ComboFix 08-05-21.3 - cjbrown 2008-05-24 4:03:23.3 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.1262 [GMT -7:00]
Running from: C:\Users\cjbrown\Desktop\ComboFix.exe
Command switches used :: C:\Users\cjbrown\Desktop\CFScript.txt
* Created a new restore point
* Resident AV is active
FILE ::
C:\WINDOWS\System32\auyabdpd.dll
C:\WINDOWS\System32\dcacrhnn.dll
C:\WINDOWS\System32\dpdbayua.ini
C:\WINDOWS\System32\dpdbayua.tmp
C:\WINDOWS\System32\dsadxiam.dll
C:\WINDOWS\System32\fsinkluc.dll
C:\WINDOWS\System32\tjldvoyi.dll
C:\WINDOWS\System32\wcjvsthq.dll
F:\Install.exe
G:\autorun.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\WINDOWS\System32\dcacrhnn.dll
C:\WINDOWS\System32\dpdbayua.ini
C:\WINDOWS\System32\dsadxiam.dll
C:\WINDOWS\System32\fsinkluc.dll
C:\Windows\system32\mcrh.tmp
C:\WINDOWS\System32\tjldvoyi.dll
C:\WINDOWS\System32\wcjvsthq.dll
.
((((((((((((((((((((((((( Files Created from 2008-04-24 to 2008-05-24 )))))))))))))))))))))))))))))))
.
2008-05-23 03:20 . 2008-05-23 03:20 694,784 --a------ C:\WINDOWS\System32\localspl.dll
2008-05-23 03:19 . 2008-05-23 03:19 205,824 --a------ C:\WINDOWS\System32\msoeacct.dll
2008-05-23 03:19 . 2008-05-23 03:19 87,040 --a------ C:\WINDOWS\System32\msoert2.dll
2008-05-23 03:19 . 2008-05-23 03:19 39,424 --a------ C:\WINDOWS\System32\ACCTRES.dll
2008-05-23 03:17 . 2008-05-23 03:17 194,560 --a------ C:\WINDOWS\System32\WebClnt.dll
2008-05-23 03:17 . 2008-05-23 03:17 110,080 --a------ C:\WINDOWS\System32\drivers\mrxdav.sys
2008-05-23 03:16 . 2008-05-23 03:16 376,320 --a------ C:\WINDOWS\System32\winsrv.dll
2008-05-23 03:16 . 2008-05-23 03:16 49,664 --a------ C:\WINDOWS\System32\csrsrv.dll
2008-05-23 03:13 . 2008-05-23 03:13 1,060,920 --a------ C:\WINDOWS\System32\drivers\ntfs.sys
2008-05-23 03:13 . 2008-05-23 03:13 414,208 --a------ C:\WINDOWS\System32\msscp.dll
2008-05-23 03:13 . 2008-05-23 03:13 41,984 --a------ C:\WINDOWS\System32\drivers\monitor.sys
2008-05-23 03:10 . 2008-05-23 03:10 3,504,696 --a------ C:\WINDOWS\System32\ntkrnlpa.exe
2008-05-23 03:10 . 2008-05-23 03:10 3,470,392 --a------ C:\WINDOWS\System32\ntoskrnl.exe
2008-05-23 03:10 . 2008-05-23 03:10 1,191,936 --a------ C:\WINDOWS\System32\msxml3.dll
2008-05-23 03:10 . 2008-05-23 03:10 211,000 --a------ C:\WINDOWS\System32\drivers\volsnap.sys
2008-05-23 03:10 . 2008-05-23 03:10 154,624 --a------ C:\WINDOWS\System32\drivers\nwifi.sys
2008-05-23 03:10 . 2008-05-23 03:10 109,624 --a------ C:\WINDOWS\System32\drivers\ataport.sys
2008-05-23 03:10 . 2008-05-23 03:10 45,112 --a------ C:\WINDOWS\System32\drivers\pciidex.sys
2008-05-23 03:10 . 2008-05-23 03:10 21,560 --a------ C:\WINDOWS\System32\drivers\atapi.sys
2008-05-23 03:10 . 2008-05-23 03:10 15,928 --a------ C:\WINDOWS\System32\drivers\pciide.sys
2008-05-23 03:10 . 2008-05-23 03:10 2,048 --a------ C:\WINDOWS\System32\msxml3r.dll
2008-05-23 03:09 . 2008-05-23 03:09 803,328 --a------ C:\WINDOWS\System32\drivers\tcpip.sys
2008-05-23 03:09 . 2008-05-23 03:09 216,632 --a------ C:\WINDOWS\System32\drivers\netio.sys
2008-05-23 03:09 . 2008-05-23 03:09 167,424 --a------ C:\WINDOWS\System32\tcpipcfg.dll
2008-05-23 03:09 . 2008-05-23 03:09 24,064 --a------ C:\WINDOWS\System32\netcfg.exe
2008-05-23 03:09 . 2008-05-23 03:09 22,016 --a------ C:\WINDOWS\System32\netiougc.exe
2008-05-23 03:08 . 2008-05-23 03:08 1,327,104 --a------ C:\WINDOWS\System32\quartz.dll
2008-05-23 03:07 . 2008-05-23 03:07 2,027,008 --a------ C:\WINDOWS\System32\win32k.sys
2008-05-23 03:07 . 2008-05-23 03:07 82,432 --a------ C:\WINDOWS\System32\drivers\sdbus.sys
2008-05-23 03:06 . 2008-05-23 03:06 296,448 --a------ C:\WINDOWS\System32\gdi32.dll
2008-05-23 03:06 . 2008-05-23 03:06 223,232 --a------ C:\WINDOWS\System32\WMASF.DLL
2008-05-23 03:06 . 2008-05-23 03:06 9,728 --a------ C:\WINDOWS\System32\LAPRXY.DLL
2008-05-23 03:06 . 2008-05-23 03:06 2,048 --a------ C:\WINDOWS\System32\asferror.dll
2008-05-23 03:03 . 2008-05-23 03:03 4,247,552 --a------ C:\WINDOWS\System32\GameUXLegacyGDFs.dll
2008-05-23 03:03 . 2008-05-23 03:03 1,686,528 --a------ C:\WINDOWS\System32\gameux.dll
2008-05-23 03:03 . 2008-05-23 03:03 737,792 --a------ C:\WINDOWS\System32\inetcomm.dll
2008-05-23 03:03 . 2008-05-23 03:03 84,480 --a------ C:\WINDOWS\System32\INETRES.dll
2008-05-23 03:03 . 2008-05-23 03:03 11,776 --a------ C:\WINDOWS\System32\sbunattend.exe
2008-05-23 03:01 . 2008-05-23 03:01 <DIR> d-------- C:\WINDOWS\System32\Kaspersky Lab
2008-05-23 03:01 . 2008-05-23 03:01 <DIR> d-------- C:\Users\All Users\Kaspersky Lab
2008-05-23 03:01 . 2008-05-23 03:01 <DIR> d-------- C:\ProgramData\Kaspersky Lab
2008-05-23 03:01 . 2008-05-23 03:01 83,968 --a------ C:\WINDOWS\System32\dnsrslvr.dll
2008-05-23 03:01 . 2008-05-23 03:01 24,576 --a------ C:\WINDOWS\System32\dnscacheugc.exe
2008-05-23 03:00 . 2008-05-23 03:00 788,992 --a------ C:\WINDOWS\System32\rpcrt4.dll
2008-05-23 03:00 . 2008-05-23 03:00 130,048 --a------ C:\WINDOWS\System32\drivers\srv2.sys
2008-05-23 03:00 . 2008-05-23 03:00 101,888 --a------ C:\WINDOWS\System32\drivers\mrxsmb.sys
2008-05-23 03:00 . 2008-05-23 03:00 84,992 --a------ C:\WINDOWS\System32\drivers\srvnet.sys
2008-05-23 03:00 . 2008-05-23 03:00 58,368 --a------ C:\WINDOWS\System32\drivers\mrxsmb20.sys
2008-05-23 02:58 . 2008-05-23 02:58 152,576 --a------ C:\WINDOWS\System32\imagehlp.dll
2008-05-23 02:58 . 2008-05-23 02:58 12,800 --a------ C:\WINDOWS\System32\drivers\fs_rec.sys
2008-05-23 02:58 . 2008-05-23 02:58 5,120 --a------ C:\WINDOWS\System32\wmi.dll
2008-05-23 02:56 . 2008-05-23 02:56 <DIR> d-------- C:\Program Files\MSXML 4.0
2008-05-23 02:56 . 2008-05-23 02:56 99,840 --a------ C:\WINDOWS\System32\poqexec.exe
2008-05-23 02:55 . 2008-05-23 02:55 633,856 --a------ C:\WINDOWS\System32\user32.dll
2008-05-23 02:55 . 2008-05-23 02:55 2,048 --a------ C:\WINDOWS\System32\tzres.dll
2008-05-23 02:54 . 2008-05-23 02:54 1,244,672 --a------ C:\WINDOWS\System32\mcmde.dll
2008-05-23 02:54 . 2008-05-23 02:54 750,080 --a------ C:\WINDOWS\System32\qmgr.dll
2008-05-22 20:28 . 2008-05-22 20:28 <DIR> d-------- C:\Program Files\Rockstar Games
2008-05-22 15:05 . 2008-05-22 15:05 <DIR> d-------- C:\Program Files\Trend Micro
2008-05-21 14:21 . 2008-05-21 14:21 <DIR> d-------- C:\Users\All Users\FLEXnet
2008-05-21 14:21 . 2008-05-21 14:21 <DIR> d-------- C:\ProgramData\FLEXnet
2008-05-21 13:54 . 2008-05-21 13:54 <DIR> d-------- C:\Program Files\PowerISO
2008-05-20 14:07 . 2008-05-20 14:33 <DIR> d-------- C:\Program Files\Enigma Software Group
2008-05-17 20:44 . 2008-05-24 04:06 <DIR> d-------- C:\Program Files\PeerGuardian2
2008-05-17 17:49 . 2008-05-17 17:49 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\Symantec
2008-05-17 16:07 . 2008-05-07 12:30 137,952 --a------ C:\WINDOWS\System32\drivers\symsnap.sys
2008-05-17 16:07 . 2008-05-07 16:44 107,368 --a------ C:\WINDOWS\System32\GEARAspi.dll
2008-05-17 16:07 . 2008-05-07 16:44 16,168 --a------ C:\WINDOWS\System32\drivers\GEARAspiWDM.sys
2008-05-17 16:04 . 2008-05-07 16:46 215,144 -ra------ C:\WINDOWS\patchw32.dll
2008-05-17 16:03 . 2008-05-07 16:46 215,144 -ra------ C:\WINDOWS\pw32a.dll
2008-05-17 15:55 . 2008-05-17 15:55 <DIR> d-------- C:\Program Files\Symantec
2008-05-17 15:55 . 2007-03-21 20:39 1,060,864 --a------ C:\WINDOWS\System32\MFC71.DLL
2008-05-17 15:55 . 2007-03-21 20:33 503,808 --a------ C:\WINDOWS\System32\MSVCP71.DLL
2008-05-17 15:55 . 2007-03-21 20:33 348,160 --a------ C:\WINDOWS\System32\MSVCR71.DLL
2008-05-17 15:54 . 2008-05-17 16:09 <DIR> d----c--- C:\WINDOWS\System32\DRVSTORE
2008-05-17 15:54 . 2008-01-19 20:12 128,104 --a------ C:\WINDOWS\System32\drivers\WimFltr.sys
2008-05-17 15:54 . 2008-01-19 19:45 38,112 --a------ C:\WINDOWS\System32\drivers\v2imount.sys
2008-05-17 15:54 . 2008-01-19 19:40 15,088 --a------ C:\WINDOWS\System32\drivers\vproeventmonitor.sys
2008-05-17 15:52 . 2008-05-17 15:52 <DIR> d-------- C:\Program Files\Norton Ghost
2008-05-17 15:41 . 2008-05-17 15:41 <DIR> d-------- C:\Users\All Users\LightScribe
2008-05-17 15:41 . 2008-05-17 15:41 <DIR> d-------- C:\ProgramData\LightScribe
2008-05-17 02:40 . 2008-05-17 02:41 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\DivX
2008-05-17 02:39 . 2008-05-17 02:39 <DIR> d-------- C:\Program Files\DivX
2008-05-17 02:39 . 2008-05-17 02:39 <DIR> d-------- C:\Program Files\Common Files\PX Storage Engine
2008-05-17 01:31 . 2008-05-17 17:33 1,240 --a------ C:\WINDOWS\wininit.ini
2008-05-17 00:54 . 2008-05-17 01:13 <DIR> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-05-17 00:54 . 2008-05-17 01:13 <DIR> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-05-17 00:54 . 2008-05-17 00:54 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-05-15 19:02 . 2008-05-15 19:02 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\vlc
2008-05-14 18:00 . 2008-05-20 14:19 <DIR> d-------- C:\Program Files\Steam
2008-05-14 18:00 . 2008-05-14 19:47 <DIR> d-------- C:\Program Files\Common Files\Steam
2008-05-14 03:08 . 2008-05-16 14:51 <DIR> d-------- C:\Users\cjbrown\Shared
2008-05-14 03:08 . 2008-05-16 15:03 <DIR> d-------- C:\Users\cjbrown\Incomplete
2008-05-14 03:08 . 2008-05-14 03:16 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\FrostWire
2008-05-14 03:07 . 2008-05-14 03:08 <DIR> d-------- C:\Program Files\FrostWire
2008-05-14 00:15 . 2008-05-14 00:15 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\CyberLink
2008-05-13 21:06 . 2008-05-24 03:55 19,155 --a------ C:\WINDOWS\System32\oodbs.lor
2008-05-13 21:03 . 2008-03-03 14:25 5,702 --ah----- C:\WINDOWS\nod32restoretemdono.reg
2008-05-13 21:03 . 2008-03-03 18:21 568 --ah----- C:\WINDOWS\nod32fixtemdono.reg
2008-05-13 20:53 . 2008-05-13 20:53 <DIR> d-------- C:\Users\All Users\ESET
2008-05-13 20:53 . 2008-05-13 20:53 <DIR> d-------- C:\ProgramData\ESET
2008-05-13 20:53 . 2008-05-13 20:53 <DIR> d-------- C:\Program Files\ESET
2008-05-13 14:36 . 2008-05-13 14:36 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\Purple Ghost Software, Inc
2008-05-13 14:36 . 2008-05-13 14:36 <DIR> d-------- C:\Program Files\Purple Ghost
2008-05-13 03:54 . 2008-05-22 23:56 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-05-13 03:28 . 2008-05-24 03:58 13,119 --a------ C:\Users\cjbrown\AppData\Roaming\nvModes.dat
2008-05-13 03:16 . 2008-05-13 03:16 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\Leadertech
2008-05-13 03:09 . 2008-05-13 03:09 0 --a------ C:\WINDOWS\PowerReg.dat
2008-05-13 02:59 . 2008-05-13 02:59 <DIR> d-------- C:\NeverwinterNights
2008-05-13 02:50 . 2008-05-13 02:50 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\HP
2008-05-13 01:19 . 2008-05-13 01:19 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\Nero
2008-05-13 01:14 . 2008-05-13 01:14 <DIR> d-------- C:\Users\All Users\Nero
2008-05-13 01:14 . 2008-05-13 01:14 <DIR> d-------- C:\ProgramData\Nero
2008-05-13 01:14 . 2008-05-13 01:14 <DIR> d-------- C:\Program Files\Nero
2008-05-13 01:14 . 2008-05-13 01:17 <DIR> d-------- C:\Program Files\Common Files\Nero
2008-05-13 00:58 . 2008-05-13 00:58 <DIR> d-------- C:\Program Files\Lavalys
2008-05-13 00:45 . 2008-05-13 00:45 <DIR> d-------- C:\Program Files\GoldWave
2008-05-13 00:38 . 2008-05-17 15:37 <DIR> d-------- C:\Users\All Users\BVRP Software
2008-05-13 00:38 . 2008-05-17 15:37 <DIR> d-------- C:\ProgramData\BVRP Software
2008-05-13 00:38 . 2008-05-13 00:39 <DIR> d-------- C:\Program Files\Motorola Phone Tools
2008-05-13 00:37 . 2008-05-13 00:37 <DIR> d-------- C:\Users\cjbrown\AppData\Roaming\InstallShield
2008-05-13 00:37 . 2008-05-13 00:37 <DIR> d-------- C:\Program Files\VideoLAN
2008-05-13 00:34 . 2008-05-13 00:34 <DIR> d-------- C:\WINDOWS\WinRAR
2008-05-13 00:34 . 2008-05-13 00:34 <DIR> d-------- C:\Program Files\OO Software
2008-05-13 00:33 . 2008-05-13 00:33 <DIR> d-------- C:\Program Files\CCleaner
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-24 10:08 --------- d-----w C:\Program Files\Windows Mail
2008-05-23 10:32 174 --sha-w C:\Program Files\desktop.ini
2008-05-23 10:26 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-23 10:26 --------- d-----w C:\Program Files\Windows Defender
2008-05-23 10:26 --------- d-----w C:\Program Files\Windows Calendar
2008-05-23 10:18 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-05-23 10:12 86,016 ----a-w C:\Windows\System32\icfupgd.dll
2008-05-23 10:12 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2008-05-23 10:12 7,680 ----a-w C:\Windows\System32\spwmp.dll
2008-05-23 10:12 63,488 ----a-w C:\Windows\system32\drivers\mpsdrv.sys
2008-05-23 10:12 61,952 ----a-w C:\Windows\System32\cmifw.dll
2008-05-23 10:12 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2008-05-23 10:12 396,800 ----a-w C:\Windows\System32\MPSSVC.dll
2008-05-23 10:12 392,192 ----a-w C:\Windows\System32\FirewallAPI.dll
2008-05-23 10:12 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2008-05-23 10:12 23,040 ----a-w C:\Windows\system32\drivers\tunnel.sys
2008-05-23 10:12 178,688 ----a-w C:\Windows\System32\iphlpsvc.dll
2008-05-23 10:12 16,896 ----a-w C:\Windows\System32\wfapigp.dll
2008-05-23 10:12 15,360 ----a-w C:\Windows\system32\drivers\TUNMP.SYS
2008-05-23 10:05 57,856 ----a-w C:\Windows\System32\SLUINotify.dll
2008-05-23 10:05 566,784 ----a-w C:\Windows\System32\SLCommDlg.dll
2008-05-23 10:05 39,936 ----a-w C:\Windows\System32\slcinst.dll
2008-05-23 10:05 351,232 ----a-w C:\Windows\System32\SLUI.exe
2008-05-23 10:05 33,280 ----a-w C:\Windows\System32\slwmi.dll
2008-05-23 10:05 268,288 ----a-w C:\Windows\System32\mcbuilder.exe
2008-05-23 10:05 223,232 ----a-w C:\Windows\System32\SLC.dll
2008-05-23 10:05 2,605,568 ----a-w C:\Windows\System32\SLsvc.exe
2008-05-23 10:05 2,048 ----a-w C:\Windows\System32\msxml6r.dll
2008-05-23 10:05 186,368 ----a-w C:\Windows\System32\SLLUA.exe
2008-05-23 10:05 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2008-05-23 10:03 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-05-23 10:03 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-05-23 10:03 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2008-05-23 10:03 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-05-23 10:03 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-05-23 09:59 826,368 ----a-w C:\Windows\System32\wininet.dll
2008-05-23 09:59 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-05-23 09:59 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-05-23 09:59 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-05-23 03:28 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-21 21:01 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-17 23:01 --------- d-----w C:\ProgramData\Symantec
2008-05-17 22:55 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-05-17 05:03 --------- d-----w C:\Program Files\Vongo
2008-05-17 05:00 --------- d-----w C:\Program Files\Yahoo!
