS\system32\mui\0424\xpsp1res.dll
+ 2004-08-04 10:00:00 192,512 —-a-w C:\WINDOWS\system32\mui\0424\xpsp1res.dll
- 2004-08-04 07:56:30 732,160 ——w C:\WINDOWS\system32\mui\0424\xpsp2res.dll
+ 2004-08-04 10:00:00 732,160 —-a-w C:\WINDOWS\system32\mui\0424\xpsp2res.dll
- 2003-07-16 20:37:15 90,112 —-a-w C:\WINDOWS\system32\mycomput.dll
+ 2004-08-04 10:00:00 90,112 —-a-w C:\WINDOWS\system32\mycomput.dll
- 2004-08-04 07:56:44 90,624 —-a-w C:\WINDOWS\system32\mydocs.dll
+ 2004-08-04 10:00:00 90,624 —-a-w C:\WINDOWS\system32\mydocs.dll
- 2007-11-03 12:19:24 60,416 —-a-w C:\WINDOWS\system32\narrator.exe
+ 2004-08-04 10:00:00 53,760 —-a-w C:\WINDOWS\system32\narrator.exe
- 2003-07-16 20:37:18 35,840 —-a-w C:\WINDOWS\system32\narrhook.dll
+ 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\narrhook.dll
- 2007-11-03 12:19:24 27,136 —-a-w C:\WINDOWS\system32\nbtstat.exe
+ 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\nbtstat.exe
- 2004-08-04 07:56:44 36,352 —-a-w C:\WINDOWS\system32\ncobjapi.dll
+ 2004-08-04 10:00:00 36,352 —-a-w C:\WINDOWS\system32\ncobjapi.dll
- 2003-07-16 20:37:21 7,680 —-a-w C:\WINDOWS\system32\ncxpnt.dll
+ 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\ncxpnt.dll
- 2004-08-04 07:56:44 17,920 —-a-w C:\WINDOWS\system32\nddeapi.dll
+ 2004-08-04 10:00:00 17,920 —-a-w C:\WINDOWS\system32\nddeapi.dll
- 2007-11-03 12:19:24 10,752 —-a-w C:\WINDOWS\system32\nddeapir.exe
+ 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\nddeapir.exe
- 2004-08-04 07:56:44 18,944 —-a-w C:\WINDOWS\system32\nddenb32.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\nddenb32.dll
- 2007-11-03 12:19:24 49,152 —-a-w C:\WINDOWS\system32\net.exe
+ 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\net.exe
- 2007-11-03 12:19:24 131,584 —-a-w C:\WINDOWS\system32\net1.exe
+ 2004-08-04 10:00:00 124,928 —-a-w C:\WINDOWS\system32\net1.exe
- 2003-07-16 20:37:35 108,464 —-a-w C:\WINDOWS\system32\netapi.dll
+ 2004-08-04 10:00:00 108,464 —-a-w C:\WINDOWS\system32\netapi.dll
- 2004-08-04 07:56:44 622,080 —-a-w C:\WINDOWS\system32\netcfgx.dll
+ 2004-08-04 10:00:00 622,080 —-a-w C:\WINDOWS\system32\netcfgx.dll
- 2007-11-03 12:19:24 117,760 —-a-w C:\WINDOWS\system32\netdde.exe
+ 2004-08-04 10:00:00 111,104 —-a-w C:\WINDOWS\system32\netdde.exe
- 2003-07-16 20:38:01 214,016 —-a-w C:\WINDOWS\system32\netevent.dll
+ 2004-08-04 10:00:00 214,016 —-a-w C:\WINDOWS\system32\netevent.dll
- 2003-07-16 20:38:05 253,952 —-a-w C:\WINDOWS\system32\neth.dll
+ 2004-08-04 10:00:00 253,952 —-a-w C:\WINDOWS\system32\neth.dll
- 2004-08-04 07:56:44 139,264 —-a-w C:\WINDOWS\system32\netid.dll
+ 2004-08-04 10:00:00 139,264 —-a-w C:\WINDOWS\system32\netid.dll
- 2004-08-04 07:56:44 407,040 —-a-w C:\WINDOWS\system32\netlogon.dll
+ 2004-08-04 10:00:00 407,040 —-a-w C:\WINDOWS\system32\netlogon.dll
- 2003-07-16 20:38:16 171,008 —-a-w C:\WINDOWS\system32\netmsg.dll
+ 2004-08-04 10:00:00 171,008 —-a-w C:\WINDOWS\system32\netmsg.dll
- 2004-08-04 07:56:44 875,008 —-a-w C:\WINDOWS\system32\netplwiz.dll
+ 2004-08-04 10:00:00 875,008 —-a-w C:\WINDOWS\system32\netplwiz.dll
- 2004-08-04 07:56:44 12,288 —-a-w C:\WINDOWS\system32\netrap.dll
+ 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\netrap.dll
- 2007-11-03 12:19:24 338,432 —-a-w C:\WINDOWS\system32\netsetup.exe
+ 2004-08-04 10:00:00 329,728 —-a-w C:\WINDOWS\system32\netsetup.exe
- 2007-11-03 12:19:24 92,672 —-a-w C:\WINDOWS\system32\netsh.exe
+ 2004-08-04 10:00:00 86,016 —-a-w C:\WINDOWS\system32\netsh.exe
- 2004-08-04 07:56:44 1,708,032 —-a-w C:\WINDOWS\system32\netshell.dll
+ 2004-08-04 10:00:00 1,708,032 —-a-w C:\WINDOWS\system32\netshell.dll
- 2007-11-03 12:19:24 43,520 —-a-w C:\WINDOWS\system32\netstat.exe
+ 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\netstat.exe
- 2004-08-04 07:56:44 80,896 —-a-w C:\WINDOWS\system32\netui0.dll
+ 2004-08-04 10:00:00 80,896 —-a-w C:\WINDOWS\system32\netui0.dll
- 2004-08-04 07:56:44 245,760 —-a-w C:\WINDOWS\system32\netui1.dll
+ 2004-08-04 10:00:00 245,760 —-a-w C:\WINDOWS\system32\netui1.dll
- 2003-07-16 20:38:38 308,224 —-a-w C:\WINDOWS\system32\netui2.dll
+ 2004-08-04 10:00:00 308,224 —-a-w C:\WINDOWS\system32\netui2.dll
- 2004-08-04 07:56:44 248,832 —-a-w C:\WINDOWS\system32\newdev.dll
+ 2004-08-04 10:00:00 248,832 —-a-w C:\WINDOWS\system32\newdev.dll
- 2004-08-04 07:56:44 103,936 —-a-w C:\WINDOWS\system32\nlhtml.dll
+ 2004-08-04 10:00:00 103,936 —-a-w C:\WINDOWS\system32\nlhtml.dll
- 2003-07-16 20:38:58 7,052 —-a-w C:\WINDOWS\system32\nlsfunc.exe
+ 2004-08-04 10:00:00 7,052 —-a-w C:\WINDOWS\system32\nlsfunc.exe
- 2007-11-03 12:19:24 75,776 —-a-w C:\WINDOWS\system32\notepad.exe
+ 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\notepad.exe
- 2004-08-04 07:56:44 57,344 —-a-w C:\WINDOWS\system32\npp\ndisnpp.dll
+ 2004-08-04 10:00:00 57,344 —-a-w C:\WINDOWS\system32\npp\ndisnpp.dll
- 2007-11-03 12:19:24 22,016 —-a-w C:\WINDOWS\system32\npp\nppagent.exe
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\system32\npp\nppagent.exe
- 2004-08-04 07:56:44 54,784 —-a-w C:\WINDOWS\system32\npptools.dll
+ 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\system32\npptools.dll
- 2007-11-03 12:19:24 83,456 —-a-w C:\WINDOWS\system32\nslookup.exe
+ 2004-08-04 10:00:00 76,800 —-a-w C:\WINDOWS\system32\nslookup.exe
- 2004-08-04 07:56:36 708,096 —-a-w C:\WINDOWS\system32\ntdll.dll
+ 2004-08-04 10:00:00 708,096 —-a-w C:\WINDOWS\system32\ntdll.dll
- 2003-07-16 20:39:32 27,866 —-a-w C:\WINDOWS\system32\ntdos.sys
+ 2004-08-04 10:00:00 27,866 —-a-w C:\WINDOWS\system32\ntdos.sys
- 2003-07-16 20:39:33 29,146 —-a-w C:\WINDOWS\system32\ntdos404.sys
+ 2004-08-04 10:00:00 29,146 —-a-w C:\WINDOWS\system32\ntdos404.sys
- 2003-07-16 20:39:33 29,370 —-a-w C:\WINDOWS\system32\ntdos411.sys
+ 2004-08-04 10:00:00 29,370 —-a-w C:\WINDOWS\system32\ntdos411.sys
- 2003-07-16 20:39:37 29,274 —-a-w C:\WINDOWS\system32\ntdos412.sys
+ 2004-08-04 10:00:00 29,274 —-a-w C:\WINDOWS\system32\ntdos412.sys
- 2003-07-16 20:39:38 29,146 —-a-w C:\WINDOWS\system32\ntdos804.sys
+ 2004-08-04 10:00:00 29,146 —-a-w C:\WINDOWS\system32\ntdos804.sys
- 2004-08-04 07:56:44 67,072 —-a-w C:\WINDOWS\system32\ntdsapi.dll
+ 2004-08-04 10:00:00 67,072 —-a-w C:\WINDOWS\system32\ntdsapi.dll
- 2004-08-04 05:45:08 33,840 —-a-w C:\WINDOWS\system32\ntio.sys
+ 2004-08-04 10:00:00 33,840 —-a-w C:\WINDOWS\system32\ntio.sys
- 2004-08-04 05:45:14 34,560 —-a-w C:\WINDOWS\system32\ntio404.sys
+ 2004-08-04 10:00:00 34,560 —-a-w C:\WINDOWS\system32\ntio404.sys
- 2004-08-04 05:45:10 35,648 —-a-w C:\WINDOWS\system32\ntio411.sys
+ 2004-08-04 10:00:00 35,648 —-a-w C:\WINDOWS\system32\ntio411.sys
- 2004-08-04 05:45:15 35,424 —-a-w C:\WINDOWS\system32\ntio412.sys
+ 2004-08-04 10:00:00 35,424 —-a-w C:\WINDOWS\system32\ntio412.sys
- 2004-08-04 05:45:12 34,560 —-a-w C:\WINDOWS\system32\ntio804.sys
+ 2004-08-04 10:00:00 34,560 —-a-w C:\WINDOWS\system32\ntio804.sys
- 2007-02-28 08:38:55 2,057,600 —-a-w C:\WINDOWS\system32\ntkrnlpa.exe
+ 2007-02-28 09:15:56 2,059,392 —-a-w C:\WINDOWS\system32\ntkrnlpa.exe
- 2004-08-04 07:56:44 43,520 —-a-w C:\WINDOWS\system32\ntlanman.dll
+ 2004-08-04 10:00:00 43,520 —-a-w C:\WINDOWS\system32\ntlanman.dll
- 2003-07-16 20:39:47 57,856 —-a-w C:\WINDOWS\system32\ntlanui.dll
+ 2004-08-04 10:00:00 57,856 —-a-w C:\WINDOWS\system32\ntlanui.dll
- 2003-07-16 20:39:47 14,336 —-a-w C:\WINDOWS\system32\ntlanui2.dll
+ 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\ntlanui2.dll
- 2004-08-04 07:56:44 8,192 —-a-w C:\WINDOWS\system32\ntlsapi.dll
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\ntlsapi.dll
- 2004-08-04 07:56:44 118,784 —-a-w C:\WINDOWS\system32\ntmarta.dll
+ 2004-08-04 10:00:00 118,784 —-a-w C:\WINDOWS\system32\ntmarta.dll
- 2004-08-04 07:56:44 40,960 —-a-w C:\WINDOWS\system32\ntmsapi.dll
+ 2004-08-04 10:00:00 40,960 —-a-w C:\WINDOWS\system32\ntmsapi.dll
- 2004-08-04 07:56:44 179,712 —-a-w C:\WINDOWS\system32\ntmsdba.dll
+ 2004-08-04 10:00:00 179,712 —-a-w C:\WINDOWS\system32\ntmsdba.dll
- 2003-07-16 20:39:51 36,864 —-a-w C:\WINDOWS\system32\ntmsevt.dll
+ 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\ntmsevt.dll
- 2004-08-04 07:56:44 488,448 —-a-w C:\WINDOWS\system32\ntmsmgr.dll
+ 2004-08-04 10:00:00 488,448 —-a-w C:\WINDOWS\system32\ntmsmgr.dll
- 2004-08-04 07:56:44 435,200 —-a-w C:\WINDOWS\system32\ntmssvc.dll
+ 2004-08-04 10:00:00 435,200 —-a-w C:\WINDOWS\system32\ntmssvc.dll
- 2007-02-28 09:10:57 2,180,352 —-a-w C:\WINDOWS\system32\ntoskrnl.exe
+ 2007-02-28 09:55:14 2,182,144 —-a-w C:\WINDOWS\system32\ntoskrnl.exe
- 2004-08-04 07:56:44 91,136 —-a-w C:\WINDOWS\system32\ntprint.dll
+ 2004-08-04 10:00:00 91,136 —-a-w C:\WINDOWS\system32\ntprint.dll
- 2007-11-03 12:19:24 38,400 —-a-w C:\WINDOWS\system32\ntsd.exe
+ 2004-08-04 10:00:00 31,744 —-a-w C:\WINDOWS\system32\ntsd.exe
- 2003-07-16 20:39:58 36,864 —-a-w C:\WINDOWS\system32\ntsdexts.dll
+ 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\ntsdexts.dll
- 2004-08-04 07:56:44 143,872 —-a-w C:\WINDOWS\system32\ntshrui.dll
+ 2004-08-04 10:00:00 143,872 —-a-w C:\WINDOWS\system32\ntshrui.dll
- 2007-11-03 12:19:24 426,496 —-a-w C:\WINDOWS\system32\ntvdm.exe
+ 2004-08-04 10:00:00 419,840 —-a-w C:\WINDOWS\system32\ntvdm.exe
- 2003-07-16 20:40:00 13,312 —-a-w C:\WINDOWS\system32\ntvdmd.dll
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\ntvdmd.dll
- 2004-08-04 07:56:44 266,752 —-a-w C:\WINDOWS\system32\oakley.dll
+ 2004-08-04 10:00:00 266,752 —-a-w C:\WINDOWS\system32\oakley.dll
- 2004-08-04 07:56:44 285,696 —-a-w C:\WINDOWS\system32\objsel.dll
+ 2004-08-04 10:00:00 285,696 —-a-w C:\WINDOWS\system32\objsel.dll
- 2003-07-16 20:40:13 60,928 —-a-w C:\WINDOWS\system32\ocmanage.dll
+ 2004-08-04 10:00:00 60,928 —-a-w C:\WINDOWS\system32\ocmanage.dll
- 2003-07-16 20:40:14 26,224 —-a-w C:\WINDOWS\system32\odbc16gt.dll
+ 2004-08-04 10:00:00 26,224 —-a-w C:\WINDOWS\system32\odbc16gt.dll
- 2004-08-04 07:56:44 249,856 —-a-w C:\WINDOWS\system32\odbc32.dll
+ 2004-08-04 10:00:00 249,856 —-a-w C:\WINDOWS\system32\odbc32.dll
- 2004-08-04 07:56:44 16,384 —-a-w C:\WINDOWS\system32\odbc32gt.dll
+ 2004-08-04 10:00:00 16,384 —-a-w C:\WINDOWS\system32\odbc32gt.dll
- 2007-11-03 12:19:25 40,960 —-a-w C:\WINDOWS\system32\odbcad32.exe
+ 2004-08-04 10:00:00 32,768 —-a-w C:\WINDOWS\system32\odbcad32.exe
- 2004-08-04 07:56:44 24,576 —-a-w C:\WINDOWS\system32\odbcbcp.dll
+ 2004-08-04 10:00:00 24,576 —-a-w C:\WINDOWS\system32\odbcbcp.dll
- 2004-08-04 07:56:44 135,168 —-a-w C:\WINDOWS\system32\odbcconf.dll
+ 2004-08-04 10:00:00 135,168 —-a-w C:\WINDOWS\system32\odbcconf.dll
- 2007-11-03 12:19:25 77,824 —-a-w C:\WINDOWS\system32\odbcconf.exe
+ 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\odbcconf.exe
- 2004-08-04 07:56:44 106,496 —-a-w C:\WINDOWS\system32\odbccp32.dll
+ 2004-08-04 10:00:00 106,496 —-a-w C:\WINDOWS\system32\odbccp32.dll
- 2004-08-04 07:56:44 65,536 —-a-w C:\WINDOWS\system32\odbccr32.dll
+ 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\odbccr32.dll
- 2004-08-04 07:56:44 65,536 —-a-w C:\WINDOWS\system32\odbccu32.dll
+ 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\odbccu32.dll
- 2004-08-04 07:56:22 94,208 —-a-w C:\WINDOWS\system32\odbcint.dll
+ 2004-08-04 10:00:00 94,208 —-a-w C:\WINDOWS\system32\odbcint.dll
- 2004-08-04 07:56:22 53,279 —-a-w C:\WINDOWS\system32\odbcji32.dll
+ 2004-08-04 10:00:00 53,279 —-a-w C:\WINDOWS\system32\odbcji32.dll
- 2004-08-04 07:56:44 278,559 —-a-w C:\WINDOWS\system32\odbcjt32.dll
+ 2004-08-04 10:00:00 278,559 —-a-w C:\WINDOWS\system32\odbcjt32.dll
- 2004-08-04 07:56:22 12,288 —-a-w C:\WINDOWS\system32\odbcp32r.dll
+ 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\odbcp32r.dll
- 2004-08-04 07:56:44 147,456 —-a-w C:\WINDOWS\system32\odbctrac.dll
+ 2004-08-04 10:00:00 147,456 —-a-w C:\WINDOWS\system32\odbctrac.dll
- 2004-08-04 07:56:44 20,511 —-a-w C:\WINDOWS\system32\oddbse32.dll
+ 2004-08-04 10:00:00 20,511 —-a-w C:\WINDOWS\system32\oddbse32.dll
- 2004-08-04 07:56:44 20,510 —-a-w C:\WINDOWS\system32\odexl32.dll
+ 2004-08-04 10:00:00 20,510 —-a-w C:\WINDOWS\system32\odexl32.dll
- 2004-08-04 07:56:44 20,510 —-a-w C:\WINDOWS\system32\odfox32.dll
+ 2004-08-04 10:00:00 20,510 —-a-w C:\WINDOWS\system32\odfox32.dll
- 2004-08-04 07:56:44 20,510 —-a-w C:\WINDOWS\system32\odpdx32.dll
+ 2004-08-04 10:00:00 20,510 —-a-w C:\WINDOWS\system32\odpdx32.dll
- 2004-08-04 07:56:44 20,511 —-a-w C:\WINDOWS\system32\odtext32.dll
+ 2004-08-04 10:00:00 20,511 —-a-w C:\WINDOWS\system32\odtext32.dll
- 2003-07-16 20:54:54 13,107,200 —-a-w C:\WINDOWS\system32\oembios.bin
+ 2005-03-22 18:48:43 13,107,200 —-a-w C:\WINDOWS\system32\oembios.bin
- 2003-07-16 20:54:55 4,594 —-a-w C:\WINDOWS\system32\oembios.dat
+ 2005-03-22 18:48:43 4,627 —-a-w C:\WINDOWS\system32\oembios.dat
- 2004-08-04 07:56:44 120,832 —-a-w C:\WINDOWS\system32\offfilt.dll
+ 2004-08-04 10:00:00 120,832 —-a-w C:\WINDOWS\system32\offfilt.dll
- 2003-07-16 20:40:32 39,744 —-a-w C:\WINDOWS\system32\ole2.dll
+ 2004-08-04 10:00:00 39,744 —-a-w C:\WINDOWS\system32\ole2.dll
- 2003-07-16 20:40:32 169,520 —-a-w C:\WINDOWS\system32\ole2disp.dll
+ 2004-08-04 10:00:00 169,520 —-a-w C:\WINDOWS\system32\ole2disp.dll
- 2003-07-16 20:40:33 153,008 —-a-w C:\WINDOWS\system32\ole2nls.dll
+ 2004-08-04 10:00:00 153,008 —-a-w C:\WINDOWS\system32\ole2nls.dll
- 2003-07-16 20:40:34 163,328 —-a-w C:\WINDOWS\system32\oleacc.dll
+ 2004-08-04 10:00:00 163,328 —-a-w C:\WINDOWS\system32\oleacc.dll
- 2003-07-16 20:40:34 16,896 —-a-w C:\WINDOWS\system32\oleaccrc.dll
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\oleaccrc.dll
