As requested and just to note, computer was hanging for some reason trying to get this pasted.
Regards
carholme
ComboFix 07-12-21.4 - Gerry 2007-12-28 15:28:59.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.296 [GMT -5:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.
The following files were disabled during the run:
C:\Program Files\iolo\Common\Lib\sguard.dll
((((((((((((((((((((((((( Files Created from 2007-11-28 to 2007-12-28 )))))))))))))))))))))))))))))))
.
2007-12-28 09:54 . 2007-12-28 09:54 d——– C:\WINDOWS\LastGood
2007-12-24 15:39 . 2007-12-24 20:03 d——– C:\Program Files\Real
2007-12-24 15:39 . 2007-12-24 20:03 d——– C:\Program Files\Common Files\Real
2007-12-22 06:28 . 2007-12-26 18:42 d——– C:\Program Files\RegScrubXP
2007-12-21 06:51 . 2007-12-21 06:51 d——– C:\Documents and Settings\LocalService\Application Data\AVG7
2007-12-21 06:51 . 2007-12-22 08:30 d——– C:\Documents and Settings\Gerry\Application Data\AVG7
2007-12-21 06:50 . 2007-12-21 06:50 d——– C:\Documents and Settings\All Users\Application Data\Grisoft
2007-12-18 11:38 . 2003-04-18 18:06 5,120 –a—— C:\WINDOWS\system32\sleep.exe
2007-12-10 05:18 . 2007-12-25 18:43 d——– C:\Program Files\QuickTime
2007-12-09 12:47 . 2007-12-15 15:02 d——– C:\Program Files\WinAce
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-28 20:31 20,772,896 –sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2007-12-28 19:38 ——— d—–w C:\Program Files\Lx_cats
2007-12-28 07:00 ——— d—–w C:\Documents and Settings\All Users\Application Data\Avg7
2007-12-27 13:20 ——— d—–w C:\Documents and Settings\Gerry\Application Data\OfficeUpdate12
2007-12-24 01:39 210,044 –sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2007-12-20 17:50 437,096 —-a-w C:\WINDOWS\system32\Incinerator.dll
2007-12-15 20:00 ——— d—–w C:\Program Files\LPS
2007-12-15 20:00 ——— d—–w C:\Documents and Settings\All Users\Application Data\AntiSpyInfo
2007-12-14 22:13 23,040 —-a-w C:\WINDOWS\system32\smrgdf.exe
2007-12-13 09:53 ——— d—–w C:\Documents and Settings\Gerry\Application Data\iolo
2007-12-13 09:50 ——— d—–w C:\Documents and Settings\All Users\Application Data\iolo
2007-12-08 20:50 ——— d–h–w C:\Program Files\InstallShield Installation Information
2007-12-08 20:48 ——— d—–w C:\Program Files\Common Files\InstallShield
2007-12-08 20:31 ——— d—–w C:\Program Files\PCPitstop
2007-11-29 21:50 38,567 —-a-w C:\WINDOWS\system32\pcpbios.exe
2007-11-28 22:03 ——— d—–w C:\Program Files\Google
2007-11-26 13:25 ——— d—–w C:\Documents and Settings\Gerry\Application Data\Sunbelt Software
2007-11-25 14:18 ——— d—–w C:\Program Files\Java
2007-11-25 14:11 ——— d—–w C:\Program Files\Common Files\Java
2007-11-25 13:14 ——— d—–w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-21 03:34 35,840 —-a-w C:\WINDOWS\system32\iolobtdfg.exe
2007-11-15 13:45 ——— d—–w C:\Program Files\Hasbro Interactive
2007-11-14 21:05 75,248 —-a-w C:\WINDOWS\zllsputility.exe
2007-11-14 21:05 1,086,952 —-a-w C:\WINDOWS\system32\zpeng24.dll
2007-11-13 10:25 20,480 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-09 20:40 ——— d–h–r C:\Documents and Settings\All Users\Application Data\yahoo!
2007-11-09 20:00 ——— d—–w C:\Documents and Settings\LocalService\Application Data\Symantec
2007-11-06 20:17 ——— d—–w C:\Program Files\Yahoo!
2007-11-06 13:13 ——— d—–w C:\Documents and Settings\Gerry\Application Data\IE7Pro
2007-10-29 22:43 1,287,680 —-a-w C:\WINDOWS\system32\quartz.dll
2007-10-29 19:47 ——— d—–w C:\Documents and Settings\Gerry\Application Data\InstallShield
2007-10-29 15:35 ——— d—–w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-10-29 13:59 ——— d—–w C:\Program Files\STOPzilla!
2007-10-29 13:59 ——— d—–w C:\Documents and Settings\All Users\Application Data\STOPzilla!
2007-10-27 22:39 230,912 —-a-w C:\WINDOWS\system32\wmasf.dll
2007-10-22 15:57 524,288 —-a-w C:\WINDOWS\opuc.dll
2001-06-20 21:19 40,960 -c–a-w C:\Program Files\ACMonitor_X83.exe
.
((((((((((((((((((((((((((((( snapshot@2007-10-25_ 9.24.05.10 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-10-26 03:34:01 8,460,288 —-a-w C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\shell32.dll
+ 2007-10-29 10:04:03 350,720 —-a-w C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\xpsp3res.dll
+ 2007-03-06 01:22:33 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB943460\spmsg.dll
+ 2007-03-06 01:22:39 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB943460\spuninst.exe
+ 2007-03-06 01:22:31 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB943460\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB943460\update\update.exe
+ 2007-03-06 01:23:47 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB943460\update\updspapi.dll
+ 2007-12-28 14:54:52 53,248 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2007-12-28 14:54:52 12,800 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2007-12-28 14:54:52 473,600 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2007-12-28 14:54:53 577,536 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2007-12-28 14:54:53 145,920 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2007-12-28 14:54:53 159,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2007-12-28 14:54:53 364,544 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2007-12-28 14:54:54 178,176 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2007-12-28 14:54:52 223,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2007-12-28 15:36:20 68,608 —-a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2007-12-28 15:36:34 72,192 —-a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2007-12-28 15:36:35 4,308,992 —-a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2007-12-28 15:36:37 482,304 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2007-12-28 15:36:31 2,902,016 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2007-12-28 15:36:11 258,048 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2007-12-28 15:36:11 114,176 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2007-12-28 15:36:45 260,096 —-a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2007-12-28 15:36:25 5,156,864 —-a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2007-12-28 15:36:19 10,752 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2007-12-28 15:36:10 507,904 —-a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2007-12-28 15:36:14 13,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2007-12-28 15:36:32 8,192 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2007-12-28 15:36:33 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2007-12-28 15:36:33 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2007-12-28 15:36:16 413,696 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2007-12-28 15:36:17 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2007-12-28 15:36:17 647,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2007-12-28 15:36:18 73,728 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2007-12-28 15:36:14 749,568 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2007-12-28 15:36:49 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2007-12-28 15:36:48 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2007-12-28 15:36:07 28,672 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2007-12-28 15:36:47 667,648 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2007-12-28 15:36:50 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2007-12-28 15:36:10 12,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2007-12-28 15:36:08 32,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2007-12-28 15:36:09 7,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2007-12-28 15:36:41 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2007-12-28 15:36:21 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2007-12-28 15:36:42 413,696 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2007-12-28 15:36:38 716,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2007-12-28 15:36:13 888,832 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2007-12-28 15:36:31 5,001,216 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2007-12-28 15:36:23 188,416 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2007-12-28 15:36:22 397,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2007-12-28 15:36:24 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2007-12-28 15:36:44 577,536 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2007-12-28 15:36:38 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2007-12-28 15:36:44 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2007-12-28 15:36:40 299,008 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2007-12-28 15:36:40 131,072 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2007-12-28 15:36:19 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2007-12-28 15:36:24 114,688 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2007-12-28 15:36:46 835,584 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2007-12-28 15:36:26 86,016 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2007-12-28 15:36:26 823,296 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2007-12-28 15:36:28 5,152,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2007-12-28 15:36:29 2,027,520 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2007-12-28 15:36:43 2,940,928 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2007-12-28 16:04:40 26,624 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\a9cbdd63507da5bf972ce99a0d3cf83e\Accessibility.ni.dll
+ 2007-12-28 16:04:42 888,832 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\72c5e12621a48ca07d73c8a02378bff2\AspNetMMCExt.ni.dll
+ 2007-12-28 16:04:43 237,568 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\7090bcee88103335b28c84a4eb3dabb6\CustomMarshalers.ni.dll
+ 2007-12-28 16:04:43 15,360 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\3b6feafcebe87b5424716fdd1b74fef6\dfsvc.ni.exe
+ 2007-12-28 16:04:46 880,640 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\afa35200f555b662ebccd1b87a59f8e8\Microsoft.Build.Engine.ni.dll
+ 2007-12-28 16:04:47 81,920 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\9d07e927a713659c30dd1cf0d5fdd37a\Microsoft.Build.Framework.ni.dll
+ 2007-12-28 16:04:51 1,687,552 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1d47fdf0df4689c49d7c8deaa9704685\Microsoft.Build.Tasks.ni.dll
+ 2007-12-28 16:04:52 163,840 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\7bd18c7721b488380b5ac901ff100f3c\Microsoft.Build.Utilities.ni.dll
+ 2007-12-28 16:04:56 1,720,320 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\ab3a8acf60f6e410b553b9d26c1912a0\Microsoft.VisualBasic.ni.dll
+ 2007-12-28 15:40:32 11,304,960 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\e44b2b9eaeac698233fbf295729c9a8e\mscorlib.ni.dll
+ 2007-12-28 16:04:59 1,003,520 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\faf60edbfa148791dd8f50d7f6338847\System.Configuration.ni.dll
+ 2007-12-28 15:41:13 6,676,480 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\
0ecb0cd2738d09a50d9ecd597b638f15\System.Data.ni.dll
+ 2007-12-28 16:05:02 1,724,416 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\a7f35417892c160889c57ed490550f16\System.Deployment.ni.dll
+ 2007-12-28 15:41:47 10,702,848 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\d6734ab03d54d7e6abe98e81e45a3d13\System.Design.ni.dll
+ 2007-12-28 16:05:06 1,216,512 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\
00baeeb4693e760c8ac2fe2aa0145f72\System.DirectoryServices.ni.dll
+ 2007-12-28 16:05:08 512,000 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d3ef031376f4aab5e05f4d55753f1591\System.DirectoryServices.Protocols.ni.dll
+ 2007-12-28 15:41:54 229,376 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\
0b8f201864a4d17e457ef146f9655a1a\System.Drawing.Design.ni.dll
+ 2007-12-28 15:41:52 1,601,536 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\947e85a0d127663f00640818b859cad7\System.Drawing.ni.dll
+ 2007-12-28 16:05:10 659,456 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\839824f38b152a7265490c6cd231923d\System.EnterpriseServices.ni.dll
+ 2007-12-28 16:05:10 294,912 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\839824f38b152a7265490c6cd231923d\System.EnterpriseServices.Wrapper.dll
+ 2007-12-28 16:05:12 729,088 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\fec5678ed4d9fd689e75fd4f785fd1b7\System.Security.ni.dll
+ 2007-12-28 16:05:14 684,032 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\5cfb0b03fa2f363369f0098e53d6f1a6\System.Transactions.ni.dll
+ 2007-12-28 16:05:55 2,306,048 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f77d468508114ff8b79da5a9eb014d47\System.Web.Mobile.ni.dll
+ 2007-12-28 16:05:56 237,568 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\2b68c943b142af188b14f46bcd0ffc94\System.Web.RegularExpressions.ni.dll
+ 2007-12-28 16:06:01 1,941,504 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2d1055496176480f6b07f027f2783826\System.Web.Services.ni.dll
+ 2007-12-28 16:05:48 12,185,600 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\fd8ced7c6c4ce9063a509bbd4204da96\System.Web.ni.dll
+ 2007-12-28 15:42:47 13,107,200 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\585221fb87d335d2ad0562d30c45587a\System.Windows.Forms.ni.dll
+ 2007-12-28 15:45:06 5,623,808 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\d829fd1c28f99016cffbd27a7d19d0e5\System.Xml.ni.dll
+ 2007-12-28 15:40:55 8,130,560 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\
00e79a3ef0cf44c48a9bfa8b8eb01f16\System.ni.dll
+ 2007-05-07 21:38:46 500,120 —-a-w C:\WINDOWS\Downloaded Program Files\daas_s.dll
+ 2007-05-07 21:39:00 192,920 —-a-w C:\WINDOWS\Downloaded Program Files\fsauc.dll
+ 2007-05-07 21:39:24 254,360 —-a-w C:\WINDOWS\Downloaded Program Files\fscax.dll
- 2007-10-01 15:21:12 345,816 —-a-w C:\WINDOWS\Downloaded Program Files\PCPitstop.dll
+ 2007-12-01 21:13:04 345,816 —-a-w C:\WINDOWS\Downloaded Program Files\PCPitstop.dll
+ 2007-08-20 10:04:34 124,928 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
+ 2007-08-20 10:04:34 214,528 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
+ 2007-08-20 10:04:34 132,608 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
+ 2007-08-20 10:04:34 63,488 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
+ 2007-08-17 10:20:54 63,488 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
+ 2007-08-20 10:04:34 153,088 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
+ 2007-08-20 10:04:35 230,400 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
+ 2007-08-17 07:34:25 161,792 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
+ 2007-08-20 10:04:35 383,488 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
+ 2007-08-20 10:04:35 384,512 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
+ 2007-08-20 10:04:37 6,058,496 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
+ 2007-08-20 10:04:38 44,544 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
+ 2007-08-20 10:04:38 267,776 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
+ 2007-08-17 10:20:54 13,824 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
+ 2007-08-17 10:21:21 625,152 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
+ 2007-08-20 10:04:39 27,648 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