2008-05-13 09:50 --------- d-----w C:\ProgramData\HP
2008-05-13 01:53 129,784 ------w C:\Windows\System32\PxAFS.DLL
2008-05-13 01:29 --------- d-----w C:\ProgramData\Hewlett-Packard
2008-05-13 01:09 --------- d-sh--w C:\ProgramData\Templates
2008-05-13 01:09 --------- d-sh--w C:\ProgramData\Start Menu
2008-05-13 01:09 --------- d-sh--w C:\ProgramData\Favorites
2008-05-13 01:09 --------- d-sh--w C:\ProgramData\Documents
2008-05-13 01:09 --------- d-sh--w C:\ProgramData\Desktop
2008-05-13 01:09 --------- d-sh--w C:\ProgramData\Application Data
2008-05-13 00:39 --------- d-----w C:\Program Files\Java
2008-05-12 22:32 --------- d-----w C:\Program Files\Hp
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of C:\Users\cjbrown\Downloads ----
2008-05-23 03:33 282 --ahs---- C:\Users\cjbrown\Downloads\desktop.ini
------- Sigcheck -------
.
((((((((((((((((((((((((((((( snapshot@2008-05-23_ 2.47.04.58 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-13 01:09:09 7,168 ----a-w C:\Windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2008-05-23 09:58:16 8,192 ----a-w C:\Windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2008-05-13 01:09:04 32,768 ----a-w C:\Windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2008-05-23 09:58:17 32,768 ----a-w C:\Windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
- 2008-05-13 01:09:00 716,800 ----a-w C:\Windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-05-23 09:58:22 720,896 ----a-w C:\Windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2008-05-13 01:09:00 299,008 ----a-w C:\Windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2008-05-23 09:58:18 299,008 ----a-w C:\Windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2008-05-13 01:09:09 32,768 ----a-w C:\Windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
+ 2008-05-23 09:58:21 32,768 ----a-w C:\Windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
- 2008-05-13 01:09:11 299,008 ----a-w C:\Windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2008-05-23 09:58:20 303,104 ----a-w C:\Windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2008-05-13 01:09:04 1,290,240 ----a-w C:\Windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
+ 2008-05-23 09:58:21 1,294,336 ----a-w C:\Windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
- 2008-05-13 01:09:05 1,699,840 ----a-w C:\Windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
+ 2008-05-23 09:58:17 1,703,936 ----a-w C:\Windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
- 2008-05-13 01:09:05 86,016 ----a-w C:\Windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2008-05-23 09:58:22 90,112 ----a-w C:\Windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2008-05-13 01:09:06 466,944 ----a-w C:\Windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-05-23 09:58:19 466,944 ----a-w C:\Windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2008-05-13 01:09:05 241,664 ----a-w C:\Windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2008-05-23 09:58:18 241,664 ----a-w C:\Windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2008-05-13 01:09:05 64,000 ----a-w C:\Windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
+ 2008-05-23 09:58:18 66,560 ----a-w C:\Windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
- 2008-05-13 01:09:06 368,640 ----a-w C:\Windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
+ 2008-05-23 09:58:21 372,736 ----a-w C:\Windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
- 2008-05-13 01:09:06 241,664 ----a-w C:\Windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2008-05-23 09:58:22 241,664 ----a-w C:\Windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2008-05-13 01:09:08 323,584 ----a-w C:\Windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2008-05-23 09:58:20 323,584 ----a-w C:\Windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2008-05-13 01:09:08 131,072 ----a-w C:\Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-05-23 09:58:19 131,072 ----a-w C:\Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2008-05-13 01:09:08 77,824 ----a-w C:\Windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2008-05-23 09:58:19 77,824 ----a-w C:\Windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
- 2008-05-13 01:09:08 126,976 ----a-w C:\Windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-05-23 09:58:21 126,976 ----a-w C:\Windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2008-05-13 01:09:10 819,200 ----a-w C:\Windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-05-23 09:58:16 819,200 ----a-w C:\Windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2008-05-13 01:09:09 57,344 ----a-w C:\Windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-05-23 09:58:18 57,344 ----a-w C:\Windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2008-05-13 01:09:09 569,344 ----a-w C:\Windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-05-23 09:58:17 573,440 ----a-w C:\Windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2008-05-13 01:09:09 1,245,184 ----a-w C:\Windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-05-23 09:58:22 1,257,472 ----a-w C:\Windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2008-05-13 01:09:09 2,039,808 ----a-w C:\Windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-05-23 09:58:19 2,052,096 ----a-w C:\Windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
- 2008-05-13 01:09:09 1,335,296 ----a-w C:\Windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.Xml.dll
+ 2008-05-23 09:58:20 1,339,392 ----a-w C:\Windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
- 2008-05-13 01:09:06 1,216,512 ----a-w C:\Windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2008-05-23 09:58:23 1,224,704 ----a-w C:\Windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2006-10-20 01:14:54 5,136,384 ----a-w C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-05-23 10:09:45 5,156,864 ----a-w C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2006-11-02 12:35:34 864,256 ----a-w C:\Windows\assembly\GAC_MSIL\ehepg\6.0.6000.0__31bf3856ad364e35\ehepg.dll
+ 2008-05-23 09:54:25 864,256 ----a-w C:\Windows\assembly\GAC_MSIL\ehepg\6.0.6000.0__31bf3856ad364e35\ehepg.dll
- 2006-11-02 12:35:33 143,360 ----a-w C:\Windows\assembly\GAC_MSIL\ehexthost\6.0.6000.0__31bf3856ad364e35\ehexthost.exe
+ 2008-05-23 09:54:11 135,168 ----a-w C:\Windows\assembly\GAC_MSIL\ehexthost\6.0.6000.0__31bf3856ad364e35\ehexthost.exe
- 2006-11-02 12:35:28 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\ehiExtens\6.0.6000.0__31bf3856ad364e35\ehiExtens.dll
+ 2008-05-23 09:54:24 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\ehiExtens\6.0.6000.0__31bf3856ad364e35\ehiExtens.dll
- 2006-11-02 12:35:29 4,370,432 ----a-w C:\Windows\assembly\GAC_MSIL\ehshell\6.0.6000.0__31bf3856ad364e35\ehshell.dll
+ 2008-05-23 09:54:09 4,370,432 ----a-w C:\Windows\assembly\GAC_MSIL\ehshell\6.0.6000.0__31bf3856ad364e35\ehshell.dll
- 2006-11-02 12:35:33 1,196,032 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
+ 2008-05-23 09:54:10 1,196,032 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
- 2006-11-02 12:35:30 2,342,912 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
+ 2008-05-23 09:54:10 2,342,912 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
- 2006-11-02 12:35:34 200,704 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
+ 2008-05-23 09:54:12 217,088 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
+ 2008-05-23 10:51:32 884,736 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e3607e3cb140b69ecc6aefbbb0021304\AspNetMMCExt.ni.dll
+ 2008-05-23 10:07:50 2,469,888 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\1afde72407799d9eeabf83ee2f207553\ehepg.ni.dll
+ 2008-05-23 10:08:32 360,448 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\cabf0b7d3a2f0da9fb7affe14c205946\ehepgdat.ni.dll
+ 2008-05-23 10:09:00 45,056 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\312fa4ba9d289a5e93352fd8d2f3d133\ehExtCOM.ni.dll
+ 2008-05-23 10:08:02 274,432 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\55c55aebb34a3016c5da9f07c5e9d0f3\ehExtHost.ni.exe
+ 2008-05-23 10:08:04 192,512 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\3962f224cb0911b1dfc294a943181a20\ehiExtens.ni.dll
+ 2008-05-23 10:08:28 843,776 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\92175f3ed32a80310b82b5f075b56cf5\ehiVidCtl.ni.dll
+ 2008-05-23 10:08:31 1,941,504 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\111f1e8bdfb0903873ed47696d41c2b6\ehRecObj.ni.dll
+ 2008-05-23 10:08:27 12,963,840 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehshell\184e53cac773488cf48506d391aac8ce\ehshell.ni.dll
+ 2008-05-23 10:53:04 12,963,840 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehshell\c08bbbf0bdeb40379226644a0854c946\ehshell.ni.dll
+ 2008-05-23 10:51:37 1,867,776 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\HPAdvisor\b49a19fe071a8d41ceed3b96dcf03b08\HPAdvisor.ni.exe
+ 2008-05-23 10:51:38 49,152 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MarketPillar\c15313c99977c13c7d9d8e4b3410ec6e\MarketPillar.ni.dll
+ 2008-05-23 10:08:07 765,952 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcstore\3caed6ae4ba19bef23762dc0366ee424\mcstore.ni.dll
+ 2008-05-23 10:09:02 266,240 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcupdate\ac7ace304f2374bd3e3598e10b89c41d\mcupdate.ni.exe
+ 2008-05-23 10:08:08 712,704 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\
011074e317df811a6fdb61722463b119\Microsoft.MediaCenter.Sports.ni.dll
+ 2008-05-23 10:08:01 6,115,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\599e30ec37ddaf799b00525ca6d7e7a4\Microsoft.MediaCenter.UI.ni.dll
+ 2008-05-23 10:08:03 634,880 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5df93064947b3d80d7e8ef4d34891284\Microsoft.MediaCenter.ni.dll
+ 2008-05-23 10:08:05 282,624 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\696943dfc3e1ff90cbb83eb9653d2052\Microsoft.MediaCenter.Shell.ni.dll
+ 2008-05-23 10:52:46 6,115,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\6fec21636f1e02fb9630f9b7db186bf1\Microsoft.MediaCenter.UI.ni.dll
+ 2008-05-23 10:53:17 1,720,320 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\750dcff9d4b9b92ec4acdc6b4cd313f8\Microsoft.VisualBasic.ni.dll
+ 2008-05-23 10:53:11 5,971,968 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\e159627625bc60fb6e454968d89ab948\MIGUIControls.ni.dll
+ 2008-05-23 10:53:19 135,168 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\8760ddb37b90104d71544afce00fb454\ServiceModelReg.ni.exe
+ 2008-05-23 10:07:50 44,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\stdole\36a64cc5b81038e116b0b95266557415\stdole.ni.dll
+ 2008-05-23 10:33:32 10,702,848 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\2e9f6501450ab1b682cdef4cdfb90143\System.Design.ni.dll
+ 2008-05-23 10:52:38 999,424 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\49a35f8d6b44cfe7c2a12cb873e58a22\System.IdentityModel.ni.dll
+ 2008-05-23 10:51:41 815,104 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\8fbca0140921ed343cb511595869a0ed\System.Runtime.Remoting.ni.dll
+ 2008-05-23 10:52:36 17,416,192 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\3636f59e63b317ae39d71c248befa5e2\System.ServiceModel.ni.dll
+ 2008-05-23 10:53:25 2,306,048 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\
0ccdb400998b3055c0b95941d8685348\System.Web.Mobile.ni.dll
+ 2008-05-23 10:52:05 1,941,504 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\37f75b2b7d0b3bb5242403b9c7ffabc7\System.Web.Services.ni.dll
+ 2008-05-23 10:52:02 12,185,600 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\c11c5eb32a435c14a33e62b1e150e988\System.Web.ni.dll
+ 2008-05-23 10:33:41 2,957,312 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\61b1c5cc722f9630530f982bad3e3802\System.Workflow.Activities.ni.dll
+ 2008-05-23 10:33:52 4,587,520 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\9fd6dac9ae80faa7cf8eda9b120789d1\System.Workflow.ComponentModel.ni.dll
+ 2008-05-23 10:34:17 2,064,384 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f37d6c468b8ab7afb574b729110e10bb\System.Workflow.Runtime.ni.dll
+ 2008-05-23 10:09:00 303,104 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\SystemStatus\925ec5aaa70f4fdcd1c4612bd38b4ec1\SystemStatus.ni.dll
+ 2008-05-23 09:58:27 61,440 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_161b6726\CustomMarshalers.dll
+ 2008-05-23 09:58:45 118,784 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b0b7e676\CustomMarshalers.dll
+ 2008-05-23 09:58:42 3,379,200 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_485e28dd\mscorlib.dll
+ 2008-05-23 09:58:56 8,880,128 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_9df25894\mscorlib.dll
+ 2008-05-23 09:58:38 1,466,368 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_06b397a8\System.Design.dll
+ 2008-05-23 09:58:52 3,395,584 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_4c257435\System.Design.dll
+ 2008-05-23 09:58:29 90,112 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_4bb4fc3f\System.Drawing.Design.dll
+ 2008-05-23 09:58:46 192,512 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_be7c21a9\System.Drawing.Design.dll
+ 2008-05-23 09:58:39 835,584 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_3d878768\System.Drawing.dll
+ 2008-05-23 09:58:53 2,244,608 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_ba60490b\System.Drawing.dll
+ 2008-05-23 09:58:49 7,880,704 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_2a7f7046\System.Windows.Forms.dll
+ 2008-05-23 09:58:32 3,014,656 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_f0b994ed\System.Windows.Forms.dll
+ 2008-05-23 09:58:51 5,505,024 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_695c92d1\System.Xml.dll
+ 2008-05-23 09:58:36 2,088,960 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_bff6f4df\System.Xml.dll
+ 2008-05-23 09:58:45 4,763,648 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_7f74abee\System.dll
+ 2008-05-23 09:58:27 1,953,792 ----a-w C:\Windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_86f9efb8\System.dll
- 2008-05-23 09:41:00 67,584 --s-a-w C:\Windows\bootstat.dat
+ 2008-05-24 10:55:40 67,584 --s-a-w C:\Windows\bootstat.dat
- 2006-11-02 12:35:32 21,504 ----a-w C:\Windows\ehome\ehdebug.dll
+ 2008-05-23 09:54:21 21,504 ----a-w C:\Windows\ehome\ehdebug.dll
- 2006-11-02 12:35:34 864,256 ----a-w C:\Windows\ehome\ehepg.dll
+ 2008-05-23 09:54:25 864,256 ----a-w C:\Windows\ehome\ehepg.dll
- 2006-11-02 12:35:33 143,360 ----a-w C:\Windows\ehome\ehexthost.exe
+ 2008-05-23 09:54:11 135,168 ----a-w C:\Windows\ehome\ehexthost.exe
- 2006-11-02 12:35:28 77,824 ----a-w C:\Windows\ehome\ehiExtens.dll
+ 2008-05-23 09:54:24 77,824 ----a-w C:\Windows\ehome\ehiExtens.dll
- 2006-11-02 12:35:30 103,936 ----a-w C:\Windows\ehome\ehPresenter.dll
+ 2008-05-23 09:54:10 103,936 ----a-w C:\Windows\ehome\ehPresenter.dll
- 2006-11-02 12:35:33 249,344 ----a-w C:\Windows\ehome\ehReplay.dll
+ 2008-05-23 09:54:23 252,416 ----a-w C:\Windows\ehome\ehReplay.dll
- 2006-11-02 12:35:29 10,093,568 ----a-w C:\Windows\ehome\ehres.dll
+ 2008-05-23 09:54:17 10,094,080 ----a-w C:\Windows\ehome\ehres.dll
- 2006-11-02 12:35:29 4,370,432 ----a-w C:\Windows\ehome\ehshell.dll
+ 2008-05-23 09:54:09 4,370,432 ----a-w C:\Windows\ehome\ehshell.dll
- 2006-11-02 12:35:28 18,944 ----a-w C:\Windows\ehome\ehtrace.dll
+ 2008-05-23 09:54:12 18,944 ----a-w C:\Windows\ehome\ehtrace.dll
- 2006-11-02 12:35:34 517,120 ----a-w C:\Windows\ehome\ehui.dll
+ 2008-05-23 09:54:11 517,120 ----a-w C:\Windows\ehome\ehui.dll
- 2006-11-02 12:35:29 1,497,600 ----a-w C:\Windows\ehome\ehuihlp.dll
+ 2008-05-23 09:54:08 1,497,600 ----a-w C:\Windows\ehome\ehuihlp.dll
- 2006-11-02 12:35:34 6,656 ----a-w C:\Windows\ehome\McrMgr.dll
+ 2008-05-23 09:54:22 6,656 ----a-w C:\Windows\ehome\McrMgr.dll
- 2006-11-02 12:35:34 173,056 ----a-w C:\Windows\ehome\McrMgr.exe
+ 2008-05-23 09:54:22 173,056 ----a-w C:\Windows\ehome\McrMgr.exe
- 2006-11-02 12:35:34 200,704 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.dll
+ 2008-05-23 09:54:12 217,088 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.dll
- 2006-11-02 12:35:33 1,196,032 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.Shell.dll
+ 2008-05-23 09:54:10 1,196,032 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.Shell.dll
- 2006-11-02 12:35:30 2,342,912 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.UI.dll
+ 2008-05-23 09:54:10 2,342,912 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.UI.dll
- 2006-11-02 09:45:07 2,923,520 ----a-w C:\Windows\explorer.exe
+ 2008-05-23 10:18:36 2,923,520 ----a-w C:\Windows\explorer.exe
- 2007-05-29 08:26:49 665,600 ----a-w C:\Windows\inf\drvindex.dat
+ 2008-05-24 10:08:32 665,600 ----a-w C:\Windows\inf\drvindex.dat
- 2008-05-13 07:42:31 51,200 ----a-w C:\Windows\inf\infpub.dat
+ 2008-05-24 10:08:55 51,200 ----a-w C:\Windows\inf\infpub.dat
- 2008-05-13 07:42:31 86,016 ----a-w C:\Windows\inf\infstor.dat
+ 2008-05-24 10:08:32 86,016 ----a-w C:\Windows\inf\infstor.dat
- 2008-05-13 07:42:31 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2008-05-24 10:08:41 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2008-05-23 09:56:44 32,768 ----a-r C:\Windows\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe
- 2003-02-21 02:19:32 253,952 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2004-07-15 08:49:16 258,048 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2003-02-21 02:19:34 20,480 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
+ 2004-07-15 08:49:18 20,480 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
- 2003-02-21 02:19:38 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2004-07-15 08:49:26 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
- 2003-02-21 02:19:36 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2004-07-15 08:49:22 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2003-02-21 02:09:08 77,824 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2004-07-15 07:32:22 81,920 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2003-02-21 17:20:44 49,152 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2004-07-15 18:23:28 49,152 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
- 2003-02-21 17:21:00 626,688 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2004-07-15 18:23:44 626,688 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
- 2003-02-21 02:06:20 282,624 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2004-07-15 07:24:30 282,624 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2003-10-08 21:30:14 81,920 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
- 2003-02-21 14:24:38 7,168 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
+ 2004-07-15 21:31:00 8,192 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
- 2003-02-21 14:24:40 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2004-07-15 21:31:04 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
- 2003-02-21 02:09:40 196,608 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