- 2003-07-16 20:40:36 82,944 —-a-w C:\WINDOWS\system32\olecli.dll
+ 2004-08-04 10:00:00 82,944 —-a-w C:\WINDOWS\system32\olecli.dll
- 2004-08-04 07:56:44 107,008 —-a-w C:\WINDOWS\system32\oleprn.dll
+ 2004-08-04 10:00:00 107,008 —-a-w C:\WINDOWS\system32\oleprn.dll
- 2004-08-04 07:56:44 83,456 —-a-w C:\WINDOWS\system32\olepro32.dll
+ 2004-08-04 10:00:00 83,456 —-a-w C:\WINDOWS\system32\olepro32.dll
- 2003-07-16 20:40:41 24,064 —-a-w C:\WINDOWS\system32\olesvr.dll
+ 2004-08-04 10:00:00 24,064 —-a-w C:\WINDOWS\system32\olesvr.dll
- 2003-07-16 20:40:41 22,016 —-a-w C:\WINDOWS\system32\olesvr32.dll
+ 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\olesvr32.dll
- 2003-07-16 20:40:42 69,120 —-a-w C:\WINDOWS\system32\olethk32.dll
+ 2004-08-04 10:00:00 69,120 —-a-w C:\WINDOWS\system32\olethk32.dll
- 2007-11-03 12:19:25 34,816 —-a-w C:\WINDOWS\system32\oobe\msoobe.exe
+ 2004-08-04 10:00:00 28,160 —-a-w C:\WINDOWS\system32\oobe\msoobe.exe
- 2007-11-03 12:19:25 57,856 —-a-w C:\WINDOWS\system32\oobe\oobebaln.exe
+ 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\oobe\oobebaln.exe
- 2004-08-04 07:56:44 713,728 —-a-w C:\WINDOWS\system32\opengl32.dll
+ 2004-08-04 10:00:00 713,728 —-a-w C:\WINDOWS\system32\opengl32.dll
- 2007-11-03 12:19:25 222,208 —-a-w C:\WINDOWS\system32\osk.exe
+ 2004-08-04 10:00:00 215,552 —-a-w C:\WINDOWS\system32\osk.exe
- 2004-08-04 07:56:44 67,584 —-a-w C:\WINDOWS\system32\osuninst.dll
+ 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\osuninst.dll
- 2007-11-03 12:19:25 47,104 —-a-w C:\WINDOWS\system32\osuninst.exe
+ 2004-08-04 10:00:00 40,448 —-a-w C:\WINDOWS\system32\osuninst.exe
- 2004-08-04 07:56:44 116,224 ——w C:\WINDOWS\system32\p2p.dll
+ 2004-08-04 10:00:00 116,224 —-a-w C:\WINDOWS\system32\p2p.dll
- 2004-08-04 07:56:44 86,016 ——w C:\WINDOWS\system32\p2pgasvc.dll
+ 2004-08-04 10:00:00 86,016 —-a-w C:\WINDOWS\system32\p2pgasvc.dll
- 2004-08-04 07:56:44 312,320 ——w C:\WINDOWS\system32\p2pgraph.dll
+ 2004-08-04 10:00:00 312,320 —-a-w C:\WINDOWS\system32\p2pgraph.dll
- 2004-08-04 07:56:44 88,064 ——w C:\WINDOWS\system32\p2pnetsh.dll
+ 2004-08-04 10:00:00 88,064 —-a-w C:\WINDOWS\system32\p2pnetsh.dll
- 2004-08-04 07:56:44 526,848 ——w C:\WINDOWS\system32\p2psvc.dll
+ 2004-08-04 10:00:00 526,848 —-a-w C:\WINDOWS\system32\p2psvc.dll
- 2007-11-03 12:19:25 65,024 —-a-w C:\WINDOWS\system32\packager.exe
+ 2004-08-04 10:00:00 58,368 —-a-w C:\WINDOWS\system32\packager.exe
- 2003-07-16 20:41:00 10,240 —-a-w C:\WINDOWS\system32\panmap.dll
+ 2004-08-04 10:00:00 10,240 —-a-w C:\WINDOWS\system32\panmap.dll
- 2003-07-16 20:27:31 157,696 —-a-w C:\WINDOWS\system32\paqsp.dll
+ 2004-08-04 10:00:00 157,696 —-a-w C:\WINDOWS\system32\paqsp.dll
- 2007-11-03 12:19:25 28,160 —-a-w C:\WINDOWS\system32\pathping.exe
+ 2004-08-04 10:00:00 21,504 —-a-w C:\WINDOWS\system32\pathping.exe
- 2004-08-04 07:56:44 62,976 —-a-w C:\WINDOWS\system32\pautoenr.dll
+ 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\pautoenr.dll
- 2004-08-04 07:56:44 283,648 —-a-w C:\WINDOWS\system32\pdh.dll
+ 2004-08-04 10:00:00 283,648 —-a-w C:\WINDOWS\system32\pdh.dll
- 2007-11-03 12:19:25 22,016 —-a-w C:\WINDOWS\system32\pentnt.exe
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\system32\pentnt.exe
- 2007-09-30 01:57:56 52,764 —-a-w C:\WINDOWS\system32\perfc009.dat
+ 2007-11-11 03:25:55 53,638 —-a-w C:\WINDOWS\system32\perfc009.dat
- 2004-08-04 07:56:44 39,936 —-a-w C:\WINDOWS\system32\perfctrs.dll
+ 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\perfctrs.dll
- 2003-07-16 20:41:23 28,626 —-a-w C:\WINDOWS\system32\perfd009.dat
+ 2004-08-04 10:00:00 28,626 —-a-w C:\WINDOWS\system32\perfd009.dat
- 2004-08-04 07:56:44 26,624 —-a-w C:\WINDOWS\system32\perfdisk.dll
+ 2004-08-04 10:00:00 26,624 —-a-w C:\WINDOWS\system32\perfdisk.dll
- 2007-09-30 01:57:56 380,350 —-a-w C:\WINDOWS\system32\perfh009.dat
+ 2007-11-11 03:25:55 381,984 —-a-w C:\WINDOWS\system32\perfh009.dat
- 2003-07-16 20:41:25 272,128 —-a-w C:\WINDOWS\system32\perfi009.dat
+ 2004-08-04 10:00:00 272,128 —-a-w C:\WINDOWS\system32\perfi009.dat
- 2007-11-03 12:19:25 22,528 —-a-w C:\WINDOWS\system32\perfmon.exe
+ 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\perfmon.exe
- 2003-07-16 20:41:27 16,896 —-a-w C:\WINDOWS\system32\perfnet.dll
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\perfnet.dll
- 2004-08-04 07:56:44 25,088 —-a-w C:\WINDOWS\system32\perfos.dll
+ 2004-08-04 10:00:00 25,088 —-a-w C:\WINDOWS\system32\perfos.dll
- 2004-08-04 07:56:44 34,816 —-a-w C:\WINDOWS\system32\perfproc.dll
+ 2004-08-04 10:00:00 34,816 —-a-w C:\WINDOWS\system32\perfproc.dll
- 2003-07-16 20:41:28 12,288 —-a-w C:\WINDOWS\system32\perfts.dll
+ 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\perfts.dll
- 2004-08-04 07:56:44 176,128 —-a-w C:\WINDOWS\system32\photowiz.dll
+ 2004-08-04 10:00:00 176,128 —-a-w C:\WINDOWS\system32\photowiz.dll
- 2004-08-04 07:56:44 35,328 —-a-w C:\WINDOWS\system32\pid.dll
+ 2004-08-04 10:00:00 35,328 —-a-w C:\WINDOWS\system32\pid.dll
- 2004-08-04 06:04:41 24,064 —-a-w C:\WINDOWS\system32\pidgen.dll
+ 2004-08-04 10:00:00 24,064 —-a-w C:\WINDOWS\system32\pidgen.dll
- 2003-07-16 20:41:46 35,328 —-a-w C:\WINDOWS\system32\pifmgr.dll
+ 2004-08-04 10:00:00 35,328 —-a-w C:\WINDOWS\system32\pifmgr.dll
- 2007-11-03 12:19:25 24,576 —-a-w C:\WINDOWS\system32\ping.exe
+ 2004-08-04 10:00:00 17,920 —-a-w C:\WINDOWS\system32\ping.exe
- 2007-11-03 12:19:25 39,936 —-a-w C:\WINDOWS\system32\ping6.exe
+ 2004-08-04 10:00:00 33,280 —-a-w C:\WINDOWS\system32\ping6.exe
- 2004-08-04 07:56:44 15,360 —-a-w C:\WINDOWS\system32\pjlmon.dll
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\system32\pjlmon.dll
- 2003-07-16 20:41:52 30,720 —-a-w C:\WINDOWS\system32\plustab.dll
+ 2004-08-04 10:00:00 30,720 —-a-w C:\WINDOWS\system32\plustab.dll
- 2003-07-16 20:41:53 46,592 —-a-w C:\WINDOWS\system32\pmspl.dll
+ 2004-08-04 10:00:00 46,592 —-a-w C:\WINDOWS\system32\pmspl.dll
- 2006-10-17 15:58:08 44,544 —-a-w C:\WINDOWS\system32\pngfilt.dll
+ 2007-08-13 23:36:12 44,544 —-a-w C:\WINDOWS\system32\pngfilt.dll
- 2004-08-04 07:56:44 48,640 ——w C:\WINDOWS\system32\pnrpnsp.dll
+ 2004-08-04 10:00:00 48,640 —-a-w C:\WINDOWS\system32\pnrpnsp.dll
- 2004-08-04 07:56:44 105,472 —-a-w C:\WINDOWS\system32\polstore.dll
+ 2004-08-04 10:00:00 105,472 —-a-w C:\WINDOWS\system32\polstore.dll
- 2004-08-04 07:56:55 55,808 ——w C:\WINDOWS\system32\powercfg.exe
+ 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\powercfg.exe
- 2004-08-04 07:56:44 17,408 —-a-w C:\WINDOWS\system32\powrprof.dll
+ 2004-08-04 10:00:00 17,408 —-a-w C:\WINDOWS\system32\powrprof.dll
- 2003-07-16 20:42:03 16,384 —-a-w C:\WINDOWS\system32\prflbmsg.dll
+ 2004-08-04 10:00:00 16,384 —-a-w C:\WINDOWS\system32\prflbmsg.dll
- 2007-11-03 12:19:25 15,872 —-a-w C:\WINDOWS\system32\print.exe
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\print.exe
- 2004-08-04 07:56:44 560,640 —-a-w C:\WINDOWS\system32\printui.dll
+ 2004-08-04 10:00:00 560,640 —-a-w C:\WINDOWS\system32\printui.dll
- 2004-08-04 07:56:44 27,648 —-a-w C:\WINDOWS\system32\profmap.dll
+ 2004-08-04 10:00:00 27,648 —-a-w C:\WINDOWS\system32\profmap.dll
- 2007-11-03 12:19:25 116,224 —-a-w C:\WINDOWS\system32\progman.exe
+ 2004-08-04 10:00:00 109,568 —-a-w C:\WINDOWS\system32\progman.exe
- 2007-11-03 12:19:25 56,832 —-a-w C:\WINDOWS\system32\proquota.exe
+ 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\proquota.exe
- 2004-08-04 07:56:55 15,872 ——w C:\WINDOWS\system32\proxycfg.exe
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\proxycfg.exe
- 2004-08-04 07:56:44 23,040 —-a-w C:\WINDOWS\system32\psapi.dll
+ 2004-08-04 10:00:00 23,040 —-a-w C:\WINDOWS\system32\psapi.dll
- 2004-08-04 07:56:44 96,768 —-a-w C:\WINDOWS\system32\psbase.dll
+ 2004-08-04 10:00:00 96,768 —-a-w C:\WINDOWS\system32\psbase.dll
- 2003-07-16 20:42:15 10,752 —-a-w C:\WINDOWS\system32\pschdprf.dll
+ 2004-08-04 10:00:00 10,752 —-a-w C:\WINDOWS\system32\pschdprf.dll
- 2003-07-16 20:42:16 8,192 —-a-w C:\WINDOWS\system32\psnppagn.dll
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\psnppagn.dll
- 2004-08-04 07:56:44 43,520 —-a-w C:\WINDOWS\system32\pstorec.dll
+ 2004-08-04 10:00:00 43,520 —-a-w C:\WINDOWS\system32\pstorec.dll
- 2004-08-04 07:56:44 34,304 —-a-w C:\WINDOWS\system32\pstorsvc.dll
+ 2004-08-04 10:00:00 34,304 —-a-w C:\WINDOWS\system32\pstorsvc.dll
- 2003-07-16 20:42:18 3,708 —-a-w C:\WINDOWS\system32\pubprn.vbs
+ 2004-08-04 10:00:00 3,708 —-a-w C:\WINDOWS\system32\pubprn.vbs
- 2007-11-03 12:19:25 23,552 —-a-w C:\WINDOWS\system32\qappsrv.exe
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\qappsrv.exe
- 2006-10-19 01:47:18 211,456 —-a-w C:\WINDOWS\system32\qasf.dll
+ 2004-08-04 10:00:00 237,568 —-a-w C:\WINDOWS\system32\qasf.dll
- 2004-08-04 07:56:44 192,512 —-a-w C:\WINDOWS\system32\qcap.dll
+ 2004-08-04 10:00:00 192,512 —-a-w C:\WINDOWS\system32\qcap.dll
- 2004-08-04 07:56:44 279,040 —-a-w C:\WINDOWS\system32\qdv.dll
+ 2004-08-04 10:00:00 279,040 —-a-w C:\WINDOWS\system32\qdv.dll
- 2004-08-04 07:56:44 385,024 —-a-w C:\WINDOWS\system32\qdvd.dll
+ 2004-08-04 10:00:00 385,024 —-a-w C:\WINDOWS\system32\qdvd.dll
- 2004-08-04 07:56:44 562,176 —-a-w C:\WINDOWS\system32\qedit.dll
+ 2004-08-04 10:00:00 562,176 —-a-w C:\WINDOWS\system32\qedit.dll
- 2004-08-04 07:56:24 733,696 —-a-w C:\WINDOWS\system32\qedwipes.dll
+ 2004-08-04 10:00:00 733,696 —-a-w C:\WINDOWS\system32\qedwipes.dll
- 2003-07-16 20:42:29 8,192 —-a-w C:\WINDOWS\system32\qosname.dll
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\qosname.dll
- 2007-11-03 12:19:25 27,136 —-a-w C:\WINDOWS\system32\qprocess.exe
+ 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\qprocess.exe
- 2007-11-03 12:19:11 385,024 —-a-w C:\WINDOWS\system32\QuickTime\QTPluginInstaller.exe
+ 2007-11-03 12:19:12 376,832 —-a-w C:\WINDOWS\system32\QuickTime\QTPluginInstaller.exe
- 2007-11-03 12:19:11 65,536 —-a-w C:\WINDOWS\system32\QuickTime\QuickTimeUpdateHelper.exe
+ 2007-11-03 12:19:12 57,344 —-a-w C:\WINDOWS\system32\QuickTime\QuickTimeUpdateHelper.exe
- 2007-11-03 12:19:25 28,672 —-a-w C:\WINDOWS\system32\qwinsta.exe
+ 2002-08-29 12:00:00 22,016 —-a-w C:\WINDOWS\system32\qwinsta.exe
- 2004-08-04 07:56:44 236,544 —-a-w C:\WINDOWS\system32\rasapi32.dll
+ 2004-08-04 10:00:00 236,544 —-a-w C:\WINDOWS\system32\rasapi32.dll
- 2004-08-04 07:56:44 89,088 —-a-w C:\WINDOWS\system32\rasauto.dll
+ 2004-08-04 10:00:00 89,088 —-a-w C:\WINDOWS\system32\rasauto.dll
- 2007-11-03 12:19:25 18,432 —-a-w C:\WINDOWS\system32\rasautou.exe
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\rasautou.exe
- 2004-08-04 07:56:44 69,632 —-a-w C:\WINDOWS\system32\raschap.dll
+ 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\raschap.dll
- 2003-07-16 20:42:40 11,776 —-a-w C:\WINDOWS\system32\rasctrs.dll
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\rasctrs.dll
- 2007-11-03 12:19:25 17,920 —-a-w C:\WINDOWS\system32\rasdial.exe
+ 2004-08-04 10:00:00 11,264 —-a-w C:\WINDOWS\system32\rasdial.exe
- 2004-08-04 07:56:44 657,920 —-a-w C:\WINDOWS\system32\rasdlg.dll
+ 2004-08-04 10:00:00 657,920 —-a-w C:\WINDOWS\system32\rasdlg.dll
- 2004-08-04 07:56:44 61,440 —-a-w C:\WINDOWS\system32\rasman.dll
+ 2004-08-04 10:00:00 61,440 —-a-w C:\WINDOWS\system32\rasman.dll
- 2003-07-16 20:42:42 143,360 —-a-w C:\WINDOWS\system32\rasmontr.dll
+ 2004-08-04 10:00:00 143,360 —-a-w C:\WINDOWS\system32\rasmontr.dll
- 2003-07-16 20:42:43 22,528 —-a-w C:\WINDOWS\system32\rasmxs.dll
+ 2004-08-04 10:00:00 22,528 —-a-w C:\WINDOWS\system32\rasmxs.dll
- 2007-11-03 12:19:25 63,488 —-a-w C:\WINDOWS\system32\rasphone.exe
+ 2004-08-04 10:00:00 56,832 —-a-w C:\WINDOWS\system32\rasphone.exe
- 2004-08-04 07:56:44 206,336 —-a-w C:\WINDOWS\system32\rasppp.dll
+ 2004-08-04 10:00:00 206,336 —-a-w C:\WINDOWS\system32\rasppp.dll
- 2003-07-16 20:42:45 23,552 —-a-w C:\WINDOWS\system32\rasrad.dll
+ 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\rasrad.dll
- 2004-08-04 07:56:44 16,896 —-a-w C:\WINDOWS\system32\rassapi.dll
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\rassapi.dll
- 2003-07-16 20:42:46 12,800 —-a-w C:\WINDOWS\system32\rasser.dll
+ 2004-08-04 10:00:00 12,800 —-a-w C:\WINDOWS\system32\rasser.dll
- 2004-08-04 07:56:44 58,880 —-a-w C:\WINDOWS\system32\rastapi.dll
+ 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\rastapi.dll
- 2004-08-04 07:56:44 112,128 —-a-w C:\WINDOWS\system32\rastls.dll
+ 2004-08-04 10:00:00 112,128 —-a-w C:\WINDOWS\system32\rastls.dll
- 2004-08-04 07:56:44 102,400 —-a-w C:\WINDOWS\system32\rcbdyctl.dll
+ 2004-08-04 10:00:00 102,400 —-a-w C:\WINDOWS\system32\rcbdyctl.dll
- 2007-11-03 12:19:25 42,496 —-a-w C:\WINDOWS\system32\rcimlby.exe
+ 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\rcimlby.exe
- 2007-11-03 12:19:25 28,160 —-a-w C:\WINDOWS\system32\rcp.exe
+ 2004-08-04 10:00:00 21,504 —-a-w C:\WINDOWS\system32\rcp.exe
- 2007-11-03 12:19:25 69,120 —-a-w C:\WINDOWS\system32\rdpclip.exe
+ 2004-08-04 10:00:00 62,464 —-a-w C:\WINDOWS\system32\rdpclip.exe
- 2004-08-04 08:01:07 92,168 —-a-w C:\WINDOWS\system32\rdpdd.dll
+ 2004-08-04 10:00:00 92,168 —-a-w C:\WINDOWS\system32\rdpdd.dll
- 2007-11-03 12:19:25 20,480 —-a-w C:\WINDOWS\system32\rdsaddin.exe
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\rdsaddin.exe
- 2007-11-03 12:19:25 73,728 —-a-w C:\WINDOWS\system32\rdshost.exe
+ 2004-08-04 10:00:00 67,072 —-a-w C:\WINDOWS\system32\rdshost.exe
- 2007-11-03 12:19:25 13,824 —-a-w C:\WINDOWS\system32\recover.exe
+ 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\recover.exe
- 2004-08-04 05:48:44 3,338 —-a-w C:\WINDOWS\system32\redir.exe