+ 2007-08-20 10:04:39 459,264 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
+ 2007-08-20 10:04:39 52,224 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
+ 2007-08-20 10:04:41 3,584,512 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
+ 2007-08-20 10:04:41 477,696 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
+ 2007-08-20 10:04:41 193,024 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
+ 2007-08-20 10:04:42 671,232 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
+ 2007-08-20 10:04:42 102,400 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
+ 2007-08-20 10:04:42 105,984 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
+ 2007-08-20 10:04:42 1,152,000 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
+ 2007-08-20 10:04:42 232,960 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
+ 2007-08-20 10:04:43 824,832 -c—-w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
+ 2007-11-28 22:03:48 26,694 —-a-r C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\ARPPRODUCTICON.exe
+ 2007-11-28 22:03:48 26,694 —-a-r C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2007-11-28 22:03:48 26,694 —-a-r C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2007-11-28 22:03:48 65,536 —-a-r C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\NewShortcut1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2007-11-28 22:03:48 65,536 —-a-r C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\NewShortcut2_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2007-11-28 22:03:48 26,694 —-a-r C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\UNINST_Uninstall_G_3DE5E7D47B88403CA3FD2017A8240C5B.exe
- 2007-10-14 16:46:43 295,606 —-a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A81000000003}\SC_Reader.exe
+ 2007-10-28 11:54:05 295,606 —-a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A81000000003}\SC_Reader.exe
- 1998-10-29 20:45:06 306,688 —-a-w C:\WINDOWS\IsUninst.exe
+ 1998-10-29 21:45:06 306,688 —-a-w C:\WINDOWS\IsUninst.exe
+ 2005-03-18 22:23:10 53,248 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2005-03-18 22:23:10 12,800 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll
+ 2005-03-18 22:23:14 473,600 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll
+ 2005-03-18 22:23:10 145,920 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll
+ 2005-03-18 22:23:10 159,232 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll
+ 2005-03-18 22:23:14 364,544 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll
+ 2005-03-18 22:23:12 178,176 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll
+ 2005-03-18 22:23:14 223,232 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll
+ 2005-09-28 19:11:52 577,536 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
+ 2005-09-23 12:28:52 72,704 —-a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2005-09-23 12:29:04 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
+ 2005-09-23 12:29:04 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2005-09-23 12:28:52 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
+ 2005-09-23 12:28:56 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2005-09-23 12:28:58 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2005-09-23 12:28:56 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
+ 2005-09-23 12:28:52 86,528 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2005-09-23 12:28:36 18,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2005-09-23 12:28:42 136,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2005-09-23 12:28:44 4,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2005-09-23 12:29:04 183,808 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2005-09-23 12:28:28 208,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2005-09-23 12:28:56 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2005-09-23 12:28:58 138,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2005-09-23 12:28:36 87,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2007-04-13 08:21:18 58,712 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2005-09-23 12:28:32 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2007-04-13 08:20:52 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2007-04-13 08:20:52 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2007-04-13 08:20:52 23,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2007-04-13 08:20:50 75,264 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2005-09-23 12:28:32 13,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2007-04-13 08:20:52 32,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2005-09-23 12:28:32 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2007-04-13 08:20:52 33,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2007-04-13 08:20:52 32,600 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2007-04-13 08:20:52 507,904 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2005-09-23 12:28:56 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2007-04-13 08:21:16 88,576 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2005-09-23 12:28:42 76,984 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2005-09-23 12:28:42 1,144,832 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2005-09-23 12:28:42 13,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2005-09-23 12:28:58 17,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2005-09-23 12:28:56 68,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2005-09-23 12:28:44 31,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2005-09-23 12:28:38 52,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2007-04-13 08:20:58 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2005-09-23 12:29:12 547,840 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2005-09-23 12:28:56 788,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2005-09-23 12:28:50 9,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-04-13 08:21:16 9,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2005-09-23 12:28:56 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2005-09-23 12:28:56 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2005-09-23 12:28:56 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2007-04-13 08:21:16 228,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2007-04-13 08:21:16 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2005-09-23 12:28:56 55,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2005-09-23 12:28:56 72,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2005-09-23 12:28:48 40,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2005-09-23 12:01:16 609,472 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
+ 2005-09-23 11:29:48 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll
+ 2005-09-23 11:32:24 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll
+ 2005-09-23 11:34:10 82,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll
+ 2005-09-23 11:34:12 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll
+ 2005-09-23 11:34:44 85,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll
+ 2005-09-23 11:36:24 87,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll
+ 2005-09-23 08:46:14 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll
+ 2005-09-23 11:38:26 81,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll
+ 2005-09-23 11:38:52 86,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll
+ 2005-09-23 11:40:30 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll
+ 2005-09-23 11:40:32 83,968 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll
+ 2005-09-23 11:40:56 84,480 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll
+ 2005-09-23 11:42:58 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll
+ 2005-09-23 11:44:58 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll
+ 2005-09-23 11:46:38 83,456 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll
+ 2005-09-23 11:46:38 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll
+ 2005-09-23 11:46:40 83,456 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll
+ 2005-09-23 11:47:04 82,432 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll
+ 2005-09-23 11:47:30 82,432 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll
+ 2005-09-23 11:47:32 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll
+ 2005-09-23 11:47:32 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll
+ 2005-09-23 11:30:18 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll
+ 2005-09-23 11:47:06 84,480 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll
+ 2005-09-23 11:29:50 80,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll
+ 2005-09-23 11:36:48 85,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll
+ 2005-09-23 12:57:06 245,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll
+ 2007-04-13 08:21:10 413,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2005-09-23 12:28:48 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2007-04-13 08:21:10 647,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2005-09-23 12:28:48 73,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2007-04-13 08:21:08 749,568 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2005-09-23 12:29:10 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2005-09-23 12:29:10 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2005-09-23 12:29:08 667,648 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2005-09-23 12:28:30 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2005-09-23 12:29:10 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2005-09-23 12:28:30 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2005-09-23 12:28:30 12,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2005-09-23 12:28:30 7,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2007-04-13 08:20:52 87,040 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2005-09-23 12:28:48 69,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2007-04-13 08:21:18 802,304 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2005-09-23 12:28:56 73,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2005-09-23 12:28:56 288,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2007-04-13 08:21:16 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2007-04-13 08:21:16 326,656 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2005-09-23 12:28:56 81,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2007-04-13 08:21:16 4,308,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2007-04-13 08:21:16 102,912 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2005-09-23 12:29:00 330,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2005-09-23 12:28:56 67,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2005-09-23 12:28:50 9,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2007-04-13 08:21:18 227,328 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2007-04-13 08:21:18 68,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2005-09-23 12:28:56 10,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2007-04-13 08:21:12 5,634,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2005-09-23 12:29:00 22,528 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\
0409\mscorsecr.dll
+ 2007-04-13 08:21:16 99,152 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2007-04-13 08:21:18 15,360 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2005-09-23 12:28:56 78,336 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2007-04-13 08:21:12 136,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2005-09-23 12:28:56 53,248 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2005-09-23 12:28:56 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2005-09-23 12:29:02 59,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2005-09-23 12:28:58 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2005-09-23 12:28:56 107,520 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2005-09-23 12:29:00 85,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2007-04-13 08:21:18 382,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2007-04-13 08:21:18 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2007-04-13 08:21:18 413,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2005-09-23 12:28:56 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2007-04-13 08:21:16 2,902,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2007-04-13 08:21:18 482,304 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2007-04-13 08:21:18 716,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2007-04-13 08:20:58 888,832 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2007-04-13 08:21:16 5,001,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2005-09-23 12:28:56 397,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2007-04-13 08:21:18 188,416 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2007-04-13 08:21:16 2,940,928 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2005-09-23 12:28:56 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2007-04-13 08:21:16 577,536 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2007-04-13 08:21:16 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2007-04-13 08:21:18 47,616 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2007-04-13 08:21:18 114,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2007-04-13 08:21:16 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2005-09-23 12:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2007-04-13 08:21:16 299,008 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2005-09-23 12:28:56 131,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2005-09-23 12:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2005-09-23 12:28:56 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2007-04-13 08:21:18 260,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2007-04-13 08:21:16 5,156,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2005-09-23 12:28:56 835,584 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2005-09-23 12:28:56 86,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2005-09-23 12:28:56 823,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2007-04-13 08:21:16 5,152,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2007-04-13 08:21:16 2,027,520 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2005-09-23 12:28:56 71,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2007-04-13 08:21:28 1,166,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2007-04-13 08:20:50 1,330,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2007-04-13 08:20:52 406,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2005-09-23 12:28:56 28,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2005-05-22 05:00:00 90,112 ——w C:\WINDOWS\SDUnInst.exe
- 1998-10-14 16:03:00 59,392 —-a-w C:\WINDOWS\system32\a3d.dll
+ 2001-08-18 03:36:10 98,304 —-a-w C:\WINDOWS\system32\a3d.dll
- 2007-08-20 10:04:34 124,928 —-a-w C:\WINDOWS\system32\advpack.dll
+ 2007-10-10 23:55:51 124,928 —-a-w C:\WINDOWS\system32\advpack.dll
- 2006-02-23 16:41:02 466,944 -c–a-w C:\WINDOWS\system32\capicom.dll
+ 2006-12-28 22:13:52 516,832 —-a-w C:\WINDOWS\system32\capicom.dll
+ 2005-07-23 00:59:04 2,319,568 —-a-w C:\WINDOWS\system32\d3dx9_27.dll
- 2007-10-19 14:39:58 25,600 —-a-w C:\WINDOWS\system32\devldr32.exe
+ 2001-08-18 02:36:42 24,064 —-a-w C:\WINDOWS\system32\devldr32.exe