+ 2004-07-15 07:35:30 196,608 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
- 2003-02-21 14:26:36 716,800 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
+ 2004-07-15 21:28:58 720,896 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
- 2003-02-21 14:26:38 299,008 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2004-07-15 21:28:56 299,008 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
- 2003-02-21 14:25:04 49,152 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
+ 2004-07-15 21:28:50 49,152 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
- 2003-02-21 14:25:04 49,152 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
+ 2004-07-15 21:28:50 49,152 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
- 2003-02-21 02:09:12 77,824 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
+ 2004-07-15 07:32:44 86,016 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
- 2003-02-21 02:09:12 233,472 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
+ 2004-07-15 07:32:46 233,472 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
- 2003-02-21 02:06:32 311,296 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2004-07-15 07:25:06 315,392 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2003-02-21 02:09:16 98,304 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2004-07-15 07:33:04 102,400 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2003-02-21 14:26:34 2,088,960 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2004-07-15 21:29:02 2,138,112 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2003-02-21 02:09:18 143,360 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
+ 2004-07-15 07:33:22 143,360 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
- 2003-02-21 02:09:18 81,920 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
+ 2004-07-15 07:33:24 81,920 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
- 2003-02-21 02:07:34 2,494,464 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2004-07-15 07:26:52 2,510,848 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2003-02-21 02:08:32 2,482,176 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2004-07-15 07:28:34 2,502,656 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2004-08-10 23:20:00 106,496 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
- 2003-02-21 02:09:30 90,112 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
+ 2004-07-15 07:34:50 94,208 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
- 2003-02-21 14:26:46 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2004-07-15 21:28:48 32,768 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
- 2003-02-21 02:09:34 319,488 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2004-07-15 07:35:04 319,488 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
- 2003-02-21 14:26:38 1,290,240 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
+ 2004-07-15 21:32:00 1,294,336 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
- 2003-02-21 14:25:42 299,008 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
+ 2004-07-15 21:31:14 303,104 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
- 2003-02-21 14:26:42 1,699,840 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
+ 2004-07-15 21:29:02 1,703,936 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
- 2003-02-21 14:26:44 86,016 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
+ 2004-07-15 21:28:54 90,112 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
- 2003-02-21 14:26:46 1,216,512 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2004-07-15 21:31:16 1,224,704 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2003-02-21 14:26:50 466,944 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 21:28:58 466,944 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
- 2003-02-21 14:26:50 241,664 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
+ 2004-07-15 21:28:56 241,664 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
- 2003-02-21 02:09:36 64,000 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
+ 2004-07-15 07:35:12 66,560 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
- 2003-02-21 14:26:52 368,640 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
+ 2004-07-15 21:31:58 372,736 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
- 2003-02-21 14:26:54 241,664 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
+ 2004-07-15 21:31:12 241,664 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
- 2003-02-21 14:26:56 323,584 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
+ 2004-07-15 21:28:58 323,584 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
- 2003-02-21 14:26:56 131,072 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 21:31:54 131,072 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
- 2003-02-21 14:26:58 77,824 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2004-07-15 21:28:52 77,824 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2003-02-21 14:27:00 126,976 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
+ 2004-07-15 21:28:54 126,976 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
- 2003-02-21 14:27:02 1,245,184 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2004-07-15 21:29:00 1,257,472 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2003-02-21 14:27:06 819,200 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
+ 2004-07-15 21:28:58 819,200 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
- 2003-02-21 14:24:18 57,344 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2004-07-15 21:28:52 57,344 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
- 2003-02-21 14:27:06 569,344 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
+ 2004-07-15 21:31:16 573,440 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
- 2003-02-21 14:27:08 2,039,808 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2004-07-15 21:32:02 2,052,096 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
- 2003-02-21 14:27:10 1,335,296 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2004-07-15 21:29:00 1,339,392 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2004-06-22 20:51:38 53,248 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2003-02-21 17:20:38 737,280 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
+ 2004-07-15 18:23:20 737,280 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
- 2003-02-21 12:04:18 1,032,192 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
+ 2004-07-15 15:15:14 1,032,192 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
- 2003-02-21 03:10:40 31,744 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2004-07-15 09:11:56 31,744 ----a-w C:\Windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
- 2006-11-02 06:34:00 8,192 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-05-23 10:09:43 8,192 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
- 2006-11-02 06:34:00 23,040 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-05-23 10:09:43 32,608 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2006-11-02 06:34:01 23,552 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-05-23 10:09:43 32,600 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2006-10-20 01:14:54 5,136,384 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-05-23 10:09:45 5,156,864 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2006-11-02 06:34:30 1,330,688 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-05-23 10:09:42 1,330,688 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2006-11-02 06:34:30 408,576 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-05-23 10:09:44 406,016 ----a-w C:\Windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-05-24 10:55:41 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-05-24 10:55:41 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2008-05-23 09:23:02 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-05-23 10:32:18 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-05-23 09:41:23 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-05-24 10:55:57 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-05-23 09:34:28 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-05-23 10:36:09 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-05-13 01:26:54 1,016,523 -c--a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2008-05-23 10:32:26 1,016,523 -c--a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
- 2008-05-23 09:41:22 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-05-24 10:55:57 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
- 2006-11-02 09:46:02 17,408 ----a-w C:\Windows\servicing\CbsMsg.dll
+ 2008-05-24 10:02:14 18,432 ----a-w C:\Windows\servicing\CbsMsg.dll
+ 2008-05-23 09:55:58 18,944 ----a-w C:\Windows\servicing\GC32\tzupd.exe
- 2006-11-02 09:45:49 26,112 ----a-w C:\Windows\servicing\TrustedInstaller.exe
+ 2008-05-24 10:02:14 27,136 ----a-w C:\Windows\servicing\TrustedInstaller.exe
+ 2008-05-24 10:45:35 5,498 ----a-w C:\Windows\SoftwareDistribution\EventCache\{9DA77BBE-A793-4244-93D4-373F23F21CFD}.bin
- 2006-11-02 09:46:02 124,928 ----a-w C:\Windows\System32\advpack.dll
+ 2008-05-23 09:59:15 124,928 ----a-w C:\Windows\System32\advpack.dll
- 2006-11-02 09:46:02 1,984,512 ----a-w C:\Windows\System32\authui.dll
+ 2008-05-23 10:04:11 1,984,512 ----a-w C:\Windows\System32\authui.dll
- 2006-11-02 09:46:02 65,024 ----a-w C:\Windows\System32\avicap32.dll
+ 2008-05-23 10:04:10 65,024 ----a-w C:\Windows\System32\avicap32.dll
- 2006-11-02 09:46:02 88,576 ----a-w C:\Windows\System32\avifil32.dll
+ 2008-05-23 10:04:10 88,576 ----a-w C:\Windows\System32\avifil32.dll
- 2006-11-02 09:46:02 11,776 ----a-w C:\Windows\System32\batt.dll
+ 2008-05-24 10:02:13 12,800 ----a-w C:\Windows\System32\batt.dll
- 2006-11-02 09:39:02 36,864 ----a-w C:\Windows\System32\cdd.dll
+ 2008-05-23 10:20:11 36,864 ----a-w C:\Windows\System32\cdd.dll
- 2006-11-02 09:46:02 19,456 ----a-w C:\Windows\System32\cfgmgr32.dll
+ 2008-05-24 10:02:16 19,456 ----a-w C:\Windows\System32\cfgmgr32.dll
- 2006-11-02 09:51:44 615,528 ----a-w C:\Windows\System32\ci.dll
+ 2008-05-24 10:02:17 620,088 ----a-w C:\Windows\System32\ci.dll
- 2006-11-02 09:51:25 221,800 ----a-w C:\Windows\System32\clfs.sys
+ 2008-05-24 10:02:17 224,824 ----a-w C:\Windows\System32\clfs.sys
- 2008-05-23 09:41:54 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-05-24 10:02:55 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-05-23 09:41:54 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-05-24 10:02:55 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-05-23 09:41:54 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-05-24 10:02:55 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2006-11-02 09:46:03 10,240 ----a-w C:\Windows\System32\dhcpcmonitor.dll
+ 2008-05-23 10:04:11 10,240 ----a-w C:\Windows\System32\dhcpcmonitor.dll
- 2006-11-02 09:46:03 204,800 ----a-w C:\Windows\System32\dhcpcsvc.dll
+ 2008-05-23 10:04:11 204,800 ----a-w C:\Windows\System32\dhcpcsvc.dll
- 2006-11-02 09:46:03 120,320 ----a-w C:\Windows\System32\dhcpcsvc6.dll
+ 2008-05-23 10:04:11 120,320 ----a-w C:\Windows\System32\dhcpcsvc6.dll
- 2006-11-02 09:46:03 35,328 ----a-w C:\Windows\System32\dispci.dll
+ 2008-05-24 10:02:13 35,328 ----a-w C:\Windows\System32\dispci.dll
- 2006-11-02 09:46:04 162,816 ----a-w C:\Windows\System32\dnsapi.dll
+ 2008-05-23 10:01:01 162,816 ----a-w C:\Windows\System32\dnsapi.dll
- 2006-11-02 09:46:04 134,656 ----a-w C:\Windows\System32\dps.dll
+ 2008-05-23 10:20:10 134,656 ----a-w C:\Windows\System32\dps.dll
- 2006-11-02 09:46:04 256,512 ----a-w C:\Windows\System32\dpx.dll
+ 2008-05-24 10:02:16 260,096 ----a-w C:\Windows\System32\dpx.dll
- 2006-11-02 09:51:30 255,592 ----a-w C:\Windows\System32\drivers\acpi.sys
+ 2008-05-23 10:18:38 258,232 ----a-w C:\Windows\System32\drivers\acpi.sys
- 2006-11-02 09:49:47 25,192 ----a-w C:\Windows\System32\drivers\battc.sys
+ 2008-05-23 10:18:37 28,344 ----a-w C:\Windows\System32\drivers\battc.sys
- 2006-11-02 08:35:03 14,208 ----a-w C:\Windows\System32\drivers\CmBatt.sys
+ 2008-05-23 10:18:37 14,208 ----a-w C:\Windows\System32\drivers\CmBatt.sys
- 2006-11-02 09:49:32 18,280 ----a-w C:\Windows\System32\drivers\compbatt.sys
+ 2008-05-23 10:18:38 20,920 ----a-w C:\Windows\System32\drivers\compbatt.sys
- 2006-11-02 08:38:51 617,472 ----a-w C:\Windows\System32\drivers\dxgkrnl.sys
+ 2008-05-23 10:20:11 619,008 ----a-w C:\Windows\System32\drivers\dxgkrnl.sys
- 2006-11-02 08:51:13 54,784 ----a-w C:\Windows\System32\drivers\i8042prt.sys
+ 2008-05-24 10:02:12 54,784 ----a-w C:\Windows\System32\drivers\i8042prt.sys
- 2006-11-02 09:49:57 32,872 ----a-w C:\Windows\System32\drivers\kbdclass.sys
+ 2008-05-24 10:02:12 35,384 ----a-w C:\Windows\System32\drivers\kbdclass.sys
- 2006-11-02 08:51:12 15,872 ----a-w C:\Windows\System32\drivers\kbdhid.sys
+ 2008-05-24 10:02:12 15,872 ----a-w C:\Windows\System32\drivers\kbdhid.sys
- 2006-11-02 09:49:54 31,848 ----a-w C:\Windows\System32\drivers\mouclass.sys
+ 2008-05-24 10:02:13 34,360 ----a-w C:\Windows\System32\drivers\mouclass.sys
- 2006-11-02 08:51:12 15,872 ----a-w C:\Windows\System32\drivers\mouhid.sys
+ 2008-05-24 10:02:13 15,872 ----a-w C:\Windows\System32\drivers\mouhid.sys
- 2006-11-02 08:58:07 20,480 ----a-w C:\Windows\System32\drivers\ndistapi.sys
+ 2008-05-23 10:20:15 20,480 ----a-w C:\Windows\System32\drivers\ndistapi.sys
- 2006-11-02 08:58:09 48,640 ----a-w C:\Windows\System32\drivers\ndproxy.sys
+ 2008-05-23 10:20:15 48,640 ----a-w C:\Windows\System32\drivers\ndproxy.sys
- 2006-11-02 08:57:33 70,144 ----a-w C:\Windows\System32\drivers\pacer.sys
+ 2008-05-23 10:20:12 70,144 ----a-w C:\Windows\System32\drivers\pacer.sys
- 2006-11-02 08:51:11 19,968 ----a-w C:\Windows\System32\drivers\sermouse.sys
+ 2008-05-24 10:02:13 19,968 ----a-w C:\Windows\System32\drivers\sermouse.sys
- 2006-11-02 08:55:05 54,784 ----a-w C:\Windows\System32\drivers\USBSTOR.SYS
+ 2008-05-23 10:14:22 55,296 ----a-w C:\Windows\System32\drivers\USBSTOR.SYS
- 2006-11-02 08:58:13 61,952 ----a-w C:\Windows\System32\drivers\wanarp.sys
+ 2008-05-23 10:20:14 61,952 ----a-w C:\Windows\System32\drivers\wanarp.sys
- 2006-11-02 09:51:41 492,648 ----a-w C:\Windows\System32\drivers\Wdf01000.sys
+ 2008-05-24 10:02:13 495,160 ----a-w C:\Windows\System32\drivers\Wdf01000.sys
- 2006-11-02 09:49:59 32,872 ----a-w C:\Windows\System32\drivers\WdfLdr.sys
+ 2008-05-24 10:02:14 35,384 ----a-w C:\Windows\System32\drivers\WdfLdr.sys
- 2006-11-02 08:35:03 11,264 ----a-w C:\Windows\System32\drivers\wmiacpi.sys
+ 2008-05-23 10:18:38 11,264 ----a-w C:\Windows\System32\drivers\wmiacpi.sys
+ 2008-05-23 10:18:38 258,232 ----a-w C:\Windows\System32\DriverStore\FileRepository\acpi.inf_c74dd533\acpi.sys
+ 2008-05-23 10:18:38 28,344 ----a-w C:\Windows\System32\DriverStore\FileRepository\acpi.inf_c74dd533\battc.sys
+ 2008-05-23 10:18:38 20,920 ----a-w C:\Windows\System32\DriverStore\FileRepository\acpi.inf_c74dd533\compbatt.sys
+ 2008-05-23 10:18:38 11,264 ----a-w C:\Windows\System32\DriverStore\FileRepository\acpi.inf_c74dd533\wmiacpi.sys
+ 2008-05-23 10:18:37 28,344 ----a-w C:\Windows\System32\DriverStore\FileRepository\battery.inf_68d2ccc3\battc.sys
+ 2008-05-23 10:18:37 14,208 ----a-w C:\Windows\System32\DriverStore\FileRepository\battery.inf_68d2ccc3\CmBatt.sys
+ 2008-05-23 10:18:37 21,504 ----a-w C:\Windows\System32\DriverStore\FileRepository\battery.inf_68d2ccc3\hidbatt.sys
+ 2008-05-23 10:00:45 53,760 ----a-w C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_6baf8130\hdaudbus.sys
+ 2008-05-23 10:00:45 53,760 ----a-w C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_f2a0d9c2\hdaudbus.sys
+ 2008-05-24 10:02:12 54,784 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\i8042prt.sys
+ 2008-05-24 10:02:12 6,656 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\kbd106.dll
+ 2008-05-24 10:02:12 35,384 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\kbdclass.sys
+ 2008-05-24 10:02:12 15,872 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\kbdhid.sys
+ 2008-05-23 10:13:50 41,984 ----a-w C:\Windows\System32\DriverStore\FileRepository\monitor.inf_1a316eff\monitor.sys
+ 2008-05-23 10:10:51 17,464 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\aliide.sys
+ 2008-05-23 10:10:51 17,976 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\amdide.sys
+ 2008-05-23 10:10:51 21,560 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
+ 2008-05-23 10:10:51 109,624 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\ataport.sys
+ 2008-05-23 10:10:51 19,000 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\cmdide.sys
+ 2008-05-23 10:10:50 17,464 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\intelide.sys
+ 2008-05-23 10:10:51 25,656 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\msahci.sys
+ 2008-05-23 10:10:51 15,928 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\pciide.sys
+ 2008-05-23 10:10:51 45,112 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\pciidex.sys
+ 2008-05-23 10:10:51 20,024 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\viaide.sys
+ 2008-05-24 10:02:12 54,784 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\i8042prt.sys
+ 2008-05-24 10:02:13 34,360 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\mouclass.sys
+ 2008-05-24 10:02:13 15,872 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\mouhid.sys
+ 2008-05-24 10:02:13 19,968 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\sermouse.sys
+ 2008-05-23 10:18:37 81,592 ----a-w C:\Windows\System32\DriverStore\FileRepository\sbp2.inf_cdabeeda\sbp2port.sys
+ 2008-05-23 10:07:35 82,432 ----a-w C:\Windows\System32\DriverStore\FileRepository\sdbus.inf_0507e6be\sdbus.sys
+ 2008-05-23 10:07:35 13,312 ----a-w C:\Windows\System32\DriverStore\FileRepository\sffdisk.inf_89fdc4da\sffdisk.sys
+ 2008-05-23 10:07:35 12,800 ----a-w C:\Windows\System32\DriverStore\FileRepository\sffdisk.inf_89fdc4da\sffp_mmc.sys
+ 2008-05-23 10:07:35 12,800 ----a-w C:\Windows\System32\DriverStore\FileRepository\sffdisk.inf_89fdc4da\sffp_sd.sys
+ 2008-05-23 10:14:22 55,296 ----a-w C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_8416e98e\USBSTOR.SYS
+ 2008-05-23 10:10:49 211,000 ----a-w C:\Windows\System32\DriverStore\FileRepository\volume.inf_f47b2c78\volsnap.sys
- 2006-11-02 09:45:03 100,864 ----a-w C:\Windows\System32\drvinst.exe
+ 2008-05-24 10:02:16 101,888 ----a-w C:\Windows\System32\drvinst.exe
- 2006-11-02 09:46:04 347,136 ----a-w C:\Windows\System32\dxtmsft.dll
+ 2008-05-23 09:59:13 347,136 ----a-w C:\Windows\System32\dxtmsft.dll
- 2006-11-02 09:46:04 214,528 ----a-w C:\Windows\System32\dxtrans.dll
+ 2008-05-23 09:59:13 214,528 ----a-w C:\Windows\System32\dxtrans.dll
- 2006-11-02 09:39:22 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
+ 2008-05-24 10:02:13 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
- 2008-05-23 18:13:47 1,695,824 ----a-w C:\Windows\System32\FNTCACHE.DAT
+ 2008-05-23 10:29:47 1,695,824 ----a-w C:\Windows\System32\FNTCACHE.DAT
- 2006-11-02 09:46:05 61,952 ----a-w C:\Windows\System32\icardie.dll