+ 2004-08-04 10:00:00 3,338 —-a-w C:\WINDOWS\system32\redir.exe
- 2007-11-03 12:19:25 56,832 —-a-w C:\WINDOWS\system32\reg.exe
+ 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\reg.exe
- 2004-08-04 07:56:44 49,664 —-a-w C:\WINDOWS\system32\regapi.dll
+ 2004-08-04 10:00:00 49,664 —-a-w C:\WINDOWS\system32\regapi.dll
- 2007-11-03 12:19:25 10,240 —-a-w C:\WINDOWS\system32\regedt32.exe
+ 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\regedt32.exe
- 2007-11-03 12:19:25 40,448 —-a-w C:\WINDOWS\system32\regini.exe
+ 2002-08-29 12:00:00 33,792 —-a-w C:\WINDOWS\system32\regini.exe
- 2004-08-04 07:56:44 59,904 —-a-w C:\WINDOWS\system32\regsvc.dll
+ 2004-08-04 10:00:00 59,904 —-a-w C:\WINDOWS\system32\regsvc.dll
- 2007-11-03 12:19:25 18,432 —-a-w C:\WINDOWS\system32\regsvr32.exe
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\regsvr32.exe
- 2007-11-03 12:19:26 11,264 —-a-w C:\WINDOWS\system32\regwiz.exe
+ 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\regwiz.exe
- 2004-08-04 07:56:44 397,824 —-a-w C:\WINDOWS\system32\regwizc.dll
+ 2004-08-04 10:00:00 397,824 —-a-w C:\WINDOWS\system32\regwizc.dll
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\streamci.dll
+ 2004-08-04 10:00:00 4,352 —-a-w C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\swenum.sys
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\i386\streamci.dll
+ 2004-08-04 10:00:00 4,352 —-a-w C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\i386\swenum.sys
- 2003-07-16 20:43:10 107,520 —-a-w C:\WINDOWS\system32\rend.dll
+ 2004-08-04 10:00:00 107,520 —-a-w C:\WINDOWS\system32\rend.dll
- 2007-11-03 12:19:26 19,456 —-a-w C:\WINDOWS\system32\replace.exe
+ 2004-08-04 10:00:00 12,800 —-a-w C:\WINDOWS\system32\replace.exe
- 2007-11-03 12:19:26 16,384 —-a-w C:\WINDOWS\system32\reset.exe
+ 2002-08-29 12:00:00 9,728 —-a-w C:\WINDOWS\system32\reset.exe
- 2007-11-03 01:21:33 708,640 —-a-w C:\WINDOWS\system32\Restore\rstrlog.dat
+ 2007-11-10 15:16:11 1,756,460 —-a-w C:\WINDOWS\system32\Restore\rstrlog.dat
- 2007-11-03 12:19:15 387,072 —-a-w C:\WINDOWS\system32\Restore\rstrui.exe
+ 2004-08-04 10:00:00 380,416 —-a-w C:\WINDOWS\system32\Restore\rstrui.exe
- 2007-11-03 12:19:15 53,760 —-a-w C:\WINDOWS\system32\Restore\srdiag.exe
+ 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\Restore\srdiag.exe
- 2004-08-04 07:56:44 58,880 —-a-w C:\WINDOWS\system32\resutils.dll
+ 2004-08-04 10:00:00 58,880 —-a-w C:\WINDOWS\system32\resutils.dll
- 2007-11-03 12:19:26 20,480 —-a-w C:\WINDOWS\system32\rexec.exe
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\rexec.exe
- 2003-07-16 20:43:13 3,584 —-a-w C:\WINDOWS\system32\riched32.dll
+ 2004-08-04 10:00:00 3,584 —-a-w C:\WINDOWS\system32\riched32.dll
- 2003-07-16 20:43:18 3,072 —-a-w C:\WINDOWS\system32\rnr20.dll
+ 2004-08-04 10:00:00 3,072 —-a-w C:\WINDOWS\system32\rnr20.dll
- 2007-11-03 12:19:26 26,624 —-a-w C:\WINDOWS\system32\route.exe
+ 2004-08-04 10:00:00 19,968 —-a-w C:\WINDOWS\system32\route.exe
- 2007-11-03 12:19:26 32,256 —-a-w C:\WINDOWS\system32\routemon.exe
+ 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\system32\routemon.exe
- 2003-07-16 20:43:22 6,656 —-a-w C:\WINDOWS\system32\routetab.dll
+ 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\routetab.dll
- 2003-07-16 20:43:23 22,016 —-a-w C:\WINDOWS\system32\rpcns4.dll
+ 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\rpcns4.dll
- 2004-08-04 05:31:43 152,576 —-a-w C:\WINDOWS\system32\rsaenh.dll
+ 2004-08-04 10:00:00 152,576 —-a-w C:\WINDOWS\system32\rsaenh.dll
- 2007-11-03 12:19:26 21,504 —-a-w C:\WINDOWS\system32\rsh.exe
+ 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\rsh.exe
- 2004-08-04 07:56:44 39,936 —-a-w C:\WINDOWS\system32\rshx32.dll
+ 2004-08-04 10:00:00 39,936 —-a-w C:\WINDOWS\system32\rshx32.dll
- 2007-11-03 12:19:26 55,808 —-a-w C:\WINDOWS\system32\rsm.exe
+ 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\rsm.exe
- 2004-08-04 07:56:44 18,944 —-a-w C:\WINDOWS\system32\rsmps.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\rsmps.dll
- 2007-11-03 12:19:26 31,232 —-a-w C:\WINDOWS\system32\rsmsink.exe
+ 2004-08-04 10:00:00 24,576 —-a-w C:\WINDOWS\system32\rsmsink.exe
- 2007-11-03 12:19:26 55,808 —-a-w C:\WINDOWS\system32\rsmui.exe
+ 2004-08-04 10:00:00 49,152 —-a-w C:\WINDOWS\system32\rsmui.exe
- 2007-11-03 12:19:26 139,264 —-a-w C:\WINDOWS\system32\rsvp.exe
+ 2004-08-04 10:00:00 132,608 —-a-w C:\WINDOWS\system32\rsvp.exe
- 2003-07-16 20:43:31 23,552 —-a-w C:\WINDOWS\system32\rsvpmsg.dll
+ 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\rsvpmsg.dll
- 2003-07-16 20:43:31 9,728 —-a-w C:\WINDOWS\system32\rsvpperf.dll
+ 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\rsvpperf.dll
- 2003-07-16 20:43:32 90,112 —-a-w C:\WINDOWS\system32\rsvpsp.dll
+ 2004-08-04 10:00:00 90,112 —-a-w C:\WINDOWS\system32\rsvpsp.dll
- 2007-11-03 12:19:26 83,968 —-a-w C:\WINDOWS\system32\rtcshare.exe
+ 2004-08-04 10:00:00 77,312 —-a-w C:\WINDOWS\system32\rtcshare.exe
- 2004-08-04 07:56:44 31,744 —-a-w C:\WINDOWS\system32\rtipxmib.dll
+ 2004-08-04 10:00:00 31,744 —-a-w C:\WINDOWS\system32\rtipxmib.dll
- 2003-07-16 20:43:34 98,304 —-a-w C:\WINDOWS\system32\rtm.dll
+ 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\rtm.dll
- 2004-08-04 07:56:44 44,032 —-a-w C:\WINDOWS\system32\rtutils.dll
+ 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\rtutils.dll
- 2007-11-03 12:19:26 23,040 —-a-w C:\WINDOWS\system32\runas.exe
+ 2004-08-04 10:00:00 16,384 —-a-w C:\WINDOWS\system32\runas.exe
- 2007-11-03 12:19:26 39,936 —-a-w C:\WINDOWS\system32\rundll32.exe
+ 2004-08-04 10:00:00 33,280 —-a-w C:\WINDOWS\system32\rundll32.exe
- 2007-11-03 12:19:26 20,992 —-a-w C:\WINDOWS\system32\runonce.exe
+ 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\runonce.exe
- 2007-11-03 12:19:26 22,528 —-a-w C:\WINDOWS\system32\rwinsta.exe
+ 2002-08-29 12:00:00 15,872 —-a-w C:\WINDOWS\system32\rwinsta.exe
- 2004-08-04 07:56:44 64,000 —-a-w C:\WINDOWS\system32\samlib.dll
+ 2004-08-04 10:00:00 64,000 —-a-w C:\WINDOWS\system32\samlib.dll
- 2004-08-04 07:56:44 415,744 —-a-w C:\WINDOWS\system32\samsrv.dll
+ 2004-08-04 10:00:00 415,744 —-a-w C:\WINDOWS\system32\samsrv.dll
- 2007-11-03 12:19:26 19,968 —-a-w C:\WINDOWS\system32\savedump.exe
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\savedump.exe
- 2004-08-04 07:56:44 270,848 —-a-w C:\WINDOWS\system32\sbe.dll
+ 2004-08-04 10:00:00 270,848 —-a-w C:\WINDOWS\system32\sbe.dll
- 2004-08-04 07:56:44 159,232 —-a-w C:\WINDOWS\system32\sbeio.dll
+ 2004-08-04 10:00:00 159,232 —-a-w C:\WINDOWS\system32\sbeio.dll
- 2007-11-03 12:19:26 37,888 —-a-w C:\WINDOWS\system32\sc.exe
+ 2004-08-04 10:00:00 31,232 —-a-w C:\WINDOWS\system32\sc.exe
- 2004-08-04 07:56:44 69,632 —-a-w C:\WINDOWS\system32\scarddlg.dll
+ 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\scarddlg.dll
- 2003-07-16 20:43:55 118,784 —-a-w C:\WINDOWS\system32\scardssp.dll
+ 2004-08-04 10:00:00 118,784 —-a-w C:\WINDOWS\system32\scardssp.dll
- 2007-11-03 12:19:26 102,400 —-a-w C:\WINDOWS\system32\scardsvr.exe
+ 2004-08-04 10:00:00 95,744 —-a-w C:\WINDOWS\system32\scardsvr.exe
- 2003-07-16 20:43:56 169,984 —-a-w C:\WINDOWS\system32\sccbase.dll
+ 2004-08-04 10:00:00 169,984 —-a-w C:\WINDOWS\system32\sccbase.dll
- 2004-08-04 07:56:44 171,008 —-a-w C:\WINDOWS\system32\sccsccp.dll
+ 2004-08-04 10:00:00 171,008 —-a-w C:\WINDOWS\system32\sccsccp.dll
- 2004-08-04 07:56:44 180,224 —-a-w C:\WINDOWS\system32\scecli.dll
+ 2004-08-04 10:00:00 180,224 —-a-w C:\WINDOWS\system32\scecli.dll
- 2004-08-04 07:56:44 313,856 —-a-w C:\WINDOWS\system32\scesrv.dll
+ 2004-08-04 10:00:00 313,856 —-a-w C:\WINDOWS\system32\scesrv.dll
- 2004-08-04 07:56:44 20,992 —-a-w C:\WINDOWS\system32\sclgntfy.dll
+ 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\sclgntfy.dll
- 2003-07-16 20:44:02 26,624 —-a-w C:\WINDOWS\system32\scredir.dll
+ 2004-08-04 10:00:00 26,624 —-a-w C:\WINDOWS\system32\scredir.dll
- 2007-11-03 12:19:26 15,872 —-a-w C:\WINDOWS\system32\scrnsave.scr
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\scrnsave.scr
- 2004-08-04 07:56:44 159,744 —-a-w C:\WINDOWS\system32\scrobj.dll
+ 2004-08-04 10:00:00 159,744 —-a-w C:\WINDOWS\system32\scrobj.dll
- 2004-08-04 07:56:44 151,552 —-a-w C:\WINDOWS\system32\scrrun.dll
+ 2004-08-04 10:00:00 151,552 —-a-w C:\WINDOWS\system32\scrrun.dll
- 2007-11-03 12:19:26 83,968 —-a-w C:\WINDOWS\system32\sdbinst.exe
+ 2004-08-04 10:00:00 77,312 —-a-w C:\WINDOWS\system32\sdbinst.exe
- 2004-08-04 07:56:44 29,184 ——w C:\WINDOWS\system32\sdhcinst.dll
+ 2004-08-04 10:00:00 29,184 —-a-w C:\WINDOWS\system32\sdhcinst.dll
- 2003-07-16 20:44:07 130,048 —-a-w C:\WINDOWS\system32\sdpblb.dll
+ 2004-08-04 10:00:00 130,048 —-a-w C:\WINDOWS\system32\sdpblb.dll
- 2004-08-04 07:56:44 18,944 —-a-w C:\WINDOWS\system32\seclogon.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\seclogon.dll
- 2004-08-02 21:20:40 4,569 ——w C:\WINDOWS\system32\secupd.dat
+ 2004-08-04 10:00:00 4,569 —-a-w C:\WINDOWS\system32\secupd.dat
- 2004-08-04 07:56:44 55,808 —-a-w C:\WINDOWS\system32\secur32.dll
+ 2004-08-04 10:00:00 55,808 —-a-w C:\WINDOWS\system32\secur32.dll
- 2004-08-04 07:56:44 5,632 —-a-w C:\WINDOWS\system32\security.dll
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\security.dll
- 2004-08-04 07:56:44 29,184 —-a-w C:\WINDOWS\system32\sendcmsg.dll
+ 2004-08-04 10:00:00 29,184 —-a-w C:\WINDOWS\system32\sendcmsg.dll
- 2004-08-04 07:56:44 55,296 —-a-w C:\WINDOWS\system32\sendmail.dll
+ 2004-08-04 10:00:00 55,296 —-a-w C:\WINDOWS\system32\sendmail.dll
- 2004-08-04 07:56:44 38,912 —-a-w C:\WINDOWS\system32\sens.dll
+ 2004-08-04 10:00:00 38,912 —-a-w C:\WINDOWS\system32\sens.dll
- 2004-08-04 07:56:44 6,656 —-a-w C:\WINDOWS\system32\sensapi.dll
+ 2004-08-04 10:00:00 6,656 —-a-w C:\WINDOWS\system32\sensapi.dll
- 2003-07-16 20:44:15 13,824 —-a-w C:\WINDOWS\system32\senscfg.dll
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\senscfg.dll
- 2003-07-16 20:44:18 14,336 —-a-w C:\WINDOWS\system32\serialui.dll
+ 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\serialui.dll
- 2004-08-04 07:56:55 108,032 —-a-w C:\WINDOWS\system32\services.exe
+ 2004-08-04 10:00:00 108,032 —-a-w C:\WINDOWS\system32\services.exe
- 2003-07-16 20:44:24 14,848 —-a-w C:\WINDOWS\system32\serwvdrv.dll
+ 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\serwvdrv.dll
- 2007-11-03 12:19:26 147,456 —-a-w C:\WINDOWS\system32\sessmgr.exe
+ 2004-08-04 10:00:00 140,800 —-a-w C:\WINDOWS\system32\sessmgr.exe
- 2007-11-03 12:19:26 37,888 —-a-w C:\WINDOWS\system32\sethc.exe
+ 2004-08-04 10:00:00 31,232 —-a-w C:\WINDOWS\system32\sethc.exe
- 2007-11-03 12:19:26 29,696 —-a-w C:\WINDOWS\system32\setup.exe
+ 2004-08-04 10:00:00 23,040 —-a-w C:\WINDOWS\system32\setup.exe
- 2003-07-16 20:25:44 259,584 —-a-w C:\WINDOWS\system32\Setup\comsetup.dll
+ 2004-08-04 10:00:00 259,584 —-a-w C:\WINDOWS\system32\Setup\comsetup.dll
- 2004-08-04 07:56:42 32,828 —-a-w C:\WINDOWS\system32\Setup\fp40ext.dll
+ 2004-08-04 10:00:00 32,828 —-a-w C:\WINDOWS\system32\Setup\fp40ext.dll
- 2003-07-16 20:28:33 6,144 —-a-w C:\WINDOWS\system32\Setup\fsconins.dll
+ 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\Setup\fsconins.dll
- 2004-08-04 07:56:42 132,608 —-a-w C:\WINDOWS\system32\Setup\fxsocm.dll
+ 2004-08-04 10:00:00 132,608 —-a-w C:\WINDOWS\system32\Setup\fxsocm.dll
- 2004-08-04 07:56:42 505,344 —-a-w C:\WINDOWS\system32\Setup\iis.dll
+ 2004-08-04 10:00:00 505,344 ——w C:\WINDOWS\system32\Setup\iis.dll
- 2003-07-16 20:30:20 115,712 —-a-w C:\WINDOWS\system32\Setup\imsinsnt.dll
+ 2004-08-04 10:00:00 115,712 —-a-w C:\WINDOWS\system32\Setup\imsinsnt.dll
- 2003-07-16 20:35:30 82,432 —-a-w C:\WINDOWS\system32\Setup\msdtcstp.dll
+ 2004-08-04 10:00:00 82,432 —-a-w C:\WINDOWS\system32\Setup\msdtcstp.dll
- 2004-08-04 07:56:43 15,360 —-a-w C:\WINDOWS\system32\Setup\msgrocm.dll
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\system32\Setup\msgrocm.dll
- 2004-08-04 07:56:44 77,312 —-a-w C:\WINDOWS\system32\Setup\netoc.dll
+ 2004-08-04 10:00:00 77,312 —-a-w C:\WINDOWS\system32\Setup\netoc.dll
- 2004-08-04 07:56:44 62,976 —-a-w C:\WINDOWS\system32\Setup\ntoc.dll
+ 2004-08-04 10:00:00 62,976 —-a-w C:\WINDOWS\system32\Setup\ntoc.dll
- 2004-08-04 07:56:44 15,872 —-a-w C:\WINDOWS\system32\Setup\ocgen.dll
+ 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\Setup\ocgen.dll
- 2004-08-04 07:56:44 17,408 —-a-w C:\WINDOWS\system32\Setup\ocmsn.dll
+ 2004-08-04 10:00:00 17,408 —-a-w C:\WINDOWS\system32\Setup\ocmsn.dll
- 2004-08-04 07:56:44 101,376 —-a-w C:\WINDOWS\system32\Setup\setupqry.dll
+ 2004-08-04 10:00:00 101,376 —-a-w C:\WINDOWS\system32\Setup\setupqry.dll
- 2004-08-04 07:56:45 22,016 —-a-w C:\WINDOWS\system32\Setup\startoc.dll
+ 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\Setup\startoc.dll
- 2004-08-04 07:56:46 121,856 —-a-w C:\WINDOWS\system32\Setup\tsoc.dll
+ 2004-08-04 10:00:00 121,856 —-a-w C:\WINDOWS\system32\Setup\tsoc.dll
- 2003-07-16 20:54:48 8,261 —-a-w C:\WINDOWS\system32\Setup\zoneoc.dll
+ 2004-08-04 10:00:00 8,261 —-a-w C:\WINDOWS\system32\Setup\zoneoc.dll
- 2004-08-04 07:56:46 983,552 —-a-w C:\WINDOWS\system32\setupapi.dll
+ 2004-08-04 10:00:00 983,552 —-a-w C:\WINDOWS\system32\setupapi.dll
- 2003-07-16 20:44:29 414,208 —-a-w C:\WINDOWS\system32\setupdll.dll
+ 2004-08-04 10:00:00 414,208 —-a-w C:\WINDOWS\system32\setupdll.dll
- 2003-07-16 20:44:32 11,753 —-a-w C:\WINDOWS\system32\setver.exe
+ 2004-08-04 10:00:00 11,753 —-a-w C:\WINDOWS\system32\setver.exe
- 2004-08-04 07:56:44 5,120 —-a-w C:\WINDOWS\system32\sfc.dll