+ 2005-09-23 12:28:38 83,456 —-a-w C:\WINDOWS\system32\dfshim.dll
+ 2004-08-04 04:10:08 53,248 -c–a-w C:\WINDOWS\system32\dllcache\1394bus.sys
+ 2001-08-17 19:06:48 11,264 -c–a-w C:\WINDOWS\system32\dllcache\1394vdbg.sys
+ 2001-08-17 18:28:00 762,780 -c–a-w C:\WINDOWS\system32\dllcache\3cwmcru.sys
+ 2001-08-17 19:55:58 689,216 -c–a-w C:\WINDOWS\system32\dllcache\3dfxvs.dll
+ 2001-08-17 17:48:32 148,352 -c–a-w C:\WINDOWS\system32\dllcache\3dfxvsm.sys
+ 2004-08-04 04:00:04 12,288 -c–a-w C:\WINDOWS\system32\dllcache\4mmdat.sys
+ 2004-08-04 04:10:12 48,128 -c–a-w C:\WINDOWS\system32\dllcache\61883.sys
+ 2001-08-17 19:55:58 38,400 -c–a-w C:\WINDOWS\system32\dllcache\8514a.dll
- 1998-10-14 16:03:00 59,392 -c–a-w C:\WINDOWS\system32\dllcache\a3d.dll
+ 2001-08-18 03:36:10 98,304 -c–a-w C:\WINDOWS\system32\dllcache\a3d.dll
+ 2001-08-18 03:36:10 462,848 -c–a-w C:\WINDOWS\system32\dllcache\a3dapi.dll
+ 2001-08-17 18:52:00 23,552 -c–a-w C:\WINDOWS\system32\dllcache\abp480n5.sys
+ 2004-08-04 03:32:22 231,552 -c–a-w C:\WINDOWS\system32\dllcache\ac97ali.sys
+ 2001-08-17 17:20:04 96,256 -c–a-w C:\WINDOWS\system32\dllcache\ac97intc.sys
+ 2001-08-17 17:20:16 297,728 -c–a-w C:\WINDOWS\system32\dllcache\ac97sis.sys
+ 2004-08-04 03:32:32 84,480 -c–a-w C:\WINDOWS\system32\dllcache\ac97via.sys
+ 2001-08-18 03:36:10 61,440 -c–a-w C:\WINDOWS\system32\dllcache\acerscad.dll
+ 2004-08-04 12:00:00 187,776 -c–a-w C:\WINDOWS\system32\dllcache\acpi.sys
+ 2004-08-04 12:00:00 11,648 -c–a-w C:\WINDOWS\system32\dllcache\acpiec.sys
+ 2001-08-17 18:53:02 7,424 -c–a-w C:\WINDOWS\system32\dllcache\adicvls.sys
+ 2001-08-17 17:11:18 20,160 -c–a-w C:\WINDOWS\system32\dllcache\adm8511.sys
+ 2001-08-17 17:19:10 584,448 -c–a-w C:\WINDOWS\system32\dllcache\adm8810.sys
+ 2001-08-17 17:19:14 553,984 -c–a-w C:\WINDOWS\system32\dllcache\adm8820.sys
+ 2001-08-17 17:19:14 747,392 -c–a-w C:\WINDOWS\system32\dllcache\adm8830.sys
+ 2004-08-04 03:32:24 10,880 -c–a-w C:\WINDOWS\system32\dllcache\admjoy.sys
+ 2001-08-17 17:11:16 46,112 -c–a-w C:\WINDOWS\system32\dllcache\adptsf50.sys
+ 2001-08-17 19:07:32 101,888 -c–a-w C:\WINDOWS\system32\dllcache\adpu160m.sys
- 2007-08-20 10:04:34 124,928 -c–a-w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2007-10-10 23:55:51 124,928 -c–a-w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2006-02-15 00:22:26 142,464 -c–a-w C:\WINDOWS\system32\dllcache\aec.sys
+ 2001-08-17 18:52:02 12,800 -c–a-w C:\WINDOWS\system32\dllcache\aha154x.sys
+ 2001-08-17 19:07:36 55,168 -c–a-w C:\WINDOWS\system32\dllcache\aic78u2.sys
+ 2001-08-17 19:07:38 56,960 -c–a-w C:\WINDOWS\system32\dllcache\aic78xx.sys
+ 2001-08-17 17:11:18 27,678 -c–a-w C:\WINDOWS\system32\dllcache\ali5261.sys
+ 2001-08-17 18:49:02 26,624 -c–a-w C:\WINDOWS\system32\dllcache\alifir.sys
+ 2001-08-17 18:51:56 5,248 -c–a-w C:\WINDOWS\system32\dllcache\aliide.sys
+ 2001-08-17 17:11:20 16,969 -c–a-w C:\WINDOWS\system32\dllcache\amb8002.sys
+ 2004-08-04 12:00:00 37,376 -c–a-w C:\WINDOWS\system32\dllcache\amdk7.sys
+ 2001-08-17 18:52:04 12,032 -c–a-w C:\WINDOWS\system32\dllcache\amsint.sys
+ 2004-08-04 03:31:20 36,224 -c–a-w C:\WINDOWS\system32\dllcache\an983.sys
+ 2001-08-17 18:47:22 6,272 -c–a-w C:\WINDOWS\system32\dllcache\apmbatt.sys
+ 2001-08-17 18:52:00 26,496 -c–a-w C:\WINDOWS\system32\dllcache\asc.sys
+ 2001-08-17 18:52:04 22,400 -c–a-w C:\WINDOWS\system32\dllcache\asc3350p.sys
+ 2001-08-17 18:51:58 14,848 -c–a-w C:\WINDOWS\system32\dllcache\asc3550.sys
+ 2001-08-17 17:12:34 97,354 -c–a-w C:\WINDOWS\system32\dllcache\aspndis3.sys
+ 2004-08-04 12:00:00 95,360 -c–a-w C:\WINDOWS\system32\dllcache\atapi.sys
+ 2001-08-17 19:55:58 96,128 -c–a-w C:\WINDOWS\system32\dllcache\ati.dll
+ 2001-08-17 18:57:12 77,568 -c–a-w C:\WINDOWS\system32\dllcache\ati.sys
+ 2001-08-17 17:49:04 46,464 -c–a-w C:\WINDOWS\system32\dllcache\atibt829.sys
+ 2001-08-17 19:55:58 382,592 -c–a-w C:\WINDOWS\system32\dllcache\atidrab.dll
+ 2001-08-17 19:56:00 137,216 -c–a-w C:\WINDOWS\system32\dllcache\atidrae.dll
+ 2001-08-17 19:56:00 268,160 -c–a-w C:\WINDOWS\system32\dllcache\atidvai.dll
+ 2001-08-18 03:36:38 37,376 -c–a-w C:\WINDOWS\system32\dllcache\atievxx.exe
+ 2001-08-17 17:48:56 289,664 -c–a-w C:\WINDOWS\system32\dllcache\atimpab.sys
+ 2001-08-17 17:49:00 75,136 -c–a-w C:\WINDOWS\system32\dllcache\atimpae.sys
+ 2001-08-17 17:48:40 281,600 -c–a-w C:\WINDOWS\system32\dllcache\atimtai.sys
+ 2001-08-17 17:49:36 10,240 -c–a-w C:\WINDOWS\system32\dllcache\atipcxxx.sys
+ 2001-08-17 19:56:00 104,832 -c–a-w C:\WINDOWS\system32\dllcache\atiraged.dll
+ 2001-08-17 17:48:48 70,528 -c–a-w C:\WINDOWS\system32\dllcache\atiragem.sys
+ 2001-08-17 17:49:12 49,920 -c–a-w C:\WINDOWS\system32\dllcache\atirtcap.sys
+ 2001-08-17 17:49:18 26,880 -c–a-w C:\WINDOWS\system32\dllcache\atirtsnd.sys
+ 2001-08-17 17:49:22 17,152 -c–a-w C:\WINDOWS\system32\dllcache\atitunep.sys
+ 2001-08-17 17:49:28 17,152 -c–a-w C:\WINDOWS\system32\dllcache\atitvsnd.sys
+ 2001-08-17 17:49:38 9,472 -c–a-w C:\WINDOWS\system32\dllcache\ativmdcd.sys
+ 2001-08-17 17:49:44 19,456 -c–a-w C:\WINDOWS\system32\dllcache\ativttxx.sys
+ 2001-08-17 17:49:48 26,624 -c–a-w C:\WINDOWS\system32\dllcache\ativxbar.sys
+ 2001-08-17 17:49:34 23,552 -c–a-w C:\WINDOWS\system32\dllcache\atixbar.sys
+ 2001-08-17 17:59:44 3,072 -c–a-w C:\WINDOWS\system32\dllcache\audstub.sys
+ 2004-08-04 04:10:12 38,912 -c–a-w C:\WINDOWS\system32\dllcache\avc.sys
+ 2001-08-17 19:01:12 36,096 -c–a-w C:\WINDOWS\system32\dllcache\avcaudio.sys
+ 2004-08-04 04:10:00 13,696 -c–a-w C:\WINDOWS\system32\dllcache\avcstrm.sys
+ 2001-08-18 03:36:10 87,552 -c–a-w C:\WINDOWS\system32\dllcache\avmcoxp.dll
+ 2001-08-18 03:36:10 144,384 -c–a-w C:\WINDOWS\system32\dllcache\avmenum.dll
+ 2001-08-17 17:13:48 37,568 -c–a-w C:\WINDOWS\system32\dllcache\avmwan.sys
+ 2001-08-17 17:19:16 36,992 -c–a-w C:\WINDOWS\system32\dllcache\aztw2320.sys
+ 2001-08-17 17:13:56 89,952 -c–a-w C:\WINDOWS\system32\dllcache\b1cbase.sys
+ 2001-08-17 17:11:30 96,640 -c–a-w C:\WINDOWS\system32\dllcache\b57xp32.sys
+ 2001-08-17 19:56:00 342,336 -c–a-w C:\WINDOWS\system32\dllcache\banshee.dll
+ 2001-08-17 17:48:28 36,128 -c–a-w C:\WINDOWS\system32\dllcache\banshee.sys
+ 2001-08-17 18:57:54 14,080 -c–a-w C:\WINDOWS\system32\dllcache\battc.sys
- 2004-08-04 11:00:00 82,501 -c–a-w C:\WINDOWS\system32\dllcache\bckg.dll
+ 2004-08-04 12:00:00 82,501 -c–a-w C:\WINDOWS\system32\dllcache\bckg.dll
- 2004-08-04 11:00:00 1,817,687 -c–a-w C:\WINDOWS\system32\dllcache\bckgres.dll
+ 2004-08-04 12:00:00 1,817,687 -c–a-w C:\WINDOWS\system32\dllcache\bckgres.dll
- 2004-08-04 11:00:00 42,577 -c–a-w C:\WINDOWS\system32\dllcache\bckgzm.exe
+ 2004-08-04 12:00:00 42,577 -c–a-w C:\WINDOWS\system32\dllcache\bckgzm.exe
+ 2001-08-17 17:11:28 66,557 -c–a-w C:\WINDOWS\system32\dllcache\bcm42u.sys
+ 2001-08-17 17:11:26 54,271 -c–a-w C:\WINDOWS\system32\dllcache\bcm42xx5.sys
+ 2001-08-17 17:11:30 26,568 -c–a-w C:\WINDOWS\system32\dllcache\bcm4e5.sys
+ 2001-08-17 18:28:00 871,388 -c–a-w C:\WINDOWS\system32\dllcache\bcmdm.sys
+ 2004-08-04 04:10:14 11,776 -c–a-w C:\WINDOWS\system32\dllcache\bdasup.sys
+ 2001-08-18 03:36:10 102,400 -c–a-w C:\WINDOWS\system32\dllcache\binlsvc.dll
+ 2001-08-18 03:36:10 19,456 -c–a-w C:\WINDOWS\system32\dllcache\brbidiif.dll
+ 2001-08-18 03:36:10 9,728 -c–a-w C:\WINDOWS\system32\dllcache\brcoinst.dll
+ 2001-08-18 03:36:10 12,800 -c–a-w C:\WINDOWS\system32\dllcache\brevif.dll
+ 2001-08-17 18:12:22 12,160 -c–a-w C:\WINDOWS\system32\dllcache\brfiltlo.sys
+ 2001-08-17 18:12:24 3,968 -c–a-w C:\WINDOWS\system32\dllcache\brfiltup.sys
+ 2001-08-18 03:36:10 15,360 -c–a-w C:\WINDOWS\system32\dllcache\brmfbidi.dll
+ 2001-08-18 03:36:10 81,408 -c–a-w C:\WINDOWS\system32\dllcache\brmfcwia.dll
+ 2001-08-18 03:36:10 29,696 -c–a-w C:\WINDOWS\system32\dllcache\brmflpt.dll
+ 2001-08-18 03:36:38 32,256 -c–a-w C:\WINDOWS\system32\dllcache\brmfrsmg.exe
+ 2001-08-18 03:36:10 41,472 -c–a-w C:\WINDOWS\system32\dllcache\brmfusb.dll
+ 2001-08-17 18:12:24 3,168 -c–a-w C:\WINDOWS\system32\dllcache\brparimg.sys
+ 2001-08-17 18:12:18 39,552 -c–a-w C:\WINDOWS\system32\dllcache\brparwdm.sys
+ 2001-08-18 03:36:10 5,120 -c–a-w C:\WINDOWS\system32\dllcache\brscnrsm.dll
+ 2001-08-18 03:36:10 9,728 -c–a-w C:\WINDOWS\system32\dllcache\brserif.dll
+ 2001-08-17 18:12:20 60,416 -c–a-w C:\WINDOWS\system32\dllcache\brserwdm.sys
+ 2001-08-17 18:12:20 11,008 -c–a-w C:\WINDOWS\system32\dllcache\brusbmdm.sys
+ 2001-08-17 18:12:22 10,368 -c–a-w C:\WINDOWS\system32\dllcache\brusbscn.sys
+ 2001-08-17 17:11:24 31,529 -c–a-w C:\WINDOWS\system32\dllcache\brzwlan.sys
+ 2001-08-17 18:51:00 13,824 -c–a-w C:\WINDOWS\system32\dllcache\bulltlp3.sys
+ 2001-08-17 19:05:48 314,752 -c–a-w C:\WINDOWS\system32\dllcache\camdro21.sys
+ 2001-08-17 19:04:46 223,232 -c–a-w C:\WINDOWS\system32\dllcache\camdrv21.sys
+ 2001-08-17 19:04:48 171,264 -c–a-w C:\WINDOWS\system32\dllcache\camdrv30.sys
+ 2001-08-18 03:36:10 74,240 -c–a-w C:\WINDOWS\system32\dllcache\camexo20.dll
+ 2001-08-18 03:36:10 236,032 -c–a-w C:\WINDOWS\system32\dllcache\camext20.dll
+ 2001-08-18 03:36:10 119,296 -c–a-w C:\WINDOWS\system32\dllcache\camext30.dll
+ 2001-08-17 17:12:16 37,916 -c–a-w C:\WINDOWS\system32\dllcache\cb102.sys
+ 2001-08-17 17:12:42 39,680 -c–a-w C:\WINDOWS\system32\dllcache\cb325.sys
+ 2001-08-17 17:13:14 46,108 -c–a-w C:\WINDOWS\system32\dllcache\cben5.sys
+ 2004-08-04 12:00:00 13,952 -c–a-w C:\WINDOWS\system32\dllcache\cbidf2k.sys
+ 2001-08-17 18:28:16 714,698 -c–a-w C:\WINDOWS\system32\dllcache\cbmdmkxx.sys
+ 2004-08-04 04:10:18 17,024 -c–a-w C:\WINDOWS\system32\dllcache\ccdecode.sys
+ 2001-08-17 18:52:06 7,680 -c–a-w C:\WINDOWS\system32\dllcache\cd20xrnt.sys
+ 2004-08-04 12:00:00 18,688 -c–a-w C:\WINDOWS\system32\dllcache\cdaudio.sys
+ 2004-08-04 12:00:00 49,536 -c–a-w C:\WINDOWS\system32\dllcache\cdrom.sys
+ 2001-08-17 17:13:12 21,530 -c–a-w C:\WINDOWS\system32\dllcache\ce2n5.sys
+ 2001-08-17 17:13:20 27,164 -c–a-w C:\WINDOWS\system32\dllcache\ce3n5.sys
+ 2001-08-17 17:13:18 22,044 -c–a-w C:\WINDOWS\system32\dllcache\cem28n5.sys
+ 2001-08-17 17:13:18 22,044 -c–a-w C:\WINDOWS\system32\dllcache\cem33n5.sys
+ 2001-08-17 17:13:20 49,182 -c–a-w C:\WINDOWS\system32\dllcache\cem56n5.sys
+ 2004-08-04 04:00:14 8,192 -c–a-w C:\WINDOWS\system32\dllcache\changer.sys
- 2004-08-04 11:00:00 40,515 -c–a-w C:\WINDOWS\system32\dllcache\chkr.dll
+ 2004-08-04 12:00:00 40,515 -c–a-w C:\WINDOWS\system32\dllcache\chkr.dll
- 2004-08-04 11:00:00 780,885 -c–a-w C:\WINDOWS\system32\dllcache\chkrres.dll
+ 2004-08-04 12:00:00 780,885 -c–a-w C:\WINDOWS\system32\dllcache\chkrres.dll
- 2004-08-04 11:00:00 42,575 -c–a-w C:\WINDOWS\system32\dllcache\chkrzm.exe
+ 2004-08-04 12:00:00 42,575 -c–a-w C:\WINDOWS\system32\dllcache\chkrzm.exe
+ 2001-08-17 17:13:38 980,034 -c–a-w C:\WINDOWS\system32\dllcache\cicap.sys
+ 2001-08-17 19:02:48 272,640 -c–a-w C:\WINDOWS\system32\dllcache\cinemclc.sys
+ 2001-08-17 19:56:00 91,264 -c–a-w C:\WINDOWS\system32\dllcache\cirrus.dll
+ 2001-08-17 18:57:16 45,696 -c–a-w C:\WINDOWS\system32\dllcache\cirrus.sys
+ 2001-08-17 19:56:00 111,232 -c–a-w C:\WINDOWS\system32\dllcache\cl5465.dll
+ 2001-08-17 19:56:00 170,880 -c–a-w C:\WINDOWS\system32\dllcache\cl546x.dll
+ 2001-08-17 18:57:36 248,064 -c–a-w C:\WINDOWS\system32\dllcache\cl546xm.sys
+ 2004-08-04 04:07:40 14,080 -c–a-w C:\WINDOWS\system32\dllcache\cmbatt.sys
+ 2001-08-17 18:51:04 20,736 -c–a-w C:\WINDOWS\system32\dllcache\cmbp0wdm.sys
+ 2001-08-17 18:51:54 6,656 -c–a-w C:\WINDOWS\system32\dllcache\cmdide.sys
- 2004-08-04 11:00:00 217,160 -c–a-w C:\WINDOWS\system32\dllcache\cmnclim.dll
+ 2004-08-04 12:00:00 217,160 -c–a-w C:\WINDOWS\system32\dllcache\cmnclim.dll
- 2004-08-04 11:00:00 1,039,955 -c–a-w C:\WINDOWS\system32\dllcache\cmnresm.dll
+ 2004-08-04 12:00:00 1,039,955 -c–a-w C:\WINDOWS\system32\dllcache\cmnresm.dll
+ 2004-08-04 12:00:00 47,104 -c–a-w C:\WINDOWS\system32\dllcache\cnbjmon.dll
+ 2001-08-18 03:36:10 44,032 -c–a-w C:\WINDOWS\system32\dllcache\cnusd.dll
+ 2001-08-17 17:11:42 39,936 -c–a-w C:\WINDOWS\system32\dllcache\cnxt1803.sys
+ 2001-08-17 18:58:00 9,344 -c–a-w C:\WINDOWS\system32\dllcache\compbatt.sys
+ 2001-08-17 18:52:06 14,976 -c–a-w C:\WINDOWS\system32\dllcache\cpqarray.sys
+ 2001-08-17 17:13:14 21,533 -c–a-w C:\WINDOWS\system32\dllcache\cpqndis5.sys
+ 2001-08-17 17:11:32 60,970 -c–a-w C:\WINDOWS\system32\dllcache\cpqtrnd5.sys
+ 2001-08-18 03:36:10 216,064 -c–a-w C:\WINDOWS\system32\dllcache\cpscan.dll
+ 2001-08-17 17:19:18 42,112 -c–a-w C:\WINDOWS\system32\dllcache\crtaud.sys
+ 2001-08-18 03:36:12 175,104 -c–a-w C:\WINDOWS\system32\dllcache\csamsp.dll
+ 2001-08-17 16:19:28 6,912 -c–a-w C:\WINDOWS\system32\dllcache\ctlfacem.sys
+ 2001-08-17 16:19:20 3,712 -c–a-w C:\WINDOWS\system32\dllcache\ctljystk.sys
+ 2001-08-17 17:19:20 96,256 -c–a-w C:\WINDOWS\system32\dllcache\ctlsb16.sys
+ 2004-08-04 05:56:42 249,856 -c–a-w C:\WINDOWS\system32\dllcache\ctmasetp.dll
+ 2001-08-17 17:19:24 3,072 -c–a-w C:\WINDOWS\system32\dllcache\cwbase.sys
+ 2001-08-17 17:19:26 3,072 -c–a-w C:\WINDOWS\system32\dllcache\cwbmidi.sys
+ 2001-08-17 17:19:28 72,832 -c–a-w C:\WINDOWS\system32\dllcache\cwbwdm.sys
+ 2001-08-17 17:19:30 3,584 -c–a-w C:\WINDOWS\system32\dllcache\cwcosnt5.sys
+ 2001-08-17 17:19:36 111,872 -c–a-w C:\WINDOWS\system32\dllcache\cwcspud.sys
+ 2001-08-17 17:19:48 93,952 -c–a-w C:\WINDOWS\system32\dllcache\cwcwdm.sys
+ 2004-08-04 03:32:26 48,640 -c–a-w C:\WINDOWS\system32\dllcache\cwrwdm.sys
+ 2001-08-17 18:50:36 17,152 -c–a-w C:\WINDOWS\system32\dllcache\cyclad-z.sys
+ 2001-08-17 18:50:30 14,848 -c–a-w C:\WINDOWS\system32\dllcache\cyclom-y.sys
+ 2001-08-18 03:36:12 28,672 -c–a-w C:\WINDOWS\system32\dllcache\cyycoins.dll
+ 2001-08-17 18:50:38 50,176 -c–a-w C:\WINDOWS\system32\dllcache\cyyport.sys
+ 2001-08-18 03:36:12 27,648 -c–a-w C:\WINDOWS\system32\dllcache\cyyports.dll
+ 2001-08-18 03:36:12 27,136 -c–a-w C:\WINDOWS\system32\dllcache\cyzcoins.dll
+ 2001-08-17 18:50:40 49,792 -c–a-w C:\WINDOWS\system32\dllcache\cyzport.sys
+ 2001-08-18 03:36:12 27,648 -c–a-w C:\WINDOWS\system32\dllcache\cyzports.dll
+ 2001-08-17 17:12:02 117,760 -c–a-w C:\WINDOWS\system32\dllcache\d100ib5.sys
+ 2001-08-17 18:52:16 179,584 -c–a-w C:\WINDOWS\system32\dllcache\dac2w2k.sys
+ 2001-08-17 18:52:16 14,720 -c–a-w C:\WINDOWS\system32\dllcache\dac960nt.sys
+ 2001-08-18 03:36:12 25,600 -c–a-w C:\WINDOWS\system32\dllcache\dc210_32.dll
+ 2001-08-18 03:36:12 80,896 -c–a-w C:\WINDOWS\system32\dllcache\dc210usd.dll
+ 2001-08-17 17:12:02 63,208 -c–a-w C:\WINDOWS\system32\dllcache\dc21x4.sys
+ 2001-08-18 03:36:12 86,016 -c–a-w C:\WINDOWS\system32\dllcache\dc240usd.dll
+ 2001-08-18 03:36:12 110,592 -c–a-w C:\WINDOWS\system32\dllcache\dc260usd.dll
+ 2001-08-17 18:52:58 7,424 -c–a-w C:\WINDOWS\system32\dllcache\ddsmc.sys
+ 2001-08-17 17:11:44 20,928 -c–a-w C:\WINDOWS\system32\dllcache\defpa.sys
- 2007-10-19 14:39:58 25,600 -c–a-w C:\WINDOWS\system32\dllcache\devldr32.exe
+ 2001-08-18 02:36:42 24,064 -c–a-w C:\WINDOWS\system32\dllcache\devldr32.exe
+ 2001-08-17 17:11:48 24,648 -c–a-w C:\WINDOWS\system32\dllcache\dfe650.sys
+ 2001-08-17 17:11:48 24,649 -c–a-w C:\WINDOWS\system32\dllcache\dfe650d.sys
+ 2001-08-17 17:17:20 29,531 -c–a-w C:\WINDOWS\system32\dllcache\dgapci.sys
+ 2001-08-18 03:36:14 419,357 -c–a-w C:\WINDOWS\system32\dllcache\dgconfig.dll