+ 2008-05-23 09:59:06 63,488 ----a-w C:\Windows\System32\icardie.dll
- 2006-11-02 09:45:13 13,824 ----a-w C:\Windows\System32\icsunattend.exe
+ 2008-05-23 10:20:13 13,824 ----a-w C:\Windows\System32\icsunattend.exe
- 2006-11-02 09:45:13 56,832 ----a-w C:\Windows\System32\ie4uinit.exe
+ 2008-05-23 09:59:03 70,656 ----a-w C:\Windows\System32\ie4uinit.exe
- 2006-10-26 03:24:15 2,451,312 ----a-w C:\Windows\System32\ieapfltr.dat
+ 2008-05-23 09:59:15 2,455,488 ----a-w C:\Windows\System32\ieapfltr.dat
- 2007-05-29 07:25:19 383,488 ----a-w C:\Windows\System32\ieapfltr.dll
+ 2008-05-23 09:59:15 383,488 ----a-w C:\Windows\System32\ieapfltr.dll
- 2006-11-02 09:46:05 6,054,400 ----a-w C:\Windows\System32\ieframe.dll
+ 2008-05-23 09:59:12 6,066,176 ----a-w C:\Windows\System32\ieframe.dll
- 2006-11-02 09:46:05 44,544 ----a-w C:\Windows\System32\iernonce.dll
+ 2008-05-23 09:59:02 44,544 ----a-w C:\Windows\System32\iernonce.dll
- 2006-11-02 09:46:05 180,736 ----a-w C:\Windows\System32\ieui.dll
+ 2008-05-23 09:59:12 180,736 ----a-w C:\Windows\System32\ieui.dll
- 2006-11-02 09:46:05 286,720 ----a-w C:\Windows\System32\ipnathlp.dll
+ 2008-05-23 10:20:13 286,208 ----a-w C:\Windows\System32\ipnathlp.dll
- 2006-11-02 09:46:05 27,136 ----a-w C:\Windows\System32\jsproxy.dll
+ 2008-05-23 09:59:14 27,648 ----a-w C:\Windows\System32\jsproxy.dll
+ 2005-05-24 19:27:16 213,048 ----a-w C:\Windows\System32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2007-08-29 22:47:20 94,208 ----a-w C:\Windows\System32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2007-08-29 22:49:54 950,272 ----a-w C:\Windows\System32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
- 2006-11-02 09:39:43 6,656 ----a-w C:\Windows\System32\kbd106n.dll
+ 2008-05-24 10:02:16 6,656 ----a-w C:\Windows\System32\kbd106n.dll
- 2006-11-02 08:30:44 8,704 ----a-w C:\Windows\System32\kd1394.dll
+ 2008-05-24 10:02:18 19,000 ----a-w C:\Windows\System32\kd1394.dll
- 2006-11-02 09:46:05 113,664 ----a-w C:\Windows\System32\loadperf.dll
+ 2008-05-24 10:02:15 115,200 ----a-w C:\Windows\System32\loadperf.dll
- 2006-11-02 09:45:21 38,912 ----a-w C:\Windows\System32\lodctr.exe
+ 2008-05-24 10:02:15 39,424 ----a-w C:\Windows\System32\lodctr.exe
- 2006-11-02 09:46:05 82,944 ----a-w C:\Windows\System32\mciavi32.dll
+ 2008-05-23 10:04:10 82,944 ----a-w C:\Windows\System32\mciavi32.dll
- 2006-11-02 09:46:13 120,320 ----a-w C:\Windows\System32\migration\CntrtextMig.dll
+ 2008-05-24 10:02:15 120,320 ----a-w C:\Windows\System32\migration\CntrtextMig.dll
- 2006-11-02 09:46:11 49,152 ----a-w C:\Windows\System32\migration\netiomig.dll
+ 2008-05-23 10:09:05 49,152 ----a-w C:\Windows\System32\migration\netiomig.dll
- 2006-11-02 09:46:14 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
+ 2008-05-23 09:59:14 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
- 2006-09-18 21:42:35 6,757,792 ----a-w C:\Windows\System32\mrt.exe
+ 2008-04-06 05:56:22 19,836,024 ----a-w C:\Windows\System32\mrt.exe
- 2006-11-02 09:46:07 564,224 ----a-w C:\Windows\System32\msftedit.dll
+ 2008-05-23 10:20:13 564,736 ----a-w C:\Windows\System32\msftedit.dll
- 2007-05-29 07:25:23 3,580,416 ----a-w C:\Windows\System32\mshtml.dll
+ 2008-05-23 09:59:09 3,591,680 ----a-w C:\Windows\System32\mshtml.dll
- 2006-11-02 09:46:07 477,696 ----a-w C:\Windows\System32\mshtmled.dll
+ 2008-05-23 09:59:10 478,208 ----a-w C:\Windows\System32\mshtmled.dll
- 2006-11-02 09:46:10 12,800 ----a-w C:\Windows\System32\msrle32.dll
+ 2008-05-23 10:04:10 12,800 ----a-w C:\Windows\System32\msrle32.dll
- 2006-11-02 09:46:10 670,720 ----a-w C:\Windows\System32\mstime.dll
+ 2008-05-23 09:59:06 671,232 ----a-w C:\Windows\System32\mstime.dll
- 2006-11-02 09:46:10 123,904 ----a-w C:\Windows\System32\msvfw32.dll
+ 2008-05-23 10:04:10 123,904 ----a-w C:\Windows\System32\msvfw32.dll
- 2006-11-02 09:46:10 31,232 ----a-w C:\Windows\System32\msvidc32.dll
+ 2008-05-23 10:04:10 31,232 ----a-w C:\Windows\System32\msvidc32.dll
- 2003-04-18 23:46:22 1,233,920 ----a-w C:\Windows\System32\msxml4.dll
+ 2007-05-08 22:03:04 1,275,392 ----a-w C:\Windows\System32\msxml4.dll
- 2006-11-02 09:46:11 383,488 ----a-w C:\Windows\System32\netcfgx.dll
+ 2008-05-23 10:20:14 384,000 ----a-w C:\Windows\System32\netcfgx.dll
- 2006-11-02 09:46:12 23,040 ----a-w C:\Windows\System32\nshhttp.dll
+ 2008-05-24 10:02:16 23,552 ----a-w C:\Windows\System32\nshhttp.dll
- 2006-11-02 09:46:12 220,160 ----a-w C:\Windows\System32\ntprint.dll
+ 2008-05-23 10:04:13 220,160 ----a-w C:\Windows\System32\ntprint.dll
- 2006-11-02 09:45:31 61,440 ----a-w C:\Windows\System32\ntprint.exe
+ 2008-05-23 10:04:13 61,440 ----a-w C:\Windows\System32\ntprint.exe
- 2006-11-02 09:46:12 558,080 ----a-w C:\Windows\System32\oleaut32.dll
+ 2008-05-24 10:02:15 558,080 ----a-w C:\Windows\System32\oleaut32.dll
- 2006-11-02 09:46:12 15,360 ----a-w C:\Windows\System32\pacerprf.dll
+ 2008-05-23 10:20:11 15,360 ----a-w C:\Windows\System32\pacerprf.dll
- 2008-05-23 09:18:58 107,714 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-05-24 11:03:13 107,714 ----a-w C:\Windows\System32\perfc009.dat
- 2008-05-23 09:18:58 626,976 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-05-24 11:03:13 626,976 ----a-w C:\Windows\System32\perfh009.dat
- 2006-11-02 09:46:12 44,544 ----a-w C:\Windows\System32\pngfilt.dll
+ 2008-05-23 09:59:03 44,544 ----a-w C:\Windows\System32\pngfilt.dll
- 2006-11-02 09:42:44 17,408 ----a-w C:\Windows\System32\prflbmsg.dll
+ 2008-05-24 10:02:15 17,408 ----a-w C:\Windows\System32\prflbmsg.dll
- 2006-11-02 09:46:12 77,824 ----a-w C:\Windows\System32\rascfg.dll
+ 2008-05-23 10:20:14 77,824 ----a-w C:\Windows\System32\rascfg.dll
- 2006-11-02 09:46:12 52,736 ----a-w C:\Windows\System32\rasdiag.dll
+ 2008-05-23 10:20:14 52,736 ----a-w C:\Windows\System32\rasdiag.dll
- 2006-11-02 09:46:12 32,768 ----a-w C:\Windows\System32\rasmxs.dll
+ 2008-05-23 10:20:14 32,768 ----a-w C:\Windows\System32\rasmxs.dll
- 2006-11-02 09:46:12 22,016 ----a-w C:\Windows\System32\rasser.dll
+ 2008-05-23 10:20:15 22,016 ----a-w C:\Windows\System32\rasser.dll
- 2006-11-02 09:46:12 467,456 ----a-w C:\Windows\System32\riched20.dll
+ 2008-05-23 10:20:17 467,456 ----a-w C:\Windows\System32\riched20.dll
- 2006-11-02 09:46:12 8,192 ----a-w C:\Windows\System32\riched32.dll
+ 2008-05-23 10:20:17 8,192 ----a-w C:\Windows\System32\riched32.dll
- 2006-11-02 12:36:17 313,856 ----a-w C:\Windows\System32\rstrui.exe
+ 2008-05-24 10:02:19 313,856 ----a-w C:\Windows\System32\rstrui.exe
- 2006-11-02 09:46:12 269,312 ----a-w C:\Windows\System32\schannel.dll
+ 2008-05-23 10:04:13 269,824 ----a-w C:\Windows\System32\schannel.dll
- 2006-11-02 09:46:12 595,456 ----a-w C:\Windows\System32\schedsvc.dll
+ 2008-05-24 10:02:14 595,456 ----a-w C:\Windows\System32\schedsvc.dll
- 2006-11-02 09:46:12 69,632 ----a-w C:\Windows\System32\sendmail.dll
+ 2008-05-23 10:04:09 69,632 ----a-w C:\Windows\System32\sendmail.dll
- 2006-11-02 09:46:13 1,584,128 ----a-w C:\Windows\System32\setupapi.dll
+ 2008-05-24 10:02:51 1,585,664 ----a-w C:\Windows\System32\setupapi.dll
- 2006-11-02 09:46:13 11,314,688 ----a-w C:\Windows\System32\shell32.dll
+ 2008-05-23 10:04:14 11,315,200 ----a-w C:\Windows\System32\shell32.dll
- 2008-05-21 21:03:13 5,767,168 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2008-05-24 10:54:22 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2006-11-02 12:36:17 40,960 ----a-w C:\Windows\System32\srclient.dll
+ 2008-05-24 10:02:19 40,960 ----a-w C:\Windows\System32\srclient.dll
- 2006-11-02 12:36:17 371,712 ----a-w C:\Windows\System32\srcore.dll
+ 2008-05-24 10:02:19 371,712 ----a-w C:\Windows\System32\srcore.dll
- 2006-11-02 12:36:17 16,384 ----a-w C:\Windows\System32\srdelayed.exe
+ 2008-05-24 10:02:19 16,384 ----a-w C:\Windows\System32\srdelayed.exe
- 2006-11-02 12:34:48 8,138,240 ----a-w C:\Windows\System32\ssBranded.scr
+ 2008-05-23 10:04:08 8,138,240 ----a-w C:\Windows\System32\ssBranded.scr
- 2006-11-02 09:46:13 540,672 ----a-w C:\Windows\System32\sysmain.dll
+ 2008-05-23 10:18:34 542,720 ----a-w C:\Windows\System32\sysmain.dll
- 2006-11-02 09:46:13 33,280 ----a-w C:\Windows\System32\traffic.dll
+ 2008-05-23 10:20:12 33,280 ----a-w C:\Windows\System32\traffic.dll
- 2006-11-02 09:46:13 221,184 ----a-w C:\Windows\System32\umpnpmgr.dll
+ 2008-05-24 10:02:16 221,696 ----a-w C:\Windows\System32\umpnpmgr.dll
- 2006-11-02 09:45:50 32,256 ----a-w C:\Windows\System32\unlodctr.exe
+ 2008-05-24 10:02:15 32,256 ----a-w C:\Windows\System32\unlodctr.exe
- 2006-11-02 09:46:13 1,149,952 ----a-w C:\Windows\System32\urlmon.dll
+ 2008-05-23 09:59:03 1,159,680 ----a-w C:\Windows\System32\urlmon.dll
- 2006-11-02 09:46:13 356,864 ----a-w C:\Windows\System32\wbem\wbemcomn.dll
+ 2008-05-23 10:18:43 356,352 ----a-w C:\Windows\System32\wbem\wbemcomn.dll
- 2008-05-23 09:18:16 4,448 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3474934407-1256347262-3237347919-1000_UserData.bin
+ 2008-05-24 10:59:27 5,588 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3474934407-1256347262-3237347919-1000_UserData.bin
- 2008-05-23 09:18:16 58,910 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-05-24 10:59:27 60,016 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-05-15 22:17:08 31,104 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-05-24 10:59:21 34,948 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2006-11-02 09:46:14 712,192 ----a-w C:\Windows\System32\WindowsCodecs.dll
+ 2008-05-23 10:04:10 712,192 ----a-w C:\Windows\System32\WindowsCodecs.dll
- 2006-11-02 09:52:01 940,648 ----a-w C:\Windows\System32\winload.exe
+ 2008-05-24 10:02:18 944,184 ----a-w C:\Windows\System32\winload.exe
- 2006-11-02 09:52:02 902,248 ----a-w C:\Windows\System32\winresume.exe
+ 2008-05-24 10:02:18 905,400 ----a-w C:\Windows\System32\winresume.exe
- 2006-11-02 12:34:30 47,104 ----a-w C:\Windows\System32\wlanapi.dll
+ 2008-05-23 10:18:32 47,104 ----a-w C:\Windows\System32\wlanapi.dll
- 2006-11-02 12:34:30 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
+ 2008-05-23 10:18:32 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
- 2006-11-02 12:34:30 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
+ 2008-05-23 10:18:32 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
- 2006-11-02 12:34:30 297,984 ----a-w C:\Windows\System32\wlansec.dll
+ 2008-05-23 10:18:32 297,984 ----a-w C:\Windows\System32\wlansec.dll
- 2006-11-02 12:34:30 502,784 ----a-w C:\Windows\System32\wlansvc.dll
+ 2008-05-23 10:18:32 502,784 ----a-w C:\Windows\System32\wlansvc.dll
- 2006-11-02 12:35:53 10,616,832 ----a-w C:\Windows\System32\wmp.dll
+ 2008-05-23 10:12:42 10,617,344 ----a-w C:\Windows\System32\wmp.dll
- 2006-11-02 09:46:14 613,888 ----a-w C:\Windows\System32\wpd_ci.dll
+ 2008-05-24 10:02:18 613,888 ----a-w C:\Windows\System32\wpd_ci.dll
- 2006-11-02 09:46:14 13,824 ----a-w C:\Windows\System32\wshqos.dll
+ 2008-05-23 10:20:12 13,824 ----a-w C:\Windows\System32\wshqos.dll
- 2006-11-02 09:46:14 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
+ 2008-05-23 10:18:40 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
+ 2008-05-23 09:54:25 864,256 ----a-w C:\Windows\winsxs\msil_ehepg_31bf3856ad364e35_6.0.6000.16625_none_d9ac5ba2d1cd93c1\ehepg.dll
+ 2008-05-23 09:54:24 864,256 ----a-w C:\Windows\winsxs\msil_ehepg_31bf3856ad364e35_6.0.6000.20750_none_da108737eb0808ab\ehepg.dll
+ 2008-05-23 09:54:11 135,168 ----a-w C:\Windows\winsxs\msil_ehexthost_31bf3856ad364e35_6.0.6000.16625_none_bcf1d858c1bcf70c\ehexthost.exe
+ 2008-05-23 09:54:07 135,168 ----a-w C:\Windows\winsxs\msil_ehexthost_31bf3856ad364e35_6.0.6000.20750_none_bd5603eddaf76bf6\ehexthost.exe
+ 2008-05-23 09:54:24 77,824 ----a-w C:\Windows\winsxs\msil_ehiextens_31bf3856ad364e35_6.0.6000.16625_none_fbd4df3d09c25501\ehiExtens.dll
+ 2008-05-23 09:54:24 77,824 ----a-w C:\Windows\winsxs\msil_ehiextens_31bf3856ad364e35_6.0.6000.20750_none_fc390ad222fcc9eb\ehiExtens.dll
+ 2008-05-23 09:54:09 4,370,432 ----a-w C:\Windows\winsxs\msil_ehshell_31bf3856ad364e35_6.0.6000.16625_none_899f76e344812213\ehshell.dll
+ 2008-05-23 09:54:07 4,382,720 ----a-w C:\Windows\winsxs\msil_ehshell_31bf3856ad364e35_6.0.6000.20750_none_8a03a2785dbb96fd\ehshell.dll
+ 2008-05-23 09:54:10 1,196,032 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.16625_none_4e9d1
a9a98c598a9\Microsoft.MediaCenter.Shell.dll
+ 2008-05-23 09:54:07 1,269,760 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.20750_none_4f014
62fb2000d93\Microsoft.MediaCenter.Shell.dll
+ 2008-05-23 09:54:10 2,342,912 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.16625_none_312b694a
5a1995c3\Microsoft.MediaCenter.UI.dll
+ 2008-05-23 09:54:07 2,351,104 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.20750_none_318f94df
73540aad\Microsoft.MediaCenter.UI.dll
+ 2008-05-23 09:54:12 217,088 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.16625_none_2386c23dcf3
201d9\Microsoft.MediaCenter.dll
+ 2008-05-23 09:54:08 217,088 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.20750_none_23eaedd2e86
c76c3\Microsoft.MediaCenter.dll
+ 2008-05-23 10:18:38 258,232 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.16553_none_206f74b9d10718ea\acpi.sys
+ 2008-05-23 10:18:38 28,344 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.16553_none_206f74b9d10718ea\battc.sys
+ 2008-05-23 10:18:38 20,920 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.16553_none_206f74b9d10718ea\compbatt.sys
+ 2008-05-23 10:18:38 11,264 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.16553_none_206f74b9d10718ea\wmiacpi.sys
+ 2008-05-23 10:18:37 258,232 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.20672_none_20e27162ea35d73f\acpi.sys
+ 2008-05-23 10:18:37 28,344 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.20672_none_20e27162ea35d73f\battc.sys
+ 2008-05-23 10:18:38 20,920 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.20672_none_20e27162ea35d73f\compbatt.sys
+ 2008-05-23 10:18:37 11,264 ----a-w C:\Windows\winsxs\x86_acpi.inf_31bf3856ad364e35_6.0.6000.20672_none_20e27162ea35d73f\wmiacpi.sys
+ 2008-05-23 10:18:37 28,344 ----a-w C:\Windows\winsxs\x86_battery.inf_31bf3856ad364e35_6.0.6000.16553_none_140e43a256cf6f52\battc.sys
+ 2008-05-23 10:18:37 14,208 ----a-w C:\Windows\winsxs\x86_battery.inf_31bf3856ad364e35_6.0.6000.16553_none_140e43a256cf6f52\CmBatt.sys
+ 2008-05-23 10:18:37 21,504 ----a-w C:\Windows\winsxs\x86_battery.inf_31bf3856ad364e35_6.0.6000.16553_none_140e43a256cf6f52\hidbatt.sys
+ 2008-05-23 10:18:37 28,344 ----a-w C:\Windows\winsxs\x86_battery.inf_31bf3856ad364e35_6.0.6000.20672_none_1481404b6ffe2da7\battc.sys
+ 2008-05-23 10:18:37 14,208 ----a-w C:\Windows\winsxs\x86_battery.inf_31bf3856ad364e35_6.0.6000.20672_none_1481404b6ffe2da7\CmBatt.sys
+ 2008-05-23 10:18:37 21,504 ----a-w C:\Windows\winsxs\x86_battery.inf_31bf3856ad364e35_6.0.6000.20672_none_1481404b6ffe2da7\hidbatt.sys
+ 2008-05-23 10:00:45 53,760 ----a-w C:\Windows\winsxs\x86_hdaudbus.inf_31bf3856ad364e35_6.0.6000.16481_none_74e5d15989a08e89\hdaudbus.sys
+ 2008-05-23 10:00:45 53,760 ----a-w C:\Windows\winsxs\x86_hdaudbus.inf_31bf3856ad364e35_6.0.6000.20592_none_75659e82a2c5639b\hdaudbus.sys
+ 2008-05-24 10:02:12 54,784 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\i8042prt.sys
+ 2008-05-24 10:02:12 6,656 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\kbd106.dll
+ 2008-05-24 10:02:12 35,384 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\kbdclass.sys
+ 2008-05-24 10:02:12 15,872 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\kbdhid.sys
+ 2008-05-24 10:02:11 54,784 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\i8042prt.sys
+ 2008-05-24 10:02:11 6,656 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\kbd106.dll
+ 2008-05-24 10:02:11 35,384 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\kbdclass.sys
+ 2008-05-24 10:02:11 15,872 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\kbdhid.sys
+ 2008-05-23 10:03:40 2,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16633_none_0a1e8a9df53b7ab4\AcRes.dll
+ 2008-05-23 10:03:39 2,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.20762_none_0a86b75b0e7254fa\AcRes.dll
+ 2008-05-23 10:03:38 2,144,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16633_none_0a208b31f539ad62\AcGenral.dll
+ 2008-05-23 10:03:38 2,144,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.20762_none_0a88b7ef0e7087a8\AcGenral.dll
+ 2008-05-23 10:03:38 449,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16633_none_0a218b7bf538c6b9\AcSpecfc.dll
+ 2008-05-23 10:03:38 450,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.20762_none_0a89b8390e6fa0ff\AcSpecfc.dll
+ 2008-05-23 10:03:38 537,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16633_none_0a228bc5f537e010\AcLayers.dll
+ 2008-05-23 10:03:38 173,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16633_none_0a228bc5f537e010\AcXtrnal.dll
+ 2008-05-23 10:03:37 537,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.20762_none_0a8ab8830e6eba56\AcLayers.dll
+ 2008-05-23 10:03:37 173,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.20762_none_0a8ab8830e6eba56\AcXtrnal.dll
+ 2008-05-23 09:59:15 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16643_none_a9bce801f5c7b8c8\advpack.dll
+ 2008-05-23 09:59:15 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20777_none_aa2a16310efa11c1\advpack.dll
+ 2008-05-23 10:04:11 1,984,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.0.6000.16513_none_0a056d7cf846bbd5\authui.dll
+ 2008-05-23 10:04:11 1,984,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.0.6000.20628_none_0a893bce1167f643\authui.dll
+ 2008-05-24 10:02:09 46,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c\setbcdlocale.dll
+ 2008-05-24 10:02:09 988,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c\winload.exe
+ 2008-05-24 10:02:09 927,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c\winresume.exe
+ 2008-05-24 10:02:09 46,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.22125_none_69b1958fa5f3f478\setbcdlocale.dll
+ 2008-05-24 10:02:09 988,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.22125_none_69b1958fa5f3f478\winload.exe
+ 2008-05-24 10:02:09 927,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.22125_none_69b1958fa5f3f478\winresume.exe
+ 2008-05-24 10:02:18 19,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..uggertransport-1394_31bf3856ad364e35_6.0.6000.16646_none_61bfda98f6d6f5d5\kd1394.dll
+ 2008-05-24 10:02:18 19,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..uggertransport-1394_31bf3856ad364e35_6.0.6000.20782_none_621a368c1018a007\kd1394.dll
+ 2008-05-24 10:02:09 19,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..uggertransport-1394_31bf3856ad364e35_6.0.6001.18027_none_63bcb960f3ec683b\kd1394.dll
+ 2008-05-24 10:02:09 19,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..uggertransport-1394_31bf3856ad364e35_6.0.6001.22125_none_644455980d0bd557\kd1394.dll
+ 2008-05-24 10:02:18 944,184 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16646_none_591b3d986f9b5725\winload.exe
+ 2008-05-24 10:02:18 905,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16646_none_591b3d986f9b5725\winresume.exe