medicman151

Post #20November 11, 2007, 7:23 PM UTC

+ 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\sfc.dll
- 2007-11-03 12:19:26 16,384 —-a-w C:\WINDOWS\system32\sfc.exe
+ 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\sfc.exe
- 2004-08-04 07:56:44 140,288 —-a-w C:\WINDOWS\system32\sfc_os.dll
+ 2004-08-04 10:00:00 140,288 —-a-w C:\WINDOWS\system32\sfc_os.dll
- 2004-08-04 07:56:45 1,580,544 —-a-w C:\WINDOWS\system32\sfcfiles.dll
+ 2004-08-04 10:00:00 1,580,544 —-a-w C:\WINDOWS\system32\sfcfiles.dll
- 2003-07-16 20:44:35 23,552 —-a-w C:\WINDOWS\system32\sfmapi.dll
+ 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\sfmapi.dll
- 2007-11-03 12:19:26 21,504 —-a-w C:\WINDOWS\system32\shadow.exe
+ 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\shadow.exe
- 2004-08-04 07:56:27 549,376 —-a-w C:\WINDOWS\system32\shdoclc.dll
+ 2004-08-04 10:00:00 549,376 —-a-w C:\WINDOWS\system32\shdoclc.dll
- 2007-06-15 08:12:30 1,498,112 —-a-w C:\WINDOWS\system32\shdocvw.dll
+ 2007-08-22 13:12:18 1,494,528 —-a-w C:\WINDOWS\system32\shdocvw.dll
- 2003-07-16 20:44:38 5,120 —-a-w C:\WINDOWS\system32\shell.dll
+ 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\shell.dll
- 2003-07-16 20:25:27 435,712 —-a-w C:\WINDOWS\system32\shellstyle.dll
+ 2004-08-04 10:00:00 435,712 —-a-w C:\WINDOWS\system32\shellstyle.dll
- 2004-08-04 07:56:45 25,088 —-a-w C:\WINDOWS\system32\shfolder.dll
+ 2004-08-04 10:00:00 25,088 —-a-w C:\WINDOWS\system32\shfolder.dll
- 2004-08-04 07:56:45 68,096 —-a-w C:\WINDOWS\system32\shgina.dll
+ 2004-08-04 10:00:00 68,096 —-a-w C:\WINDOWS\system32\shgina.dll
- 2004-08-04 07:56:45 65,536 —-a-w C:\WINDOWS\system32\shimeng.dll
+ 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\shimeng.dll
- 2004-08-04 07:56:45 438,272 —-a-w C:\WINDOWS\system32\shimgvw.dll
+ 2004-08-04 10:00:00 438,272 —-a-w C:\WINDOWS\system32\shimgvw.dll
- 2007-06-15 08:12:30 474,112 —-a-w C:\WINDOWS\system32\shlwapi.dll
+ 2007-08-22 13:12:18 474,112 —-a-w C:\WINDOWS\system32\shlwapi.dll
- 2004-08-04 07:56:45 151,552 —-a-w C:\WINDOWS\system32\shmedia.dll
+ 2004-08-04 10:00:00 151,552 —-a-w C:\WINDOWS\system32\shmedia.dll
- 2007-11-03 12:19:26 49,152 —-a-w C:\WINDOWS\system32\shmgrate.exe
+ 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\shmgrate.exe
- 2007-11-03 12:19:26 84,480 —-a-w C:\WINDOWS\system32\shrpubw.exe
+ 2004-08-04 10:00:00 77,824 —-a-w C:\WINDOWS\system32\shrpubw.exe
- 2004-08-04 07:56:45 27,648 —-a-w C:\WINDOWS\system32\shscrap.dll
+ 2004-08-04 10:00:00 27,648 —-a-w C:\WINDOWS\system32\shscrap.dll
- 2007-11-03 12:19:26 26,112 —-a-w C:\WINDOWS\system32\shutdown.exe
+ 2004-08-04 10:00:00 19,456 —-a-w C:\WINDOWS\system32\shutdown.exe
- 2004-08-04 07:56:45 13,312 —-a-w C:\WINDOWS\system32\sigtab.dll
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\sigtab.dll
- 2007-11-03 12:19:26 76,800 —-a-w C:\WINDOWS\system32\sigverif.exe
+ 2004-08-04 10:00:00 70,144 —-a-w C:\WINDOWS\system32\sigverif.exe
- 2003-07-16 20:44:52 13,824 —-a-w C:\WINDOWS\system32\sisbkup.dll
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\sisbkup.dll
- 2003-07-16 20:45:08 5,632 —-a-w C:\WINDOWS\system32\skdll.dll
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\skdll.dll
- 2007-11-03 12:19:26 32,768 —-a-w C:\WINDOWS\system32\skeys.exe
+ 2004-08-04 10:00:00 26,112 —-a-w C:\WINDOWS\system32\skeys.exe
- 2004-08-04 07:56:45 25,088 —-a-w C:\WINDOWS\system32\slayerxp.dll
+ 2004-08-04 10:00:00 25,088 —-a-w C:\WINDOWS\system32\slayerxp.dll
- 2004-08-04 05:31:43 306,176 —-a-w C:\WINDOWS\system32\slbcsp.dll
+ 2004-08-04 10:00:00 306,176 —-a-w C:\WINDOWS\system32\slbcsp.dll
- 2004-08-04 07:56:45 98,304 —-a-w C:\WINDOWS\system32\slbiop.dll
+ 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\slbiop.dll
- 2003-07-16 20:45:12 14,848 —-a-w C:\WINDOWS\system32\slbrccsp.dll
+ 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\slbrccsp.dll
- 2004-08-04 07:56:56 41,058 ——w C:\WINDOWS\system32\slrundll.exe
+ 2004-08-04 07:56:56 32,768 —-a-w C:\WINDOWS\system32\slrundll.exe
- 2004-08-04 07:56:56 81,988 ——w C:\WINDOWS\system32\slserv.exe
+ 2004-08-04 05:56:58 73,796 —-a-w C:\WINDOWS\system32\slserv.exe
- 2004-08-04 07:56:56 14,848 ——w C:\WINDOWS\system32\smbinst.exe
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\smbinst.exe
- 2004-08-04 07:56:45 363,008 —-a-w C:\WINDOWS\system32\smlogcfg.dll
+ 2004-08-04 10:00:00 363,008 —-a-w C:\WINDOWS\system32\smlogcfg.dll
- 2007-11-03 12:19:26 96,256 —-a-w C:\WINDOWS\system32\smlogsvc.exe
+ 2004-08-04 10:00:00 89,600 —-a-w C:\WINDOWS\system32\smlogsvc.exe
- 2004-08-04 07:56:56 50,688 —-a-w C:\WINDOWS\system32\smss.exe
+ 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\smss.exe
- 2007-11-03 12:19:26 138,240 —-a-w C:\WINDOWS\system32\sndrec32.exe
+ 2004-08-04 10:00:00 131,584 —-a-w C:\WINDOWS\system32\sndrec32.exe
- 2007-11-03 12:19:26 145,408 —-a-w C:\WINDOWS\system32\sndvol32.exe
+ 2004-08-04 10:00:00 138,752 —-a-w C:\WINDOWS\system32\sndvol32.exe
- 2004-08-04 07:56:45 18,944 —-a-w C:\WINDOWS\system32\snmpapi.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\snmpapi.dll
- 2004-08-04 07:56:45 182,272 —-a-w C:\WINDOWS\system32\snmpsnap.dll
+ 2004-08-04 10:00:00 182,272 —-a-w C:\WINDOWS\system32\snmpsnap.dll
- 2003-07-16 20:45:43 5,632 —-a-w C:\WINDOWS\system32\softpub.dll
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\softpub.dll
+ 2007-07-31 00:19:36 549,720 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.0.6000.381\wuapi.dll
- 2007-04-17 05:47:36 33,624 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.374\wups.dll
+ 2007-04-17 03:47:36 33,624 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.374\wups.dll
- 2007-07-30 23:18:40 33,624 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll
+ 2007-07-31 00:18:40 33,624 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll
+ 2007-04-17 03:45:20 43,352 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.374\wups2.dll
- 2007-07-30 23:19:12 43,352 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll
+ 2007-07-31 00:19:12 43,352 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll
- 2007-11-03 12:19:26 63,488 —-a-w C:\WINDOWS\system32\sol.exe
+ 2004-08-04 10:00:00 56,832 —-a-w C:\WINDOWS\system32\sol.exe
- 2007-11-03 12:19:26 30,208 —-a-w C:\WINDOWS\system32\sort.exe
+ 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\sort.exe
- 2007-11-03 12:19:26 545,280 —-a-w C:\WINDOWS\system32\spider.exe
+ 2004-08-04 10:00:00 538,624 —-a-w C:\WINDOWS\system32\spider.exe
- 2003-07-16 20:27:31 69,632 —-a-w C:\WINDOWS\system32\spnike.dll
+ 2004-08-04 10:00:00 69,632 —-a-w C:\WINDOWS\system32\spnike.dll
- 2004-08-04 07:56:58 18,432 ——w C:\WINDOWS\system32\spnpinst.exe
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\spnpinst.exe
- 2001-08-18 02:34:10 11,776 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNDRV01.DLL
+ 2001-08-18 03:34:10 11,776 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNDRV01.DLL
- 2001-08-18 02:36:16 78,848 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNGUI10.DLL
+ 2001-08-18 03:36:16 78,848 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNGUI10.DLL
- 2001-08-18 02:36:16 368,128 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNHTX04.DLL
+ 2001-08-18 03:36:16 368,128 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNHTX04.DLL
- 2001-08-18 02:36:16 314,880 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPV800AL.DLL
+ 2001-08-18 03:36:16 314,880 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPV800AL.DLL
- 2001-08-18 02:36:16 2,565,120 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPVIMG50.DLL
+ 2001-08-18 03:36:16 2,565,120 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPVIMG50.DLL
- 2001-08-18 02:36:16 80,384 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPVUD50.DLL
+ 2001-08-18 03:36:16 80,384 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPVUD50.DLL
- 2001-08-18 02:36:16 32,768 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPVUI50.DLL
+ 2001-08-18 03:36:16 32,768 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\HPVUI50.DLL
- 2004-08-04 04:56:24 676,864 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PCL5ERES.DLL
+ 2004-08-04 05:56:24 676,864 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PCL5ERES.DLL
- 2004-08-04 04:56:46 264,704 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRV.DLL
+ 2004-08-04 05:56:48 264,704 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRV.DLL
- 2004-08-04 04:56:46 197,120 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
+ 2004-08-04 05:56:48 197,120 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
- 2004-08-04 04:56:34 619,520 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIRES.DLL
+ 2004-08-04 05:56:36 619,520 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIRES.DLL
- 2004-08-04 07:56:45 74,752 —-a-w C:\WINDOWS\system32\spoolss.dll
+ 2004-08-04 10:00:00 74,752 —-a-w C:\WINDOWS\system32\spoolss.dll
- 2005-06-10 23:53:32 64,512 ——w C:\WINDOWS\system32\spoolsv.exe
+ 2005-06-10 23:53:32 57,856 —-a-w C:\WINDOWS\system32\spoolsv.exe
- 2003-07-16 20:46:21 9,728 —-a-w C:\WINDOWS\system32\sprestrt.exe
+ 2004-08-04 10:00:00 9,728 —-a-w C:\WINDOWS\system32\sprestrt.exe
- 2003-07-16 20:27:31 70,656 —-a-w C:\WINDOWS\system32\sprio600.dll
+ 2004-08-04 10:00:00 70,656 —-a-w C:\WINDOWS\system32\sprio600.dll
- 2003-07-16 20:27:31 72,192 —-a-w C:\WINDOWS\system32\sprio800.dll
+ 2004-08-04 10:00:00 72,192 —-a-w C:\WINDOWS\system32\sprio800.dll
- 2004-08-04 07:56:57 28,160 ——w C:\WINDOWS\system32\spupdwxp.exe
+ 2004-08-04 07:56:58 21,504 —-a-w C:\WINDOWS\system32\spupdwxp.exe
- 2004-08-04 07:56:45 442,368 —-a-w C:\WINDOWS\system32\sqlsrv32.dll
+ 2004-08-04 10:00:00 442,368 —-a-w C:\WINDOWS\system32\sqlsrv32.dll
- 2004-08-04 07:56:45 180,800 —-a-w C:\WINDOWS\system32\sqlunirl.dll
+ 2004-08-04 10:00:00 180,800 —-a-w C:\WINDOWS\system32\sqlunirl.dll
- 2003-07-16 20:46:27 24,603 —-a-w C:\WINDOWS\system32\sqlwid.dll
+ 2004-08-04 10:00:00 24,603 —-a-w C:\WINDOWS\system32\sqlwid.dll
- 2003-07-16 20:46:27 49,179 —-a-w C:\WINDOWS\system32\sqlwoa.dll
+ 2004-08-04 10:00:00 49,179 —-a-w C:\WINDOWS\system32\sqlwoa.dll
- 2007-11-03 12:19:27 712,704 —-a-w C:\WINDOWS\system32\ss3dfo.scr
+ 2004-08-04 10:00:00 704,512 —-a-w C:\WINDOWS\system32\ss3dfo.scr
- 2007-11-03 12:19:27 26,624 —-a-w C:\WINDOWS\system32\ssbezier.scr
+ 2004-08-04 10:00:00 19,968 —-a-w C:\WINDOWS\system32\ssbezier.scr
- 2004-08-04 07:56:45 34,816 —-a-w C:\WINDOWS\system32\ssdpapi.dll
+ 2004-08-04 10:00:00 34,816 —-a-w C:\WINDOWS\system32\ssdpapi.dll
- 2004-08-04 07:56:45 71,680 —-a-w C:\WINDOWS\system32\ssdpsrv.dll
+ 2004-08-04 10:00:00 71,680 —-a-w C:\WINDOWS\system32\ssdpsrv.dll
- 2007-11-03 12:19:27 401,408 —-a-w C:\WINDOWS\system32\ssflwbox.scr
+ 2004-08-04 10:00:00 393,216 —-a-w C:\WINDOWS\system32\ssflwbox.scr
- 2007-11-03 12:19:27 27,648 —-a-w C:\WINDOWS\system32\ssmarque.scr
+ 2004-08-04 10:00:00 20,992 —-a-w C:\WINDOWS\system32\ssmarque.scr
- 2007-11-03 12:19:27 53,760 —-a-w C:\WINDOWS\system32\ssmypics.scr
+ 2004-08-04 10:00:00 47,104 —-a-w C:\WINDOWS\system32\ssmypics.scr
- 2007-11-03 12:19:27 25,600 —-a-w C:\WINDOWS\system32\ssmyst.scr
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\ssmyst.scr
- 2007-11-03 12:19:27 618,496 —-a-w C:\WINDOWS\system32\sspipes.scr
+ 2004-08-04 10:00:00 610,304 —-a-w C:\WINDOWS\system32\sspipes.scr
- 2007-11-03 12:19:27 20,992 —-a-w C:\WINDOWS\system32\ssstars.scr
+ 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\ssstars.scr
- 2007-11-03 12:19:27 688,128 —-a-w C:\WINDOWS\system32\sstext3d.scr
+ 2004-08-04 10:00:00 679,936 —-a-w C:\WINDOWS\system32\sstext3d.scr
- 2004-08-04 07:56:45 67,584 —-a-w C:\WINDOWS\system32\sti.dll
+ 2004-08-04 10:00:00 67,584 —-a-w C:\WINDOWS\system32\sti.dll
- 2004-08-04 07:56:45 136,704 —-a-w C:\WINDOWS\system32\sti_ci.dll
+ 2004-08-04 10:00:00 136,704 —-a-w C:\WINDOWS\system32\sti_ci.dll
- 2007-11-03 12:19:27 21,504 —-a-w C:\WINDOWS\system32\stimon.exe
+ 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\stimon.exe
- 2004-08-04 07:56:45 121,856 —-a-w C:\WINDOWS\system32\stobject.dll
+ 2004-08-04 10:00:00 121,856 —-a-w C:\WINDOWS\system32\stobject.dll
- 2003-07-16 20:46:55 4,208 —-a-w C:\WINDOWS\system32\storage.dll
+ 2004-08-04 10:00:00 4,208 —-a-w C:\WINDOWS\system32\storage.dll
- 2001-08-18 02:36:32 8,192 —-a-w C:\WINDOWS\system32\streamci.dll
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\streamci.dll
- 2006-08-21 16:52:08 246,814 —-a-w C:\WINDOWS\system32\strmdll.dll
+ 2006-08-21 14:52:08 246,814 —-a-w C:\WINDOWS\system32\strmdll.dll
- 2004-08-04 07:56:45 75,776 ——w C:\WINDOWS\system32\strmfilt.dll
+ 2004-08-04 10:00:00 75,776 —-a-w C:\WINDOWS\system32\strmfilt.dll
- 2007-11-03 12:19:27 15,872 —-a-w C:\WINDOWS\system32\subst.exe
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\subst.exe
- 2004-08-04 07:56:57 14,336 —-a-w C:\WINDOWS\system32\svchost.exe