+ 2001-08-17 17:13:48 164,923 -c–a-w C:\WINDOWS\system32\dllcache\diapi2.sys
+ 2001-08-18 03:36:14 32,256 -c–a-w C:\WINDOWS\system32\dllcache\diapi2NT.dll
+ 2001-08-18 03:36:14 65,622 -c–a-w C:\WINDOWS\system32\dllcache\digiasyn.dll
+ 2001-08-17 17:13:36 37,735 -c–a-w C:\WINDOWS\system32\dllcache\digiasyn.sys
+ 2001-08-18 03:36:14 131,156 -c–a-w C:\WINDOWS\system32\dllcache\digidbp.dll
+ 2001-08-17 17:13:52 103,044 -c–a-w C:\WINDOWS\system32\dllcache\digidxb.sys
+ 2001-08-17 17:17:40 90,525 -c–a-w C:\WINDOWS\system32\dllcache\digifep5.sys
+ 2001-08-18 03:36:14 229,462 -c–a-w C:\WINDOWS\system32\dllcache\digifwrk.dll
+ 2001-08-18 03:36:14 159,828 -c–a-w C:\WINDOWS\system32\dllcache\digihlc.dll
+ 2001-08-18 03:36:14 102,484 -c–a-w C:\WINDOWS\system32\dllcache\digiinf.dll
+ 2001-08-18 03:36:14 41,046 -c–a-w C:\WINDOWS\system32\dllcache\digiisdn.dll
+ 2001-08-17 17:14:44 21,606 -c–a-w C:\WINDOWS\system32\dllcache\digiisdn.sys
+ 2001-08-18 03:36:14 110,621 -c–a-w C:\WINDOWS\system32\dllcache\digirlpt.dll
+ 2001-08-17 17:17:44 42,432 -c–a-w C:\WINDOWS\system32\dllcache\digirlpt.sys
+ 2001-08-18 03:36:42 614,429 -c–a-w C:\WINDOWS\system32\dllcache\digiview.exe
+ 2001-08-17 17:13:52 91,305 -c–a-w C:\WINDOWS\system32\dllcache\dimaint.sys
+ 2004-08-04 12:00:00 36,352 -c–a-w C:\WINDOWS\system32\dllcache\disk.sys
+ 2001-08-18 03:36:14 6,729 -c–a-w C:\WINDOWS\system32\dllcache\disrvci.dll
+ 2001-08-18 03:36:14 31,305 -c–a-w C:\WINDOWS\system32\dllcache\disrvpp.dll
+ 2001-08-18 03:36:14 38,985 -c–a-w C:\WINDOWS\system32\dllcache\disrvsu.dll
+ 2001-08-18 03:36:42 236,060 -c–a-w C:\WINDOWS\system32\dllcache\ditrace.exe
+ 2001-08-18 03:36:14 6,216 -c–a-w C:\WINDOWS\system32\dllcache\divaci.dll
+ 2001-08-18 03:36:14 37,962 -c–a-w C:\WINDOWS\system32\dllcache\divaprop.dll
+ 2001-08-18 03:36:14 29,768 -c–a-w C:\WINDOWS\system32\dllcache\divasu.dll
+ 2001-08-17 17:14:52 952,007 -c–a-w C:\WINDOWS\system32\dllcache\diwan.sys
+ 2001-08-17 17:11:44 26,698 -c–a-w C:\WINDOWS\system32\dllcache\dlh5xnd5.sys
+ 2004-08-04 04:00:06 8,320 -c–a-w C:\WINDOWS\system32\dllcache\dlttape.sys
+ 2001-08-17 17:11:42 29,696 -c–a-w C:\WINDOWS\system32\dllcache\dm9pci5.sys
+ 2004-08-04 03:07:40 52,864 -c–a-w C:\WINDOWS\system32\dllcache\dmusic.sys
+ 2004-08-04 03:58:30 207,360 -c–a-w C:\WINDOWS\system32\dllcache\dot4.sys
+ 2001-08-17 18:47:32 12,928 -c–a-w C:\WINDOWS\system32\dllcache\dot4prt.sys
+ 2001-08-17 18:47:32 8,704 -c–a-w C:\WINDOWS\system32\dllcache\dot4scan.sys
+ 2001-08-17 18:47:32 23,808 -c–a-w C:\WINDOWS\system32\dllcache\dot4usb.sys
+ 2001-08-17 17:12:32 28,062 -c–a-w C:\WINDOWS\system32\dllcache\dp83820.sys
+ 2001-08-17 19:07:44 20,192 -c–a-w C:\WINDOWS\system32\dllcache\dpti2o.sys
- 2004-08-04 03:08:00 60,288 -c–a-w C:\WINDOWS\system32\dllcache\drmk.sys
+ 2004-08-04 04:08:00 60,288 -c–a-w C:\WINDOWS\system32\dllcache\drmk.sys
+ 2001-08-17 17:20:18 334,208 -c–a-w C:\WINDOWS\system32\dllcache\ds1wdm.sys
+ 2004-08-04 12:00:00 71,040 -c–a-w C:\WINDOWS\system32\dllcache\dxg.sys
- 2007-08-20 10:04:34 214,528 -c–a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2007-10-10 23:55:51 214,528 -c–a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2001-08-17 17:12:08 50,719 -c–a-w C:\WINDOWS\system32\dllcache\e1000nt5.sys
+ 2001-08-17 17:12:10 117,760 -c–a-w C:\WINDOWS\system32\dllcache\e100b325.sys
+ 2001-08-17 17:12:12 19,594 -c–a-w C:\WINDOWS\system32\dllcache\e100isa4.sys
+ 2001-08-17 17:10:50 44,103 -c–a-w C:\WINDOWS\system32\dllcache\el515.sys
+ 2001-08-17 17:10:56 55,999 -c–a-w C:\WINDOWS\system32\dllcache\el556nd5.sys
+ 2001-08-17 17:10:56 24,653 -c–a-w C:\WINDOWS\system32\dllcache\el574nd4.sys
+ 2001-08-17 17:10:58 69,692 -c–a-w C:\WINDOWS\system32\dllcache\el575nd5.sys
+ 2001-08-17 17:10:52 26,141 -c–a-w C:\WINDOWS\system32\dllcache\el589nd5.sys
+ 2001-08-17 17:11:00 69,194 -c–a-w C:\WINDOWS\system32\dllcache\el656cd5.sys
+ 2001-08-17 18:28:00 634,134 -c–a-w C:\WINDOWS\system32\dllcache\el656ct5.sys
+ 2001-08-17 17:11:00 77,386 -c–a-w C:\WINDOWS\system32\dllcache\el656nd5.sys
+ 2001-08-17 18:28:00 241,206 -c–a-w C:\WINDOWS\system32\dllcache\el656se5.sys
+ 2001-08-17 17:11:06 66,591 -c–a-w C:\WINDOWS\system32\dllcache\el90xbc5.sys
+ 2001-08-17 17:11:02 153,631 -c–a-w C:\WINDOWS\system32\dllcache\el90xnd5.sys
+ 2001-08-17 17:11:12 455,199 -c–a-w C:\WINDOWS\system32\dllcache\el985n51.sys
+ 2001-08-17 17:11:04 70,174 -c–a-w C:\WINDOWS\system32\dllcache\el98xn5.sys
+ 2001-08-17 17:11:08 171,520 -c–a-w C:\WINDOWS\system32\dllcache\el99xn51.sys
+ 2001-08-17 18:53:02 7,296 -c–a-w C:\WINDOWS\system32\dllcache\elmsmc.sys
+ 2001-08-17 17:10:52 25,159 -c–a-w C:\WINDOWS\system32\dllcache\elnk3.sys
+ 2001-08-17 17:10:54 19,996 -c–a-w C:\WINDOWS\system32\dllcache\em556n4.sys
+ 2001-08-17 16:19:26 283,904 -c–a-w C:\WINDOWS\system32\dllcache\emu10k1m.sys
+ 2001-08-17 18:46:40 6,400 -c–a-w C:\WINDOWS\system32\dllcache\enum1394.sys
+ 2001-08-17 18:50:20 144,896 -c–a-w C:\WINDOWS\system32\dllcache\epcfw2k.sys
+ 2001-08-17 17:12:08 18,503 -c–a-w C:\WINDOWS\system32\dllcache\epro4.sys
+ 2001-08-17 18:50:20 114,944 -c–a-w C:\WINDOWS\system32\dllcache\epstw2k.sys
+ 2001-08-17 17:17:40 629,952 -c–a-w C:\WINDOWS\system32\dllcache\eqn.sys
+ 2001-08-18 03:36:44 53,248 -c–a-w C:\WINDOWS\system32\dllcache\eqndiag.exe
+ 2001-08-18 03:36:44 51,200 -c–a-w C:\WINDOWS\system32\dllcache\eqnlogr.exe
+ 2001-08-18 03:36:44 61,952 -c–a-w C:\WINDOWS\system32\dllcache\eqnloop.exe
+ 2001-08-17 17:19:38 37,120 -c–a-w C:\WINDOWS\system32\dllcache\es1370mp.sys
+ 2001-08-17 17:19:34 40,704 -c–a-w C:\WINDOWS\system32\dllcache\es1371mp.sys
+ 2001-08-17 17:19:58 72,192 -c–a-w C:\WINDOWS\system32\dllcache\es1969.sys
+ 2001-08-17 17:19:48 174,464 -c–a-w C:\WINDOWS\system32\dllcache\es198x.sys
+ 2001-08-17 18:28:02 595,647 -c–a-w C:\WINDOWS\system32\dllcache\es56cvmp.sys
+ 2001-08-17 18:28:04 594,238 -c–a-w C:\WINDOWS\system32\dllcache\es56hpi.sys
+ 2001-08-17 18:28:04 347,550 -c–a-w C:\WINDOWS\system32\dllcache\es56tpi.sys
+ 2001-08-17 17:19:56 63,360 -c–a-w C:\WINDOWS\system32\dllcache\ess.sys
+ 2004-08-04 03:32:28 137,088 -c–a-w C:\WINDOWS\system32\dllcache\essm2e.sys
+ 2001-08-18 03:36:16 43,008 -c–a-w C:\WINDOWS\system32\dllcache\esucm.dll
+ 2001-08-18 03:36:16 34,816 -c–a-w C:\WINDOWS\system32\dllcache\esuimg.dll
+ 2001-08-18 03:36:16 45,568 -c–a-w C:\WINDOWS\system32\dllcache\esuni.dll
+ 2001-08-18 03:36:16 45,568 -c–a-w C:\WINDOWS\system32\dllcache\esunib.dll
+ 2001-08-17 17:12:08 16,998 -c–a-w C:\WINDOWS\system32\dllcache\ex10.sys
+ 2001-08-17 18:52:48 7,040 -c–a-w C:\WINDOWS\system32\dllcache\exabyte2.sys
- 2001-08-18 02:36:10 5,632 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
+ 2001-08-18 03:36:10 5,632 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
- 2001-08-18 02:36:10 45,056 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
+ 2001-08-18 03:36:10 45,056 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
- 2001-08-18 02:36:16 43,520 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
+ 2001-08-18 03:36:16 43,520 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
- 2001-08-18 02:36:18 65,536 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
+ 2001-08-18 03:36:18 65,536 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
- 2001-08-18 02:36:28 38,912 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
+ 2001-08-18 03:36:28 38,912 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
- 2001-08-18 02:36:54 23,040 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
+ 2001-08-18 03:36:54 23,040 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
- 2001-08-18 02:36:30 57,856 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
+ 2001-08-18 03:36:30 57,856 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
- 2001-08-18 02:36:30 26,112 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_seos.dll
+ 2001-08-18 03:36:30 26,112 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_seos.dll
- 2001-08-18 02:36:32 12,288 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
+ 2001-08-18 03:36:32 12,288 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
- 2001-08-18 02:36:32 7,168 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
+ 2001-08-18 03:36:32 7,168 -c–a-w C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
- 2007-08-20 10:04:34 132,608 -c–a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2007-10-10 23:55:51 132,608 -c–a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2001-08-17 17:11:54 12,362 -c–a-w C:\WINDOWS\system32\dllcache\f3ab18xi.sys
+ 2001-08-17 17:11:56 11,850 -c–a-w C:\WINDOWS\system32\dllcache\f3ab18xj.sys
+ 2001-08-17 17:12:32 16,074 -c–a-w C:\WINDOWS\system32\dllcache\fa312nd5.sys
+ 2001-08-17 17:12:32 24,618 -c–a-w C:\WINDOWS\system32\dllcache\fa410nd5.sys
+ 2004-08-04 12:00:00 27,392 -c–a-w C:\WINDOWS\system32\dllcache\fdc.sys
+ 2001-08-17 17:10:54 22,090 -c–a-w C:\WINDOWS\system32\dllcache\fem556n5.sys
+ 2001-08-17 17:13:08 27,165 -c–a-w C:\WINDOWS\system32\dllcache\fetnd5.sys
+ 2004-08-04 12:00:00 20,480 -c–a-w C:\WINDOWS\system32\dllcache\flpydisk.sys
+ 2001-08-18 03:36:16 71,680 -c–a-w C:\WINDOWS\system32\dllcache\fnfilter.dll
+ 2004-08-04 03:31:24 34,173 -c–a-w C:\WINDOWS\system32\dllcache\forehe.sys
- 2003-03-24 20:52:04 24,632 -c–a-w C:\WINDOWS\system32\dllcache\fpadmcgi.exe
+ 2003-03-24 21:52:04 24,632 -c–a-w C:\WINDOWS\system32\dllcache\fpadmcgi.exe
- 2003-03-24 20:52:04 20,541 -c–a-w C:\WINDOWS\system32\dllcache\fpadmdll.dll
+ 2003-03-24 21:52:04 20,541 -c–a-w C:\WINDOWS\system32\dllcache\fpadmdll.dll
+ 2001-08-17 17:14:24 444,416 -c–a-w C:\WINDOWS\system32\dllcache\fpcibase.sys
+ 2001-08-17 17:14:44 441,728 -c–a-w C:\WINDOWS\system32\dllcache\fpcmbase.sys
+ 2001-08-17 17:15:02 442,240 -c–a-w C:\WINDOWS\system32\dllcache\fpnpbase.sys
+ 2004-08-04 12:00:00 125,056 -c–a-w C:\WINDOWS\system32\dllcache\ftdisk.sys
+ 2001-08-17 17:15:22 455,680 -c–a-w C:\WINDOWS\system32\dllcache\fus2base.sys
+ 2001-08-17 17:15:38 455,296 -c–a-w C:\WINDOWS\system32\dllcache\fusbbase.sys
+ 2001-08-18 03:36:16 92,160 -c–a-w C:\WINDOWS\system32\dllcache\fuusd.dll
+ 2001-08-17 17:15:56 454,912 -c–a-w C:\WINDOWS\system32\dllcache\fxusbase.sys
+ 2001-08-17 19:56:00 470,144 -c–a-w C:\WINDOWS\system32\dllcache\g200d.dll
+ 2001-08-17 17:49:34 320,384 -c–a-w C:\WINDOWS\system32\dllcache\g200m.sys
+ 2001-08-17 19:56:00 1,733,120 -c–a-w C:\WINDOWS\system32\dllcache\g400d.dll
+ 2001-08-17 17:49:42 322,432 -c–a-w C:\WINDOWS\system32\dllcache\g400m.sys
+ 2004-08-04 12:00:00 10,624 -c–a-w C:\WINDOWS\system32\dllcache\gameenum.sys
+ 2004-08-04 04:08:30 59,136 -c–a-w C:\WINDOWS\system32\dllcache\gckernel.sys
+ 2001-08-17 18:51:06 17,408 -c–a-w C:\WINDOWS\system32\dllcache\gpr400.sys
+ 2001-08-17 18:51:20 82,304 -c–a-w C:\WINDOWS\system32\dllcache\grclass.sys
+ 2004-08-04 03:59:20 28,288 -c–a-w C:\WINDOWS\system32\dllcache\grserial.sys
+ 2001-08-17 18:28:02 907,456 -c–a-w C:\WINDOWS\system32\dllcache\hcf_msft.sys
+ 2004-08-04 12:00:00 20,992 -c–a-w C:\WINDOWS\system32\dllcache\hid.dll
+ 2001-08-17 18:58:00 19,200 -c–a-w C:\WINDOWS\system32\dllcache\hidbatt.sys
+ 2004-08-04 12:00:00 36,224 -c–a-w C:\WINDOWS\system32\dllcache\hidclass.sys
+ 2001-08-17 19:02:32 8,576 -c–a-w C:\WINDOWS\system32\dllcache\hidgame.sys
+ 2004-08-04 12:00:00 24,960 -c–a-w C:\WINDOWS\system32\dllcache\hidparse.sys
+ 2004-08-04 12:00:00 21,504 -c–a-w C:\WINDOWS\system32\dllcache\hidserv.dll
+ 2004-08-04 12:00:00 9,600 -c–a-w C:\WINDOWS\system32\dllcache\hidusb.sys
+ 2001-08-18 03:36:16 119,296 -c–a-w C:\WINDOWS\system32\dllcache\hpdigwia.dll
+ 2001-08-18 03:36:16 83,968 -c–a-w C:\WINDOWS\system32\dllcache\hpgt21.dll
+ 2001-08-18 03:36:16 123,392 -c–a-w C:\WINDOWS\system32\dllcache\hpgt21tk.dll
+ 2001-08-18 03:36:16 89,088 -c–a-w C:\WINDOWS\system32\dllcache\hpgt33.dll
+ 2001-08-18 03:36:16 48,128 -c–a-w C:\WINDOWS\system32\dllcache\hpgt33tk.dll
+ 2001-08-18 03:36:16 101,376 -c–a-w C:\WINDOWS\system32\dllcache\hpgt34.dll
+ 2001-08-18 03:36:16 126,976 -c–a-w C:\WINDOWS\system32\dllcache\hpgt34tk.dll
+ 2001-08-18 03:36:16 93,696 -c–a-w C:\WINDOWS\system32\dllcache\hpgt42.dll
+ 2001-08-18 03:36:16 31,232 -c–a-w C:\WINDOWS\system32\dllcache\hpgt42tk.dll
+ 2001-08-18 03:36:16 165,888 -c–a-w C:\WINDOWS\system32\dllcache\hpgt53.dll
+ 2001-08-18 03:36:16 68,608 -c–a-w C:\WINDOWS\system32\dllcache\hpgt53tk.dll
+ 2001-08-18 03:36:16 32,768 -c–a-w C:\WINDOWS\system32\dllcache\hpgtmcro.dll
+ 2001-08-17 19:07:44 25,952 -c–a-w C:\WINDOWS\system32\dllcache\hpn.sys
+ 2001-08-18 03:36:16 324,608 -c–a-w C:\WINDOWS\system32\dllcache\hpojwia.dll
+ 2001-08-18 03:36:16 13,312 -c–a-w C:\WINDOWS\system32\dllcache\hpsjmcro.dll
+ 2001-08-17 18:52:50 5,760 -c–a-w C:\WINDOWS\system32\dllcache\hpt4qic.sys
+ 2001-08-18 03:36:16 19,456 -c–a-w C:\WINDOWS\system32\dllcache\hr1w.dll
- 2004-08-04 11:00:00 57,409 -c–a-w C:\WINDOWS\system32\dllcache\hrtz.dll
+ 2004-08-04 12:00:00 57,409 -c–a-w C:\WINDOWS\system32\dllcache\hrtz.dll
- 2004-08-04 11:00:00 1,175,635 -c–a-w C:\WINDOWS\system32\dllcache\hrtzres.dll
+ 2004-08-04 12:00:00 1,175,635 -c–a-w C:\WINDOWS\system32\dllcache\hrtzres.dll
- 2004-08-04 11:00:00 42,573 -c–a-w C:\WINDOWS\system32\dllcache\hrtzzm.exe
+ 2004-08-04 12:00:00 42,573 -c–a-w C:\WINDOWS\system32\dllcache\hrtzzm.exe
+ 2001-08-17 18:28:04 150,239 -c–a-w C:\WINDOWS\system32\dllcache\hsf_amos.sys
+ 2001-08-17 18:28:04 67,167 -c–a-w C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
+ 2001-08-17 18:28:06 289,887 -c–a-w C:\WINDOWS\system32\dllcache\hsf_fall.sys
+ 2001-08-17 18:28:06 199,711 -c–a-w C:\WINDOWS\system32\dllcache\hsf_faxx.sys
+ 2001-08-17 18:28:06 115,807 -c–a-w C:\WINDOWS\system32\dllcache\hsf_fsks.sys
+ 2001-08-18 03:36:16 9,759 -c–a-w C:\WINDOWS\system32\dllcache\hsf_inst.dll
+ 2001-08-17 18:28:08 391,199 -c–a-w C:\WINDOWS\system32\dllcache\hsf_k56k.sys
+ 2001-08-17 18:28:10 542,879 -c–a-w C:\WINDOWS\system32\dllcache\hsf_msft.sys
+ 2001-08-17 18:28:10 57,471 -c–a-w C:\WINDOWS\system32\dllcache\hsf_samp.sys
+ 2001-08-17 18:28:10 44,863 -c–a-w C:\WINDOWS\system32\dllcache\hsf_soar.sys
+ 2001-08-17 18:28:10 73,279 -c–a-w C:\WINDOWS\system32\dllcache\hsf_spkp.sys
+ 2001-08-17 18:28:12 50,751 -c–a-w C:\WINDOWS\system32\dllcache\hsf_tone.sys
+ 2001-08-17 18:28:12 488,383 -c–a-w C:\WINDOWS\system32\dllcache\hsf_v124.sys
+ 2006-03-17 00:33:10 262,784 -c–a-w C:\WINDOWS\system32\dllcache\http.sys
+ 2004-08-04 04:00:52 8,192 -c–a-w C:\WINDOWS\system32\dllcache\i2omgmt.sys
+ 2004-08-04 04:00:52 18,560 -c–a-w C:\WINDOWS\system32\dllcache\i2omp.sys
+ 2001-08-17 19:56:00 353,184 -c–a-w C:\WINDOWS\system32\dllcache\i740dnt5.dll
+ 2001-08-17 17:49:06 58,592 -c–a-w C:\WINDOWS\system32\dllcache\i740nt5.sys
+ 2004-08-04 12:00:00 52,736 -c–a-w C:\WINDOWS\system32\dllcache\i8042prt.sys
+ 2004-08-04 05:56:44 702,845 -c–a-w C:\WINDOWS\system32\dllcache\i81xdnt5.dll
+ 2004-08-04 03:29:38 161,020 -c–a-w C:\WINDOWS\system32\dllcache\i81xnt5.sys
+ 2001-08-17 17:11:58 28,700 -c–a-w C:\WINDOWS\system32\dllcache\ibmexmp.sys
+ 2001-08-18 03:34:30 9,216 -c–a-w C:\WINDOWS\system32\dllcache\ibmsgnet.dll
+ 2001-08-17 17:12:00 100,936 -c–a-w C:\WINDOWS\system32\dllcache\ibmtok.sys
+ 2001-08-17 17:12:02 109,085 -c–a-w C:\WINDOWS\system32\dllcache\ibmtrp.sys
+ 2001-08-17 19:06:46 38,528 -c–a-w C:\WINDOWS\system32\dllcache\ibmvcap.sys
+ 2001-08-17 19:05:44 141,056 -c–a-w C:\WINDOWS\system32\dllcache\icam3.sys