+ 2008-05-24 10:02:17 944,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.20782_none_5975998b88dd0157\winload.exe
+ 2008-05-24 10:02:18 905,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.20782_none_5975998b88dd0157\winresume.exe
+ 2008-05-24 10:02:11 988,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b\winload.exe
+ 2008-05-24 10:02:11 927,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b\winresume.exe
+ 2008-05-24 10:02:10 988,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.22125_none_5b9fb89785d036a7\winload.exe
+ 2008-05-24 10:02:11 927,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.22125_none_5b9fb89785d036a7\winresume.exe
+ 2008-05-23 09:54:42 750,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.0.6000.16531_none_218b14e6fc62ea9e\qmgr.dll
+ 2008-05-23 09:54:43 750,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.0.6000.20647_none_220fe38215833e63\qmgr.dll
+ 2008-05-23 10:20:10 967,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-calendar_31bf3856ad364e35_6.0.6000.16513_none_8f02a43161a69634\WinCal.exe
+ 2008-05-23 10:20:10 967,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-calendar_31bf3856ad364e35_6.0.6000.20628_none_8f8672827ac7d0a2\WinCal.exe
+ 2008-05-24 10:02:17 620,088 ----a-w C:\Windows\winsxs\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6000.16642_none_9e68737c07b7f5c7\ci.dll
+ 2008-05-24 10:02:17 620,088 ----a-w C:\Windows\winsxs\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6000.20775_none_9ed4a16120eb3569\ci.dll
+ 2008-05-24 10:02:09 615,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6001.18023_none_a065524404cd682d\ci.dll
+ 2008-05-24 10:02:09 615,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6001.22120_none_a0ebee311dedbbf2\ci.dll
+ 2008-05-24 10:02:17 224,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913\clfs.sys
+ 2008-05-24 10:02:17 224,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.20734_none_7d098a364397cdfd\clfs.sys
+ 2008-05-23 09:58:26 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6000.16470_none_2320546141637f8f\fs_rec.sys
+ 2008-05-23 09:58:26 152,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6000.16470_none_2320546141637f8f\imagehlp.dll
+ 2008-05-23 09:58:26 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6000.16470_none_2320546141637f8f\wmi.dll
+ 2008-05-23 09:58:26 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6000.20580_none_239f21405a893b4a\fs_rec.sys
+ 2008-05-23 09:58:26 152,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6000.20580_none_239f21405a893b4a\imagehlp.dll
+ 2008-05-23 09:58:26 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6000.20580_none_239f21405a893b4a\wmi.dll
+ 2008-05-24 10:02:16 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23\cfgmgr32.dll
+ 2008-05-24 10:02:16 101,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23\drvinst.exe
+ 2008-05-24 10:02:16 221,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23\umpnpmgr.dll
+ 2008-05-24 10:02:16 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.20734_none_75889abf48f7c10d\cfgmgr32.dll
+ 2008-05-24 10:02:16 101,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.20734_none_75889abf48f7c10d\drvinst.exe
+ 2008-05-24 10:02:16 221,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.20734_none_75889abf48f7c10d\umpnpmgr.dll
+ 2008-05-23 10:16:18 49,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.0.6000.16445_none_c77ab655a8530501\csrsrv.dll
+ 2008-05-23 10:16:18 49,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.0.6000.20544_none_c80352d6c1718b74\csrsrv.dll
+ 2008-05-23 10:20:10 134,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..frastructure-server_31bf3856ad364e35_6.0.6000.16515_none_663e618f9f0e757e\dps.dll
+ 2008-05-23 10:20:11 134,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..frastructure-server_31bf3856ad364e35_6.0.6000.20630_none_66ad5d10b840ce77\dps.dll
+ 2008-05-24 10:02:16 260,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-deltapackageexpander_31bf3856ad364e35_6.0.6000.16609_none_68015a2337d92e69\dpx.dll
+ 2008-05-24 10:02:16 260,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-deltapackageexpander_31bf3856ad364e35_6.0.6000.20734_none_686585b85113a353\dpx.dll
+ 2008-05-23 10:04:11 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6000.16512_none_d56b19bc316f9001\dhcpcmonitor.dll
+ 2008-05-23 10:04:11 204,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6000.16512_none_d56b19bc316f9001\dhcpcsvc.dll
+ 2008-05-23 10:04:11 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6000.16512_none_d56b19bc316f9001\dhcpcsvc6.dll
+ 2008-05-23 10:04:12 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6000.20627_none_d5eee80d4a90ca6f\dhcpcmonitor.dll
+ 2008-05-23 10:04:11 203,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6000.20627_none_d5eee80d4a90ca6f\dhcpcsvc.dll
+ 2008-05-23 10:04:11 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6000.20627_none_d5eee80d4a90ca6f\dhcpcsvc6.dll
+ 2008-05-23 10:08:35 1,327,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16587_none_a43a79faf0fa2e5d\quartz.dll
+ 2008-05-23 10:08:34 1,327,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20710_none_a508c61a09e55656\quartz.dll
+ 2008-05-23 10:01:01 162,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e\dnsapi.dll
+ 2008-05-23 10:01:00 24,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e\dnscacheugc.exe
+ 2008-05-23 10:01:01 83,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e\dnsrslvr.dll
+ 2008-05-23 10:01:00 162,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.20740_none_e05a9b529e70e208\dnsapi.dll
+ 2008-05-23 10:01:00 24,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.20740_none_e05a9b529e70e208\dnscacheugc.exe
+ 2008-05-23 10:01:00 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.20740_none_e05a9b529e70e208\dnsrslvr.dll
+ 2008-05-23 09:54:23 252,416 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-ehreplay_31bf3856ad364e35_6.0.6000.16625_none_12c09b07a297f371\ehReplay.dll
+ 2008-05-23 09:54:23 254,464 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-ehreplay_31bf3856ad364e35_6.0.6000.20750_none_1324c69cbbd2685b\ehReplay.dll
+ 2008-05-23 09:54:22 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.16625_none_32330b5ddcdf57cf\McrMgr.dll
+ 2008-05-23 09:54:22 173,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.16625_none_32330b5ddcdf57cf\McrMgr.exe
+ 2008-05-23 09:54:22 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.20750_none_329736f2f619ccb9\McrMgr.dll
+ 2008-05-23 09:54:22 172,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.20750_none_329736f2f619ccb9\McrMgr.exe
+ 2008-05-23 09:54:21 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.16625_none_2de6da1585272f3f\ehdebug.dll
+ 2008-05-23 09:54:18 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.20750_none_2e4b05aa9e61a429\ehdebug.dll
+ 2008-05-23 09:54:10 103,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehpresenter_31bf3856ad364e35_6.0.6000.16625_none_24d1ba8c64df4a0e\ehPresenter.dll
+ 2008-05-23 09:54:07 103,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehpresenter_31bf3856ad364e35_6.0.6000.20750_none_2535e6217e19bef8\ehPresenter.dll
+ 2008-05-23 09:54:17 10,094,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.16625_none_501526e9535d51c0\ehres.dll
+ 2008-05-23 09:54:14 10,103,808 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.20750_none_5079527e6c97c6aa\ehres.dll
+ 2008-05-23 09:54:12 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.16625_none_36c5ec1516c514d5\ehtrace.dll
+ 2008-05-23 09:54:12 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.20750_none_372a17aa2fff89bf\ehtrace.dll
+ 2008-05-23 09:54:11 517,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.16625_none_cccd3f3fcc4ce7da\ehui.dll
+ 2008-05-23 09:54:08 521,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.20750_none_cd316ad4e5875cc4\ehui.dll
+ 2008-05-23 09:54:08 1,497,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.16625_none_3a1431762e229c7c\ehuihlp.dll
+ 2008-05-23 09:54:07 1,498,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.20750_none_3a785d0b475d1166\ehuihlp.dll
+ 2008-05-23 10:18:36 2,923,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
+ 2008-05-23 10:18:35 2,923,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
+ 2008-05-23 10:12:05 61,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-f..allconfig-installer_31bf3856ad364e35_6.0.6000.16501_none_1543edfd01a09982\cmifw.dll
+ 2008-05-23 10:12:05 61,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-f..allconfig-installer_31bf3856ad364e35_6.0.6000.20614_none_15c5bbba1ac3a142\cmifw.dll
+ 2008-05-23 10:03:37 1,686,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16633_none_3ffca182c42c1062\gameux.dll
+ 2008-05-23 10:03:37 4,247,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16633_none_3ffca182c42c1062\GameUXLegacyGDFs.dll
+ 2008-05-23 10:03:36 1,686,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20762_none_4064ce3fdd62eaa8\gameux.dll
+ 2008-05-23 10:03:36 4,247,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20762_none_4064ce3fdd62eaa8\GameUXLegacyGDFs.dll
+ 2008-05-23 09:58:25 10,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gc-upgclean-01_31bf3856ad364e35_6.0.6000.16470_none_716bfa6d75d2adc2\upgclean.exe
+ 2008-05-23 09:58:26 10,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gc-upgclean-01_31bf3856ad364e35_6.0.6000.20580_none_71eac74c8ef8697d\upgclean.exe
+ 2008-05-23 10:06:17 296,448 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.0.6000.16643_none_57702c844c48b643\gdi32.dll
+ 2008-05-23 10:06:17 296,448 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.0.6000.20777_none_57dd5ab3657b0f3c\gdi32.dll
+ 2008-05-23 10:06:17 295,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.0.6001.18023_none_596c0b02495f0f52\gdi32.dll
+ 2008-05-23 10:06:17 295,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.0.6001.22120_none_59f2a6ef627f6317\gdi32.dll
+ 2008-05-23 09:59:03 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16643_none_ebb7f1b116609ec7\pngfilt.dll
+ 2008-05-23 09:59:03 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.20777_none_ec251fe02f92f7c0\pngfilt.dll
+ 2008-05-23 09:59:03 1,159,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16643_none_b2d49a63d9c1162b\urlmon.dll
+ 2008-05-23 09:59:03 1,162,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20777_none_b341c892f2f36f24\urlmon.dll
+ 2008-05-23 09:58:59 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18023_none_b4d078e1d6d76f3a\urlmon.dll
+ 2008-05-23 09:58:58 1,166,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22120_none_b55714ceeff7c2ff\urlmon.dll
+ 2008-05-24 10:02:13 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..humb-shift_keyboard_31bf3856ad364e35_6.0.6000.16646_none_ebb5eec692f230bc\f3ahvoas.dll
+ 2008-05-24 10:02:13 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..humb-shift_keyboard_31bf3856ad364e35_6.0.6000.20782_none_ec104ab9ac33daee\f3ahvoas.dll
+ 2008-05-23 09:59:06 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16643_none_deb7292c7f69d59a\mstime.dll
+ 2008-05-23 09:59:06 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.20777_none_df24575b989c2e93\mstime.dll
+ 2008-05-23 09:58:59 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18023_none_e0b307aa7c802ea9\mstime.dll
+ 2008-05-23 09:58:59 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22120_none_e139a39795a0826e\mstime.dll
+ 2008-05-23 10:12:05 178,688 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.16501_none_0ffdd2907f32f6e5\iphlpsvc.dll
+ 2008-05-23 10:12:04 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.16501_none_0ffdd2907f32f6e5\TUNMP.SYS
+ 2008-05-23 10:12:05 23,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.16501_none_0ffdd2907f32f6e5\tunnel.sys
+ 2008-05-23 10:12:05 178,688 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.20614_none_107fa04d9855fea5\iphlpsvc.dll
+ 2008-05-23 10:12:05 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.20614_none_107fa04d9855fea5\TUNMP.SYS
+ 2008-05-23 10:12:05 23,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.20614_none_107fa04d9855fea5\tunnel.sys
+ 2008-05-24 10:02:16 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rd-japanese_106_key_31bf3856ad364e35_6.0.6000.16646_none_dafbedd9168fe683\kbd106n.dll
+ 2008-05-24 10:02:16 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rd-japanese_106_key_31bf3856ad364e35_6.0.6000.20782_none_db5649cc2fd190b5\kbd106n.dll
+ 2008-05-23 09:55:58 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16589_none_131399240ca44662\tzres.dll
+ 2008-05-23 09:55:58 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16589_none_131399240ca44662\tzupd.exe
+ 2008-05-23 09:55:58 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.20712_none_13e1e543258f6e5b\tzres.dll
+ 2008-05-23 09:55:58 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.20712_none_13e1e543258f6e5b\tzupd.exe
+ 2008-05-23 09:59:14 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe\jsproxy.dll
+ 2008-05-23 09:59:14 826,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe\wininet.dll
+ 2008-05-23 09:59:14 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe\WininetPlugin.dll
+ 2008-05-23 09:59:14 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20777_none_0047a434bdfc95b7\jsproxy.dll
+ 2008-05-23 09:59:14 827,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20777_none_0047a434bdfc95b7\wininet.dll
+ 2008-05-23 09:59:14 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20777_none_0047a434bdfc95b7\WininetPlugin.dll
+ 2008-05-23 09:59:02 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18023_none_01d65483a1e095cd\jsproxy.dll
+ 2008-05-23 09:59:02 826,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18023_none_01d65483a1e095cd\wininet.dll
+ 2008-05-23 09:59:02 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18023_none_01d65483a1e095cd\WininetPlugin.dll
+ 2008-05-23 09:59:02 28,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22120_none_025cf070bb00e992\jsproxy.dll
+ 2008-05-23 09:59:02 826,880 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22120_none_025cf070bb00e992\wininet.dll
+ 2008-05-23 09:59:02 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22120_none_025cf070bb00e992\WininetPlugin.dll
+ 2008-05-23 09:59:15 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16643_none_f98398df6eb5b711\ieapfltr.dat
+ 2008-05-23 09:59:15 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16643_none_f98398df6eb5b711\ieapfltr.dll
+ 2008-05-23 09:59:14 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20777_none_f9f0c70e87e8100a\ieapfltr.dat
+ 2008-05-23 09:59:14 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20777_none_f9f0c70e87e8100a\ieapfltr.dll
+ 2008-05-23 09:59:13 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16643_none_95b7d197849b3d3f\dxtmsft.dll
+ 2008-05-23 09:59:13 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16643_none_95b7d197849b3d3f\dxtrans.dll
+ 2008-05-23 09:59:12 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20777_none_9624ffc69dcd9638\dxtmsft.dll
+ 2008-05-23 09:59:13 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20777_none_9624ffc69dcd9638\dxtrans.dll
+ 2008-05-23 09:59:10 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16643_none_461a6bef465befcc\mshtmled.dll
+ 2008-05-23 09:59:09 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.20777_none_46879a1e5f8e48c5\mshtmled.dll
+ 2008-05-23 09:59:09 3,591,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16643_none_113495242520a5f4\mshtml.dll
+ 2008-05-23 09:59:07 3,593,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20777_none_11a1c3533e52feed\mshtml.dll
+ 2008-05-23 09:59:01 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18023_none_133073a22236ff03\mshtml.dll
+ 2008-05-23 09:59:00 3,578,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22120_none_13b70f8f3b5752c8\mshtml.dll
+ 2008-05-23 09:59:06 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16643_none_588d01ee673531fd\icardie.dll
+ 2008-05-23 09:59:06 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.20777_none_58fa301d80678af6\icardie.dll
+ 2008-05-23 09:59:04 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_2d5382911cf5aba1\ieUnatt.exe
+ 2008-05-23 09:59:04 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_2d5382911cf5aba1\iexplore.exe
+ 2008-05-23 09:59:03 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_2dc0b0c03628049a\ieUnatt.exe
+ 2008-05-23 09:59:04 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_2dc0b0c03628049a\iexplore.exe
+ 2008-05-23 09:59:03 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16643_none_c3c237ac61707446\ie4uinit.exe
+ 2008-05-23 09:59:02 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16643_none_c3c237ac61707446\iernonce.dll
+ 2008-05-23 09:59:02 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16643_none_c3c237ac61707446\iesetup.dll
+ 2008-05-23 09:59:02 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20777_none_c42f65db7aa2cd3f\ie4uinit.exe
+ 2008-05-23 09:59:02 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20777_none_c42f65db7aa2cd3f\iernonce.dll
+ 2008-05-23 09:59:02 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20777_none_c42f65db7aa2cd3f\iesetup.dll
+ 2008-05-23 10:00:00 765,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_6.0.6000.16513_none_eb4901d0eb99d160\VGX.dll
+ 2008-05-23 10:00:01 765,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_6.0.6000.20628_none_ebccd02204bb0bce\VGX.dll
+ 2008-05-23 09:59:14 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.16643_none_29e74e1c682049a3\iebrshim.dll
+ 2008-05-23 09:59:14 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.20777_none_2a547c4b8152a29c\iebrshim.dll
+ 2008-05-23 09:59:12 6,066,176 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16643_none_6293ef27b1163421\ieframe.dll
+ 2008-05-23 09:59:12 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16643_none_6293ef27b1163421\ieui.dll
+ 2008-05-23 09:59:10 6,067,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20777_none_63011d56ca488d1a\ieframe.dll
+ 2008-05-23 09:59:11 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20777_none_63011d56ca488d1a\ieui.dll
+ 2008-05-23 09:59:06 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.16643_none_e68d5ba694998859\ieinstal.exe
+ 2008-05-23 09:59:06 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.20777_none_e6fa89d5adcbe152\ieinstal.exe
+ 2008-05-23 09:59:02 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.16643_none_0b3590c2d714480b\ieuser.exe
+ 2008-05-23 09:59:02 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.20777_none_0ba2bef1f046a104\ieuser.exe
+ 2008-05-23 10:20:11 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.16517_none_a9de8a2ce66804b6\cdd.dll
+ 2008-05-23 10:20:11 619,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.16517_none_a9de8a2ce66804b6\dxgkrnl.sys
+ 2008-05-23 10:20:11 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.20632_none_aa4d85adff9a5daf\cdd.dll