+ 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\svchost.exe
- 2003-07-16 20:47:03 6,144 —-a-w C:\WINDOWS\system32\svcpack.dll
+ 2004-08-04 10:00:00 6,144 —-a-w C:\WINDOWS\system32\svcpack.dll
- 2003-07-16 20:47:06 138,752 —-a-w C:\WINDOWS\system32\swprv.dll
+ 2004-08-04 10:00:00 138,752 —-a-w C:\WINDOWS\system32\swprv.dll
- 2007-07-22 22:39:27 279,552 —-a-w C:\WINDOWS\system32\swreg.exe
+ 2007-07-22 23:39:27 279,552 —-a-w C:\WINDOWS\system32\swreg.exe
- 2007-11-03 12:19:27 377,344 —-a-w C:\WINDOWS\system32\swsc.exe
+ 2006-11-29 22:21:29 370,688 —-a-w C:\WINDOWS\system32\swsc.exe
- 2007-11-03 12:19:27 219,136 —-a-w C:\WINDOWS\system32\swxcacls.exe
+ 2006-12-01 10:20:32 212,480 —-a-w C:\WINDOWS\system32\swxcacls.exe
- 2007-11-03 12:19:27 57,856 —-a-w C:\WINDOWS\system32\syncapp.exe
+ 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\syncapp.exe
- 2004-08-04 07:56:46 57,856 —-a-w C:\WINDOWS\system32\synceng.dll
+ 2004-08-04 10:00:00 57,856 —-a-w C:\WINDOWS\system32\synceng.dll
- 2004-08-04 07:56:46 191,488 —-a-w C:\WINDOWS\system32\syncui.dll
+ 2004-08-04 10:00:00 191,488 —-a-w C:\WINDOWS\system32\syncui.dll
- 2003-07-16 20:47:13 18,896 —-a-w C:\WINDOWS\system32\sysedit.exe
+ 2004-08-04 10:00:00 18,896 —-a-w C:\WINDOWS\system32\sysedit.exe
- 2003-07-16 20:47:15 15,872 —-a-w C:\WINDOWS\system32\sysinv.dll
+ 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\sysinv.dll
- 2007-11-03 12:19:27 43,520 —-a-w C:\WINDOWS\system32\syskey.exe
+ 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\syskey.exe
- 2007-11-03 12:19:27 112,640 —-a-w C:\WINDOWS\system32\sysocmgr.exe
+ 2004-08-04 10:00:00 105,984 —-a-w C:\WINDOWS\system32\sysocmgr.exe
- 2004-08-04 07:56:46 984,576 —-a-w C:\WINDOWS\system32\syssetup.dll
+ 2004-08-04 10:00:00 984,576 —-a-w C:\WINDOWS\system32\syssetup.dll
- 2007-11-03 12:19:27 9,728 —-a-w C:\WINDOWS\system32\systray.exe
+ 2004-08-04 10:00:00 3,072 —-a-w C:\WINDOWS\system32\systray.exe
- 2003-07-16 20:47:37 19,200 —-a-w C:\WINDOWS\system32\tapi.dll
+ 2004-08-04 10:00:00 19,200 —-a-w C:\WINDOWS\system32\tapi.dll
- 2004-08-04 07:56:46 858,624 —-a-w C:\WINDOWS\system32\tapi3.dll
+ 2004-08-04 10:00:00 858,624 —-a-w C:\WINDOWS\system32\tapi3.dll
- 2004-08-04 07:56:46 181,760 —-a-w C:\WINDOWS\system32\tapi32.dll
+ 2004-08-04 10:00:00 181,760 —-a-w C:\WINDOWS\system32\tapi32.dll
- 2003-07-16 20:47:41 5,632 —-a-w C:\WINDOWS\system32\tapiperf.dll
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\tapiperf.dll
- 2003-07-16 20:47:42 78,848 —-a-w C:\WINDOWS\system32\tapiui.dll
+ 2004-08-04 10:00:00 78,848 —-a-w C:\WINDOWS\system32\tapiui.dll
- 2007-11-03 12:19:27 22,016 —-a-w C:\WINDOWS\system32\taskman.exe
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\system32\taskman.exe
- 2007-11-03 12:19:27 142,336 —-a-w C:\WINDOWS\system32\taskmgr.exe
+ 2004-08-04 10:00:00 135,680 —-a-w C:\WINDOWS\system32\taskmgr.exe
- 2007-11-03 12:19:27 18,944 —-a-w C:\WINDOWS\system32\tcmsetup.exe
+ 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\tcmsetup.exe
- 2004-08-04 07:56:46 14,848 —-a-w C:\WINDOWS\system32\tcpmib.dll
+ 2004-08-04 10:00:00 14,848 —-a-w C:\WINDOWS\system32\tcpmib.dll
- 2004-08-04 07:56:46 45,568 —-a-w C:\WINDOWS\system32\tcpmon.dll
+ 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\tcpmon.dll
- 2004-08-04 07:56:46 45,568 —-a-w C:\WINDOWS\system32\tcpmonui.dll
+ 2004-08-04 10:00:00 45,568 —-a-w C:\WINDOWS\system32\tcpmonui.dll
- 2007-11-03 12:19:27 26,112 —-a-w C:\WINDOWS\system32\tcpsvcs.exe
+ 2004-08-04 10:00:00 19,456 —-a-w C:\WINDOWS\system32\tcpsvcs.exe
- 2007-11-03 12:19:27 82,432 —-a-w C:\WINDOWS\system32\telnet.exe
+ 2005-05-10 23:45:48 75,776 —-a-w C:\WINDOWS\system32\telnet.exe
- 2004-08-04 07:56:46 358,400 —-a-w C:\WINDOWS\system32\termmgr.dll
+ 2004-08-04 10:00:00 358,400 —-a-w C:\WINDOWS\system32\termmgr.dll
- 2007-11-03 12:19:27 23,552 —-a-w C:\WINDOWS\system32\tftp.exe
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\tftp.exe
- 2004-08-04 07:56:46 385,536 —-a-w C:\WINDOWS\system32\themeui.dll
+ 2004-08-04 10:00:00 385,536 —-a-w C:\WINDOWS\system32\themeui.dll
- 2003-07-16 20:48:14 13,888 —-a-w C:\WINDOWS\system32\toolhelp.dll
+ 2004-08-04 10:00:00 13,888 —-a-w C:\WINDOWS\system32\toolhelp.dll
- 2007-11-03 12:19:27 353,792 —-a-w C:\WINDOWS\system32\tourstart.exe
+ 2004-08-04 10:00:00 347,136 —-a-w C:\WINDOWS\system32\tourstart.exe
- 2007-11-03 12:19:27 18,944 —-a-w C:\WINDOWS\system32\tracert.exe
+ 2004-08-04 10:00:00 12,288 —-a-w C:\WINDOWS\system32\tracert.exe
- 2007-11-03 12:19:27 38,400 —-a-w C:\WINDOWS\system32\tracert6.exe
+ 2004-08-04 10:00:00 31,744 —-a-w C:\WINDOWS\system32\tracert6.exe
- 2003-07-16 20:48:21 31,232 —-a-w C:\WINDOWS\system32\traffic.dll
+ 2004-08-04 10:00:00 31,232 —-a-w C:\WINDOWS\system32\traffic.dll
- 2003-07-16 20:48:24 11,264 —-a-w C:\WINDOWS\system32\tree.com
+ 2004-08-04 10:00:00 11,264 —-a-w C:\WINDOWS\system32\tree.com
- 2004-08-04 07:56:46 90,624 —-a-w C:\WINDOWS\system32\trkwks.dll
+ 2004-08-04 10:00:00 90,624 —-a-w C:\WINDOWS\system32\trkwks.dll
- 2003-07-16 20:48:28 52,224 —-a-w C:\WINDOWS\system32\tsappcmp.dll
+ 2004-08-04 10:00:00 52,224 —-a-w C:\WINDOWS\system32\tsappcmp.dll
- 2003-07-16 20:27:31 8,192 —-a-w C:\WINDOWS\system32\tsbyuv.dll
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\tsbyuv.dll
- 2007-11-03 12:19:27 21,504 —-a-w C:\WINDOWS\system32\tscon.exe
+ 2002-08-29 12:00:00 14,848 —-a-w C:\WINDOWS\system32\tscon.exe
- 2007-11-03 12:19:27 51,200 —-a-w C:\WINDOWS\system32\tscupgrd.exe
+ 2004-08-04 10:00:00 44,544 —-a-w C:\WINDOWS\system32\tscupgrd.exe
- 2003-07-16 20:48:31 15,360 —-a-w C:\WINDOWS\system32\tsd32.dll
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\system32\tsd32.dll
- 2004-08-04 08:01:07 12,168 —-a-w C:\WINDOWS\system32\tsddd.dll
+ 2004-08-04 10:00:00 12,168 —-a-w C:\WINDOWS\system32\tsddd.dll
- 2007-11-03 12:19:27 21,504 —-a-w C:\WINDOWS\system32\tsdiscon.exe
+ 2002-08-29 12:00:00 14,848 —-a-w C:\WINDOWS\system32\tsdiscon.exe
- 2007-11-03 12:19:27 23,040 —-a-w C:\WINDOWS\system32\tskill.exe
+ 2002-08-29 12:00:00 16,384 —-a-w C:\WINDOWS\system32\tskill.exe
- 2007-11-03 12:19:27 23,552 —-a-w C:\WINDOWS\system32\tsshutdn.exe
+ 2002-08-29 12:00:00 16,896 —-a-w C:\WINDOWS\system32\tsshutdn.exe
- 2004-08-04 07:56:46 44,032 ——w C:\WINDOWS\system32\twext.dll
+ 2004-08-04 10:00:00 44,032 —-a-w C:\WINDOWS\system32\twext.dll
- 2003-07-16 20:48:41 177,856 —-a-w C:\WINDOWS\system32\typelib.dll
+ 2004-08-04 10:00:00 177,856 —-a-w C:\WINDOWS\system32\typelib.dll
- 2007-07-18 12:42:22 67,072 ——w C:\WINDOWS\system32\tzchange.exe
+ 2007-07-18 12:42:22 60,416 —-a-w C:\WINDOWS\system32\tzchange.exe
- 2004-08-04 07:56:46 25,600 —-a-w C:\WINDOWS\system32\udhisapi.dll
+ 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\system32\udhisapi.dll
- 2003-07-16 20:48:44 82,432 —-a-w C:\WINDOWS\system32\ufat.dll
+ 2004-08-04 10:00:00 82,432 —-a-w C:\WINDOWS\system32\ufat.dll
- 2004-08-04 07:56:46 275,456 —-a-w C:\WINDOWS\system32\ulib.dll
+ 2004-08-04 10:00:00 275,456 —-a-w C:\WINDOWS\system32\ulib.dll
- 2004-08-04 07:56:46 35,840 —-a-w C:\WINDOWS\system32\umandlg.dll
+ 2004-08-04 10:00:00 35,840 —-a-w C:\WINDOWS\system32\umandlg.dll
- 2003-07-16 20:48:47 13,312 —-a-w C:\WINDOWS\system32\umdmxfrm.dll
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\umdmxfrm.dll
- 2004-08-04 07:56:46 74,240 —-a-w C:\WINDOWS\system32\unimdmat.dll
+ 2004-08-04 10:00:00 74,240 —-a-w C:\WINDOWS\system32\unimdmat.dll
- 2004-08-04 07:56:46 13,824 —-a-w C:\WINDOWS\system32\uniplat.dll
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\uniplat.dll
- 2007-11-03 12:19:27 10,752 —-a-w C:\WINDOWS\system32\unlodctr.exe
+ 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\unlodctr.exe
- 2004-08-04 07:56:46 316,416 —-a-w C:\WINDOWS\system32\untfs.dll
+ 2004-08-04 10:00:00 316,416 —-a-w C:\WINDOWS\system32\untfs.dll
- 2004-08-04 07:56:46 132,608 —-a-w C:\WINDOWS\system32\upnp.dll
+ 2004-08-04 10:00:00 132,608 —-a-w C:\WINDOWS\system32\upnp.dll
- 2007-11-03 12:19:27 23,552 —-a-w C:\WINDOWS\system32\upnpcont.exe
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\upnpcont.exe
- 2004-08-04 07:56:46 239,616 —-a-w C:\WINDOWS\system32\upnpui.dll
+ 2004-08-04 10:00:00 239,616 —-a-w C:\WINDOWS\system32\upnpui.dll
- 2007-11-03 12:19:27 25,088 —-a-w C:\WINDOWS\system32\ups.exe
+ 2004-08-04 10:00:00 18,432 —-a-w C:\WINDOWS\system32\ups.exe
- 2003-07-16 20:49:14 17,920 —-a-w C:\WINDOWS\system32\ureg.dll
+ 2004-08-04 10:00:00 17,920 —-a-w C:\WINDOWS\system32\ureg.dll
- 2007-11-03 12:19:15 57,344 —-a-w C:\WINDOWS\system32\URTTemp\regtlib.exe
+ 2007-11-03 12:19:16 49,152 —-a-w C:\WINDOWS\system32\URTTemp\regtlib.exe
- 2004-08-04 07:56:46 16,896 —-a-w C:\WINDOWS\system32\usbmon.dll
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\usbmon.dll
- 2004-08-04 04:56:46 74,240 —-a-w C:\WINDOWS\system32\usbui.dll
+ 2004-08-04 10:00:00 74,240 —-a-w C:\WINDOWS\system32\usbui.dll
- 2003-07-16 20:49:22 47,872 —-a-w C:\WINDOWS\system32\user.exe
+ 2004-08-04 10:00:00 47,872 —-a-w C:\WINDOWS\system32\user.exe
- 2004-08-04 07:56:46 723,456 —-a-w C:\WINDOWS\system32\userenv.dll
+ 2004-08-04 10:00:00 723,456 —-a-w C:\WINDOWS\system32\userenv.dll
- 2007-11-03 12:19:27 31,232 —-a-w C:\WINDOWS\system32\userinit.exe
+ 2004-08-04 10:00:00 24,576 —-a-w C:\WINDOWS\system32\userinit.exe
- 2004-08-04 07:56:42 123,904 —-a-w C:\WINDOWS\system32\usmt\guitrn.dll
+ 2004-08-04 10:00:00 123,904 —-a-w C:\WINDOWS\system32\usmt\guitrn.dll
- 2004-08-04 07:56:42 108,544 —-a-w C:\WINDOWS\system32\usmt\guitrn_a.dll
+ 2004-08-04 10:00:00 108,544 —-a-w C:\WINDOWS\system32\usmt\guitrn_a.dll
- 2004-08-04 07:56:42 4,096 —-a-w C:\WINDOWS\system32\usmt\iconlib.dll
+ 2004-08-04 10:00:00 4,096 —-a-w C:\WINDOWS\system32\usmt\iconlib.dll
- 2004-08-04 07:56:42 19,968 —-a-w C:\WINDOWS\system32\usmt\log.dll
+ 2004-08-04 10:00:00 19,968 —-a-w C:\WINDOWS\system32\usmt\log.dll
- 2004-08-04 07:56:42 201,216 —-a-w C:\WINDOWS\system32\usmt\migism.dll
+ 2004-08-04 10:00:00 201,216 —-a-w C:\WINDOWS\system32\usmt\migism.dll
- 2004-08-04 07:56:42 192,512 —-a-w C:\WINDOWS\system32\usmt\migism_a.dll
+ 2004-08-04 10:00:00 192,512 —-a-w C:\WINDOWS\system32\usmt\migism_a.dll
- 2007-11-03 12:19:27 110,080 —-a-w C:\WINDOWS\system32\usmt\migload.exe
+ 2004-08-04 10:00:00 103,424 —-a-w C:\WINDOWS\system32\usmt\migload.exe
- 2007-11-03 12:19:27 246,784 —-a-w C:\WINDOWS\system32\usmt\migwiz.exe
+ 2004-08-04 10:00:00 240,128 —-a-w C:\WINDOWS\system32\usmt\migwiz.exe
- 2007-11-03 12:19:27 242,688 —-a-w C:\WINDOWS\system32\usmt\migwiz_a.exe
+ 2004-08-04 10:00:00 236,032 —-a-w C:\WINDOWS\system32\usmt\migwiz_a.exe
- 2004-08-04 07:56:44 202,752 —-a-w C:\WINDOWS\system32\usmt\script.dll
+ 2004-08-04 10:00:00 202,752 —-a-w C:\WINDOWS\system32\usmt\script.dll
- 2004-08-04 07:56:44 188,416 —-a-w C:\WINDOWS\system32\usmt\script_a.dll
+ 2004-08-04 10:00:00 188,416 —-a-w C:\WINDOWS\system32\usmt\script_a.dll
- 2004-08-04 07:56:46 168,960 —-a-w C:\WINDOWS\system32\usmt\sysmod.dll
+ 2004-08-04 10:00:00 168,960 —-a-w C:\WINDOWS\system32\usmt\sysmod.dll
- 2004-08-04 07:56:46 155,648 —-a-w C:\WINDOWS\system32\usmt\sysmod_a.dll
+ 2004-08-04 10:00:00 155,648 —-a-w C:\WINDOWS\system32\usmt\sysmod_a.dll
- 2004-08-04 07:56:46 406,528 —-a-w C:\WINDOWS\system32\usp10.dll
+ 2004-08-04 10:00:00 406,528 —-a-w C:\WINDOWS\system32\usp10.dll
- 2003-07-16 20:27:31 61,500 —-a-w C:\WINDOWS\system32\usrcntra.dll
+ 2004-08-04 10:00:00 61,500 —-a-w C:\WINDOWS\system32\usrcntra.dll
- 2003-07-16 20:27:31 69,699 —-a-w C:\WINDOWS\system32\usrcoina.dll
+ 2004-08-04 10:00:00 69,699 —-a-w C:\WINDOWS\system32\usrcoina.dll
- 2003-07-16 20:27:31 77,890 —-a-w C:\WINDOWS\system32\usrdpa.dll
+ 2004-08-04 10:00:00 77,890 —-a-w C:\WINDOWS\system32\usrdpa.dll
- 2003-07-16 20:27:31 323,641 —-a-w C:\WINDOWS\system32\usrdtea.dll
+ 2004-08-04 10:00:00 323,641 —-a-w C:\WINDOWS\system32\usrdtea.dll
- 2003-07-16 20:27:31 86,073 —-a-w C:\WINDOWS\system32\usrfaxa.dll
+ 2004-08-04 10:00:00 86,073 —-a-w C:\WINDOWS\system32\usrfaxa.dll
- 2003-07-16 20:27:31 53,305 —-a-w C:\WINDOWS\system32\usrlbva.dll
+ 2004-08-04 10:00:00 53,305 —-a-w C:\WINDOWS\system32\usrlbva.dll
- 2007-11-03 12:19:27 86,016 —-a-w C:\WINDOWS\system32\usrmlnka.exe
+ 2004-08-04 10:00:00 77,891 —-a-w C:\WINDOWS\system32\usrmlnka.exe
- 2007-11-03 12:19:27 69,632 —-a-w C:\WINDOWS\system32\usrprbda.exe
+ 2004-08-04 10:00:00 61,508 —-a-w C:\WINDOWS\system32\usrprbda.exe
- 2003-07-16 20:27:31 77,883 —-a-w C:\WINDOWS\system32\usrrtosa.dll
+ 2004-08-04 10:00:00 77,883 —-a-w C:\WINDOWS\system32\usrrtosa.dll
- 2003-07-16 20:27:31 49,211 —-a-w C:\WINDOWS\system32\usrsdpia.dll
+ 2004-08-04 10:00:00 49,211 —-a-w C:\WINDOWS\system32\usrsdpia.dll
- 2007-11-03 12:19:28 77,824 —-a-w C:\WINDOWS\system32\usrshuta.exe
+ 2004-08-04 10:00:00 69,700 —-a-w C:\WINDOWS\system32\usrshuta.exe
- 2003-07-16 20:27:31 41,019 —-a-w C:\WINDOWS\system32\usrsvpia.dll
+ 2004-08-04 10:00:00 41,019 —-a-w C:\WINDOWS\system32\usrsvpia.dll