+ 2001-08-18 03:36:16 26,624 -c–a-w C:\WINDOWS\system32\dllcache\icam3ext.dll
+ 2001-08-18 03:36:16 91,136 -c–a-w C:\WINDOWS\system32\dllcache\icam4com.dll
+ 2001-08-18 03:36:16 61,952 -c–a-w C:\WINDOWS\system32\dllcache\icam4ext.dll
+ 2001-08-17 19:06:02 154,496 -c–a-w C:\WINDOWS\system32\dllcache\icam4usb.sys
+ 2001-08-18 03:36:16 45,056 -c–a-w C:\WINDOWS\system32\dllcache\icam5com.dll
+ 2001-08-18 03:36:16 20,480 -c–a-w C:\WINDOWS\system32\dllcache\icam5ext.dll
+ 2001-08-17 19:06:20 100,992 -c–a-w C:\WINDOWS\system32\dllcache\icam5usb.sys
- 2007-08-20 10:04:34 63,488 -c—-w C:\WINDOWS\system32\dllcache\icardie.dll
+ 2007-10-10 23:55:51 63,488 -c—-w C:\WINDOWS\system32\dllcache\icardie.dll
+ 2001-08-18 03:36:16 372,824 -c–a-w C:\WINDOWS\system32\dllcache\iconf32.dll
- 2007-08-17 10:20:54 63,488 -c–a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2007-10-10 10:59:40 70,656 -c–a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2007-08-20 10:04:34 153,088 -c–a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2007-10-10 23:55:51 153,088 -c–a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2007-08-20 10:04:35 230,400 -c–a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2007-10-10 23:55:51 230,400 -c–a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2007-08-17 07:34:25 161,792 -c–a-w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2007-10-10 05:46:55 161,792 -c–a-w C:\WINDOWS\system32\dllcache\ieakui.dll
- 2007-08-20 10:04:35 383,488 -c—-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
+ 2007-10-10 23:55:52 383,488 -c—-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2007-08-20 10:04:35 384,512 -c–a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2007-10-10 23:55:52 384,512 -c–a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2007-08-20 10:04:37 6,058,496 -c—-w C:\WINDOWS\system32\dllcache\ieframe.dll
+ 2007-10-10 23:55:54 6,065,664 -c—-w C:\WINDOWS\system32\dllcache\ieframe.dll
- 2007-08-20 10:04:38 44,544 -c–a-w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2007-10-10 23:55:55 44,544 -c–a-w C:\WINDOWS\system32\dllcache\iernonce.dll
- 2007-08-20 10:04:38 267,776 -c—-w C:\WINDOWS\system32\dllcache\iertutil.dll
+ 2007-10-10 23:55:55 267,776 -c—-w C:\WINDOWS\system32\dllcache\iertutil.dll
- 2007-08-17 10:20:54 13,824 -c—-w C:\WINDOWS\system32\dllcache\ieudinit.exe
+ 2007-10-10 10:59:40 13,824 -c—-w C:\WINDOWS\system32\dllcache\ieudinit.exe
- 2007-08-17 10:21:21 625,152 -c–a-w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2007-10-10 10:59:52 625,152 -c–a-w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2004-08-04 12:00:00 41,856 -c–a-w C:\WINDOWS\system32\dllcache\imapi.sys
+ 2001-08-17 18:52:08 16,000 -c–a-w C:\WINDOWS\system32\dllcache\ini910u.sys
+ 2001-08-17 18:47:50 13,056 -c–a-w C:\WINDOWS\system32\dllcache\inport.sys
+ 2004-08-04 03:59:42 5,504 -c–a-w C:\WINDOWS\system32\dllcache\intelide.sys
+ 2001-08-17 18:50:56 38,784 -c–a-w C:\WINDOWS\system32\dllcache\io8.sys
+ 2001-08-18 03:36:18 90,200 -c–a-w C:\WINDOWS\system32\dllcache\io8ports.dll
+ 2001-08-17 17:12:12 45,632 -c–a-w C:\WINDOWS\system32\dllcache\ip5515.sys
+ 2004-08-04 04:00:54 87,424 -c–a-w C:\WINDOWS\system32\dllcache\irda.sys
+ 2004-08-04 05:56:52 152,576 -c–a-w C:\WINDOWS\system32\dllcache\irftp.exe
+ 2001-08-17 18:49:04 23,552 -c–a-w C:\WINDOWS\system32\dllcache\irmk7.sys
+ 2004-08-04 05:56:44 27,136 -c–a-w C:\WINDOWS\system32\dllcache\irmon.dll
+ 2001-08-17 18:51:32 18,688 -c–a-w C:\WINDOWS\system32\dllcache\irsir.sys
+ 2001-08-17 18:49:10 26,624 -c–a-w C:\WINDOWS\system32\dllcache\irstusb.sys
+ 2004-08-04 12:00:00 35,840 -c–a-w C:\WINDOWS\system32\dllcache\isapnp.sys
+ 2004-08-04 12:00:00 47,616 -c–a-w C:\WINDOWS\system32\dllcache\iyuv_32.dll
- 2007-08-20 10:04:39 27,648 -c–a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2007-10-10 23:55:56 27,648 -c–a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2001-08-17 19:55:56 6,144 -c–a-w C:\WINDOWS\system32\dllcache\kbd101b.dll
+ 2001-08-17 19:55:56 6,144 -c–a-w C:\WINDOWS\system32\dllcache\kbd101c.dll
+ 2001-08-17 19:55:56 5,632 -c–a-w C:\WINDOWS\system32\dllcache\kbd103.dll
+ 2001-08-17 19:55:56 6,144 -c–a-w C:\WINDOWS\system32\dllcache\kbd106.dll
+ 2004-08-04 12:00:00 24,576 -c–a-w C:\WINDOWS\system32\dllcache\kbdclass.sys
+ 2004-08-04 12:00:00 14,848 -c–a-w C:\WINDOWS\system32\dllcache\kbdhid.sys
+ 2001-08-18 03:36:18 8,704 -c–a-w C:\WINDOWS\system32\dllcache\kbdjpn.dll
+ 2001-08-18 03:36:18 8,192 -c–a-w C:\WINDOWS\system32\dllcache\kbdkor.dll
+ 2001-08-18 03:36:18 45,568 -c–a-w C:\WINDOWS\system32\dllcache\kdsui.dll
+ 2001-08-18 03:36:18 242,176 -c–a-w C:\WINDOWS\system32\dllcache\kdsusd.dll
+ 2001-08-18 03:36:18 37,376 -c–a-w C:\WINDOWS\system32\dllcache\kousd.dll
- 2004-08-04 03:15:22 140,928 -c–a-w C:\WINDOWS\system32\dllcache\ks.sys
+ 2004-08-04 04:15:22 140,928 -c–a-w C:\WINDOWS\system32\dllcache\ks.sys
- 2004-08-04 04:56:44 4,096 -c–a-w C:\WINDOWS\system32\dllcache\ksuser.dll
+ 2004-08-04 05:56:44 4,096 -c–a-w C:\WINDOWS\system32\dllcache\ksuser.dll
+ 2001-08-17 17:12:14 19,016 -c–a-w C:\WINDOWS\system32\dllcache\ktc111.sys
+ 2001-08-17 17:12:50 26,442 -c–a-w C:\WINDOWS\system32\dllcache\lanepic5.sys
+ 2004-08-04 03:59:34 34,688 -c–a-w C:\WINDOWS\system32\dllcache\lbrtfdc.sys
+ 2001-08-17 18:51:10 15,744 -c–a-w C:\WINDOWS\system32\dllcache\lit220p.sys
+ 2001-08-17 17:11:52 25,065 -c–a-w C:\WINDOWS\system32\dllcache\lmndis3.sys
+ 2001-08-17 17:12:20 20,573 -c–a-w C:\WINDOWS\system32\dllcache\lne100.sys
+ 2001-08-17 17:12:24 70,730 -c–a-w C:\WINDOWS\system32\dllcache\lne100tx.sys
+ 2001-08-17 18:53:42 4,992 -c–a-w C:\WINDOWS\system32\dllcache\loop.sys
+ 2001-08-17 18:28:18 727,786 -c–a-w C:\WINDOWS\system32\dllcache\ltck000c.sys
+ 2003-12-13 00:03:10 652,689 -c–a-w C:\WINDOWS\system32\dllcache\ltmdmnt.sys
+ 2001-08-17 18:28:08 576,746 -c–a-w C:\WINDOWS\system32\dllcache\ltmdmntl.sys
+ 2004-08-04 03:41:38 420,992 -c–a-w C:\WINDOWS\system32\dllcache\ltmdmntt.sys
+ 2004-08-04 04:00:08 7,040 -c–a-w C:\WINDOWS\system32\dllcache\ltotape.sys
+ 2001-08-17 18:28:10 802,683 -c–a-w C:\WINDOWS\system32\dllcache\ltsm.sys
+ 2001-08-17 18:28:12 797,500 -c–a-w C:\WINDOWS\system32\dllcache\ltsmt.sys
+ 2004-08-04 03:39:32 20,864 -c–a-w C:\WINDOWS\system32\dllcache\lwadihid.sys
+ 2001-08-17 17:49:20 22,848 -c–a-w C:\WINDOWS\system32\dllcache\lwusbhid.sys
+ 2001-08-18 03:36:18 58,368 -c–a-w C:\WINDOWS\system32\dllcache\m3091dc.dll
+ 2001-08-18 03:36:18 58,880 -c–a-w C:\WINDOWS\system32\dllcache\m3092dc.dll
+ 2001-08-17 17:19:58 48,768 -c–a-w C:\WINDOWS\system32\dllcache\maestro.sys
+ 2001-08-17 18:52:50 7,424 -c–a-w C:\WINDOWS\system32\dllcache\mammoth.sys
+ 2001-08-17 17:12:26 164,586 -c–a-w C:\WINDOWS\system32\dllcache\mdgndis5.sys
+ 2001-08-17 18:58:04 8,320 -c–a-w C:\WINDOWS\system32\dllcache\memcard.sys
+ 2001-08-18 03:36:20 47,616 -c–a-w C:\WINDOWS\system32\dllcache\memgrp.dll
+ 2004-08-04 04:00:50 26,112 -c–a-w C:\WINDOWS\system32\dllcache\memstpci.sys
+ 2001-08-17 19:56:02 235,648 -c–a-w C:\WINDOWS\system32\dllcache\mgaud.dll
+ 2001-08-17 17:50:00 320,384 -c–a-w C:\WINDOWS\system32\dllcache\mgaum.sys
- 2005-07-25 23:46:57 7,680 -c–a-w C:\WINDOWS\system32\dllcache\migregdb.exe
+ 2004-08-04 12:00:00 7,680 -c–a-w C:\WINDOWS\system32\dllcache\migregdb.exe
+ 2001-08-17 18:52:50 6,528 -c–a-w C:\WINDOWS\system32\dllcache\miniqic.sys
+ 2004-08-04 12:00:00 30,080 -c–a-w C:\WINDOWS\system32\dllcache\modem.sys
+ 2001-08-17 18:57:38 16,128 -c–a-w C:\WINDOWS\system32\dllcache\modemcsa.sys
+ 2004-08-04 12:00:00 23,040 -c–a-w C:\WINDOWS\system32\dllcache\mouclass.sys
+ 2001-08-17 18:48:00 12,160 -c–a-w C:\WINDOWS\system32\dllcache\mouhid.sys
+ 2004-08-04 04:10:14 15,360 -c–a-w C:\WINDOWS\system32\dllcache\mpe.sys
+ 2001-08-17 18:52:12 17,280 -c–a-w C:\WINDOWS\system32\dllcache\mraid35x.sys
+ 2004-08-04 04:10:00 51,328 -c–a-w C:\WINDOWS\system32\dllcache\msdv.sys
- 2007-08-20 10:04:39 459,264 -c—-w C:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2007-10-10 23:55:56 459,264 -c—-w C:\WINDOWS\system32\dllcache\msfeeds.dll
- 2007-08-20 10:04:39 52,224 -c—-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2007-10-10 23:55:56 52,224 -c—-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2001-08-17 18:48:36 6,016 -c–a-w C:\WINDOWS\system32\dllcache\msfsio.sys
+ 2001-08-17 19:02:40 35,200 -c–a-w C:\WINDOWS\system32\dllcache\msgame.sys
- 2004-08-04 11:00:00 126,976 -c–a-w C:\WINDOWS\system32\dllcache\mshearts.exe
+ 2004-08-04 12:00:00 126,976 -c–a-w C:\WINDOWS\system32\dllcache\mshearts.exe
- 2007-08-20 10:04:41 3,584,512 -c–a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2007-10-30 23:42:28 3,590,656 -c–a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-08-20 10:04:41 477,696 -c–a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2007-10-10 23:55:58 478,208 -c–a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2004-08-04 04:00:48 22,016 -c–a-w C:\WINDOWS\system32\dllcache\msircomm.sys
+ 2004-08-04 12:00:00 7,552 -c–a-w C:\WINDOWS\system32\dllcache\mskssrv.sys
+ 2004-08-04 12:00:00 5,376 -c–a-w C:\WINDOWS\system32\dllcache\mspclock.sys
+ 2004-08-04 12:00:00 4,992 -c–a-w C:\WINDOWS\system32\dllcache\mspqm.sys
- 2007-08-20 10:04:41 193,024 -c–a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2007-10-10 23:55:58 193,024 -c–a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2001-08-17 18:48:50 12,416 -c–a-w C:\WINDOWS\system32\dllcache\msriffwv.sys
+ 2004-08-04 12:00:00 15,488 -c–a-w C:\WINDOWS\system32\dllcache\mssmbios.sys
+ 2004-08-04 04:10:00 49,024 -c–a-w C:\WINDOWS\system32\dllcache\mstape.sys
+ 2004-08-04 03:58:40 5,504 -c–a-w C:\WINDOWS\system32\dllcache\mstee.sys
- 2007-08-20 10:04:42 671,232 -c–a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2007-10-10 23:55:59 671,232 -c–a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2004-08-04 12:00:00 17,408 -c–a-w C:\WINDOWS\system32\dllcache\msyuv.dll
+ 2001-08-17 17:50:04 103,296 -c–a-w C:\WINDOWS\system32\dllcache\mtxvideo.sys
+ 2001-08-17 18:50:48 21,888 -c–a-w C:\WINDOWS\system32\dllcache\mxcard.sys
+ 2001-08-18 03:36:26 19,968 -c–a-w C:\WINDOWS\system32\dllcache\mxicfg.dll
+ 2001-08-17 18:49:32 19,968 -c–a-w C:\WINDOWS\system32\dllcache\mxnic.sys
+ 2001-08-18 03:36:26 7,168 -c–a-w C:\WINDOWS\system32\dllcache\mxport.dll
+ 2001-08-17 18:50:54 75,520 -c–a-w C:\WINDOWS\system32\dllcache\mxport.sys
+ 2001-08-17 17:11:36 52,255 -c–a-w C:\WINDOWS\system32\dllcache\n1000nt5.sys
+ 2001-08-17 17:11:38 128,000 -c–a-w C:\WINDOWS\system32\dllcache\n100325.sys
+ 2001-08-17 19:56:02 35,392 -c–a-w C:\WINDOWS\system32\dllcache\n9i128.dll
+ 2001-08-17 17:50:06 13,664 -c–a-w C:\WINDOWS\system32\dllcache\n9i128.sys
+ 2001-08-18 03:36:02 59,104 -c–a-w C:\WINDOWS\system32\dllcache\n9i128v2.dll
+ 2001-08-17 17:50:08 33,088 -c–a-w C:\WINDOWS\system32\dllcache\n9i128v2.sys
+ 2001-08-17 17:50:10 27,936 -c–a-w C:\WINDOWS\system32\dllcache\n9i3d.sys
+ 2001-08-17 19:56:02 91,488 -c–a-w C:\WINDOWS\system32\dllcache\n9i3disp.dll
+ 2004-08-04 04:10:30 85,376 -c–a-w C:\WINDOWS\system32\dllcache\nabtsfec.sys
+ 2004-08-04 04:10:14 10,880 -c–a-w C:\WINDOWS\system32\dllcache\ndisip.sys
+ 2004-08-04 12:00:00 12,928 -c–a-w C:\WINDOWS\system32\dllcache\ndisuio.sys
+ 2001-08-17 18:49:14 15,872 -c–a-w C:\WINDOWS\system32\dllcache\ne2000.sys
+ 2001-08-18 03:36:02 60,480 -c–a-w C:\WINDOWS\system32\dllcache\neo20xx.dll
+ 2001-08-17 17:50:04 39,264 -c–a-w C:\WINDOWS\system32\dllcache\neo20xx.sys
+ 2001-08-17 17:11:36 65,278 -c–a-w C:\WINDOWS\system32\dllcache\netflx3.sys
+ 2004-08-04 03:31:42 132,695 -c–a-w C:\WINDOWS\system32\dllcache\netwlan5.sys
+ 2001-08-17 17:12:20 32,840 -c–a-w C:\WINDOWS\system32\dllcache\ngrpci.sys
+ 2001-08-17 17:20:08 126,080 -c–a-w C:\WINDOWS\system32\dllcache\nm5a2wdm.sys
+ 2001-08-17 17:20:08 87,040 -c–a-w C:\WINDOWS\system32\dllcache\nm6wdm.sys
+ 2004-08-04 04:00:52 28,672 -c–a-w C:\WINDOWS\system32\dllcache\nscirda.sys
+ 2001-08-17 18:53:02 7,552 -c–a-w C:\WINDOWS\system32\dllcache\nsmmc.sys
+ 2001-08-17 18:47:22 9,344 -c–a-w C:\WINDOWS\system32\dllcache\ntapm.sys
+ 2001-08-17 17:49:04 51,552 -c–a-w C:\WINDOWS\system32\dllcache\ntgrip.sys
+ 2001-08-18 03:36:02 123,776 -c–a-w C:\WINDOWS\system32\dllcache\nv3.dll
+ 2001-08-17 17:50:18 198,144 -c–a-w C:\WINDOWS\system32\dllcache\nv3.sys
+ 2003-07-28 20:19:00 3,902,603 -c–a-w C:\WINDOWS\system32\dllcache\nv4_disp.dll
+ 2003-07-28 20:19:00 1,341,339 -c–a-w C:\WINDOWS\system32\dllcache\nv4_mini.sys
- 2007-08-20 10:04:42 102,400 -c–a-w C:\WINDOWS\system32\dllcache\occache.dll
+ 2007-10-10 23:55:59 102,400 -c–a-w C:\WINDOWS\system32\dllcache\occache.dll
+ 2004-08-04 04:10:10 61,056 -c–a-w C:\WINDOWS\system32\dllcache\ohci1394.sys
+ 2001-08-17 17:20:16 54,528 -c–a-w C:\WINDOWS\system32\dllcache\opl3sax.sys
+ 2001-08-17 17:12:36 27,209 -c–a-w C:\WINDOWS\system32\dllcache\otc06x5.sys
+ 2001-08-17 17:12:36 43,689 -c–a-w C:\WINDOWS\system32\dllcache\otceth5.sys
+ 2001-08-17 18:28:12 54,186 -c–a-w C:\WINDOWS\system32\dllcache\otcsercb.sys
+ 2001-08-17 19:05:04 25,088 -c–a-w C:\WINDOWS\system32\dllcache\ovca.sys
+ 2001-08-17 19:05:12 48,000 -c–a-w C:\WINDOWS\system32\dllcache\ovcam2.sys
+ 2001-08-17 19:05:16 28,032 -c–a-w C:\WINDOWS\system32\dllcache\ovcd.sys
+ 2001-08-17 19:05:20 31,872 -c–a-w C:\WINDOWS\system32\dllcache\ovce.sys
+ 2001-08-18 03:36:28 116,736 -c–a-w C:\WINDOWS\system32\dllcache\ovcodec2.dll
+ 2001-08-17 19:05:12 351,616 -c–a-w C:\WINDOWS\system32\dllcache\ovcodek2.sys
+ 2001-08-18 03:36:28 20,480 -c–a-w C:\WINDOWS\system32\dllcache\ovcomc.dll
+ 2001-08-18 03:36:54 39,424 -c–a-w C:\WINDOWS\system32\dllcache\ovcoms.exe
+ 2001-08-17 19:05:06 25,216 -c–a-w C:\WINDOWS\system32\dllcache\ovsound2.sys
+ 2001-08-18 03:36:28 44,544 -c–a-w C:\WINDOWS\system32\dllcache\ovui2.dll
+ 2001-08-18 03:36:28 41,984 -c–a-w C:\WINDOWS\system32\dllcache\ovui2rc.dll
+ 2004-08-04 12:00:00 80,128 -c–a-w C:\WINDOWS\system32\dllcache\parport.sys
+ 2001-08-17 17:12:18 30,495 -c–a-w C:\WINDOWS\system32\dllcache\pc100nds.sys
+ 2004-08-04 03:31:24 29,502 -c–a-w C:\WINDOWS\system32\dllcache\pca200e.sys
+ 2004-08-04 12:00:00 68,224 -c–a-w C:\WINDOWS\system32\dllcache\pci.sys
+ 2001-08-17 18:51:52 3,328 -c–a-w C:\WINDOWS\system32\dllcache\pciide.sys
+ 2004-08-04 12:00:00 119,936 -c–a-w C:\WINDOWS\system32\dllcache\pcmcia.sys
+ 2001-08-17 17:12:18 26,153 -c–a-w C:\WINDOWS\system32\dllcache\pcmlm56.sys
+ 2001-08-17 17:11:22 30,282 -c–a-w C:\WINDOWS\system32\dllcache\pcntn5hl.sys
+ 2001-08-17 17:11:20 29,769 -c–a-w C:\WINDOWS\system32\dllcache\pcntn5m.sys
+ 2001-08-17 17:11:22 35,328 -c–a-w C:\WINDOWS\system32\dllcache\pcntpci5.sys
+ 2001-08-18 03:36:54 86,016 -c–a-w C:\WINDOWS\system32\dllcache\pctspk.exe
+ 2004-08-04 03:06:18 169,984 -c–a-w C:\WINDOWS\system32\dllcache\pcx500.sys
+ 2001-08-17 19:07:40 27,296 -c–a-w C:\WINDOWS\system32\dllcache\perc2.sys
+ 2001-08-17 19:07:42 5,504 -c–a-w C:\WINDOWS\system32\dllcache\perc2hib.sys
+ 2004-08-04 04:06:56 27,904 -c–a-w C:\WINDOWS\system32\dllcache\perm2.sys
+ 2004-08-04 05:56:24 211,712 -c–a-w C:\WINDOWS\system32\dllcache\perm2dll.dll
+ 2004-08-04 04:06:58 28,032 -c–a-w C:\WINDOWS\system32\dllcache\perm3.sys
+ 2004-08-04 05:56:24 259,328 -c–a-w C:\WINDOWS\system32\dllcache\perm3dd.dll
+ 2001-08-18 03:36:28 16,384 -c–a-w C:\WINDOWS\system32\dllcache\philcam1.dll