+ 2008-05-23 10:20:11 619,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.20632_none_aa4d85adff9a5daf\dxgkrnl.sys
+ 2008-05-23 09:54:06 1,244,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..mediadeliveryengine_31bf3856ad364e35_6.0.6000.16625_none_3d338c3162694f64\mcmde.dll
+ 2008-05-23 09:54:06 1,244,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..mediadeliveryengine_31bf3856ad364e35_6.0.6000.20750_none_3d97b7c67ba3c44e\mcmde.dll
+ 2008-05-23 10:19:19 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.16480_none_ef1b6bb652cf8744\DirectDB.dll
+ 2008-05-23 10:19:19 81,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.16480_none_ef1b6bb652cf8744\oeimport.dll
+ 2008-05-23 10:19:20 397,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.16480_none_ef1b6bb652cf8744\WinMail.exe
+ 2008-05-23 10:19:22 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.20590_none_ef9a38956bf542ff\DirectDB.dll
+ 2008-05-23 10:19:22 81,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.20590_none_ef9a38956bf542ff\oeimport.dll
+ 2008-05-23 10:19:23 397,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.20590_none_ef9a38956bf542ff\WinMail.exe
+ 2008-05-23 10:19:29 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16480_none_777468985ba6f8b2\inetcomm.dll
+ 2008-05-23 10:19:29 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16480_none_777468985ba6f8b2\INETRES.dll
+ 2008-05-23 10:03:18 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16545_none_77a4aba05b8204c8\inetcomm.dll
+ 2008-05-23 10:03:18 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.16545_none_77a4aba05b8204c8\INETRES.dll
+ 2008-05-23 10:19:30 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20590_none_77f3357774ccb46d\inetcomm.dll
+ 2008-05-23 10:19:30 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20590_none_77f3357774ccb46d\INETRES.dll
+ 2008-05-23 10:03:18 737,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20662_none_7815a7b574b2906f\inetcomm.dll
+ 2008-05-23 10:03:18 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6000.20662_none_7815a7b574b2906f\INETRES.dll
+ 2008-05-23 10:19:24 1,614,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6000.16480_none_5641ffb4286476f5\msoe.dll
+ 2008-05-23 10:19:25 2,836,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6000.16480_none_5641ffb4286476f5\MSOERES.dll
+ 2008-05-23 10:19:26 1,614,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6000.20590_none_56c0cc93418a32b0\msoe.dll
+ 2008-05-23 10:19:27 2,836,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6000.20590_none_56c0cc93418a32b0\MSOERES.dll
+ 2008-05-23 10:19:27 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6000.16480_none_e6ebab5f8d40e47c\ACCTRES.dll
+ 2008-05-23 10:19:27 205,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6000.16480_none_e6ebab5f8d40e47c\msoeacct.dll
+ 2008-05-23 10:19:27 87,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6000.16480_none_e6ebab5f8d40e47c\msoert2.dll
+ 2008-05-23 10:19:27 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6000.20590_none_e76a783ea666a037\ACCTRES.dll
+ 2008-05-23 10:19:27 205,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6000.20590_none_e76a783ea666a037\msoeacct.dll
+ 2008-05-23 10:19:27 87,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6000.20590_none_e76a783ea666a037\msoert2.dll
+ 2008-05-23 10:12:40 356,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediametadatahandler_31bf3856ad364e35_6.0.6000.16557_none_890b997ff4e3a637\MediaMetadataHandler.dll
+ 2008-05-23 10:12:40 356,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediametadatahandler_31bf3856ad364e35_6.0.6000.20676_none_897e96290e12648c\MediaMetadataHandler.dll
+ 2008-05-23 10:11:29 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\dxmasf.dll
+ 2008-05-23 10:11:29 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\spwmp.dll
+ 2008-05-23 10:11:30 10,617,344 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\wmp.dll
+ 2008-05-23 10:11:28 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\wmpconfig.exe
+ 2008-05-23 10:11:29 168,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\wmplayer.exe
+ 2008-05-23 10:11:30 8,147,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\wmploc.DLL
+ 2008-05-23 10:11:29 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16529_none_0976e55551fb476e\wmpshare.exe
+ 2008-05-23 10:12:41 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\dxmasf.dll
+ 2008-05-23 10:12:41 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\spwmp.dll
+ 2008-05-23 10:12:42 10,617,344 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\wmp.dll
+ 2008-05-23 10:12:40 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\wmpconfig.exe
+ 2008-05-23 10:12:41 168,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\wmplayer.exe
+ 2008-05-23 10:12:42 8,147,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\wmploc.DLL
+ 2008-05-23 10:12:41 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16557_none_095474fd52156893\wmpshare.exe
+ 2008-05-23 10:11:31 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\dxmasf.dll
+ 2008-05-23 10:11:32 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\spwmp.dll
+ 2008-05-23 10:11:33 10,616,832 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\wmp.dll
+ 2008-05-23 10:11:31 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\wmpconfig.exe
+ 2008-05-23 10:11:32 168,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\wmplayer.exe
+ 2008-05-23 10:11:33 8,147,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\wmploc.DLL
+ 2008-05-23 10:11:31 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20645_none_09e6e1206b2cb9be\wmpshare.exe
+ 2008-05-23 10:12:43 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\dxmasf.dll
+ 2008-05-23 10:12:44 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\spwmp.dll
+ 2008-05-23 10:12:45 10,616,832 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\wmp.dll
+ 2008-05-23 10:12:43 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\wmpconfig.exe
+ 2008-05-23 10:12:44 168,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\wmplayer.exe
+ 2008-05-23 10:12:45 8,147,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\wmploc.DLL
+ 2008-05-23 10:12:44 107,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20676_none_09c771a66b4426e8\wmpshare.exe
+ 2008-05-23 10:13:19 542,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\blackbox.dll
+ 2008-05-23 10:13:19 284,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\drmmgrtn.dll
+ 2008-05-23 10:13:19 978,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\drmv2clt.dll
+ 2008-05-23 10:13:18 179,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\msnetobj.dll
+ 2008-05-23 10:13:18 414,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\msscp.dll
+ 2008-05-23 10:13:19 529,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\wmdrmsdk.dll
+ 2008-05-23 10:13:18 542,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\blackbox.dll
+ 2008-05-23 10:13:18 284,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\drmmgrtn.dll
+ 2008-05-23 10:13:18 978,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\drmv2clt.dll
+ 2008-05-23 10:13:17 179,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\msnetobj.dll
+ 2008-05-23 10:13:17 414,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\msscp.dll
+ 2008-05-23 10:13:18 529,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\wmdrmsdk.dll
+ 2008-05-23 10:06:42 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6000.16585_none_a57e3226437ddd6f\asferror.dll
+ 2008-05-23 10:06:42 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6000.16585_none_a57e3226437ddd6f\LAPRXY.DLL
+ 2008-05-23 10:06:42 223,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6000.16585_none_a57e3226437ddd6f\WMASF.DLL
+ 2008-05-23 10:06:42 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6000.20708_none_a66151155c57e6dd\asferror.dll
+ 2008-05-23 10:06:42 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6000.20708_none_a66151155c57e6dd\LAPRXY.DLL
+ 2008-05-23 10:06:42 223,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6000.20708_none_a66151155c57e6dd\WMASF.DLL
+ 2008-05-23 10:20:13 564,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msftedit_31bf3856ad364e35_6.0.6000.16517_none_d3e6ea943a0ccc2e\msftedit.dll
+ 2008-05-23 10:20:14 564,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msftedit_31bf3856ad364e35_6.0.6000.20632_none_d455e615533f2527\msftedit.dll
+ 2008-05-23 10:10:15 1,191,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.16500_none_8688000e99af9424\msxml3.dll
+ 2008-05-23 10:10:15 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.16500_none_8688000e99af9424\msxml3r.dll
+ 2008-05-23 10:10:16 1,191,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.20613_none_8709cdcbb2d29be4\msxml3.dll
+ 2008-05-23 10:10:15 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.20613_none_8709cdcbb2d29be4\msxml3r.dll
+ 2008-05-23 10:05:15 1,335,296 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.16472_none_863e0af099e6da25\msxml6.dll
+ 2008-05-23 10:05:15 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.16472_none_863e0af099e6da25\msxml6r.dll
+ 2008-05-23 10:05:15 1,335,296 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.20582_none_86bcd7cfb30c95e0\msxml6.dll
+ 2008-05-23 10:05:14 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.20582_none_86bcd7cfb30c95e0\msxml6r.dll
+ 2008-05-23 10:05:48 268,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-muicachebuilder_31bf3856ad364e35_6.0.6000.16509_none_182f5e49b7a9aadf\mcbuilder.exe
+ 2008-05-23 10:05:48 268,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-muicachebuilder_31bf3856ad364e35_6.0.6000.20624_none_189e59cad0dc03d8\mcbuilder.exe
+ 2008-05-23 10:10:49 154,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-native-80211_31bf3856ad364e35_6.0.6000.16632_none_4d03fb3a91e27bd0\nwifi.sys
+ 2008-05-23 10:10:49 154,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-native-80211_31bf3856ad364e35_6.0.6000.20757_none_4d7cf99fab0bd22f\nwifi.sys
+ 2008-05-23 10:20:14 384,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ndis-tdi-bindingengine_31bf3856ad364e35_6.0.6000.16517_none_3c2ad8f2286305c8\netcfgx.dll
+ 2008-05-23 10:20:14 384,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ndis-tdi-bindingengine_31bf3856ad364e35_6.0.6000.20632_none_3c99d47341955ec1\netcfgx.dll
+ 2008-05-23 10:09:05 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.0.6000.16627_none_0e39ff40545cdf67\netcfg.exe
+ 2008-05-23 10:09:05 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.0.6000.20752_none_0e9e2ad56d975451\netcfg.exe
+ 2008-05-23 10:09:05 216,632 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1\netio.sys
+ 2008-05-23 10:09:05 217,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.20752_none_550abbf2d16b549b\netio.sys
+ 2008-05-24 10:02:16 23,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.16609_none_71cfead8774bc0d7\nshhttp.dll
+ 2008-05-24 10:02:16 23,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.20734_none_7234166d908635c1\nshhttp.dll
+ 2008-05-23 10:10:57 1,060,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16586_none_a43a6b8d2000830d\ntfs.sys
+ 2008-05-23 10:13:51 1,060,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16615_none_a4851c9d1fc8a346\ntfs.sys
+ 2008-05-23 10:10:57 1,061,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.20709_none_a51d8a7c38da8c7b\ntfs.sys
+ 2008-05-23 10:13:50 1,061,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.20740_none_a4e9483239031830\ntfs.sys
+ 2008-05-24 10:03:13 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16674_none_f05a2d326e88eb29\OESpamFilter.dat
+ 2008-05-24 10:03:13 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20815_none_f125abb58774f9cb\OESpamFilter.dat
+ 2008-05-24 10:03:13 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18054_none_f2560bb06b9f4438\OESpamFilter.dat
+ 2008-05-24 10:03:13 2,413,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22159_none_f2e4a9ed84b862b5\OESpamFilter.dat
+ 2008-05-23 10:10:56 558,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16588_none_bacb6cf1fe8d4f50\oleaut32.dll
+ 2008-05-23 10:02:40 558,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16607_none_bb20ededfe4d5398\oleaut32.dll
+ 2008-05-24 10:02:15 558,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646\oleaut32.dll
+ 2008-05-23 10:10:56 559,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.20711_none_bb99b91117787749\oleaut32.dll
+ 2008-05-23 10:02:40 559,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.20732_none_bb8519831787c882\oleaut32.dll
+ 2008-05-24 10:02:15 559,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.20734_none_bb871a171785fb30\oleaut32.dll
+ 2008-05-23 10:04:12 3,504,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16514_none_6a435250b701059d\ntkrnlpa.exe
+ 2008-05-23 10:04:12 3,470,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16514_none_6a435250b701059d\ntoskrnl.exe
+ 2008-05-23 10:18:42 3,504,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16551_none_6a1511c2b724295c\ntkrnlpa.exe
+ 2008-05-23 10:18:42 3,471,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16551_none_6a1511c2b724295c\ntoskrnl.exe
+ 2008-05-23 09:56:27 3,504,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16575_none_6a037312b730c69a\ntkrnlpa.exe
+ 2008-05-23 09:56:27 3,470,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16575_none_6a037312b730c69a\ntoskrnl.exe
+ 2008-05-23 10:10:56 3,504,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934\ntkrnlpa.exe
+ 2008-05-23 10:10:54 3,470,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934\ntoskrnl.exe
+ 2008-05-23 10:04:12 3,504,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20629_none_6ac720a1d022400b\ntkrnlpa.exe
+ 2008-05-23 10:04:12 3,470,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20629_none_6ac720a1d022400b\ntoskrnl.exe
+ 2008-05-23 10:18:41 3,504,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20670_none_6a880e6bd052e7b1\ntkrnlpa.exe
+ 2008-05-23 10:18:40 3,471,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20670_none_6a880e6bd052e7b1\ntoskrnl.exe
+ 2008-05-23 09:56:27 3,505,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20697_none_6a797099d05cd0f4\ntkrnlpa.exe
+ 2008-05-23 09:56:26 3,472,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20697_none_6a797099d05cd0f4\ntoskrnl.exe
+ 2008-05-23 10:10:53 3,505,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20707_none_6adac1cbd013d2a2\ntkrnlpa.exe
+ 2008-05-23 10:10:52 3,471,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20707_none_6adac1cbd013d2a2\ntoskrnl.exe
+ 2008-05-23 10:20:11 694,784 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ooler-core-localspl_31bf3856ad364e35_6.0.6000.16515_none_2e2f4ef5958b2567\localspl.dll
+ 2008-05-23 10:20:11 694,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ooler-core-localspl_31bf3856ad364e35_6.0.6000.20630_none_2e9e4a76aebd7e60\localspl.dll
+ 2008-05-23 10:04:13 220,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6000.16512_none_ee146a58804bf72b\ntprint.dll
+ 2008-05-23 10:04:13 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6000.16512_none_ee146a58804bf72b\ntprint.exe
+ 2008-05-23 10:04:13 220,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6000.20627_none_ee9838a9996d3199\ntprint.dll
+ 2008-05-23 10:04:13 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6000.20627_none_ee9838a9996d3199\ntprint.exe
+ 2008-05-24 10:02:15 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\CntrtextMig.dll
+ 2008-05-24 10:02:15 115,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\loadperf.dll
+ 2008-05-24 10:02:15 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\lodctr.exe
+ 2008-05-24 10:02:15 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfc.dat
+ 2008-05-24 10:02:15 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfd.dat
+ 2008-05-24 10:02:15 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfh.dat
+ 2008-05-24 10:02:15 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfi.dat
+ 2008-05-24 10:02:15 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\prflbmsg.dll
+ 2008-05-24 10:02:15 32,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\unlodctr.exe
+ 2008-05-24 10:02:14 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\CntrtextMig.dll
+ 2008-05-24 10:02:14 115,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\loadperf.dll
+ 2008-05-24 10:02:15 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\lodctr.exe
+ 2008-05-24 10:02:15 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfc.dat
+ 2008-05-24 10:02:15 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfd.dat
+ 2008-05-24 10:02:15 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfh.dat
+ 2008-05-24 10:02:15 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfi.dat
+ 2008-05-24 10:02:14 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\prflbmsg.dll
+ 2008-05-24 10:02:14 32,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\unlodctr.exe
+ 2008-05-23 10:04:17 704,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-photoscreensaver_31bf3856ad364e35_6.0.6000.16510_none_69dd6e605b578d62\PhotoScreensaver.scr
+ 2008-05-23 10:18:43 704,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-photoscreensaver_31bf3856ad364e35_6.0.6000.16552_none_69b42f445b762fd4\PhotoScreensaver.scr
+ 2008-05-23 10:04:17 704,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-photoscreensaver_31bf3856ad364e35_6.0.6000.20625_none_6a613cb17478c7d0\PhotoScreensaver.scr
+ 2008-05-23 10:18:43 704,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-photoscreensaver_31bf3856ad364e35_6.0.6000.20671_none_6a272bed74a4ee29\PhotoScreensaver.scr
+ 2008-05-23 10:20:12 70,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.16518_none_ac625a685a7efa74\pacer.sys
+ 2008-05-23 10:20:11 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.16518_none_ac625a685a7efa74\pacerprf.dll
+ 2008-05-23 10:20:12 33,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.16518_none_ac625a685a7efa74\traffic.dll
+ 2008-05-23 10:20:12 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.16518_none_ac625a685a7efa74\wshqos.dll
+ 2008-05-23 10:20:12 70,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.20633_none_acd155e973b1536d\pacer.sys
+ 2008-05-23 10:20:12 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.20633_none_acd155e973b1536d\pacerprf.dll
+ 2008-05-23 10:20:12 33,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.20633_none_acd155e973b1536d\traffic.dll
+ 2008-05-23 10:20:12 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6000.20633_none_acd155e973b1536d\wshqos.dll
+ 2008-05-23 10:20:15 20,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\ndistapi.sys
+ 2008-05-23 10:20:15 48,640 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\ndproxy.sys
+ 2008-05-23 10:20:14 77,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\rascfg.dll
+ 2008-05-23 10:20:14 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\rasdiag.dll