- 2003-07-16 20:27:31 102,457 —-a-w C:\WINDOWS\system32\usrv42a.dll
+ 2004-08-04 10:00:00 102,457 —-a-w C:\WINDOWS\system32\usrv42a.dll
- 2003-07-16 20:27:31 49,209 —-a-w C:\WINDOWS\system32\usrv80a.dll
+ 2004-08-04 10:00:00 49,209 —-a-w C:\WINDOWS\system32\usrv80a.dll
- 2003-07-16 20:27:31 45,116 —-a-w C:\WINDOWS\system32\usrvoica.dll
+ 2004-08-04 10:00:00 45,116 —-a-w C:\WINDOWS\system32\usrvoica.dll
- 2003-07-16 20:27:31 49,211 —-a-w C:\WINDOWS\system32\usrvpa.dll
+ 2004-08-04 10:00:00 49,211 —-a-w C:\WINDOWS\system32\usrvpa.dll
- 2003-07-16 20:49:27 25,600 —-a-w C:\WINDOWS\system32\utildll.dll
+ 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\system32\utildll.dll
- 2007-11-03 12:19:28 56,832 —-a-w C:\WINDOWS\system32\utilman.exe
+ 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\utilman.exe
- 2006-10-19 01:58:00 15,360 ——w C:\WINDOWS\system32\uwdf.exe
+ 2006-10-19 01:58:00 8,704 —-a-w C:\WINDOWS\system32\uwdf.exe
- 2004-08-04 07:56:46 218,624 —-a-w C:\WINDOWS\system32\uxtheme.dll
+ 2004-08-04 10:00:00 218,624 —-a-w C:\WINDOWS\system32\uxtheme.dll
- 2004-08-04 07:56:46 30,749 —-a-w C:\WINDOWS\system32\vbajet32.dll
+ 2004-08-04 10:00:00 30,749 —-a-w C:\WINDOWS\system32\vbajet32.dll
- 2003-07-16 20:49:39 7,680 —-a-w C:\WINDOWS\system32\vcdex.dll
+ 2004-08-04 10:00:00 7,680 —-a-w C:\WINDOWS\system32\vcdex.dll
- 2004-08-04 07:56:46 26,112 —-a-w C:\WINDOWS\system32\vdmdbg.dll
+ 2004-08-04 10:00:00 26,112 —-a-w C:\WINDOWS\system32\vdmdbg.dll
- 2004-08-04 07:56:46 51,712 —-a-w C:\WINDOWS\system32\vdmredir.dll
+ 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\vdmredir.dll
- 2003-07-16 20:49:41 9,008 —-a-w C:\WINDOWS\system32\ver.dll
+ 2004-08-04 10:00:00 9,008 —-a-w C:\WINDOWS\system32\ver.dll
- 2007-11-03 12:19:28 35,328 —-a-w C:\WINDOWS\system32\verclsid.exe
+ 2006-03-17 00:38:01 28,672 —-a-w C:\WINDOWS\system32\verclsid.exe
- 2003-07-16 20:49:44 13,312 —-a-w C:\WINDOWS\system32\verifier.dll
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\verifier.dll
- 2007-11-03 12:19:28 104,960 —-a-w C:\WINDOWS\system32\verifier.exe
+ 2004-08-04 10:00:00 98,304 —-a-w C:\WINDOWS\system32\verifier.exe
- 2004-08-04 07:56:46 18,944 —-a-w C:\WINDOWS\system32\version.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\version.dll
- 2007-11-03 12:19:15 60,996 —-a-w C:\WINDOWS\system32\VFind.exe
+ 2007-11-03 12:19:16 53,248 —-a-w C:\WINDOWS\system32\VFind.exe
- 2003-07-16 20:49:48 9,344 —-a-w C:\WINDOWS\system32\vga.dll
+ 2004-08-04 10:00:00 9,344 —-a-w C:\WINDOWS\system32\vga.dll
- 2003-07-16 20:49:49 51,456 —-a-w C:\WINDOWS\system32\vga256.dll
+ 2004-08-04 10:00:00 51,456 —-a-w C:\WINDOWS\system32\vga256.dll
- 2003-07-16 20:49:50 18,176 —-a-w C:\WINDOWS\system32\vga64k.dll
+ 2004-08-04 10:00:00 18,176 —-a-w C:\WINDOWS\system32\vga64k.dll
- 2003-07-16 20:50:08 4,608 —-a-w C:\WINDOWS\system32\vjoy.dll
+ 2004-08-04 10:00:00 4,608 —-a-w C:\WINDOWS\system32\vjoy.dll
- 2003-07-16 20:50:13 16,896 —-a-w C:\WINDOWS\system32\vss_ps.dll
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\vss_ps.dll
- 2007-11-03 12:19:28 40,448 —-a-w C:\WINDOWS\system32\vssadmin.exe
+ 2004-08-04 10:00:00 33,792 —-a-w C:\WINDOWS\system32\vssadmin.exe
- 2004-08-04 07:56:46 430,592 —-a-w C:\WINDOWS\system32\vssapi.dll
+ 2004-08-04 10:00:00 430,592 —-a-w C:\WINDOWS\system32\vssapi.dll
- 2007-11-03 12:19:29 296,448 —-a-w C:\WINDOWS\system32\vssvc.exe
+ 2004-08-04 10:00:00 289,792 —-a-w C:\WINDOWS\system32\vssvc.exe
- 2004-08-04 07:56:46 174,592 —-a-w C:\WINDOWS\system32\w32time.dll
+ 2004-08-04 10:00:00 174,592 —-a-w C:\WINDOWS\system32\w32time.dll
- 2007-11-03 12:19:29 56,320 —-a-w C:\WINDOWS\system32\w32tm.exe
+ 2004-08-04 10:00:00 49,664 —-a-w C:\WINDOWS\system32\w32tm.exe
- 2003-07-16 20:50:15 22,016 —-a-w C:\WINDOWS\system32\w32topl.dll
+ 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\w32topl.dll
- 2004-08-04 07:56:46 15,872 ——w C:\WINDOWS\system32\w3ssl.dll
+ 2004-08-04 10:00:00 15,872 —-a-w C:\WINDOWS\system32\w3ssl.dll
- 2004-08-04 06:07:32 17,664 —-a-w C:\WINDOWS\system32\watchdog.sys
+ 2004-08-04 10:00:00 17,664 —-a-w C:\WINDOWS\system32\watchdog.sys
- 2003-07-16 20:50:28 208,896 —-a-w C:\WINDOWS\system32\wavemsp.dll
+ 2004-08-04 10:00:00 208,896 —-a-w C:\WINDOWS\system32\wavemsp.dll
- 2004-08-04 07:56:42 22,016 —-a-w C:\WINDOWS\system32\wbem\evntrprv.dll
+ 2004-08-04 10:00:00 22,016 —-a-w C:\WINDOWS\system32\wbem\evntrprv.dll
- 2007-11-03 12:19:29 23,040 —-a-w C:\WINDOWS\system32\wbem\mofcomp.exe
+ 2004-08-04 10:00:00 16,384 —-a-w C:\WINDOWS\system32\wbem\mofcomp.exe
- 2007-11-03 12:19:29 43,520 —-a-w C:\WINDOWS\system32\wbem\scrcons.exe
+ 2004-08-04 10:00:00 36,864 —-a-w C:\WINDOWS\system32\wbem\scrcons.exe
- 2007-11-03 12:19:29 23,552 —-a-w C:\WINDOWS\system32\wbem\unsecapp.exe
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\wbem\unsecapp.exe
- 2004-08-04 07:56:46 43,008 —-a-w C:\WINDOWS\system32\wbem\wbemperf.dll
+ 2004-08-04 10:00:00 43,008 —-a-w C:\WINDOWS\system32\wbem\wbemperf.dll
- 2007-11-03 12:19:29 122,880 —-a-w C:\WINDOWS\system32\wbem\wbemtest.exe
+ 2004-08-04 10:00:00 116,224 —-a-w C:\WINDOWS\system32\wbem\wbemtest.exe
- 2007-11-03 12:19:29 19,968 —-a-w C:\WINDOWS\system32\wbem\winmgmt.exe
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\wbem\winmgmt.exe
- 2007-11-03 12:19:29 203,264 —-a-w C:\WINDOWS\system32\wbem\wmiadap.exe
+ 2004-08-04 10:00:00 196,608 —-a-w C:\WINDOWS\system32\wbem\wmiadap.exe
- 2007-11-03 12:19:29 133,120 —-a-w C:\WINDOWS\system32\wbem\wmiapsrv.exe
+ 2004-08-04 10:00:00 126,464 —-a-w C:\WINDOWS\system32\wbem\wmiapsrv.exe
- 2007-11-03 12:19:29 224,768 —-a-w C:\WINDOWS\system32\wbem\wmiprvse.exe
+ 2004-08-04 10:00:00 218,112 —-a-w C:\WINDOWS\system32\wbem\wmiprvse.exe
- 2006-10-19 01:58:00 15,360 ——w C:\WINDOWS\system32\wdfmgr.exe
+ 2006-10-19 01:58:00 8,704 —-a-w C:\WINDOWS\system32\wdfmgr.exe
- 2003-07-16 20:51:09 40,448 —-a-w C:\WINDOWS\system32\webhits.dll
+ 2004-08-04 10:00:00 40,448 —-a-w C:\WINDOWS\system32\webhits.dll
- 2004-08-04 07:56:46 135,680 —-a-w C:\WINDOWS\system32\webvw.dll
+ 2004-08-04 10:00:00 135,680 —-a-w C:\WINDOWS\system32\webvw.dll
- 2007-11-03 12:19:29 72,192 —-a-w C:\WINDOWS\system32\wextract.exe
+ 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\wextract.exe
- 2007-11-03 12:19:29 440,320 —-a-w C:\WINDOWS\system32\wiaacmgr.exe
+ 2004-08-04 10:00:00 433,664 —-a-w C:\WINDOWS\system32\wiaacmgr.exe
- 2004-08-04 07:56:46 463,360 —-a-w C:\WINDOWS\system32\wiadefui.dll
+ 2004-08-04 10:00:00 463,360 —-a-w C:\WINDOWS\system32\wiadefui.dll
- 2004-08-04 07:56:46 124,416 —-a-w C:\WINDOWS\system32\wiadss.dll
+ 2004-08-04 10:00:00 124,416 —-a-w C:\WINDOWS\system32\wiadss.dll
- 2004-08-04 07:56:46 75,776 —-a-w C:\WINDOWS\system32\wiascr.dll
+ 2004-08-04 10:00:00 75,776 —-a-w C:\WINDOWS\system32\wiascr.dll
- 2004-08-04 07:56:46 589,312 —-a-w C:\WINDOWS\system32\wiashext.dll
+ 2004-08-04 10:00:00 589,312 —-a-w C:\WINDOWS\system32\wiashext.dll
- 2004-08-04 07:56:46 111,104 —-a-w C:\WINDOWS\system32\wiavideo.dll
+ 2004-08-04 10:00:00 111,104 —-a-w C:\WINDOWS\system32\wiavideo.dll
- 2003-07-16 20:51:21 145,408 —-a-w C:\WINDOWS\system32\wiavusd.dll
+ 2004-08-04 10:00:00 145,408 —-a-w C:\WINDOWS\system32\wiavusd.dll
- 2003-07-16 20:51:21 9,216 —-a-w C:\WINDOWS\system32\wifeman.dll
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\wifeman.dll
- 2003-07-16 20:51:22 18,432 —-a-w C:\WINDOWS\system32\win.com
+ 2004-08-04 10:00:00 18,432 —-a-w C:\WINDOWS\system32\win.com
- 2004-08-04 07:56:46 101,888 —-a-w C:\WINDOWS\system32\win32spl.dll
+ 2004-08-04 10:00:00 101,888 —-a-w C:\WINDOWS\system32\win32spl.dll
- 2003-07-16 20:51:26 13,312 —-a-w C:\WINDOWS\system32\win87em.dll
+ 2004-08-04 10:00:00 13,312 —-a-w C:\WINDOWS\system32\win87em.dll
- 2004-08-04 07:56:35 937,984 —-a-w C:\WINDOWS\system32\winbrand.dll
+ 2004-08-04 10:00:00 937,984 —-a-w C:\WINDOWS\system32\winbrand.dll
- 2003-07-16 20:51:32 9,216 —-a-w C:\WINDOWS\system32\winfax.dll
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\winfax.dll
- 2006-10-17 16:05:58 212,992 ——w C:\WINDOWS\system32\WinFXDocObj.exe
+ 2007-08-13 23:45:16 206,336 —-a-w C:\WINDOWS\system32\WinFXDocObj.exe
- 2007-11-03 12:19:29 14,848 —-a-w C:\WINDOWS\system32\winhlp32.exe
+ 2004-08-04 10:00:00 8,192 —-a-w C:\WINDOWS\system32\winhlp32.exe
- 2004-08-04 07:56:46 351,232 —-a-w C:\WINDOWS\system32\winhttp.dll
+ 2004-08-04 10:00:00 351,232 —-a-w C:\WINDOWS\system32\winhttp.dll
- 2004-08-04 07:56:46 32,768 —-a-w C:\WINDOWS\system32\winipsec.dll
+ 2004-08-04 10:00:00 32,768 —-a-w C:\WINDOWS\system32\winipsec.dll
- 2004-08-04 07:56:57 502,272 —-a-w C:\WINDOWS\system32\winlogon.exe
+ 2004-08-04 10:00:00 502,272 —-a-w C:\WINDOWS\system32\winlogon.exe
- 2007-11-03 12:19:29 126,464 —-a-w C:\WINDOWS\system32\winmine.exe
+ 2002-08-29 12:00:00 119,808 —-a-w C:\WINDOWS\system32\winmine.exe
- 2004-08-04 07:56:46 176,128 —-a-w C:\WINDOWS\system32\winmm.dll
+ 2004-08-04 10:00:00 176,128 —-a-w C:\WINDOWS\system32\winmm.dll
- 2007-11-03 12:19:29 18,432 —-a-w C:\WINDOWS\system32\winmsd.exe
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\winmsd.exe
- 2003-07-16 20:51:43 5,120 —-a-w C:\WINDOWS\system32\winnls.dll
+ 2004-08-04 10:00:00 5,120 —-a-w C:\WINDOWS\system32\winnls.dll
- 2004-08-04 07:56:35 764,928 —-a-w C:\WINDOWS\system32\winntbbu.dll
+ 2004-08-04 10:00:00 764,928 —-a-w C:\WINDOWS\system32\winntbbu.dll
- 2004-08-04 07:56:46 16,896 —-a-w C:\WINDOWS\system32\winrnr.dll
+ 2004-08-04 10:00:00 16,896 —-a-w C:\WINDOWS\system32\winrnr.dll
- 2004-08-04 07:56:46 99,328 —-a-w C:\WINDOWS\system32\winscard.dll
+ 2004-08-04 10:00:00 99,328 —-a-w C:\WINDOWS\system32\winscard.dll
- 2004-08-04 07:56:46 17,408 ——w C:\WINDOWS\system32\winshfhc.dll
+ 2004-08-04 10:00:00 17,408 —-a-w C:\WINDOWS\system32\winshfhc.dll
- 2004-08-04 07:56:46 53,760 —-a-w C:\WINDOWS\system32\winsta.dll
+ 2004-08-04 10:00:00 53,760 —-a-w C:\WINDOWS\system32\winsta.dll
- 2003-07-16 20:51:54 18,944 —-a-w C:\WINDOWS\system32\winstrm.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\winstrm.dll
- 2004-08-04 07:56:46 176,640 —-a-w C:\WINDOWS\system32\wintrust.dll
+ 2004-08-04 10:00:00 176,640 —-a-w C:\WINDOWS\system32\wintrust.dll
- 2007-11-03 12:19:29 12,288 —-a-w C:\WINDOWS\system32\winver.exe
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\winver.exe
- 2004-08-04 07:56:46 172,032 —-a-w C:\WINDOWS\system32\wldap32.dll
+ 2004-08-04 10:00:00 172,032 —-a-w C:\WINDOWS\system32\wldap32.dll
- 2004-08-04 07:56:46 92,672 —-a-w C:\WINDOWS\system32\wlnotify.dll
+ 2004-08-04 10:00:00 92,672 —-a-w C:\WINDOWS\system32\wlnotify.dll
- 2006-10-19 01:47:18 757,248 —-a-w C:\WINDOWS\system32\WMADMOD.dll
+ 2004-08-04 10:00:00 408,064 —-a-w C:\WINDOWS\system32\wmadmod.dll
- 2006-10-19 01:47:18 1,117,696 —-a-w C:\WINDOWS\system32\WMADMOE.dll
+ 2004-08-04 10:00:00 670,720 —-a-w C:\WINDOWS\system32\wmadmoe.dll
- 2006-10-19 01:47:18 222,208 —-a-w C:\WINDOWS\system32\WMASF.dll
+ 2004-08-04 10:00:00 230,400 —-a-w C:\WINDOWS\system32\wmasf.dll
- 2006-10-19 01:47:18 33,792 —-a-w C:\WINDOWS\system32\wmdmlog.dll
+ 2004-08-04 10:00:00 27,136 —-a-w C:\WINDOWS\system32\wmdmlog.dll
- 2006-10-19 01:47:18 37,376 —-a-w C:\WINDOWS\system32\wmdmps.dll
+ 2004-08-04 10:00:00 23,552 —-a-w C:\WINDOWS\system32\wmdmps.dll
- 2003-07-16 20:52:10 51,200 —-a-w C:\WINDOWS\system32\wmerrenu.dll
+ 2004-08-04 10:00:00 51,200 —-a-w C:\WINDOWS\system32\wmerrenu.dll
- 2006-10-19 01:47:20 227,328 ——w C:\WINDOWS\system32\wmerror.dll
+ 2004-08-04 10:00:00 168,448 —-a-w C:\WINDOWS\system32\wmerror.dll
- 2004-08-04 07:56:35 5,632 —-a-w C:\WINDOWS\system32\wmi.dll
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\wmi.dll
- 2006-10-19 01:47:20 157,184 —-a-w C:\WINDOWS\system32\wmidx.dll
+ 2004-08-04 10:00:00 151,552 —-a-w C:\WINDOWS\system32\wmidx.dll
- 2003-07-16 20:52:26 18,944 —-a-w C:\WINDOWS\system32\wmiprop.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\system32\wmiprop.dll
- 2006-10-19 01:47:20 937,984 —-a-w C:\WINDOWS\system32\WMNetMgr.dll
+ 2004-08-04 10:00:00 1,050,624 —-a-w C:\WINDOWS\system32\wmnetmgr.dll
- 2007-06-12 03:51:12 10,834,944 ——w C:\WINDOWS\system32\wmp.dll
+ 2007-04-30 07:22:16 4,734,976 —-a-w C:\WINDOWS\system32\wmp.dll
- 2006-10-19 01:47:20 242,688 ——w C:\WINDOWS\system32\wmpasf.dll
+ 2004-08-04 10:00:00 114,688 —-a-w C:\WINDOWS\system32\wmpasf.dll
- 2004-08-04 07:56:46 20,480 —-a-w C:\WINDOWS\system32\wmpcd.dll
+ 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\wmpcd.dll
- 2004-08-04 07:56:46 20,480 —-a-w C:\WINDOWS\system32\wmpcore.dll
+ 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\wmpcore.dll
- 2006-10-19 01:47:20 314,880 ——w C:\WINDOWS\system32\wmpdxm.dll
+ 2004-08-04 10:00:00 233,472 —-a-w C:\WINDOWS\system32\wmpdxm.dll
- 2006-10-19 01:47:20 8,231,936 —-a-w C:\WINDOWS\system32\wmploc.dll
+ 2004-08-04 10:00:00 2,940,928 —-a-w C:\WINDOWS\system32\wmploc.dll
+ 2004-08-04 07:56:46 221,184 —-a-w C:\WINDOWS\system32\wmpns.dll