+ 2001-08-17 19:04:50 75,776 -c–a-w C:\WINDOWS\system32\dllcache\philcam1.sys
+ 2001-08-17 19:04:08 173,696 -c–a-w C:\WINDOWS\system32\dllcache\philcam2.sys
+ 2001-08-17 19:04:04 92,416 -c–a-w C:\WINDOWS\system32\dllcache\phildec.sys
+ 2001-08-17 19:07:20 19,840 -c–a-w C:\WINDOWS\system32\dllcache\philtune.sys
+ 2001-08-18 03:36:28 121,344 -c–a-w C:\WINDOWS\system32\dllcache\phvfwext.dll
+ 2004-08-04 12:00:00 15,360 -c–a-w C:\WINDOWS\system32\dllcache\pjlmon.dll
+ 2001-08-17 18:53:04 7,168 -c–a-w C:\WINDOWS\system32\dllcache\pnrmc.sys
- 2004-08-04 03:15:50 145,792 -c–a-w C:\WINDOWS\system32\dllcache\portcls.sys
+ 2004-08-04 04:15:50 145,792 -c–a-w C:\WINDOWS\system32\dllcache\portcls.sys
+ 2001-08-17 18:53:14 7,552 -c–a-w C:\WINDOWS\system32\dllcache\powerfil.sys
+ 2001-08-17 18:53:22 17,792 -c–a-w C:\WINDOWS\system32\dllcache\ppa.sys
+ 2004-08-04 04:00:18 17,664 -c–a-w C:\WINDOWS\system32\dllcache\ppa3.sys
+ 2001-08-17 18:51:08 16,128 -c–a-w C:\WINDOWS\system32\dllcache\pscr.sys
+ 2004-08-04 05:56:46 363,520 -c–a-w C:\WINDOWS\system32\dllcache\psisdecd.dll
+ 2001-08-18 03:36:28 35,328 -c–a-w C:\WINDOWS\system32\dllcache\psisload.dll
+ 2001-08-18 03:36:30 5,632 -c–a-w C:\WINDOWS\system32\dllcache\ptpusb.dll
+ 2004-08-04 05:56:46 159,232 -c–a-w C:\WINDOWS\system32\dllcache\ptpusd.dll
+ 2001-08-17 18:28:12 128,286 -c–a-w C:\WINDOWS\system32\dllcache\ptserli.sys
+ 2001-08-17 18:28:14 112,574 -c–a-w C:\WINDOWS\system32\dllcache\ptserlp.sys
+ 2001-08-17 18:28:14 130,942 -c–a-w C:\WINDOWS\system32\dllcache\ptserlv.sys
+ 2004-08-04 04:00:06 6,016 -c–a-w C:\WINDOWS\system32\dllcache\qic157.sys
+ 2001-08-17 18:52:20 40,320 -c–a-w C:\WINDOWS\system32\dllcache\ql1080.sys
+ 2001-08-17 18:52:16 33,152 -c–a-w C:\WINDOWS\system32\dllcache\ql10wnt.sys
+ 2001-08-17 18:52:20 45,312 -c–a-w C:\WINDOWS\system32\dllcache\ql12160.sys
+ 2001-08-17 18:52:16 40,448 -c–a-w C:\WINDOWS\system32\dllcache\ql1240.sys
+ 2001-08-17 18:52:18 49,024 -c–a-w C:\WINDOWS\system32\dllcache\ql1280.sys
- 2005-08-30 03:54:26 1,287,168 -c–a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2007-10-29 22:43:03 1,287,680 -c–a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2001-08-17 18:53:32 3,328 -c–a-w C:\WINDOWS\system32\dllcache\qv2kux.sys
+ 2001-08-18 03:36:30 41,472 -c–a-w C:\WINDOWS\system32\dllcache\qvusd.dll
+ 2001-08-17 18:28:18 899,146 -c–a-w C:\WINDOWS\system32\dllcache\r2mdkxga.sys
+ 2001-08-17 18:28:20 714,762 -c–a-w C:\WINDOWS\system32\dllcache\r2mdmkxx.sys
+ 2001-08-17 18:51:32 19,584 -c–a-w C:\WINDOWS\system32\dllcache\rasirda.sys
+ 2004-08-04 03:01:16 196,864 -c–a-w C:\WINDOWS\system32\dllcache\rdpdr.sys
+ 2004-08-04 02:59:38 57,472 -c–a-w C:\WINDOWS\system32\dllcache\redbook.sys
+ 2001-08-18 03:36:30 86,097 -c–a-w C:\WINDOWS\system32\dllcache\reslog32.dll
+ 2001-08-17 17:12:36 37,563 -c–a-w C:\WINDOWS\system32\dllcache\rlnet5.sys
+ 2004-08-04 03:59:12 79,104 -c–a-w C:\WINDOWS\system32\dllcache\rocket.sys
+ 2001-08-17 17:19:20 3,840 -c–a-w C:\WINDOWS\system32\dllcache\rpfun.sys
+ 2001-08-18 03:36:30 9,216 -c–a-w C:\WINDOWS\system32\dllcache\rsmgrstr.dll
+ 2001-08-17 17:19:22 30,720 -c–a-w C:\WINDOWS\system32\dllcache\rthwcls.sys
+ 2001-08-17 17:12:40 19,017 -c–a-w C:\WINDOWS\system32\dllcache\rtl8029.sys
+ 2004-08-04 03:31:34 20,992 -c–a-w C:\WINDOWS\system32\dllcache\rtl8139.sys
- 2004-08-04 11:00:00 48,706 -c–a-w C:\WINDOWS\system32\dllcache\rvse.dll
+ 2004-08-04 12:00:00 48,706 -c–a-w C:\WINDOWS\system32\dllcache\rvse.dll
- 2004-08-04 11:00:00 753,236 -c–a-w C:\WINDOWS\system32\dllcache\rvseres.dll
+ 2004-08-04 12:00:00 753,236 -c–a-w C:\WINDOWS\system32\dllcache\rvseres.dll
- 2004-08-04 11:00:00 42,574 -c–a-w C:\WINDOWS\system32\dllcache\rvsezm.exe
+ 2004-08-04 12:00:00 42,574 -c–a-w C:\WINDOWS\system32\dllcache\rvsezm.exe
+ 2001-08-18 03:36:30 24,576 -c–a-w C:\WINDOWS\system32\dllcache\rw430ext.dll
+ 2001-08-18 03:36:30 26,624 -c–a-w C:\WINDOWS\system32\dllcache\rw450ext.dll
+ 2001-08-18 03:36:30 79,872 -c–a-w C:\WINDOWS\system32\dllcache\rwia430.dll
+ 2001-08-18 03:36:30 82,432 -c–a-w C:\WINDOWS\system32\dllcache\rwia450.dll
+ 2001-08-17 19:56:04 66,048 -c–a-w C:\WINDOWS\system32\dllcache\s3legacy.dll
+ 2001-08-17 18:57:46 65,664 -c–a-w C:\WINDOWS\system32\dllcache\s3legacy.sys
+ 2001-08-17 17:50:34 166,720 -c–a-w C:\WINDOWS\system32\dllcache\s3m.sys
+ 2001-08-17 19:56:04 182,272 -c–a-w C:\WINDOWS\system32\dllcache\s3mt3d.dll
+ 2001-08-17 17:50:40 41,216 -c–a-w C:\WINDOWS\system32\dllcache\s3mt3d.sys
+ 2001-08-18 03:36:02 62,496 -c–a-w C:\WINDOWS\system32\dllcache\s3mtrio.dll
+ 2001-08-17 19:56:04 210,496 -c–a-w C:\WINDOWS\system32\dllcache\s3mvirge.dll
+ 2001-08-17 19:56:04 179,264 -c–a-w C:\WINDOWS\system32\dllcache\s3sav3d.dll
+ 2001-08-17 17:50:22 61,504 -c–a-w C:\WINDOWS\system32\dllcache\s3sav3dm.sys
+ 2001-08-17 19:56:04 198,400 -c–a-w C:\WINDOWS\system32\dllcache\s3sav4.dll
+ 2001-08-17 17:50:28 77,824 -c–a-w C:\WINDOWS\system32\dllcache\s3sav4m.sys
+ 2001-08-17 19:56:04 245,632 -c–a-w C:\WINDOWS\system32\dllcache\s3savmx.dll
+ 2001-08-17 17:50:34 75,392 -c–a-w C:\WINDOWS\system32\dllcache\s3savmxm.sys
+ 2004-08-04 03:59:58 43,136 -c–a-w C:\WINDOWS\system32\dllcache\sbp2port.sys
+ 2001-08-17 18:51:10 23,936 -c–a-w C:\WINDOWS\system32\dllcache\sccmn50m.sys
+ 2001-08-17 18:51:14 23,936 -c–a-w C:\WINDOWS\system32\dllcache\sccmusbm.sys
+ 2001-08-17 18:51:14 16,640 -c–a-w C:\WINDOWS\system32\dllcache\scmstcs.sys
+ 2001-08-17 18:51:16 17,280 -c–a-w C:\WINDOWS\system32\dllcache\scr111.sys
+ 2004-08-04 12:00:00 96,256 -c–a-w C:\WINDOWS\system32\dllcache\scsiport.sys
+ 2001-08-17 18:52:34 11,648 -c–a-w C:\WINDOWS\system32\dllcache\scsiprnt.sys
+ 2001-08-17 18:53:26 10,880 -c–a-w C:\WINDOWS\system32\dllcache\scsiscan.sys
+ 2001-08-17 18:53:10 6,912 -c–a-w C:\WINDOWS\system32\dllcache\seaddsmc.sys
+ 2004-08-04 12:00:00 15,488 -c–a-w C:\WINDOWS\system32\dllcache\serenum.sys
+ 2004-08-04 12:00:00 64,896 -c–a-w C:\WINDOWS\system32\dllcache\serial.sys
+ 2001-08-17 18:48:00 17,664 -c–a-w C:\WINDOWS\system32\dllcache\sermouse.sys
+ 2001-08-17 18:53:32 6,784 -c–a-w C:\WINDOWS\system32\dllcache\serscan.sys
+ 2004-08-04 12:00:00 11,392 -c–a-w C:\WINDOWS\system32\dllcache\sfloppy.sys
+ 2001-08-17 16:19:34 36,480 -c–a-w C:\WINDOWS\system32\dllcache\sfmanm.sys
+ 2001-08-18 03:36:02 386,560 -c–a-w C:\WINDOWS\system32\dllcache\sgiul50.dll
+ 2001-08-17 17:51:04 98,080 -c–a-w C:\WINDOWS\system32\dllcache\sgiulnt5.sys
+ 2001-07-21 19:29:20 18,400 -c–a-w C:\WINDOWS\system32\dllcache\sgsmld.sys
+ 2001-07-21 19:29:20 161,568 -c–a-w C:\WINDOWS\system32\dllcache\sgsmusb.sys
- 2006-12-19 21:52:18 8,453,632 -c–a-w C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-26 03:36:51 8,454,656 -c–a-w C:\WINDOWS\system32\dllcache\shell32.dll
- 2004-08-04 11:00:00 66,113 -c–a-w C:\WINDOWS\system32\dllcache\shvl.dll
+ 2004-08-04 12:00:00 66,113 -c–a-w C:\WINDOWS\system32\dllcache\shvl.dll
- 2004-08-04 11:00:00 2,178,131 -c–a-w C:\WINDOWS\system32\dllcache\shvlres.dll
+ 2004-08-04 12:00:00 2,178,131 -c–a-w C:\WINDOWS\system32\dllcache\shvlres.dll
- 2004-08-04 11:00:00 42,573 -c–a-w C:\WINDOWS\system32\dllcache\shvlzm.exe
+ 2004-08-04 12:00:00 42,573 -c–a-w C:\WINDOWS\system32\dllcache\shvlzm.exe
+ 2001-08-17 17:50:46 101,760 -c–a-w C:\WINDOWS\system32\dllcache\sis300ip.sys
+ 2001-08-17 19:56:04 252,032 -c–a-w C:\WINDOWS\system32\dllcache\sis300iv.dll
+ 2001-08-17 17:50:56 68,608 -c–a-w C:\WINDOWS\system32\dllcache\sis6306p.sys
+ 2001-08-17 19:56:04 150,144 -c–a-w C:\WINDOWS\system32\dllcache\sis6306v.dll
+ 2001-08-17 17:50:48 104,064 -c–a-w C:\WINDOWS\system32\dllcache\sisgrp.sys
+ 2001-08-18 03:36:32 238,592 -c–a-w C:\WINDOWS\system32\dllcache\sisgrv.dll
+ 2004-08-04 03:31:36 32,768 -c–a-w C:\WINDOWS\system32\dllcache\sisnic.sys
+ 2001-08-17 17:50:56 50,432 -c–a-w C:\WINDOWS\system32\dllcache\sisv.sys
+ 2001-08-17 19:56:04 157,696 -c–a-w C:\WINDOWS\system32\dllcache\sisv256.dll
+ 2001-08-17 17:12:52 94,698 -c–a-w C:\WINDOWS\system32\dllcache\sk98xwin.sys
+ 2001-08-17 17:12:52 91,294 -c–a-w C:\WINDOWS\system32\dllcache\skfpwin.sys
+ 2004-08-04 03:31:42 63,547 -c–a-w C:\WINDOWS\system32\dllcache\sla30nd5.sys
+ 2004-08-04 04:10:18 11,136 -c–a-w C:\WINDOWS\system32\dllcache\slip.sys
+ 2001-08-18 03:36:32 28,160 -c–a-w C:\WINDOWS\system32\dllcache\sm91w.dll
+ 2001-08-18 03:36:32 28,672 -c–a-w C:\WINDOWS\system32\dllcache\sma0w.dll
+ 2001-08-18 03:36:32 33,792 -c–a-w C:\WINDOWS\system32\dllcache\smb0w.dll
+ 2001-08-18 03:36:32 45,568 -c–a-w C:\WINDOWS\system32\dllcache\smb3w.dll
+ 2004-08-04 04:07:36 16,128 -c–a-w C:\WINDOWS\system32\dllcache\smbbatt.sys
+ 2004-08-04 04:07:36 6,912 -c–a-w C:\WINDOWS\system32\dllcache\smbclass.sys
+ 2001-08-17 18:57:56 6,784 -c–a-w C:\WINDOWS\system32\dllcache\smbhc.sys
+ 2001-08-17 17:12:46 24,576 -c–a-w C:\WINDOWS\system32\dllcache\smc8000n.sys
+ 2001-08-17 17:10:28 35,913 -c–a-w C:\WINDOWS\system32\dllcache\smcirda.sys
+ 2001-08-17 17:12:48 25,034 -c–a-w C:\WINDOWS\system32\dllcache\smcpwr2n.sys
+ 2001-08-17 19:56:04 147,200 -c–a-w C:\WINDOWS\system32\dllcache\smidispb.dll
+ 2001-08-17 17:51:00 58,368 -c–a-w C:\WINDOWS\system32\dllcache\smiminib.sys
+ 2001-08-17 18:53:14 7,040 -c–a-w C:\WINDOWS\system32\dllcache\snyaitmc.sys
+ 2004-08-04 04:00:06 7,552 -c–a-w C:\WINDOWS\system32\dllcache\sonyait.sys
+ 2001-08-17 18:53:04 9,600 -c–a-w C:\WINDOWS\system32\dllcache\sonymc.sys
+ 2001-08-17 17:51:20 20,752 -c–a-w C:\WINDOWS\system32\dllcache\sonync.sys
+ 2001-08-18 03:36:32 114,688 -c–a-w C:\WINDOWS\system32\dllcache\sonypi.dll
+ 2001-08-17 17:51:22 37,040 -c–a-w C:\WINDOWS\system32\dllcache\sonypi.sys
+ 2001-08-17 18:56:16 7,552 -c–a-w C:\WINDOWS\system32\dllcache\sonypvu1.sys
+ 2001-08-17 19:07:44 19,072 -c–a-w C:\WINDOWS\system32\dllcache\sparrow.sys
+ 2001-08-18 03:36:32 106,584 -c–a-w C:\WINDOWS\system32\dllcache\spdports.dll
+ 2001-08-17 18:51:00 61,824 -c–a-w C:\WINDOWS\system32\dllcache\speed.sys
+ 2001-08-18 03:36:32 24,660 -c–a-w C:\WINDOWS\system32\dllcache\spxupchk.dll
+ 2001-08-18 03:36:32 99,328 -c–a-w C:\WINDOWS\system32\dllcache\srusd.dll
+ 2001-08-17 17:11:08 48,736 -c–a-w C:\WINDOWS\system32\dllcache\srwlnd5.sys
+ 2001-08-17 18:51:20 16,896 -c–a-w C:\WINDOWS\system32\dllcache\stcusb.sys
+ 2001-08-17 17:18:18 285,760 -c–a-w C:\WINDOWS\system32\dllcache\stlnata.sys
+ 2001-08-18 03:36:32 53,248 -c–a-w C:\WINDOWS\system32\dllcache\stlncoin.dll
+ 2001-08-18 03:36:32 155,648 -c–a-w C:\WINDOWS\system32\dllcache\stlnprop.dll
- 2004-08-04 03:08:04 48,640 -c–a-w C:\WINDOWS\system32\dllcache\stream.sys
+ 2004-08-04 04:08:04 48,640 -c–a-w C:\WINDOWS\system32\dllcache\stream.sys
+ 2004-08-04 04:10:14 15,360 -c–a-w C:\WINDOWS\system32\dllcache\streamip.sys
+ 2001-08-18 03:36:32 41,472 -c–a-w C:\WINDOWS\system32\dllcache\sw_effct.dll
+ 2001-08-18 03:36:32 53,760 -c–a-w C:\WINDOWS\system32\dllcache\sw_wheel.dll
+ 2004-08-04 12:00:00 4,352 -c–a-w C:\WINDOWS\system32\dllcache\swenum.sys
+ 2004-08-04 12:00:00 54,272 -c–a-w C:\WINDOWS\system32\dllcache\swmidi.sys
+ 2001-08-18 03:36:32 10,240 -c–a-w C:\WINDOWS\system32\dllcache\swpdflt2.dll
+ 2001-08-18 03:36:32 10,240 -c–a-w C:\WINDOWS\system32\dllcache\swpidflt.dll
+ 2001-08-17 19:02:56 3,968 -c–a-w C:\WINDOWS\system32\dllcache\swusbflt.sys
+ 2001-08-17 18:50:58 103,936 -c–a-w C:\WINDOWS\system32\dllcache\sx.sys
+ 2001-08-18 03:36:32 94,293 -c–a-w C:\WINDOWS\system32\dllcache\sxports.dll
+ 2001-08-17 19:07:40 28,384 -c–a-w C:\WINDOWS\system32\dllcache\sym_hi.sys
+ 2001-08-17 19:07:42 30,688 -c–a-w C:\WINDOWS\system32\dllcache\sym_u3.sys
+ 2001-08-17 19:07:34 16,256 -c–a-w C:\WINDOWS\system32\dllcache\symc810.sys
+ 2001-08-17 19:07:36 32,640 -c–a-w C:\WINDOWS\system32\dllcache\symc8xx.sys
+ 2004-08-04 12:00:00 60,800 -c–a-w C:\WINDOWS\system32\dllcache\sysaudio.sys
+ 2001-08-17 19:56:04 172,768 -c–a-w C:\WINDOWS\system32\dllcache\t2r4disp.dll
+ 2001-08-17 17:50:12 36,640 -c–a-w C:\WINDOWS\system32\dllcache\t2r4mini.sys
+ 2001-08-17 18:52:54 7,040 -c–a-w C:\WINDOWS\system32\dllcache\tandqic.sys
+ 2001-08-17 18:49:46 30,464 -c–a-w C:\WINDOWS\system32\dllcache\tbatm155.sys
+ 2001-08-17 17:13:00 37,961 -c–a-w C:\WINDOWS\system32\dllcache\tdk100b.sys
+ 2001-08-17 17:13:00 17,129 -c–a-w C:\WINDOWS\system32\dllcache\tdkcd31.sys
+ 2004-08-04 05:01:08 40,840 -c–a-w C:\WINDOWS\system32\dllcache\termdd.sys
+ 2004-08-04 04:00:06 149,376 -c–a-w C:\WINDOWS\system32\dllcache\tffsport.sys
+ 2001-08-17 19:56:04 81,408 -c–a-w C:\WINDOWS\system32\dllcache\tgiul50.dll
+ 2001-08-17 17:51:10 138,528 -c–a-w C:\WINDOWS\system32\dllcache\tgiulnt5.sys
+ 2001-08-17 17:14:26 123,995 -c–a-w C:\WINDOWS\system32\dllcache\tjisdn.sys
+ 2001-08-17 17:10:26 28,232 -c–a-w C:\WINDOWS\system32\dllcache\tos4mo.sys
+ 2001-08-17 19:01:52 241,664 -c–a-w C:\WINDOWS\system32\dllcache\tosdvd02.sys
+ 2001-08-17 19:02:00 230,912 -c–a-w C:\WINDOWS\system32\dllcache\tosdvd03.sys
+ 2001-08-17 18:51:56 4,992 -c–a-w C:\WINDOWS\system32\dllcache\toside.sys
+ 2001-08-18 03:36:32 31,744 -c–a-w C:\WINDOWS\system32\dllcache\tp4.dll
+ 2004-08-04 05:56:58 82,432 -c–a-w C:\WINDOWS\system32\dllcache\tp4mon.exe
+ 2001-08-18 03:35:42 42,496 -c–a-w C:\WINDOWS\system32\dllcache\tp4res.dll
+ 2001-08-17 17:12:12 34,375 -c–a-w C:\WINDOWS\system32\dllcache\tpro4.sys
+ 2001-08-17 19:56:06 315,520 -c–a-w C:\WINDOWS\system32\dllcache\trid3d.dll
+ 2001-08-17 17:51:16 222,336 -c–a-w C:\WINDOWS\system32\dllcache\trid3dm.sys
+ 2001-08-17 19:56:06 440,576 -c–a-w C:\WINDOWS\system32\dllcache\tridkb.dll
+ 2001-08-17 17:51:16 159,232 -c–a-w C:\WINDOWS\system32\dllcache\tridkbm.sys
+ 2001-08-18 03:36:32 525,568 -c–a-w C:\WINDOWS\system32\dllcache\tridxp.dll
+ 2001-08-17 17:51:22 166,784 -c–a-w C:\WINDOWS\system32\dllcache\tridxpm.sys
+ 2004-08-04 12:00:00 8,192 -c–a-w C:\WINDOWS\system32\dllcache\tsbyuv.dll
+ 2001-08-17 18:48:14 11,520 -c–a-w C:\WINDOWS\system32\dllcache\twotrack.sys
+ 2001-08-17 18:52:22 36,736 -c–a-w C:\WINDOWS\system32\dllcache\ultra.sys
+ 2001-08-18 03:36:34 216,064 -c–a-w C:\WINDOWS\system32\dllcache\um34scan.dll
+ 2001-08-18 03:36:34 211,968 -c–a-w C:\WINDOWS\system32\dllcache\um54scan.dll
+ 2001-08-18 03:36:34 47,616 -c–a-w C:\WINDOWS\system32\dllcache\umaxcam.dll
+ 2001-08-18 03:36:34 50,176 -c–a-w C:\WINDOWS\system32\dllcache\umaxp60.dll
+ 2001-08-17 18:58:12 22,912 -c–a-w C:\WINDOWS\system32\dllcache\umaxpcls.sys
+ 2001-08-18 03:36:34 50,688 -c–a-w C:\WINDOWS\system32\dllcache\umaxscan.dll
+ 2001-08-18 03:36:34 69,632 -c–a-w C:\WINDOWS\system32\dllcache\umaxu12.dll
+ 2001-08-18 03:36:34 26,624 -c–a-w C:\WINDOWS\system32\dllcache\umaxu22.dll
+ 2001-08-18 03:36:34 28,160 -c–a-w C:\WINDOWS\system32\dllcache\umaxu40.dll
+ 2001-08-18 03:36:34 94,720 -c–a-w C:\WINDOWS\system32\dllcache\umaxud32.dll
- 2004-08-04 11:00:00 32,339 -c–a-w C:\WINDOWS\system32\dllcache\uniansi.dll
+ 2004-08-04 12:00:00 32,339 -c–a-w C:\WINDOWS\system32\dllcache\uniansi.dll
- 2007-08-20 10:04:42 105,984 -c–a-w C:\WINDOWS\system32\dllcache\url.dll
+ 2007-10-10 23:55:59 105,984 -c–a-w C:\WINDOWS\system32\dllcache\url.dll
- 2007-08-20 10:04:42 1,152,000 -c–a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2007-10-10 23:56:00 1,159,680 -c–a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2004-08-04 03:31:26 32,384 -c–a-w C:\WINDOWS\system32\dllcache\usb101et.sys
+ 2004-08-04 04:07:56 59,264 -c–a-w C:\WINDOWS\system32\dllcache\usbaudio.sys