+ 2008-05-23 10:20:14 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\rasmxs.dll
+ 2008-05-23 10:20:15 22,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\rasser.dll
+ 2008-05-23 10:20:14 61,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.16518_none_0bf759b97d499daa\wanarp.sys
+ 2008-05-23 10:20:17 20,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\ndistapi.sys
+ 2008-05-23 10:20:16 48,640 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\ndproxy.sys
+ 2008-05-23 10:20:16 77,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\rascfg.dll
+ 2008-05-23 10:20:16 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\rasdiag.dll
+ 2008-05-23 10:20:15 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\rasmxs.dll
+ 2008-05-23 10:20:16 22,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\rasser.dll
+ 2008-05-23 10:20:16 61,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6000.20633_none_0c66553a967bf6a3\wanarp.sys
+ 2008-05-23 10:20:17 467,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-riched32_31bf3856ad364e35_6.0.6000.16517_none_9b16a5648576e40a\riched20.dll
+ 2008-05-23 10:20:17 8,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-riched32_31bf3856ad364e35_6.0.6000.16517_none_9b16a5648576e40a\riched32.dll
+ 2008-05-23 10:20:17 467,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-riched32_31bf3856ad364e35_6.0.6000.20632_none_9b85a0e59ea93d03\riched20.dll
+ 2008-05-23 10:20:17 8,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-riched32_31bf3856ad364e35_6.0.6000.20632_none_9b85a0e59ea93d03\riched32.dll
+ 2008-05-23 10:00:15 788,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.0.6000.16525_none_b203c02547f977dc\rpcrt4.dll
+ 2008-05-23 10:00:15 788,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.0.6000.20641_none_b273bbf0612aea2c\rpcrt4.dll
+ 2008-05-23 10:05:48 223,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..icensing-slc-client_31bf3856ad364e35_6.0.6000.16509_none_c3421cfda8beb1db\SLC.dll
+ 2008-05-23 10:05:48 223,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..icensing-slc-client_31bf3856ad364e35_6.0.6000.20624_none_c3b1187ec1f10ad4\SLC.dll
+ 2008-05-23 10:18:34 542,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..mmaintenanceservice_31bf3856ad364e35_6.0.6000.16551_none_3b32a26ce33869cb\sysmain.dll
+ 2008-05-23 10:18:34 542,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..mmaintenanceservice_31bf3856ad364e35_6.0.6000.20670_none_3ba59f15fc672820\sysmain.dll
+ 2008-05-23 10:05:47 566,784 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.16509_none_889ab124b8091615\SLCommDlg.dll
+ 2008-05-23 10:05:47 186,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.16509_none_889ab124b8091615\SLLUA.exe
+ 2008-05-23 10:05:47 351,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.16509_none_889ab124b8091615\SLUI.exe
+ 2008-05-23 10:05:46 57,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.16509_none_889ab124b8091615\SLUINotify.dll
+ 2008-05-23 10:05:47 566,784 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.20624_none_8909aca5d13b6f0e\SLCommDlg.dll
+ 2008-05-23 10:05:47 186,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.20624_none_8909aca5d13b6f0e\SLLUA.exe
+ 2008-05-23 10:05:47 351,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.20624_none_8909aca5d13b6f0e\SLUI.exe
+ 2008-05-23 10:05:47 57,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6000.20624_none_8909aca5d13b6f0e\SLUINotify.dll
+ 2008-05-23 10:05:46 39,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6000.16509_none_4c9a3f87fc5750bf\slcinst.dll
+ 2008-05-23 10:05:46 2,605,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6000.16509_none_4c9a3f87fc5750bf\SLsvc.exe
+ 2008-05-23 10:05:46 39,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6000.20624_none_4d093b091589a9b8\slcinst.dll
+ 2008-05-23 10:05:46 2,605,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6000.20624_none_4d093b091589a9b8\SLsvc.exe
+ 2008-05-23 10:05:48 33,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-licensing-wmi_31bf3856ad364e35_6.0.6000.16509_none_4c6f7771fc7773a0\slwmi.dll
+ 2008-05-23 10:05:48 33,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-licensing-wmi_31bf3856ad364e35_6.0.6000.20624_none_4cde72f315a9cc99\slwmi.dll
+ 2008-05-23 10:04:13 269,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16508_none_20380cd258151361\schannel.dll
+ 2008-05-23 10:04:13 269,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.20622_none_20a6080971485303\schannel.dll
+ 2008-05-23 10:04:09 69,632 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sendmail_31bf3856ad364e35_6.0.6000.16493_none_58a4e9811f22ea1c\sendmail.dll
+ 2008-05-23 10:04:09 69,632 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sendmail_31bf3856ad364e35_6.0.6000.20605_none_5991d81237f5be42\sendmail.dll
+ 2008-05-24 10:02:14 18,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.16609_none_3cc22de72dd8baa4\CbsMsg.dll
+ 2008-05-24 10:02:14 18,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.20734_none_3d26597c47132f8e\CbsMsg.dll
+ 2008-05-23 09:56:35 432,640 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\CbsCore.dll
+ 2008-05-23 09:56:35 95,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\DrUpdate.dll
+ 2008-05-23 09:56:35 99,840 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\poqexec.exe
+ 2008-05-23 09:56:35 116,224 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\smipi.dll
+ 2008-05-23 09:56:35 1,646,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\wcp.dll
+ 2008-05-23 09:56:35 50,688 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\wrpint.dll
+ 2008-05-24 10:02:51 1,585,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73\setupapi.dll
+ 2008-05-24 10:02:51 1,585,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.20734_none_337c4939e249a25d\setupapi.dll
+ 2008-05-23 10:20:13 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sharedaccess_31bf3856ad364e35_6.0.6000.16522_none_02d37ed64c3424df\icsunattend.exe
+ 2008-05-23 10:20:13 286,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sharedaccess_31bf3856ad364e35_6.0.6000.16522_none_02d37ed64c3424df\ipnathlp.dll
+ 2008-05-23 10:20:13 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sharedaccess_31bf3856ad364e35_6.0.6000.20638_none_03584d71655478a4\icsunattend.exe
+ 2008-05-23 10:20:13 285,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sharedaccess_31bf3856ad364e35_6.0.6000.20638_none_03584d71655478a4\ipnathlp.dll
+ 2008-05-23 10:04:14 11,315,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.16513_none_6a3b1b4414dac79d\shell32.dll
+ 2008-05-23 10:04:16 11,315,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.20628_none_6abee9952dfc020b\shell32.dll
+ 2008-05-23 10:03:01 66,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6000.16615_none_ccf09e9d29852489\sbdrop.dll
+ 2008-05-23 10:03:01 11,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6000.16615_none_ccf09e9d29852489\sbunattend.exe
+ 2008-05-23 10:03:01 1,232,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6000.16615_none_ccf09e9d29852489\sidebar.exe
+ 2008-05-23 10:03:01 66,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6000.20740_none_cd54ca3242bf9973\sbdrop.dll
+ 2008-05-23 10:03:00 11,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6000.20740_none_cd54ca3242bf9973\sbunattend.exe
+ 2008-05-23 10:03:00 1,232,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6000.20740_none_cd54ca3242bf9973\sidebar.exe
+ 2008-05-23 10:00:30 58,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.16586_none_88a4376b8cdaca70\mrxsmb20.sys
+ 2008-05-23 10:00:30 58,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.20709_none_8987565aa5b4d3de\mrxsmb20.sys
+ 2008-05-23 10:00:30 101,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6000.16586_none_7d5aaf055432589d\mrxsmb.sys
+ 2008-05-23 10:00:30 102,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6000.20709_none_7e3dcdf46d0c620b\mrxsmb.sys
+ 2008-05-23 10:00:30 84,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6000.16586_none_019f7004133c0031\srvnet.sys
+ 2008-05-23 10:00:30 84,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6000.20709_none_02828ef32c16099f\srvnet.sys
+ 2008-05-23 10:00:30 130,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.16586_none_d7b5db3ef9909d40\srv2.sys
+ 2008-05-23 10:00:30 130,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.20709_none_d898fa2e126aa6ae\srv2.sys
+ 2008-05-23 10:04:08 8,138,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ssbranded_31bf3856ad364e35_6.0.6000.16523_none_36921e330a735e63\ssBranded.scr
+ 2008-05-23 10:04:09 8,138,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ssbranded_31bf3856ad364e35_6.0.6000.20639_none_3716ecce2393b228\ssBranded.scr
+ 2008-05-24 10:02:19 313,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506\rstrui.exe
+ 2008-05-24 10:02:19 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506\srclient.dll
+ 2008-05-24 10:02:19 371,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506\srcore.dll
+ 2008-05-24 10:02:19 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506\srdelayed.exe
+ 2008-05-24 10:02:19 313,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.20782_none_452eaf40cf751f38\rstrui.exe
+ 2008-05-24 10:02:19 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.20782_none_452eaf40cf751f38\srclient.dll
+ 2008-05-24 10:02:19 371,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.20782_none_452eaf40cf751f38\srcore.dll
+ 2008-05-24 10:02:19 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.20782_none_452eaf40cf751f38\srdelayed.exe
+ 2008-05-24 10:02:10 318,464 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.18027_none_46d13215b348e76c\rstrui.exe
+ 2008-05-24 10:02:10 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.18027_none_46d13215b348e76c\srclient.dll
+ 2008-05-24 10:02:10 378,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.18027_none_46d13215b348e76c\srcore.dll
+ 2008-05-24 10:02:10 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.18027_none_46d13215b348e76c\srdelayed.exe
+ 2008-05-24 10:02:10 318,464 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.22125_none_4758ce4ccc685488\rstrui.exe
+ 2008-05-24 10:02:10 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.22125_none_4758ce4ccc685488\srclient.dll
+ 2008-05-24 10:02:10 378,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.22125_none_4758ce4ccc685488\srcore.dll
+ 2008-05-24 10:02:09 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6001.22125_none_4758ce4ccc685488\srdelayed.exe
+ 2008-05-23 10:18:40 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16553_none_c5179c13c95485bd\wtsapi32.dll
+ 2008-05-23 10:18:40 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.20672_none_c58a98bce2834412\wtsapi32.dll
+ 2008-05-24 10:02:14 595,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-taskscheduler-service_31bf3856ad364e35_6.0.6000.16609_none_2d23e28599d3cbd6\schedsvc.dll
+ 2008-05-24 10:02:14 595,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-taskscheduler-service_31bf3856ad364e35_6.0.6000.20734_none_2d880e1ab30e40c0\schedsvc.dll
+ 2008-05-23 10:09:05 49,152 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a\netiomig.dll
+ 2008-05-23 10:09:05 22,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a\netiougc.exe
+ 2008-05-23 10:09:05 803,328 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a\tcpip.sys
+ 2008-05-23 10:09:05 167,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a\tcpipcfg.dll
+ 2008-05-23 10:09:05 49,152 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.20752_none_5ff4e4f9ab7777f4\netiomig.dll
+ 2008-05-23 10:09:05 22,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.20752_none_5ff4e4f9ab7777f4\netiougc.exe
+ 2008-05-23 10:09:05 806,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.20752_none_5ff4e4f9ab7777f4\tcpip.sys
+ 2008-05-23 10:09:05 167,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.20752_none_5ff4e4f9ab7777f4\tcpipcfg.dll
+ 2008-05-24 10:02:14 27,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6000.16609_none_8f2ff7784ff80919\TrustedInstaller.exe
+ 2008-05-24 10:02:14 27,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6000.20734_none_8f94230d69327e03\TrustedInstaller.exe
+ 2008-05-23 09:55:40 633,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16438_none_cb39bc5b7047127e\user32.dll
+ 2008-05-23 09:55:40 633,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.20537_none_cbc258dc896598f1\user32.dll
+ 2008-05-23 10:04:10 65,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16513_none_9043e1118ba0edc7\avicap32.dll
+ 2008-05-23 10:04:10 88,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16513_none_9043e1118ba0edc7\avifil32.dll
+ 2008-05-23 10:04:10 82,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16513_none_9043e1118ba0edc7\mciavi32.dll
+ 2008-05-23 10:04:10 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16513_none_9043e1118ba0edc7\msrle32.dll
+ 2008-05-23 10:04:10 123,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16513_none_9043e1118ba0edc7\msvfw32.dll
+ 2008-05-23 10:04:10 31,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16513_none_9043e1118ba0edc7\msvidc32.dll
+ 2008-05-23 10:04:10 65,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.20628_none_90c7af62a4c22835\avicap32.dll
+ 2008-05-23 10:04:10 88,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.20628_none_90c7af62a4c22835\avifil32.dll
+ 2008-05-23 10:04:10 82,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.20628_none_90c7af62a4c22835\mciavi32.dll
+ 2008-05-23 10:04:10 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.20628_none_90c7af62a4c22835\msrle32.dll
+ 2008-05-23 10:04:10 123,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.20628_none_90c7af62a4c22835\msvfw32.dll
+ 2008-05-23 10:04:10 31,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.20628_none_90c7af62a4c22835\msvidc32.dll
+ 2008-05-23 10:19:28 707,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6000.16480_none_52e6aba34ce37839\wab32.dll
+ 2008-05-23 10:19:28 1,098,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6000.16480_none_52e6aba34ce37839\wab32res.dll
+ 2008-05-23 10:19:28 41,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6000.16480_none_52e6aba34ce37839\wabimp.dll
+ 2008-05-23 10:19:29 707,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6000.20590_none_53657882660933f4\wab32.dll
+ 2008-05-23 10:19:29 1,098,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6000.20590_none_53657882660933f4\wab32res.dll
+ 2008-05-23 10:19:28 41,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6000.20590_none_53657882660933f4\wabimp.dll
+ 2008-05-24 10:02:13 495,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.0.6000.16609_none_7475dc2e20bd6c08\Wdf01000.sys
+ 2008-05-24 10:02:14 35,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.0.6000.16609_none_7475dc2e20bd6c08\WdfLdr.sys
+ 2008-05-24 10:02:13 495,160 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.0.6000.20734_none_74da07c339f7e0f2\Wdf01000.sys
+ 2008-05-24 10:02:13 35,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.0.6000.20734_none_74da07c339f7e0f2\WdfLdr.sys
+ 2008-05-23 10:17:55 48,640 ----a-w C:\Windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20751_none_923bb8126e5dee69\davclnt.dll
+ 2008-05-23 10:17:55 110,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6000.16626_none_12b50875c89fe395\mrxdav.sys
+ 2008-05-23 10:17:55 110,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6000.20751_none_1319340ae1da587f\mrxdav.sys
+ 2008-05-23 10:17:55 194,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.16626_none_532fecfab695e27c\WebClnt.dll
+ 2008-05-23 10:17:55 196,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20751_none_5394188fcfd05766\WebClnt.dll
+ 2008-05-23 09:55:40 2,026,496 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16438_none_b6f4c9d49d715d0c\win32k.sys
+ 2008-05-23 10:18:39 2,027,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16551_none_b6d829dc9d87e0b4\win32k.sys
+ 2008-05-23 10:07:09 2,027,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16646_none_b6e7fd209d7b409d\win32k.sys
+ 2008-05-23 09:55:40 2,026,496 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.20537_none_b77d6655b68fe37f\win32k.sys
+ 2008-05-23 10:18:39 2,028,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.20670_none_b74b2685b6b69f09\win32k.sys
+ 2008-05-23 10:07:09 2,028,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.20782_none_b7425913b6bceacf\win32k.sys
+ 2008-05-23 10:07:09 2,032,128 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18027_none_b8e4dbe89a90b303\win32k.sys
+ 2008-05-23 10:07:09 2,032,128 ----a-w C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22125_none_b96c781fb3b0201f\win32k.sys
+ 2008-05-23 10:04:10 712,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.0.6000.16493_none_943d269aa43dda3a\WindowsCodecs.dll
+ 2008-05-23 10:04:11 712,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.0.6000.20605_none_952a152bbd10ae60\WindowsCodecs.dll
+ 2008-05-23 10:16:18 376,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-winsrv_31bf3856ad364e35_6.0.6000.16445_none_b47215f29f4a98e3\winsrv.dll
+ 2008-05-23 10:16:18 376,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-winsrv_31bf3856ad364e35_6.0.6000.20544_none_b4fab273b8691f56\winsrv.dll
+ 2008-05-23 10:18:32 14,827 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16551_none_9a28f27507e7382c\gatherWirelessInfo.vbs
+ 2008-05-23 10:18:32 47,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16551_none_9a28f27507e7382c\wlanapi.dll
+ 2008-05-23 10:18:32 67,584 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16551_none_9a28f27507e7382c\wlanhlp.dll
+ 2008-05-23 10:18:32 290,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16551_none_9a28f27507e7382c\wlanmsm.dll
+ 2008-05-23 10:18:32 297,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16551_none_9a28f27507e7382c\wlansec.dll
+ 2008-05-23 10:18:32 502,784 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16551_none_9a28f27507e7382c\wlansvc.dll
+ 2008-05-23 10:18:31 14,827 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.20670_none_9a9bef1e2115f681\gatherWirelessInfo.vbs
+ 2008-05-23 10:18:31 47,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.20670_none_9a9bef1e2115f681\wlanapi.dll
+ 2008-05-23 10:18:31 67,584 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.20670_none_9a9bef1e2115f681\wlanhlp.dll
+ 2008-05-23 10:18:31 289,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.20670_none_9a9bef1e2115f681\wlanmsm.dll
+ 2008-05-23 10:18:31 299,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.20670_none_9a9bef1e2115f681\wlansec.dll
+ 2008-05-23 10:18:31 502,784 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.20670_none_9a9bef1e2115f681\wlansvc.dll
+ 2008-05-23 10:18:43 356,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d\wbemcomn.dll
+ 2008-05-23 10:18:42 356,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.20672_none_01d4db5c3f607492\wbemcomn.dll