- 2006-10-19 01:47:20 99,840 —-a-w C:\WINDOWS\system32\wmpshell.dll
+ 2004-08-04 10:00:00 102,400 —-a-w C:\WINDOWS\system32\wmpshell.dll
- 2004-08-04 07:56:46 20,480 —-a-w C:\WINDOWS\system32\wmpui.dll
+ 2004-08-04 10:00:00 20,480 —-a-w C:\WINDOWS\system32\wmpui.dll
- 2006-10-19 01:47:22 4,096 —-a-w C:\WINDOWS\system32\wmsdmod.dll
+ 2004-08-04 10:00:00 759,296 —-a-w C:\WINDOWS\system32\wmsdmod.dll
- 2004-08-04 07:56:46 115,200 —-a-w C:\WINDOWS\system32\wmsdmoe.dll
+ 2004-08-04 10:00:00 115,200 —-a-w C:\WINDOWS\system32\wmsdmoe.dll
- 2006-10-19 01:47:22 4,096 —-a-w C:\WINDOWS\system32\wmsdmoe2.dll
+ 2004-08-04 10:00:00 1,119,744 —-a-w C:\WINDOWS\system32\wmsdmoe2.dll
- 2006-10-19 01:47:22 603,648 —-a-w C:\WINDOWS\system32\WMSPDMOD.dll
+ 2004-08-04 10:00:00 484,864 —-a-w C:\WINDOWS\system32\wmspdmod.dll
- 2006-10-19 01:47:22 1,329,152 —-a-w C:\WINDOWS\system32\WMSPDMOE.dll
+ 2004-08-04 10:00:00 896,512 —-a-w C:\WINDOWS\system32\wmspdmoe.dll
- 2004-08-04 07:56:46 303,616 —-a-w C:\WINDOWS\system32\wmstream.dll
+ 2004-08-04 10:00:00 303,616 —-a-w C:\WINDOWS\system32\wmstream.dll
- 2006-10-19 01:47:22 2,450,944 —-a-w C:\WINDOWS\system32\wmvcore.dll
+ 2006-12-07 22:02:24 2,174,976 —-a-w C:\WINDOWS\system32\wmvcore.dll
- 2006-10-19 01:47:22 4,096 —-a-w C:\WINDOWS\system32\wmvdmod.dll
+ 2004-08-04 10:00:00 809,984 —-a-w C:\WINDOWS\system32\wmvdmod.dll
- 2006-10-19 01:47:22 4,096 —-a-w C:\WINDOWS\system32\wmvdmoe2.dll
+ 2004-08-04 10:00:00 1,001,472 —-a-w C:\WINDOWS\system32\wmvdmoe2.dll
- 2004-08-04 07:56:46 264,192 —-a-w C:\WINDOWS\system32\wow32.dll
+ 2004-08-04 10:00:00 264,192 —-a-w C:\WINDOWS\system32\wow32.dll
- 2003-07-16 20:52:59 10,368 —-a-w C:\WINDOWS\system32\wowexec.exe
+ 2004-08-04 10:00:00 10,368 —-a-w C:\WINDOWS\system32\wowexec.exe
- 2003-07-16 20:27:31 3,200 —-a-w C:\WINDOWS\system32\wowfax.dll
+ 2004-08-04 10:00:00 3,200 —-a-w C:\WINDOWS\system32\wowfax.dll
- 2003-07-16 20:27:31 13,824 —-a-w C:\WINDOWS\system32\wowfaxui.dll
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\wowfaxui.dll
- 2007-11-03 12:19:29 38,912 —-a-w C:\WINDOWS\system32\wpabaln.exe
+ 2004-08-04 10:00:00 32,256 —-a-w C:\WINDOWS\system32\wpabaln.exe
- 2006-10-19 00:00:14 24,064 ——w C:\WINDOWS\system32\wpdshextautoplay.exe
+ 2006-10-19 00:00:14 17,408 —-a-w C:\WINDOWS\system32\wpdshextautoplay.exe
- 2007-11-03 12:19:29 38,912 —-a-w C:\WINDOWS\system32\wpnpinst.exe
+ 2004-08-04 10:00:00 32,256 —-a-w C:\WINDOWS\system32\wpnpinst.exe
- 2007-11-03 12:19:29 12,288 —-a-w C:\WINDOWS\system32\write.exe
+ 2004-08-04 10:00:00 5,632 —-a-w C:\WINDOWS\system32\write.exe
- 2004-08-04 07:56:46 82,944 —-a-w C:\WINDOWS\system32\ws2_32.dll
+ 2004-08-04 10:00:00 82,944 —-a-w C:\WINDOWS\system32\ws2_32.dll
- 2004-08-04 07:56:46 19,968 —-a-w C:\WINDOWS\system32\ws2help.dll
+ 2004-08-04 10:00:00 19,968 —-a-w C:\WINDOWS\system32\ws2help.dll
- 2004-08-04 07:56:57 13,824 ——w C:\WINDOWS\system32\wscntfy.exe
+ 2004-08-04 10:00:00 13,824 —-a-w C:\WINDOWS\system32\wscntfy.exe
- 2007-11-03 12:19:29 122,880 —-a-w C:\WINDOWS\system32\wscript.exe
+ 2004-08-04 10:00:00 114,688 —-a-w C:\WINDOWS\system32\wscript.exe
- 2004-08-04 07:56:46 81,408 ——w C:\WINDOWS\system32\wscsvc.dll
+ 2004-08-04 10:00:00 81,408 —-a-w C:\WINDOWS\system32\wscsvc.dll
- 2003-07-16 20:53:10 9,216 —-a-w C:\WINDOWS\system32\wshatm.dll
+ 2004-08-04 10:00:00 9,216 —-a-w C:\WINDOWS\system32\wshatm.dll
- 2004-08-04 07:56:46 108,032 ——w C:\WINDOWS\system32\wshbth.dll
+ 2004-08-04 10:00:00 108,032 —-a-w C:\WINDOWS\system32\wshbth.dll
- 2004-08-04 07:56:46 28,672 —-a-w C:\WINDOWS\system32\wshcon.dll
+ 2004-08-04 10:00:00 28,672 —-a-w C:\WINDOWS\system32\wshcon.dll
- 2004-08-04 07:56:46 65,536 —-a-w C:\WINDOWS\system32\wshext.dll
+ 2004-08-04 10:00:00 65,536 —-a-w C:\WINDOWS\system32\wshext.dll
- 2004-08-04 07:56:46 14,336 —-a-w C:\WINDOWS\system32\wship6.dll
+ 2004-08-04 10:00:00 14,336 —-a-w C:\WINDOWS\system32\wship6.dll
- 2003-07-16 20:53:13 11,776 —-a-w C:\WINDOWS\system32\wshisn.dll
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\wshisn.dll
- 2003-07-16 20:53:13 7,168 —-a-w C:\WINDOWS\system32\wshnetbs.dll
+ 2004-08-04 10:00:00 7,168 —-a-w C:\WINDOWS\system32\wshnetbs.dll
- 2004-08-04 07:56:46 11,776 —-a-w C:\WINDOWS\system32\wshrm.dll
+ 2004-08-04 10:00:00 11,776 —-a-w C:\WINDOWS\system32\WshRm.dll
- 2004-08-04 07:56:46 19,968 —-a-w C:\WINDOWS\system32\wshtcpip.dll
+ 2004-08-04 10:00:00 19,968 —-a-w C:\WINDOWS\system32\wshtcpip.dll
- 2004-08-04 07:56:46 42,496 —-a-w C:\WINDOWS\system32\wsnmp32.dll
+ 2004-08-04 10:00:00 42,496 —-a-w C:\WINDOWS\system32\wsnmp32.dll
- 2004-08-04 07:56:46 22,528 —-a-w C:\WINDOWS\system32\wsock32.dll
+ 2004-08-04 10:00:00 22,528 —-a-w C:\WINDOWS\system32\wsock32.dll
- 2004-08-04 07:56:46 50,688 —-a-w C:\WINDOWS\system32\wstdecod.dll
+ 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\system32\wstdecod.dll
- 2004-08-04 07:56:46 18,432 —-a-w C:\WINDOWS\system32\wtsapi32.dll
+ 2004-08-04 10:00:00 18,432 —-a-w C:\WINDOWS\system32\wtsapi32.dll
- 2007-07-30 23:19:36 549,720 —-a-w C:\WINDOWS\system32\wuapi.dll
+ 2007-04-17 03:45:48 549,720 —-a-w C:\WINDOWS\system32\wuapi.dll
- 2007-07-30 23:19:16 53,080 —-a-w C:\WINDOWS\system32\wuauclt.exe
+ 2007-07-31 00:19:16 53,080 —-a-w C:\WINDOWS\system32\wuauclt.exe
- 2004-08-03 22:01:38 167,704 —-a-w C:\WINDOWS\system32\wuauclt1.exe
+ 2004-08-04 10:00:00 165,888 —-a-w C:\WINDOWS\system32\wuauclt1.exe
- 2007-07-30 23:19:42 1,712,984 —-a-w C:\WINDOWS\system32\wuaueng.dll
+ 2007-07-31 00:19:42 1,712,984 —-a-w C:\WINDOWS\system32\wuaueng.dll
- 2004-08-03 22:03:20 186,136 —-a-w C:\WINDOWS\system32\wuaueng1.dll
+ 2004-08-04 10:00:00 183,296 —-a-w C:\WINDOWS\system32\wuaueng1.dll
- 2007-07-30 23:19:32 325,976 —-a-w C:\WINDOWS\system32\wucltui.dll
+ 2007-07-31 00:19:32 325,976 —-a-w C:\WINDOWS\system32\wucltui.dll
- 2006-09-28 22:56:38 153,088 ——w C:\WINDOWS\system32\WudfHost.exe
+ 2006-09-28 22:56:38 146,432 —-a-w C:\WINDOWS\system32\WudfHost.exe
- 2007-11-03 12:19:29 38,912 —-a-w C:\WINDOWS\system32\wupdmgr.exe
+ 2004-08-04 10:00:00 32,256 —-a-w C:\WINDOWS\system32\wupdmgr.exe
- 2007-07-30 23:18:40 33,624 —-a-w C:\WINDOWS\system32\wups.dll
+ 2007-04-17 03:47:36 33,624 —-a-w C:\WINDOWS\system32\wups.dll
- 2007-07-30 23:19:12 43,352 —-a-w C:\WINDOWS\system32\wups2.dll
+ 2007-04-17 03:45:20 43,352 —-a-w C:\WINDOWS\system32\wups2.dll
- 2007-07-30 23:19:28 203,096 —-a-w C:\WINDOWS\system32\wuweb.dll
+ 2007-07-31 00:19:46 203,096 —-a-w C:\WINDOWS\system32\wuweb.dll
- 2004-08-04 07:56:46 378,368 —-a-w C:\WINDOWS\system32\wzcdlg.dll
+ 2004-08-04 10:00:00 378,368 —-a-w C:\WINDOWS\system32\wzcdlg.dll
- 2004-08-04 07:56:46 51,712 —-a-w C:\WINDOWS\system32\wzcsapi.dll
+ 2004-08-04 10:00:00 51,712 —-a-w C:\WINDOWS\system32\wzcsapi.dll
- 2004-08-04 07:56:46 359,936 —-a-w C:\WINDOWS\system32\wzcsvc.dll
+ 2004-08-04 10:00:00 359,936 —-a-w C:\WINDOWS\system32\wzcsvc.dll
- 2004-08-04 07:56:46 91,648 —-a-w C:\WINDOWS\system32\xactsrv.dll
+ 2004-08-04 10:00:00 91,648 —-a-w C:\WINDOWS\system32\xactsrv.dll
- 2007-11-03 12:19:29 37,376 —-a-w C:\WINDOWS\system32\xcopy.exe
+ 2004-08-04 10:00:00 30,720 —-a-w C:\WINDOWS\system32\xcopy.exe
- 2004-07-17 18:39:14 174,200 —-a-w C:\WINDOWS\system32\xenroll.dll
+ 2004-08-04 10:00:00 174,200 —-a-w C:\WINDOWS\system32\xenroll.dll
- 2004-08-04 07:56:46 129,536 ——w C:\WINDOWS\system32\xmlprov.dll
+ 2004-08-04 10:00:00 129,536 —-a-w C:\WINDOWS\system32\xmlprov.dll
- 2004-08-04 07:56:46 50,176 ——w C:\WINDOWS\system32\xmlprovi.dll
+ 2004-08-04 10:00:00 50,176 —-a-w C:\WINDOWS\system32\xmlprovi.dll
- 2004-08-04 07:56:36 438,784 —-a-w C:\WINDOWS\system32\xpob2res.dll
+ 2004-08-04 10:00:00 438,784 —-a-w C:\WINDOWS\system32\xpob2res.dll
- 2004-08-04 07:56:36 187,392 —-a-w C:\WINDOWS\system32\xpsp1res.dll
+ 2004-08-04 10:00:00 187,392 —-a-w C:\WINDOWS\system32\xpsp1res.dll
- 2004-08-04 07:56:36 2,897,920 —-a-w C:\WINDOWS\system32\xpsp2res.dll
+ 2004-08-04 10:00:00 2,897,920 —-a-w C:\WINDOWS\system32\xpsp2res.dll
- 2007-06-14 10:08:46 350,720 —-a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2007-08-21 10:20:02 115,712 —-a-w C:\WINDOWS\system32\xpsp3res.dll
- 2004-08-04 07:56:46 337,920 —-a-w C:\WINDOWS\system32\zipfldr.dll
+ 2004-08-04 10:00:00 337,920 —-a-w C:\WINDOWS\system32\zipfldr.dll
- 2007-11-03 12:19:10 22,016 —-a-w C:\WINDOWS\TASKMAN.EXE
+ 2004-08-04 10:00:00 15,360 —-a-w C:\WINDOWS\taskman.exe
- 2003-07-16 20:48:39 94,784 —-a-w C:\WINDOWS\twain.dll
+ 2004-08-04 10:00:00 94,784 —-a-w C:\WINDOWS\twain.dll
- 2004-08-04 07:56:46 50,688 —-a-w C:\WINDOWS\twain_32.dll
+ 2004-08-04 10:00:00 50,688 —-a-w C:\WINDOWS\twain_32.dll
- 2003-07-16 20:48:40 49,680 —-a-w C:\WINDOWS\twunk_16.exe
+ 2004-08-04 10:00:00 49,680 —-a-w C:\WINDOWS\twunk_16.exe
- 2007-11-03 12:19:29 32,256 —-a-w C:\WINDOWS\twunk_32.exe
+ 2004-08-04 10:00:00 25,600 —-a-w C:\WINDOWS\twunk_32.exe
- 2003-07-16 20:50:09 18,944 —-a-w C:\WINDOWS\vmmreg32.dll
+ 2004-08-04 10:00:00 18,944 —-a-w C:\WINDOWS\vmmreg32.dll
- 2003-07-16 20:51:33 256,192 —-a-w C:\WINDOWS\winhelp.exe
+ 2004-08-04 10:00:00 256,192 —-a-w C:\WINDOWS\winhelp.exe
- 2007-11-03 12:19:29 290,304 —-a-w C:\WINDOWS\winhlp32.exe
+ 2004-08-04 10:00:00 283,648 —-a-w C:\WINDOWS\winhlp32.exe
+ 2003-07-16 20:20:16 921,088 —-a-w C:\WINDOWS\WinSxS\InstallTemp\125977\comctl32.dll
+ 2004-08-04 10:00:00 921,088 —-a-w C:\WINDOWS\WinSxS\InstallTemp\126011\comctl32.dll
+ 2006-08-25 15:45:55 1,054,208 —-a-w C:\WINDOWS\WinSxS\InstallTemp\751307\comctl32.dll
- 2003-07-16 20:20:15 74,802 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
+ 2004-08-04 10:00:00 74,802 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
- 2003-07-16 20:20:15 995,383 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42.dll
+ 2004-08-04 10:00:00 995,383 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42.dll
- 2003-07-16 20:20:15 995,384 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42u.dll
+ 2004-08-04 10:00:00 995,384 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42u.dll
- 2003-07-16 20:20:15 401,462 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\msvcp60.dll
+ 2004-08-04 10:00:00 401,462 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\msvcp60.dll
- 2003-07-16 20:20:16 921,088 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
+ 2004-08-04 10:00:00 921,088 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
- 2004-08-04 07:57:00 1,050,624 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
+ 2004-08-04 10:00:00 1,050,624 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
- 2003-07-16 20:20:16 50,688 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
+ 2004-08-04 10:00:00 50,688 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
- 2003-07-16 20:20:16 322,560 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
+ 2004-08-04 10:00:00 322,560 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
- 2004-08-04 07:57:00 54,784 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
+ 2004-08-04 10:00:00 54,784 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
- 2004-08-04 07:57:00 343,040 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
+ 2004-08-04 10:00:00 343,040 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
- 2003-07-16 20:20:14 1,700,352 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
+ 2004-08-04 10:00:00 1,700,352 —-a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
- 2004-08-04 07:56:58 1,712,128 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
+ 2004-08-04 10:00:00 1,712,128 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
- 2004-08-04 07:56:59 853,504 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2004-08-04 10:00:00 853,504 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2004-08-04 07:56:59 991,232 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2004-08-04 10:00:00 991,232 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2004-08-04 07:55:56 132,096 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
\rtcres.dll
+ 2004-08-04 10:00:00 132,096 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
\rtcres.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"="C:\WINDOWS\system32\mobsync.exe" [2004-08-04 05:00]
"IgfxTray"="C:\WINDOWS\System32\igfxtray.exe" [2005-06-21 18:48]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2005-06-21 18:44]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-10-03 03:23]
"6cf39f2e"="C:\WINDOWS\system32\ohcsnvoa.dll" [2007-11-02 15:17]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-11-10 19:25]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:00]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveSearch"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\mljkhfd]
mljkhfd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner^Start Menu^Programs^Startup^SpywareGuard.lnk]
path=C:\Documents and Settings\Owner\Start Menu\Programs\Startup\SpywareGuard.lnk
backup=C:\WINDOWS\pss\SpywareGuard.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