+ 2004-08-04 12:00:00 31,616 -c–a-w C:\WINDOWS\system32\dllcache\usbccgp.sys
+ 2004-08-04 12:00:00 4,736 -c–a-w C:\WINDOWS\system32\dllcache\usbd.sys
+ 2004-08-04 12:00:00 57,600 -c–a-w C:\WINDOWS\system32\dllcache\usbhub.sys
+ 2004-08-04 04:08:38 17,024 -c–a-w C:\WINDOWS\system32\dllcache\usbohci.sys
+ 2004-08-04 12:00:00 142,976 -c–a-w C:\WINDOWS\system32\dllcache\usbport.sys
+ 2004-08-04 03:01:26 25,856 -c–a-w C:\WINDOWS\system32\dllcache\usbprint.sys
+ 2004-08-04 03:58:46 15,104 -c–a-w C:\WINDOWS\system32\dllcache\usbscan.sys
+ 2004-08-04 04:08:44 25,600 -c–a-w C:\WINDOWS\system32\dllcache\usbser.sys
+ 2004-08-04 04:08:48 26,496 -c–a-w C:\WINDOWS\system32\dllcache\usbstor.sys
+ 2004-08-04 12:00:00 20,480 -c–a-w C:\WINDOWS\system32\dllcache\usbuhci.sys
+ 2001-08-17 18:28:16 794,654 -c–a-w C:\WINDOWS\system32\dllcache\usr1801.sys
+ 2001-08-17 18:28:16 793,598 -c–a-w C:\WINDOWS\system32\dllcache\usr1806.sys
+ 2001-08-17 18:28:18 794,399 -c–a-w C:\WINDOWS\system32\dllcache\usr1806v.sys
+ 2001-08-17 18:28:24 224,802 -c–a-w C:\WINDOWS\system32\dllcache\usr1807a.sys
+ 2001-08-17 18:28:24 7,556 -c–a-w C:\WINDOWS\system32\dllcache\usroslba.sys
+ 2001-08-17 18:28:26 113,762 -c–a-w C:\WINDOWS\system32\dllcache\usrpda.sys
+ 2001-08-17 18:28:14 765,884 -c–a-w C:\WINDOWS\system32\dllcache\usrti.sys
+ 2001-08-17 18:28:26 687,999 -c–a-w C:\WINDOWS\system32\dllcache\usrwdxjs.sys
+ 2004-08-04 05:56:48 53,760 -c–a-w C:\WINDOWS\system32\dllcache\vfwwdm32.dll
+ 2004-08-04 03:07:44 42,240 -c–a-w C:\WINDOWS\system32\dllcache\viaagp.sys
+ 2001-08-17 18:49:04 24,576 -c–a-w C:\WINDOWS\system32\dllcache\viairda.sys
+ 2001-08-17 17:14:12 249,402 -c–a-w C:\WINDOWS\system32\dllcache\vinwm.sys
+ 2001-08-17 18:28:14 604,253 -c–a-w C:\WINDOWS\system32\dllcache\vmodem.sys
+ 2001-08-17 18:28:16 397,502 -c–a-w C:\WINDOWS\system32\dllcache\vpctcom.sys
+ 2001-08-17 18:28:16 64,605 -c–a-w C:\WINDOWS\system32\dllcache\vvoice.sys
+ 2001-08-17 17:13:08 19,528 -c–a-w C:\WINDOWS\system32\dllcache\w840nd.sys
+ 2001-08-17 17:13:08 19,016 -c–a-w C:\WINDOWS\system32\dllcache\w926nd.sys
+ 2001-08-17 17:13:12 16,925 -c–a-w C:\WINDOWS\system32\dllcache\w940nd.sys
+ 2004-08-04 03:29:38 12,415 -c–a-w C:\WINDOWS\system32\dllcache\wadv01nt.sys
+ 2004-08-04 03:29:38 12,127 -c–a-w C:\WINDOWS\system32\dllcache\wadv02nt.sys
+ 2004-08-04 03:29:38 11,775 -c–a-w C:\WINDOWS\system32\dllcache\wadv05nt.sys
+ 2004-08-04 03:29:42 29,311 -c–a-w C:\WINDOWS\system32\dllcache\watv01nt.sys
+ 2004-08-04 03:29:44 19,551 -c–a-w C:\WINDOWS\system32\dllcache\watv02nt.sys
+ 2004-08-04 03:29:44 33,599 -c–a-w C:\WINDOWS\system32\dllcache\watv04nt.sys
+ 2001-08-17 17:10:30 35,871 -c–a-w C:\WINDOWS\system32\dllcache\wbfirdma.sys
+ 2004-08-04 04:08:48 31,744 -c–a-w C:\WINDOWS\system32\dllcache\wceusbsh.sys
+ 2004-08-04 03:29:46 23,615 -c–a-w C:\WINDOWS\system32\dllcache\wch7xxnt.sys
+ 2001-08-17 18:28:02 701,386 -c–a-w C:\WINDOWS\system32\dllcache\wdhaalba.sys
- 2007-08-20 10:04:42 232,960 -c–a-w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2007-10-10 23:56:00 232,960 -c–a-w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2001-08-18 03:36:34 87,040 -c–a-w C:\WINDOWS\system32\dllcache\wiafbdrv.dll
+ 2001-08-18 03:36:34 53,760 -c–a-w C:\WINDOWS\system32\dllcache\wiamsmud.dll
+ 2001-08-17 18:28:14 771,581 -c–a-w C:\WINDOWS\system32\dllcache\winacisa.sys
- 2007-08-20 10:04:43 824,832 -c–a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2007-10-10 23:56:00 824,832 -c–a-w C:\WINDOWS\system32\dllcache\wininet.dll
- 2004-08-04 11:00:00 119,808 -c–a-w C:\WINDOWS\system32\dllcache\winmine.exe
+ 2004-08-04 12:00:00 119,808 -c–a-w C:\WINDOWS\system32\dllcache\winmine.exe
+ 2001-08-17 17:12:38 34,890 -c–a-w C:\WINDOWS\system32\dllcache\wlandrv2.sys
+ 2004-08-04 03:31:28 154,624 -c–a-w C:\WINDOWS\system32\dllcache\wlluc48.sys
- 2004-08-04 12:00:00 230,400 -c–a-w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2007-10-27 22:39:20 230,912 -c–a-w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2004-08-04 04:07:42 8,832 -c–a-w C:\WINDOWS\system32\dllcache\wmiacpi.sys
- 2006-12-07 21:02:24 2,174,976 -c–a-w C:\WINDOWS\system32\dllcache\wmvcore.dll
+ 2007-10-27 22:37:38 2,109,440 -c–a-w C:\WINDOWS\system32\dllcache\wmvcore.dll
+ 2004-08-04 05:56:48 8,192 -c–a-w C:\WINDOWS\system32\dllcache\wshirda.dll
+ 2004-08-04 03:29:48 12,063 -c–a-w C:\WINDOWS\system32\dllcache\wsiintxx.sys
+ 2004-08-04 04:10:22 19,328 -c–a-w C:\WINDOWS\system32\dllcache\wstcodec.sys
+ 2004-08-04 03:29:50 19,455 -c–a-w C:\WINDOWS\system32\dllcache\wvchntxx.sys
+ 2004-08-04 12:00:00 51,712 -c–a-w C:\WINDOWS\system32\dllcache\wzcsapi.dll
+ 2004-08-04 12:00:00 359,936 -c–a-w C:\WINDOWS\system32\dllcache\wzcsvc.dll
+ 2001-08-17 17:11:14 16,970 -c–a-w C:\WINDOWS\system32\dllcache\xem336n5.sys
+ 2001-08-18 03:37:02 99,865 -c–a-w C:\WINDOWS\system32\dllcache\xlog.exe
+ 2001-08-18 03:37:02 4,608 -c–a-w C:\WINDOWS\system32\dllcache\xrxflnch.exe
+ 2001-08-18 03:37:02 27,648 -c–a-w C:\WINDOWS\system32\dllcache\xrxftplt.exe
+ 2001-08-18 03:36:36 17,408 -c–a-w C:\WINDOWS\system32\dllcache\xrxscnui.dll
+ 2001-08-18 03:36:36 23,040 -c–a-w C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
+ 2004-08-04 05:56:48 116,224 -c–a-w C:\WINDOWS\system32\dllcache\xrxwiadr.dll
- 2004-08-04 11:00:00 36,937 -c–a-w C:\WINDOWS\system32\dllcache\zclientm.exe
+ 2004-08-04 12:00:00 36,937 -c–a-w C:\WINDOWS\system32\dllcache\zclientm.exe
- 2004-08-04 11:00:00 41,029 -c–a-w C:\WINDOWS\system32\dllcache\zcorem.dll
+ 2004-08-04 12:00:00 41,029 -c–a-w C:\WINDOWS\system32\dllcache\zcorem.dll
- 2004-08-04 11:00:00 4,677 -c–a-w C:\WINDOWS\system32\dllcache\zeeverm.dll
+ 2004-08-04 12:00:00 4,677 -c–a-w C:\WINDOWS\system32\dllcache\zeeverm.dll
- 2004-08-04 11:00:00 29,760 -c–a-w C:\WINDOWS\system32\dllcache\znetm.dll
+ 2004-08-04 12:00:00 29,760 -c–a-w C:\WINDOWS\system32\dllcache\znetm.dll
- 2004-08-04 11:00:00 113,222 -c–a-w C:\WINDOWS\system32\dllcache\zoneclim.dll
+ 2004-08-04 12:00:00 113,222 -c–a-w C:\WINDOWS\system32\dllcache\zoneclim.dll
- 2004-08-04 11:00:00 13,894 -c–a-w C:\WINDOWS\system32\dllcache\zonelibm.dll
+ 2004-08-04 12:00:00 13,894 -c–a-w C:\WINDOWS\system32\dllcache\zonelibm.dll
+ 2007-12-21 11:50:34 821,856 —-a-w C:\WINDOWS\system32\drivers\avg7core.sys
+ 2007-12-21 11:50:39 4,224 —-a-w C:\WINDOWS\system32\drivers\avg7rsw.sys
+ 2007-12-21 11:50:41 27,776 —-a-w C:\WINDOWS\system32\drivers\avg7rsxp.sys
+ 2007-12-21 11:54:19 10,760 —-a-w C:\WINDOWS\system32\drivers\avgclean.sys
+ 2007-12-21 11:54:15 26,952 —-a-w C:\WINDOWS\system32\drivers\avgmfx86.sys
+ 2007-12-21 11:50:42 4,960 —-a-w C:\WINDOWS\system32\drivers\avgtdi.sys
- 2004-08-04 03:08:00 60,288 —-a-w C:\WINDOWS\system32\drivers\drmk.sys
+ 2004-08-04 04:08:00 60,288 —-a-w C:\WINDOWS\system32\drivers\drmk.sys
- 2007-07-19 19:10:28 127,768 —-a-w C:\WINDOWS\system32\drivers\klif.sys
+ 2007-07-19 20:10:28 127,768 —-a-w C:\WINDOWS\system32\drivers\klif.sys
- 2004-08-04 03:15:22 140,928 —-a-w C:\WINDOWS\system32\drivers\ks.sys
+ 2004-08-04 04:15:22 140,928 —-a-w C:\WINDOWS\system32\drivers\ks.sys
- 2004-08-04 03:15:50 145,792 —-a-w C:\WINDOWS\system32\drivers\portcls.sys
+ 2004-08-04 04:15:50 145,792 —-a-w C:\WINDOWS\system32\drivers\portcls.sys
- 2004-08-04 03:08:04 48,640 —-a-w C:\WINDOWS\system32\drivers\stream.sys
+ 2004-08-04 04:08:04 48,640 —-a-w C:\WINDOWS\system32\drivers\stream.sys
+ 2004-08-04 04:08:48 26,496 —-a-w C:\WINDOWS\system32\drivers\USBSTOR.SYS
- 2006-08-10 10:32:14 204,672 —-a-w C:\WINDOWS\system32\drivers\vinyl97.sys
+ 2006-08-10 19:32:14 204,672 —-a-r C:\WINDOWS\system32\drivers\vinyl97.sys
- 2007-08-20 10:04:34 214,528 —-a-w C:\WINDOWS\system32\dxtrans.dll
+ 2007-10-10 23:55:51 214,528 —-a-w C:\WINDOWS\system32\dxtrans.dll
- 2007-08-20 10:04:34 132,608 —-a-w C:\WINDOWS\system32\extmgr.dll
+ 2007-10-10 23:55:51 132,608 —-a-w C:\WINDOWS\system32\extmgr.dll
- 2007-08-20 10:04:34 63,488 —-a-w C:\WINDOWS\system32\icardie.dll
+ 2007-10-10 23:55:51 63,488 —-a-w C:\WINDOWS\system32\icardie.dll
- 2007-08-17 10:20:54 63,488 —-a-w C:\WINDOWS\system32\ie4uinit.exe
+ 2007-10-10 10:59:40 70,656 —-a-w C:\WINDOWS\system32\ie4uinit.exe
- 2007-08-20 10:04:34 153,088 —-a-w C:\WINDOWS\system32\ieakeng.dll
+ 2007-10-10 23:55:51 153,088 —-a-w C:\WINDOWS\system32\ieakeng.dll
- 2007-08-20 10:04:35 230,400 —-a-w C:\WINDOWS\system32\ieaksie.dll
+ 2007-10-10 23:55:51 230,400 —-a-w C:\WINDOWS\system32\ieaksie.dll
- 2007-08-17 07:34:25 161,792 —-a-w C:\WINDOWS\system32\ieakui.dll
+ 2007-10-10 05:46:55 161,792 —-a-w C:\WINDOWS\system32\ieakui.dll
- 2007-08-20 10:04:35 383,488 —-a-w C:\WINDOWS\system32\ieapfltr.dll
+ 2007-10-10 23:55:52 383,488 —-a-w C:\WINDOWS\system32\ieapfltr.dll
- 2007-08-20 10:04:35 384,512 —-a-w C:\WINDOWS\system32\iedkcs32.dll
+ 2007-10-10 23:55:52 384,512 —-a-w C:\WINDOWS\system32\iedkcs32.dll
- 2007-08-20 10:04:37 6,058,496 —-a-w C:\WINDOWS\system32\ieframe.dll
+ 2007-10-10 23:55:54 6,065,664 —-a-w C:\WINDOWS\system32\ieframe.dll
- 2007-08-20 10:04:38 44,544 —-a-w C:\WINDOWS\system32\iernonce.dll
+ 2007-10-10 23:55:55 44,544 —-a-w C:\WINDOWS\system32\iernonce.dll
- 2007-08-20 10:04:38 267,776 —-a-w C:\WINDOWS\system32\iertutil.dll
+ 2007-10-10 23:55:55 267,776 —-a-w C:\WINDOWS\system32\iertutil.dll
- 2007-08-17 10:20:54 13,824 —-a-w C:\WINDOWS\system32\ieudinit.exe
+ 2007-10-10 10:59:40 13,824 —-a-w C:\WINDOWS\system32\ieudinit.exe
- 2007-03-14 04:31:24 135,168 -c–a-w C:\WINDOWS\system32\java.exe
+ 2007-09-25 03:30:28 135,168 —-a-w C:\WINDOWS\system32\java.exe
- 2007-03-14 04:31:28 135,168 -c–a-w C:\WINDOWS\system32\javaw.exe
+ 2007-09-25 03:30:30 135,168 —-a-w C:\WINDOWS\system32\javaw.exe
- 2007-03-14 06:04:46 139,264 -c–a-w C:\WINDOWS\system32\javaws.exe
+ 2007-09-25 04:31:42 139,264 —-a-w C:\WINDOWS\system32\javaws.exe
- 2007-08-20 10:04:39 27,648 —-a-w C:\WINDOWS\system32\jsproxy.dll
+ 2007-10-10 23:55:56 27,648 —-a-w C:\WINDOWS\system32\jsproxy.dll
- 2004-08-04 04:56:44 4,096 —-a-w C:\WINDOWS\system32\ksuser.dll
+ 2004-08-04 05:56:44 4,096 —-a-w C:\WINDOWS\system32\ksuser.dll
- 2007-03-15 22:19:28 1,476,992 —-a-w C:\WINDOWS\system32\LegitCheckControl.dll
+ 2007-10-11 19:12:48 1,468,968 —-a-w C:\WINDOWS\system32\LegitCheckControl.DLL
- 2007-09-06 20:13:58 796,048 —-a-w C:\WINDOWS\system32\libeay32_0.9.6l.dll
+ 2007-09-06 21:13:58 796,048 —-a-w C:\WINDOWS\system32\libeay32_0.9.6l.dll
- 2006-11-10 16:11:16 75,384 -c–a-w C:\WINDOWS\system32\Macromed\Download\Download.dll
+ 2007-12-03 21:39:18 112,016 —-a-w C:\WINDOWS\system32\Macromed\Download\Download.dll
- 2006-11-10 16:11:18 63,096 -c–a-w C:\WINDOWS\system32\Macromed\Download\Download.exe
+ 2007-12-04 00:39:16 67,984 -c–a-w C:\WINDOWS\system32\Macromed\Download\Download.exe
+ 2007-12-03 21:39:18 59,717 —-a-w C:\WINDOWS\system32\Macromed\Download\Install.exe
+ 2007-11-21 00:04:14 218,496 —-a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9e.exe
+ 2007-12-23 09:48:12 74,649 —-a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
- 2007-09-28 02:19:40 18,089,592 —-a-w C:\WINDOWS\system32\MRT.exe
+ 2007-12-02 23:00:05 18,684,536 —-a-w C:\WINDOWS\system32\MRT.exe
+ 2007-04-13 08:21:14 271,360 —-a-w C:\WINDOWS\system32\mscoree.dll
+ 2005-09-23 12:28:52 150,016 —-a-w C:\WINDOWS\system32\mscorier.dll
+ 2005-09-23 12:28:52 74,240 —-a-w C:\WINDOWS\system32\mscories.dll
- 2007-08-20 10:04:39 459,264 —-a-w C:\WINDOWS\system32\msfeeds.dll
+ 2007-10-10 23:55:56 459,264 —-a-w C:\WINDOWS\system32\msfeeds.dll
- 2007-08-20 10:04:39 52,224 —-a-w C:\WINDOWS\system32\msfeedsbs.dll
+ 2007-10-10 23:55:56 52,224 —-a-w C:\WINDOWS\system32\msfeedsbs.dll
- 2007-08-20 10:04:41 3,584,512 —-a-w C:\WINDOWS\system32\mshtml.dll
+ 2007-10-30 23:42:28 3,590,656 —-a-w C:\WINDOWS\system32\mshtml.dll
- 2007-08-20 10:04:41 477,696 —-a-w C:\WINDOWS\system32\mshtmled.dll
+ 2007-10-10 23:55:58 478,208 —-a-w C:\WINDOWS\system32\mshtmled.dll
- 2007-08-20 10:04:41 193,024 —-a-w C:\WINDOWS\system32\msrating.dll
+ 2007-10-10 23:55:58 193,024 —-a-w C:\WINDOWS\system32\msrating.dll
- 2007-08-20 10:04:42 671,232 —-a-w C:\WINDOWS\system32\mstime.dll
+ 2007-10-10 23:55:59 671,232 —-a-w C:\WINDOWS\system32\mstime.dll
- 2005-05-26 08:16:24 127,208 -c–a-w C:\WINDOWS\system32\mucltui.dll
+ 2007-07-30 23:19:10 271,224 —-a-w C:\WINDOWS\system32\mucltui.dll
+ 2005-09-23 12:29:00 6,144 —-a-w C:\WINDOWS\system32\mui\
0409\mscorees.dll
- 2005-05-26 08:19:32 178,408 -c–a-w C:\WINDOWS\system32\muweb.dll
+ 2007-07-30 23:19:04 207,736 —-a-w C:\WINDOWS\system32\muweb.dll
+ 2005-09-23 12:28:56 32,768 —-a-w C:\WINDOWS\system32\netfxperf.dll
- 2007-08-20 10:04:42 102,400 —-a-w C:\WINDOWS\system32\occache.dll
+ 2007-10-10 23:55:59 102,400 —-a-w C:\WINDOWS\system32\occache.dll
- 2007-10-20 14:55:17 49,130 —-a-w C:\WINDOWS\system32\perfc009.dat
+ 2007-12-28 15:37:09 67,734 —-a-w C:\WINDOWS\system32\perfc009.dat
- 2007-10-20 14:55:17 332,912 —-a-w C:\WINDOWS\system32\perfh009.dat
+ 2007-12-28 15:37:09 413,604 —-a-w C:\WINDOWS\system32\perfh009.dat
+ 2003-02-21 12:16:08 49,152 —-a-w C:\WINDOWS\system32\REGTLIB.EXE
+ 2004-08-04 03:08:00 60,288 —-a-w C:\WINDOWS\system32\ReinstallBackups\
0012\DriverFiles\i386\drmk.sys
+ 2004-08-04 03:15:22 140,928 —-a-w C:\WINDOWS\system32\ReinstallBackups\
0012\DriverFiles\i386\ks.sys
+ 2004-08-04 04:56:44 4,096 —-a-w C:\WINDOWS\system32\ReinstallBackups\
0012\DriverFiles\i386\ksuser.dll
+ 2004-08-04 03:15:50 145,792 —-a-w C:\WINDOWS\system32\ReinstallBackups\
0012\DriverFiles\i386\portcls.sys
+ 2004-08-04 03:08:04 48,640 —-a-w C:\WINDOWS\system32\ReinstallBackups\
0012\DriverFiles\i386\stream.sys
+ 2006-08-10 10:32:14 204,672 —-a-w C:\WINDOWS\system32\ReinstallBackups\
0012\DriverFiles\vinyl97.sys
- 2006-12-19 21:52:18 8,453,632 —-a-w C:\WINDOWS\system32\shell32.dll
+ 2007-10-26 03:36:51 8,454,656 —-a-w C:\WINDOWS\system32\shell32.dll
- 2006-12-10 18:10:02 14,640 -c—-w C:\WINDOWS\system32\spmsg.dll
+ 2006-11-17 20:14:30 14,640 ——w C:\WINDOWS\system32\spmsg.dll
- 2007-04-02 18:21:27 139,776 —-a-w C:\WINDOWS\system32\swreg.exe
+ 2007-12-14 02:26:50 156,160 —-a-w C:\WINDOWS\system32\swreg.exe
- 2007-07-18 12:42:22 60,416 ——w C:\WINDOWS\system32\tzchange.exe
+ 2007-11-13 11:31:11 60,416 ——w C:\WINDOWS\system32\tzchange.exe
- 2007-08-20 10:04:42 105,984 —-a-w C:\WINDOWS\system32\url.dll
+ 2007-10-10 23:55:59 105,984 —-a-w C:\WINDOWS\system32\url.dll
- 2007-08-20 10:04:42 1,152,000 —-a-w C:\WINDOWS\system32\urlmon.dll
+ 2007-10-10 23:56:00 1,159,680 —-a-w C:\WINDOWS\system32\urlmon.dll
- 2007-09-06 20:14:04 83,432 —-a-w C:\WINDOWS\system32\vsdata.dll
+ 2007-11-14 21:04:52 83,432 —-a-w C:\WINDOWS\system32\vsdata.dll
- 2007-09-06 20:14:28 395,080 —-a-w C:\WINDOWS\system32\vsdatant.sys
+ 2007-11-14 21:05:16 394,952 —-a-w C:\WINDOWS\system32\vsdatant.sys
- 2007-09-06 20:14:04 157,160 —-a-w C:\WINDOWS\system32\vsinit.dll
+ 2007-11-14 21:04:52 157,160 —-a-w C:\WINDOWS\system32\vsinit.dll
- 2007-09-06 20:14:04 103,912 —-a-w C:\WINDOWS\system32\vsmonapi.dll
+ 2007-11-14 21:04:52 103,912 —-a-w C:\WINDOWS\system32\vsmonapi.dll
- 2007-09-06 20:14:04 275,944 —-a-w C:\WINDOWS\system32\vspubapi.dll
+ 2007-11-14 21:04:52 275,944 —-a-w C:\WINDOWS\system32\vspubapi.dll
- 2007-09-06 20:14:04 71,144 —-a-w C:\WINDOWS\system32\vsregexp.dll
+ 2007-11-14 21:04:52 71,144 —-a-w C:\WINDOWS\system32\vsregexp.dll
- 2007-09-06 20:14:06 472,552 —-a-w C:\WINDOWS\system32\vsutil.dll