+ 2008-05-23 09:56:44 1,275,392 ----a-w C:\Windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9848.0_none_b7e811287b298060\msxml4.dll
+ 2008-05-24 10:02:13 12,800 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..battery-driverclass_31bf3856ad364e35_6.0.6000.16609_none_18009dbc49aa7293\batt.dll
+ 2008-05-24 10:02:13 12,800 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..battery-driverclass_31bf3856ad364e35_6.0.6000.20734_none_1864c95162e4e77d\batt.dll
+ 2008-05-24 10:02:13 35,328 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..display-driverclass_31bf3856ad364e35_6.0.6000.16609_none_41b37abe932781d6\dispci.dll
+ 2008-05-24 10:02:13 35,328 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..display-driverclass_31bf3856ad364e35_6.0.6000.20734_none_4217a653ac61f6c0\dispci.dll
+ 2008-05-24 10:02:18 613,888 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..ler.wpd-driverclass_31bf3856ad364e35_6.0.6000.16609_none_66d0f2386adae39f\wpd_ci.dll
+ 2008-05-24 10:02:18 613,888 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..ler.wpd-driverclass_31bf3856ad364e35_6.0.6000.20734_none_67351dcd84155889\wpd_ci.dll
+ 2008-05-23 10:13:50 41,984 ----a-w C:\Windows\winsxs\x86_monitor.inf_31bf3856ad364e35_6.0.6000.16615_none_4117345983213804\monitor.sys
+ 2008-05-23 10:13:50 41,984 ----a-w C:\Windows\winsxs\x86_monitor.inf_31bf3856ad364e35_6.0.6000.20740_none_417b5fee9c5bacee\monitor.sys
+ 2008-05-23 10:10:51 17,464 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\aliide.sys
+ 2008-05-23 10:10:51 17,976 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\amdide.sys
+ 2008-05-23 10:10:51 21,560 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
+ 2008-05-23 10:10:51 109,624 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\ataport.sys
+ 2008-05-23 10:10:51 19,000 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\cmdide.sys
+ 2008-05-23 10:10:50 17,464 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\intelide.sys
+ 2008-05-23 10:10:51 25,656 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\msahci.sys
+ 2008-05-23 10:10:51 15,928 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\pciide.sys
+ 2008-05-23 10:10:51 45,112 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\pciidex.sys
+ 2008-05-23 10:10:51 20,024 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\viaide.sys
+ 2008-05-23 10:10:50 17,464 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\aliide.sys
+ 2008-05-23 10:10:50 17,976 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\amdide.sys
+ 2008-05-23 10:10:50 21,560 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys
+ 2008-05-23 10:10:50 110,136 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\ataport.sys
+ 2008-05-23 10:10:50 19,000 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\cmdide.sys
+ 2008-05-23 10:10:49 17,976 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\intelide.sys
+ 2008-05-23 10:10:50 28,216 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\msahci.sys
+ 2008-05-23 10:10:50 15,928 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\pciide.sys
+ 2008-05-23 10:10:50 45,112 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\pciidex.sys
+ 2008-05-23 10:10:50 20,024 ----a-w C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\viaide.sys
+ 2008-05-24 10:02:12 54,784 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\i8042prt.sys
+ 2008-05-24 10:02:13 34,360 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\mouclass.sys
+ 2008-05-24 10:02:13 15,872 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\mouhid.sys
+ 2008-05-24 10:02:13 19,968 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\sermouse.sys
+ 2008-05-24 10:02:12 54,784 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\i8042prt.sys
+ 2008-05-24 10:02:12 34,360 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\mouclass.sys
+ 2008-05-24 10:02:12 15,872 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\mouhid.sys
+ 2008-05-24 10:02:12 19,968 ----a-w C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\sermouse.sys
+ 2008-05-23 10:09:42 1,330,688 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.16478_none_7f3a845fb87cc0fe\VsaVb7rt.dll
+ 2008-05-23 10:09:43 1,330,688 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.20587_none_686df4b1d22320ba\VsaVb7rt.dll
+ 2008-05-23 10:09:43 8,192 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.16478_none_dda7bfa368ad9a03\aspnet_isapi.dll
+ 2008-05-23 10:09:43 8,192 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.20587_none_c6db2ff58253f9bf\aspnet_isapi.dll
+ 2008-05-23 10:09:43 32,608 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16478_none_12520cad21a3e114\aspnet_regiis.exe
+ 2008-05-23 10:09:43 32,608 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.20587_none_fb857cff3b4a40d0\aspnet_regiis.exe
+ 2008-05-23 10:09:43 32,600 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16478_none_c51327268bf2ad4c\aspnet_wp.exe
+ 2008-05-23 10:09:43 32,600 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20587_none_ae469778a5990d08\aspnet_wp.exe
+ 2008-05-23 10:09:44 406,016 ----a-w C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16478_none_36c991a1379533d2\webengine.dll
+ 2008-05-23 10:09:44 406,016 ----a-w C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20587_none_1ffd01f3513b938e\webengine.dll
+ 2008-05-23 10:12:06 392,192 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.16501_none_982efb36cab548d8\FirewallAPI.dll
+ 2008-05-23 10:12:05 86,016 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.16501_none_982efb36cab548d8\icfupgd.dll
+ 2008-05-23 10:12:06 63,488 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.16501_none_982efb36cab548d8\mpsdrv.sys
+ 2008-05-23 10:12:05 396,800 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.16501_none_982efb36cab548d8\MPSSVC.dll
+ 2008-05-23 10:12:05 16,896 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.16501_none_982efb36cab548d8\wfapigp.dll
+ 2008-05-23 10:12:07 392,192 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20614_none_98b0c8f3e3d85098\FirewallAPI.dll
+ 2008-05-23 10:12:06 86,016 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20614_none_98b0c8f3e3d85098\icfupgd.dll
+ 2008-05-23 10:12:07 63,488 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20614_none_98b0c8f3e3d85098\mpsdrv.sys
+ 2008-05-23 10:12:07 396,288 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20614_none_98b0c8f3e3d85098\MPSSVC.dll
+ 2008-05-23 10:12:06 16,896 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20614_none_98b0c8f3e3d85098\wfapigp.dll
+ 2008-05-23 10:18:37 81,592 ----a-w C:\Windows\winsxs\x86_sbp2.inf_31bf3856ad364e35_6.0.6000.16554_none_432055ecf9219c67\sbp2port.sys
+ 2008-05-23 10:18:36 81,592 ----a-w C:\Windows\winsxs\x86_sbp2.inf_31bf3856ad364e35_6.0.6000.20673_none_4393529612505abc\sbp2port.sys
+ 2008-05-23 10:07:35 82,432 ----a-w C:\Windows\winsxs\x86_sdbus.inf_31bf3856ad364e35_6.0.6000.16478_none_6fb8cd2dcd6214ea\sdbus.sys
+ 2008-05-23 10:07:35 82,432 ----a-w C:\Windows\winsxs\x86_sdbus.inf_31bf3856ad364e35_6.0.6000.20588_none_70379a0ce687d0a5\sdbus.sys
+ 2008-05-23 10:15:00 19,128 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpAsDesc.dll
+ 2008-05-23 10:15:00 311,992 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpClient.dll
+ 2008-05-23 10:15:00 318,648 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpCmdRun.exe
+ 2008-05-23 10:15:00 2,565,432 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpEngine.dll
+ 2008-05-23 10:15:02 90,296 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpOAV.dll
+ 2008-05-23 10:15:01 670,392 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpRtMon.dll
+ 2008-05-23 10:15:01 58,552 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpRtPlug.dll
+ 2008-05-23 10:15:01 133,816 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpSigDwn.dll
+ 2008-05-23 10:15:01 513,720 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpSoftEx.dll
+ 2008-05-23 10:15:01 265,912 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MpSvc.dll
+ 2008-05-23 10:15:01 1,006,264 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MSASCui.exe
+ 2008-05-23 10:15:01 215,224 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MsMpCom.dll
+ 2008-05-23 10:15:01 14,008 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MsMpLics.dll
+ 2008-05-23 10:15:00 656,568 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.16420_none_55c0ce805b18c568\MsMpRes.dll
+ 2008-05-23 10:14:59 19,128 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpAsDesc.dll
+ 2008-05-23 10:14:59 311,992 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpClient.dll
+ 2008-05-23 10:14:59 318,648 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpCmdRun.exe
+ 2008-05-23 10:14:58 2,565,432 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpEngine.dll
+ 2008-05-23 10:15:00 90,296 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpOAV.dll
+ 2008-05-23 10:14:59 670,392 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpRtMon.dll
+ 2008-05-23 10:15:00 58,552 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpRtPlug.dll
+ 2008-05-23 10:15:00 133,816 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpSigDwn.dll
+ 2008-05-23 10:15:00 513,720 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpSoftEx.dll
+ 2008-05-23 10:14:59 265,912 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MpSvc.dll
+ 2008-05-23 10:14:59 1,006,264 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MSASCui.exe
+ 2008-05-23 10:14:59 215,224 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MsMpCom.dll
+ 2008-05-23 10:14:59 14,008 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MsMpLics.dll
+ 2008-05-23 10:14:58 656,568 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6000.20516_none_565b3cf37428e14b\MsMpRes.dll
+ 2008-05-23 10:07:35 13,312 ----a-w C:\Windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6000.16478_none_a211996cecf4f6d9\sffdisk.sys
+ 2008-05-23 10:07:35 12,800 ----a-w C:\Windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6000.16478_none_a211996cecf4f6d9\sffp_mmc.sys
+ 2008-05-23 10:07:35 12,800 ----a-w C:\Windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6000.16478_none_a211996cecf4f6d9\sffp_sd.sys
+ 2008-05-23 10:07:35 13,312 ----a-w C:\Windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6000.20588_none_a290664c061ab294\sffdisk.sys
+ 2008-05-23 10:07:35 12,800 ----a-w C:\Windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6000.20588_none_a290664c061ab294\sffp_mmc.sys
+ 2008-05-23 10:07:36 12,800 ----a-w C:\Windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6000.20588_none_a290664c061ab294\sffp_sd.sys
+ 2008-05-23 10:09:45 5,156,864 ----a-w C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16478_none_f751fc59162d3b7f\System.Web.dll
+ 2008-05-23 10:09:46 5,156,864 ----a-w C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20587_none_e0856cab2fd39b3b\System.Web.dll
+ 2008-05-23 10:14:22 55,296 ----a-w C:\Windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6000.16478_none_465c5f209ade1e53\USBSTOR.SYS
+ 2008-05-23 10:14:22 55,296 ----a-w C:\Windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6000.20588_none_46db2bffb403da0e\USBSTOR.SYS
+ 2008-05-23 10:10:49 211,000 ----a-w C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6000.16586_none_137ff950ff29e447\volsnap.sys
+ 2008-05-23 10:10:49 211,000 ----a-w C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6000.20709_none_146318401803edb5\volsnap.sys
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 02:39 486856]
"PeerGuardian"="C:\Program Files\PeerGuardian2\pg2.exe" [2007-06-02 15:59 1457152]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-02-28 11:26 90191]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-02-28 11:26 7770112]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-02-28 11:26 81920]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-12 20:36 827392]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"OODefragTray"="C:\Windows\system32\oodtray.exe" [2007-05-11 02:08 2512392]
"egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-02-20 11:06 1443072]
"PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2008-03-14 16:50 233472]
"d8e41a32"="C:\Windows\system32\auyabdpd.dll" [ ]
"BMdbd729ae"="C:\Windows\system32\fsinkluc.dll" [ ]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="%WINDIR%\SMINST\launcher.exe" [ ]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 01:48:20 40048]
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 00:01:50 734872]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
--a------ 2007-03-12 11:54 50696 C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2007-05-08 16:24 54840 C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPAdvisor]
--a------ 2007-03-20 15:23 1773568 C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
--a------ 2007-03-01 13:18 472776 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-12-13 19:10 1688872 C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2007-12-03 14:21 2213160 C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 14:57 153136 C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 14.0]
--a------ 2008-05-07 17:13 2245984 C:\Program Files\Norton Ghost\Agent\VProTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl]
--a------ 2007-02-13 11:38 159744 C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QPService]
--a------ 2007-03-28 17:45 176128 C:\Program Files\HP\QuickPlay\QPService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-03-28 23:37 413696 C:\Program Files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2008-01-28 11:43 2097488 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyHunter Security Suite]
C:\Program Files\Enigma Software Group\SpyHunter\SHStartup.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
--a------ 2008-05-14 18:02 1271032 C:\Program Files\Steam\Steam.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WAWifiMessage]
--a------ 2007-01-10 16:12 317128 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2008-05-23 03:15 1006264 C:\Program Files\Windows Defender\MSASCui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{D1A0DAED-B4D9-417E-91AA-F1CB28090FF5}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{CF420997-A179-42A8-A833-07F6C1DE2F71}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{FABC5D01-90B9-4323-978A-1BC9E0C4B648}"= C:\Program Files\HP\QuickPlay\QP.exe:Quick Play
"{9D839C64-DF27-43D5-9374-45F410999409}"= C:\Program Files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{3E1165D4-6501-4D5C-B527-FD0719E2BFBF}"= UDP:C:\Program Files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{AF3360B3-52FB-47E0-B472-39F5E0A261E2}"= TCP:C:\Program Files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{6466F7C8-9789-4F93-B00F-3F85CFE814FB}"= UDP:C:\Program Files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{2346F100-EA86-48A7-B581-AAFCBAC9515D}"= TCP:C:\Program Files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{9EF3943E-DCE5-480B-ADBE-BDF50FFDB414}"= UDP:C:\Program Files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{118BCD34-FAA4-4805-883F-0965C17EE6F0}"= TCP:C:\Program Files\earthlink totalaccess\TaskPanl.exe:taskpanl
"TCP Query User{3AFC4B7F-D17E-4E66-909D-387741BA3151}C:\\program files\\azureus\\azureus.exe"= UDP:C:\program files\azureus\azureus.exe:Azureus
"UDP Query User{7D561539-8DB3-4A18-ACFE-95CA80BC8990}C:\\program files\\azureus\\azureus.exe"= TCP:C:\program files\azureus\azureus.exe:Azureus
"{CD4DBA3E-3BCA-42C4-B2CC-81B1391A478E}"= UDP:C:\Program Files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{B5C96520-F94D-4348-81CB-11AED4E18D5E}"= TCP:C:\Program Files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{71682F49-80B4-47AE-9279-8A4B372A6ABF}"= UDP:C:\Program Files\AIM6\aim6.exe:AIM
"{1F0FB7D2-0C5B-4FF5-B910-6D58B304253A}"= TCP:C:\Program Files\AIM6\aim6.exe:AIM
"{60B5ADCF-7DDE-4C1F-B1B1-F6A57B2F59A4}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{74339FFC-C976-4691-AA10-0FAFBB0F407D}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{E285DF38-3BA6-487F-A192-0DE534691408}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{DCA2B24E-FAF1-4550-9635-5530C6369177}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{802EE587-F845-4534-8B7F-B5C4A6CDDEFC}C:\\neverwinternights\\nwn\\nwmain.exe"= UDP:C:\neverwinternights\nwn\nwmain.exe:Neverwinter Nights
"UDP Query User{56495A25-E655-4D52-BFB5-2A24A6E5F9BD}C:\\neverwinternights\\nwn\\nwmain.exe"= TCP:C:\neverwinternights\nwn\nwmain.exe:Neverwinter Nights
"{74AB1945-5053-42ED-BD72-07E15632E8EA}"= UDP:C:\Program Files\FrostWire\FrostWire.exe:LimeWire
"{3D079455-65D7-4BC2-87E8-FBA534862D2E}"= TCP:C:\Program Files\FrostWire\FrostWire.exe:LimeWire
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe"= C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink
R1 epfwtdir;epfwtdir;C:\Windows\system32\DRIVERS\epfwtdir.sys [2008-02-20 11:11]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R2 Symantec SymSnap VSS Provider;Symantec SymSnap VSS Provider;C:\Windows\system32\dllhost.exe [2006-11-02 02:45]
R2 UxTuneUp;TuneUp Theme Extension;C:\Windows\System32\svchost.exe [2006-11-02 02:45]
R2 Viewpoint Manager Service;Viewpoint Manager Service;"C:\Program Files\Viewpoint\Common\ViewpointService.exe" [2007-01-04 14:38]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-05 02:39]
R3 nvsmu;nvsmu;C:\Windows\system32\DRIVERS\nvsmu.sys [2007-02-16 01:50]
S2 NOD32FiXTemDono;Eset Nod32 Boot;C:\Windows\system32\regedt32.exe [2006-11-02 02:45]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 08:43]
S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-05-14 18:03]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\Windows\System32\TuneUpDefragService.exe [2008-05-12 17:07]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder
"2008-05-24 11:00:16 C:\Windows\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-05-24 04:06:08
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-05-24 4:07:53
ComboFix-quarantined-files.txt 2008-05-24 11:07:09
ComboFix2.txt 2008-05-23 09:47:55
Pre-Run: 41,032,486,912 bytes free
Post-Run: 41,003,798,528 bytes free
1571 --- E O F --- 2008-05-24 10:03:20
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:22:38 AM, on 5/24/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\oodtray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\WINDOWS\System32\rundll32.exe
C:\Windows\Explorer.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.ask.com?o=1607
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.h...a...n&pf=laptop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Windows\system32\oodtray.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [d8e41a32] rundll32.exe "C:\Windows\system32\auyabdpd.dll",b
O4 - HKLM\..\Run: [BMdbd729ae] Rundll32.exe "C:\Windows\system32\fsinkluc.dll",s
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky...can_unicode.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 8210 bytes