S3 aaudstum;aaudstum;\??\C:\DOCUME~1\Owner\LOCALS~1\Temp\aaudstum.sys
S3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter;C:\WINDOWS\system32\DRIVERS\AN983.sys

.
Contents of the 'Scheduled Tasks' folder
"2007-11-11 14:00:00 C:\WINDOWS\Tasks\Read Mail.job"
- C:\Documents and Settings\All Users\Start Menu\Programs\America Online\Read Mail.lnk
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-11 13:03:38
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-11 13:04:35
C:\ComboFix2.txt … 2007-11-09 20:02
C:\ComboFix3.txt … 2007-11-03 15:42
.
— E O F —

medicman151

Post #21November 11, 2007, 7:23 PM UTC

Logfile of HijackThis v1.99.1
Scan saved at 1:05:52 PM, on 11/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\explorer.exe
F:\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?rs=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [6cf39f2e] rundll32.exe "C:\WINDOWS\system32\ohcsnvoa.dll",b
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1194755477921
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: mljkhfd - mljkhfd.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

LDTate

Post #22November 11, 2007, 7:29 PM UTC

Open notepad and copy/paste the text in the quotebox below into it:

File::
C:\WINDOWS\system32\aovnscho.ini2
C:\WINDOWS\system32\dlbiyfun.dll
C:\WINDOWS\system32\ohcsnvoa.dll

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"6cf39f2e"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\mljkhfd]

Save this as Save this as "CFScript"

[external image: Posted Image]

Refering to the picture above, drag CFScript.txt into ComboFix.exe

Next:
Fix these if still listed

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a checkmark/tick in the box on the left side on these:

O4 - HKLM\..\Run: [6cf39f2e] rundll32.exe "C:\WINDOWS\system32\ohcsnvoa.dll",b
O20 - Winlogon Notify: mljkhfd - mljkhfd.dll (file missing)

Close ALL windows and browsers except HijackThis and click "Fix checked"

Reboot and "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

medicman151

Post #23November 11, 2007, 7:51 PM UTC

So far the pc seems to be working fine. I didn''t find either of the lines to remove in the HJ file. Here is a new HJT log.

Logfile of HijackThis v1.99.1
Scan saved at 2:46:08 PM, on 11/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\wuauclt.exe
F:\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?rs=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1194755477921
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

LDTate

Post #24November 11, 2007, 8:06 PM UTC

Click START then RUN
Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
- [external image: Posted Image]
If shown the disclaimer, Select "2"

Here's my usual all clean post

Log looks good

You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Click Start Menu > Run > copy and paste

%SystemRoot%\System32\restore\rstrui.exe

Press OK. Choose Create a Restore Point then click Next. Name it (something you'll remember) and click Create, when the confirmation screen shows the restore point has been created click Close.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.

Make your Internet Explorer more secure - This can be done by following these simple instructions:
- From within Internet Explorer click on the Tools menu and then click on Options.
- Click once on the Security tab
- Click once on the Internet icon so it becomes highlighted.
- Click once on the Custom Level button.
  - Change the Download signed ActiveX controls to Prompt
  - Change the Download unsigned ActiveX controls to Disable
  - Change the Initialize and script ActiveX controls not marked as safe to Disable
  - Change the Installation of desktop items to Prompt
  - Change the Launching programs and files in an IFRAME to Prompt
  - Change the Navigate sub-frames across different domains to Prompt
  - When all these settings have been made, click on the OK button.
  - If it prompts you as to whether or not you want to save the settings, press the Yes button.
- Next press the Apply button and then the OK to exit the Internet Properties page.
Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week
(Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
Use a Firewall - I can not stress how important it is that you use a Firewall on your computer.
Without a firewall your computer is succeptible to being hacked and taken over.
I am very serious about this and see it happen almost every day with my clients.
Simply using a Firewall in its default configuration can lower your risk greatly.

For a tutorial on Firewalls and a listing of some available ones see the link below:

Understanding and Using Firewalls
Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly.
This will ensure your computer has always the latest security updates available installed on your computer.
If there are new updates to install, install them immediately, reboot your computer, and revisit the site
until there are no more critical updates.
Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option.
This will provide realtime spyware & hijacker protection on your computer alongside your virus protection.
You should also scan your computer with this program on a regular basis just as you would an antivirus software.

A tutorial on installing & using this product can be found here:

Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers
Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware
IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.

Using IE-SPYAD to help block unwanted sites and activities
Update all these programs regularly - Make sure you update all the programs I have listed regularly.
Without regular updates you WILL NOT be protected when new malicious programs are released.

Only run one Anti-Virus and Firewall program.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein

medicman151

Post #25November 11, 2007, 11:49 PM UTC

Alright. Everythng seems to be running good. Thank you for all of your help. You can close out this post.

LDTate

Post #26November 11, 2007, 11:50 PM UTC

Great job

You're more then welcome. Glad we were able to help Peace be with you

LDTate

Post #27November 11, 2007, 11:50 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Yet another infection...I think.

✨ Ask AI

Ask AI