+ 2007-11-14 21:04:54 472,552 —-a-w C:\WINDOWS\system32\vsutil.dll
- 2007-09-06 20:14:06 46,568 —-a-w C:\WINDOWS\system32\vswmi.dll
+ 2007-11-14 21:04:54 46,568 —-a-w C:\WINDOWS\system32\vswmi.dll
- 2007-09-06 20:14:06 99,816 —-a-w C:\WINDOWS\system32\vsxml.dll
+ 2007-11-14 21:04:54 99,816 —-a-w C:\WINDOWS\system32\vsxml.dll
- 2007-08-20 10:04:42 232,960 —-a-w C:\WINDOWS\system32\webcheck.dll
+ 2007-10-10 23:56:00 232,960 —-a-w C:\WINDOWS\system32\webcheck.dll
- 2007-08-20 10:04:43 824,832 —-a-w C:\WINDOWS\system32\wininet.dll
+ 2007-10-10 23:56:00 824,832 —-a-w C:\WINDOWS\system32\wininet.dll
- 2006-12-07 21:02:24 2,174,976 —-a-w C:\WINDOWS\system32\wmvcore.dll
+ 2007-10-27 22:37:38 2,109,440 —-a-w C:\WINDOWS\system32\wmvcore.dll
- 2007-06-13 06:53:14 115,712 —-a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2007-10-29 10:26:53 115,712 —-a-w C:\WINDOWS\system32\xpsp3res.dll
- 2007-09-06 20:14:06 83,432 —-a-w C:\WINDOWS\system32\zlcomm.dll
+ 2007-11-14 21:04:56 83,432 —-a-w C:\WINDOWS\system32\zlcomm.dll
- 2007-09-06 20:14:08 71,144 —-a-w C:\WINDOWS\system32\zlcommdb.dll
+ 2007-11-14 21:04:56 71,144 —-a-w C:\WINDOWS\system32\zlcommdb.dll
- 2007-10-17 17:50:37 4,212 -c-h–w C:\WINDOWS\system32\zllictbl.dat
+ 2007-12-14 22:41:28 4,212 -c-h–w C:\WINDOWS\system32\zllictbl.dat
- 2007-09-06 20:13:56 370,208 —-a-w C:\WINDOWS\system32\ZoneLabs\av.dll
+ 2007-11-14 21:04:44 370,208 —-a-w C:\WINDOWS\system32\ZoneLabs\av.dll
- 2007-05-31 04:03:30 65,248 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\bases\aphish.dat
+ 2007-05-31 05:03:30 65,248 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\bases\aphish.dat
- 2006-06-30 18:47:36 21,568 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\bases\avcmhk4.dll
+ 2006-06-30 19:47:36 21,568 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\bases\avcmhk4.dll
- 2007-05-31 04:03:16 77,824 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\CKAHComm.dll
+ 2007-05-31 05:03:16 77,824 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\CKAHComm.dll
- 2007-05-31 04:03:16 110,592 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\CKAHrule.dll
+ 2007-05-31 05:03:16 110,592 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\CKAHrule.dll
- 2007-05-31 04:03:16 331,776 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\CKAHUM.dll
+ 2007-05-31 05:03:16 331,776 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\CKAHUM.dll
- 2007-05-31 04:03:16 38,400 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\FSSync.dll
+ 2007-05-31 05:03:16 38,400 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\FSSync.dll
- 2007-07-19 19:10:32 110,360 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\w2kxp32\kl1.sys
+ 2007-07-19 20:10:32 110,360 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\w2kxp32\kl1.sys
- 2007-07-19 19:10:32 186,128 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\w2kxp32\klif.sys
+ 2007-07-19 20:10:32 186,128 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\w2kxp32\klif.sys
- 2007-05-31 04:03:48 110,360 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32\kl1.sys
+ 2007-05-31 05:03:48 110,360 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32\kl1.sys
- 2007-07-19 19:10:28 127,768 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32\klif.sys
+ 2007-07-19 20:10:28 127,768 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32\klif.sys
- 2007-05-31 04:03:50 45,056 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32\regcat.exe
+ 2007-05-31 05:03:50 45,056 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32\regcat.exe
- 2006-09-20 03:12:14 208,960 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\inv.dll
+ 2006-09-20 04:12:14 208,960 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\inv.dll
- 2007-08-24 23:31:48 274,432 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\kave.dll
+ 2007-09-12 02:09:16 274,432 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\kave.dll
- 2006-12-19 22:13:52 1,093,632 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\libeay32.dll
+ 2006-12-19 23:13:52 1,093,632 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\libeay32.dll
- 2007-05-31 04:03:20 548,864 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\msvcp80.dll
+ 2007-05-31 05:03:20 548,864 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\msvcp80.dll
- 2007-05-31 04:03:20 626,688 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\msvcr80.dll
+ 2007-05-31 05:03:20 626,688 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\msvcr80.dll
- 2007-05-31 04:03:18 184,320 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\prloader.dll
+ 2007-05-31 05:03:18 184,320 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\prloader.dll
- 2007-05-31 04:03:22 90,112 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\prremote.dll
+ 2007-05-31 05:03:22 90,112 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\prremote.dll
- 2007-08-24 23:31:48 135,168 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
+ 2007-09-12 02:09:16 135,168 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
- 2006-12-19 22:13:52 200,704 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\ssleay32.dll
+ 2006-12-19 23:13:52 200,704 —-a-w C:\WINDOWS\system32\ZoneLabs\avsys\ssleay32.dll
- 2007-09-06 20:13:56 99,816 —-a-w C:\WINDOWS\system32\ZoneLabs\camupd.dll
+ 2007-11-14 21:04:44 99,816 —-a-w C:\WINDOWS\system32\ZoneLabs\camupd.dll
- 2004-01-30 16:35:08 813,568 —-a-w C:\WINDOWS\system32\ZoneLabs\dbghelp.dll
+ 2004-01-30 17:35:08 813,568 —-a-w C:\WINDOWS\system32\ZoneLabs\dbghelp.dll
- 2007-09-06 20:13:58 128,480 —-a-w C:\WINDOWS\system32\ZoneLabs\fbl.dll
+ 2007-11-14 21:04:46 128,480 —-a-w C:\WINDOWS\system32\ZoneLabs\fbl.dll
- 2007-09-06 20:13:58 38,376 —-a-w C:\WINDOWS\system32\ZoneLabs\featuremap.dll
+ 2007-11-14 21:04:46 38,376 —-a-w C:\WINDOWS\system32\ZoneLabs\featuremap.dll
- 2007-09-06 20:13:58 321,016 —-a-w C:\WINDOWS\system32\ZoneLabs\imsecure.dll
+ 2007-11-14 21:04:46 321,016 —-a-w C:\WINDOWS\system32\ZoneLabs\imsecure.dll
- 2007-09-06 20:14:30 288,144 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\ConfigWizard.zip.dll
+ 2007-11-14 21:05:18 288,144 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\ConfigWizard.zip.dll
- 2007-09-06 20:14:30 152,976 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\licenseui.zip.dll
+ 2007-11-14 21:05:18 152,976 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\licenseui.zip.dll
- 2007-09-06 20:14:30 26,000 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\zlsvc.zip.dll
+ 2007-11-14 21:05:18 26,000 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\zlsvc.zip.dll
- 2007-09-06 20:14:32 1,361,296 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\zpy.zip.dll
+ 2007-11-14 21:05:18 1,361,296 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\zpy.zip.dll
- 2007-09-06 20:14:32 71,056 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\zui.zip.dll
+ 2007-11-14 21:05:20 71,056 —-a-w C:\WINDOWS\system32\ZoneLabs\lib\zui.zip.dll
- 2007-09-06 20:15:50 30,184 —-a-w C:\WINDOWS\system32\ZoneLabs\plugins\rpc_server\rpc_server.dll
+ 2007-11-14 21:06:34 30,184 —-a-w C:\WINDOWS\system32\ZoneLabs\plugins\rpc_server\rpc_server.dll
- 2007-09-06 20:15:52 30,216 —-a-w C:\WINDOWS\system32\ZoneLabs\plugins\vsmon_plugin\vsmon_plugin.dll
+ 2007-11-14 21:06:36 30,216 —-a-w C:\WINDOWS\system32\ZoneLabs\plugins\vsmon_plugin\vsmon_plugin.dll
- 2007-08-15 19:45:42 714,208 —-a-w C:\WINDOWS\system32\ZoneLabs\qrbase.dll
+ 2007-10-19 01:18:38 714,208 —-a-w C:\WINDOWS\system32\ZoneLabs\qrbase.dll
- 2007-08-15 19:45:44 787,936 —-a-w C:\WINDOWS\system32\ZoneLabs\qrsrecl.dll
+ 2007-10-19 01:18:38 787,936 —-a-w C:\WINDOWS\system32\ZoneLabs\qrsrecl.dll
- 2007-09-06 20:14:00 173,544 —-a-w C:\WINDOWS\system32\ZoneLabs\scheduler.dll
+ 2007-11-14 21:04:48 173,544 —-a-w C:\WINDOWS\system32\ZoneLabs\scheduler.dll
- 2007-01-11 15:12:08 2,432,259 —-a-w C:\WINDOWS\system32\ZoneLabs\spyware.dat
+ 2007-01-11 16:12:08 2,432,259 —-a-w C:\WINDOWS\system32\ZoneLabs\spyware.dat
- 2007-08-15 19:45:44 1,500,640 —-a-w C:\WINDOWS\system32\ZoneLabs\srescan.dll
+ 2007-10-19 01:18:40 1,500,640 —-a-w C:\WINDOWS\system32\ZoneLabs\srescan.dll
- 2007-06-11 16:44:10 50,416 —-a-w C:\WINDOWS\system32\ZoneLabs\srescan.sys
+ 2007-10-19 01:18:44 51,176 —-a-w C:\WINDOWS\system32\ZoneLabs\srescan.sys
- 2007-09-06 20:14:02 456,168 —-a-w C:\WINDOWS\system32\ZoneLabs\ssleay32.dll
+ 2007-11-14 21:04:50 456,168 —-a-w C:\WINDOWS\system32\ZoneLabs\ssleay32.dll
- 2007-09-06 20:15:52 214,528 —-a-w C:\WINDOWS\system32\ZoneLabs\streamapi\httpblocker\httpblocker.dll
+ 2007-11-14 21:06:36 214,528 —-a-w C:\WINDOWS\system32\ZoneLabs\streamapi\httpblocker\httpblocker.dll
- 2007-09-06 20:15:54 3,266,040 —-a-w C:\WINDOWS\system32\ZoneLabs\streamapi\imslsp\imslsp.dll
+ 2007-11-14 21:06:36 3,266,040 —-a-w C:\WINDOWS\system32\ZoneLabs\streamapi\imslsp\imslsp.dll
- 2006-09-05 00:59:14 503,875 —-a-w C:\WINDOWS\system32\ZoneLabs\upd_core.dll
+ 2006-09-05 01:59:14 503,875 —-a-w C:\WINDOWS\system32\ZoneLabs\upd_core.dll
- 2007-08-01 10:30:04 833,248 —-a-w C:\WINDOWS\system32\ZoneLabs\updating.dll
+ 2007-10-11 21:50:32 832,984 —-a-w C:\WINDOWS\system32\ZoneLabs\updating.dll
- 2007-09-06 20:14:18 149,032 —-a-w C:\WINDOWS\system32\ZoneLabs\updclient.exe
+ 2007-11-14 21:05:06 144,936 —-a-w C:\WINDOWS\system32\ZoneLabs\updclient.exe
- 2007-01-11 21:31:06 286,787 —-a-w C:\WINDOWS\system32\ZoneLabs\updtrsdk.dll
+ 2007-01-11 22:31:06 286,787 —-a-w C:\WINDOWS\system32\ZoneLabs\updtrsdk.dll
- 2007-09-06 20:14:04 108,008 —-a-w C:\WINDOWS\system32\ZoneLabs\vsavpro.dll
+ 2007-11-14 21:04:52 108,008 —-a-w C:\WINDOWS\system32\ZoneLabs\vsavpro.dll
- 2007-09-06 20:14:04 79,336 —-a-w C:\WINDOWS\system32\ZoneLabs\vsdb.dll
+ 2007-11-14 21:04:52 83,432 —-a-w C:\WINDOWS\system32\ZoneLabs\vsdb.dll
- 2007-09-06 20:14:18 75,304 —-a-w C:\WINDOWS\system32\ZoneLabs\vsmon.exe
+ 2007-11-14 21:05:06 75,304 —-a-w C:\WINDOWS\system32\ZoneLabs\vsmon.exe
- 2007-09-06 20:14:04 2,024,936 —-a-w C:\WINDOWS\system32\ZoneLabs\vsmondll.dll
+ 2007-11-14 21:04:52 2,029,032 —-a-w C:\WINDOWS\system32\ZoneLabs\vsmondll.dll
- 2007-09-06 20:14:06 1,345,000 —-a-w C:\WINDOWS\system32\ZoneLabs\vsruledb.dll
+ 2007-11-14 21:04:54 1,361,384 —-a-w C:\WINDOWS\system32\ZoneLabs\vsruledb.dll
- 2007-09-06 20:14:06 239,080 —-a-w C:\WINDOWS\system32\ZoneLabs\vsvault.dll
+ 2007-11-14 21:04:54 239,080 —-a-w C:\WINDOWS\system32\ZoneLabs\vsvault.dll
- 2007-01-11 15:12:08 2,432,259 —-a-w C:\WINDOWS\system32\ZoneLabs\zlasdbup.dat
+ 2007-01-11 16:12:08 2,432,259 —-a-w C:\WINDOWS\system32\ZoneLabs\zlasdbup.dat
- 2007-09-06 20:14:08 177,640 —-a-w C:\WINDOWS\system32\ZoneLabs\zlparser.dll
+ 2007-11-14 21:04:56 177,640 —-a-w C:\WINDOWS\system32\ZoneLabs\zlparser.dll
- 2007-09-06 20:14:08 79,344 —-a-w C:\WINDOWS\system32\ZoneLabs\zlquarantine.dll
+ 2007-11-14 21:04:56 79,344 —-a-w C:\WINDOWS\system32\ZoneLabs\zlquarantine.dll
- 2007-09-06 20:14:08 382,440 —-a-w C:\WINDOWS\system32\ZoneLabs\zlsre.dll
+ 2007-11-14 21:04:58 382,440 —-a-w C:\WINDOWS\system32\ZoneLabs\zlsre.dll
- 2007-09-06 20:14:08 120,296 —-a-w C:\WINDOWS\system32\ZoneLabs\zlupdate.dll
+ 2007-11-14 21:04:58 120,296 —-a-w C:\WINDOWS\system32\ZoneLabs\zlupdate.dll
+ 2007-12-28 15:36:11 258,048 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2007-12-28 15:36:11 114,176 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 17:43]
"System Mechanic Popup Blocker"="C:\Program Files\iolo\System Mechanic 7\PopupBlocker.exe" [2007-11-03 11:38]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LXCGCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 12:48]
"Logitech Utility"="Logi_MwX.Exe" [2003-12-17 08:50 C:\WINDOWS\LOGI_MWX.EXE]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-11-14 16:05]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-21 06:54]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 07:00]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 07:00 C:\WINDOWS\system32\rundll32.exe]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-21 06:50]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsMenu"= 01000000
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-04 07:00 15360 –a—— C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EzPrint]
2005-08-01 07:05 94208 –a–c— C:\Program Files\Lexmark 2300 Series\ezprint.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FaxCenterServer]
C:\Program Files\Lexmark Fax Solutions\fm3032.exe /s
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ioloDelayModule]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxcgmon.exe]
2005-07-21 01:07 200704 –a–c— C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSystemAnalyzer]
2007-12-20 12:50 832360 –a—— C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\System Mechanic Startup Guard]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SystemGuardAlerter]
2007-12-14 19:01 485736 –a—— C:\Program Files\iolo\System Mechanic 7\SystemGuardAlerter.exe
R1 VIAPFD;VIAPFD;C:\WINDOWS\system32\Drivers\viapfd.sys [2001-05-04 01:24]
R2 ioloFileInfoList;iolo FileInfoList Service;C:\Program Files\iolo\common\lib\ioloServiceManager.exe [2007-11-22 00:11]
R2 ioloSystemService;iolo System Service;C:\Program Files\iolo\common\lib\ioloServiceManager.exe [2007-11-22 00:11]
S3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter;C:\WINDOWS\system32\DRIVERS\AN983.sys [2004-08-03 22:31]
S3 Systrack;Systrack;C:\WINDOWS\System32\stdrv.sys [2007-03-27 06:43]
*Newly Created Service* - CLR_OPTIMIZATION_V2.0.50727_32
*Newly Created Service* - F-SECURE_STANDALONE_MINIFILTER
.
Contents of the 'Scheduled Tasks' folder
"2007-12-28 08:00:00 C:\WINDOWS\Tasks\AdwareAlert Scheduled Scan.job"
- C:\Program Files\AdwareAlert\AdwareAlert.exe
- C:\Program Files\AdwareAlert
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-12-28 15:32:10
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes …
scanning hidden autostart entries …
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCGCATS = rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\Program Files\iolo\Common\Lib\sguard.dll
PROCESS: C:\WINDOWS\system32\lsass.exe [5.01.2600.2180]
-> C:\Program Files\iolo\Common\Lib\sguard.dll
PROCESS: C:\WINDOWS\system32\csrss.exe
-> C:\Program Files\iolo\Common\Lib\sguard.dll
.
Completion time: 2007-12-28 15:33:28
C:\ComboFix2.txt … 2007-10-25 08:25
.
2007-12-28 15:37:46 — E O F —
Logfile of HijackThis v1.99.1
Scan saved at 3:34:57 PM, on 28/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\iolo\common\lib\ioloServiceManager.exe
C:\Program Files\iolo\System Mechanic 7\IoloSGCtrl.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\iolo\System Mechanic 7\PopupBlocker.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Gerry\My Documents\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ca.yahoo.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [System Mechanic Popup Blocker] "C:\Program Files\iolo\System Mechanic 7\PopupBlocker.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
http://javadl-esd.sun.com/update/1.6.0/jin…ows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iolo System Guard (IOLO_SRV) - Unknown owner - C:\Program Files\iolo\System Mechanic 7\IoloSGCtrl.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe