COMBOFIX - part 4
————————-
+ 2005-09-02 14:04:44 9,068,589 —-a-w c:\windows\system32\Drs832.dll
- 2004-08-10 11:00:00 16,384 —-a-w c:\windows\system32\ds32gt.dll
+ 2008-04-14 00:11:52 16,384 —-a-w c:\windows\system32\ds32gt.dll
- 2004-08-10 11:00:00 181,760 —-a-w c:\windows\system32\dsdmo.dll
+ 2008-04-14 00:11:52 181,248 —-a-w c:\windows\system32\dsdmo.dll
- 2004-08-10 11:00:00 71,680 —-a-w c:\windows\system32\dsdmoprp.dll
+ 2008-04-14 00:11:52 71,680 —-a-w c:\windows\system32\dsdmoprp.dll
- 2004-08-10 11:00:00 92,672 —-a-w c:\windows\system32\dskquota.dll
+ 2008-04-14 00:11:52 92,672 —-a-w c:\windows\system32\dskquota.dll
- 2004-08-10 11:00:00 144,384 —-a-w c:\windows\system32\dskquoui.dll
+ 2008-04-14 00:11:52 155,648 —-a-w c:\windows\system32\dskquoui.dll
- 2004-08-10 11:00:00 367,616 —-a-w c:\windows\system32\dsound.dll
+ 2008-04-14 00:11:52 367,616 —-a-w c:\windows\system32\dsound.dll
- 2004-08-10 11:00:00 1,294,336 —-a-w c:\windows\system32\dsound3d.dll
+ 2008-04-14 00:11:52 1,293,824 —-a-w c:\windows\system32\dsound3d.dll
- 2004-08-10 11:00:00 142,336 —-a-w c:\windows\system32\dsprop.dll
+ 2008-04-14 00:11:52 142,848 —-a-w c:\windows\system32\dsprop.dll
- 2004-08-10 11:00:00 4,096 —-a-w c:\windows\system32\dsprpres.dll
+ 2008-04-13 17:09:30 4,096 —-a-w c:\windows\system32\dsprpres.dll
- 2004-08-10 11:00:00 239,104 —-a-w c:\windows\system32\dsquery.dll
+ 2008-04-14 00:11:52 239,104 —-a-w c:\windows\system32\dsquery.dll
- 2004-08-10 11:00:00 51,200 —-a-w c:\windows\system32\dssec.dll
+ 2008-04-14 00:11:52 51,200 —-a-w c:\windows\system32\dssec.dll
- 2004-08-10 11:00:00 137,216 —-a-w c:\windows\system32\dssenh.dll
+ 2008-04-13 17:37:57 138,752 —-a-w c:\windows\system32\dssenh.dll
- 2004-08-10 11:00:00 113,152 —-a-w c:\windows\system32\dsuiext.dll
+ 2008-04-14 00:11:52 113,152 —-a-w c:\windows\system32\dsuiext.dll
- 2004-08-10 11:00:00 19,456 —-a-w c:\windows\system32\dswave.dll
+ 2008-04-14 00:11:52 19,456 —-a-w c:\windows\system32\dswave.dll
- 2007-03-27 07:49:07 196,608 —-a-w c:\windows\system32\dtu100.dll
+ 2008-09-25 08:03:38 196,608 —-a-w c:\windows\system32\dtu100.dll
- 2004-08-10 11:00:00 10,752 —-a-w c:\windows\system32\dumprep.exe
+ 2008-04-14 00:12:18 10,752 —-a-w c:\windows\system32\dumprep.exe
- 2004-08-10 11:00:00 304,128 —-a-w c:\windows\system32\duser.dll
+ 2008-04-14 00:11:52 304,128 —-a-w c:\windows\system32\duser.dll
- 2004-08-10 11:00:00 17,920 —-a-w c:\windows\system32\dvdupgrd.exe
+ 2008-04-14 00:12:18 17,920 —-a-w c:\windows\system32\dvdupgrd.exe
- 2004-08-10 11:00:00 180,224 —-a-w c:\windows\system32\dwwin.exe
+ 2008-04-14 00:12:18 180,224 —-a-w c:\windows\system32\dwwin.exe
- 2004-08-10 11:00:00 619,008 —-a-w c:\windows\system32\dx7vb.dll
+ 2008-04-14 00:11:52 619,008 —-a-w c:\windows\system32\dx7vb.dll
- 2004-08-10 11:00:00 1,227,264 —-a-w c:\windows\system32\dx8vb.dll
+ 2008-04-14 00:11:52 1,227,264 —-a-w c:\windows\system32\dx8vb.dll
- 2004-08-10 11:00:00 1,298,432 —-a-w c:\windows\system32\dxdiag.exe
+ 2008-04-14 00:12:18 1,298,432 —-a-w c:\windows\system32\dxdiag.exe
- 2004-08-10 11:00:00 2,113,536 —-a-w c:\windows\system32\dxdiagn.dll
+ 2008-04-14 00:11:52 2,113,536 —-a-w c:\windows\system32\dxdiagn.dll
- 2006-08-22 10:05:26 498,742 —-a-w c:\windows\system32\dxmasf.dll
+ 2008-04-14 00:11:52 498,742 —-a-w c:\windows\system32\dxmasf.dll
- 2007-12-19 23:01:06 347,136 —-a-w c:\windows\system32\dxtmsft.dll
+ 2008-10-16 20:38:34 347,136 —-a-w c:\windows\system32\dxtmsft.dll
- 2007-12-07 02:21:45 214,528 —-a-w c:\windows\system32\dxtrans.dll
+ 2008-10-16 20:38:34 214,528 —-a-w c:\windows\system32\dxtrans.dll
+ 2008-04-14 00:11:52 30,720 ——w c:\windows\system32\eapolqec.dll
+ 2008-04-14 00:11:52 184,832 ——w c:\windows\system32\eapp3hst.dll
+ 2008-04-14 00:11:52 126,976 ——w c:\windows\system32\eappcfg.dll
+ 2008-04-14 00:11:52 94,208 ——w c:\windows\system32\eappgnui.dll
+ 2008-04-14 00:11:52 180,224 ——w c:\windows\system32\eapphost.dll
+ 2008-04-14 00:11:52 40,960 ——w c:\windows\system32\eappprxy.dll
+ 2008-04-14 00:11:52 59,392 ——w c:\windows\system32\eapqec.dll
+ 2008-04-14 00:11:52 33,792 ——w c:\windows\system32\eapsvc.dll
- 2004-08-10 11:00:00 26,624 —-a-w c:\windows\system32\efsadu.dll
+ 2008-04-14 00:11:52 26,624 —-a-w c:\windows\system32\efsadu.dll
- 2004-08-10 11:00:00 183,296 —-a-w c:\windows\system32\els.dll
+ 2008-04-14 00:11:53 183,296 —-a-w c:\windows\system32\els.dll
+ 2008-04-14 00:11:57 28,672 ——w c:\windows\system32\en\microsoft.managementconsole.resources.dll
+ 2008-04-14 00:11:57 40,960 ——w c:\windows\system32\en\mmcex.resources.dll
+ 2008-04-14 00:11:57 6,656 ——w c:\windows\system32\en\mmcfxcommon.resources.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\encapi.dll
+ 2008-04-14 00:11:53 20,480 —-a-w c:\windows\system32\encapi.dll
- 2004-08-10 11:00:00 23,040 —-a-w c:\windows\system32\ersvc.dll
+ 2008-04-14 00:11:53 23,040 —-a-w c:\windows\system32\ersvc.dll
- 2005-07-26 04:39:45 243,200 —-a-w c:\windows\system32\es.dll
+ 2008-07-07 20:26:58 253,952 —-a-w c:\windows\system32\es.dll
- 2005-10-20 22:20:03 1,082,368 —-a-w c:\windows\system32\esent.dll
+ 2008-04-14 00:11:53 1,082,368 —-a-w c:\windows\system32\esent.dll
- 2004-08-10 11:00:00 193,024 —-a-w c:\windows\system32\eudcedit.exe
+ 2008-04-14 00:12:19 193,024 —-a-w c:\windows\system32\eudcedit.exe
- 2004-08-10 11:00:00 50,176 —-a-w c:\windows\system32\eventcreate.exe
+ 2008-04-14 00:12:19 50,688 —-a-w c:\windows\system32\eventcreate.exe
- 2004-08-10 11:00:00 55,808 —-a-w c:\windows\system32\eventlog.dll
+ 2008-04-14 00:11:53 56,320 —-a-w c:\windows\system32\eventlog.dll
- 2004-08-10 11:00:00 77,824 —-a-w c:\windows\system32\eventtriggers.exe
+ 2008-04-14 00:12:19 82,944 —-a-w c:\windows\system32\eventtriggers.exe
- 2004-08-10 11:00:00 380,957 —-a-w c:\windows\system32\expsrv.dll
+ 2008-04-14 00:11:53 380,445 —-a-w c:\windows\system32\expsrv.dll
- 2007-12-07 02:21:45 133,120 —-a-w c:\windows\system32\extmgr.dll
+ 2008-10-16 20:38:35 133,120 —-a-w c:\windows\system32\extmgr.dll
- 2004-08-10 11:00:00 45,568 —-a-w c:\windows\system32\extrac32.exe
+ 2008-04-14 00:12:19 24,064 —-a-w c:\windows\system32\extrac32.exe
- 2004-08-10 11:00:00 121,856 —-a-w c:\windows\system32\exts.dll
+ 2008-04-14 00:11:53 125,952 —-a-w c:\windows\system32\exts.dll
- 2004-08-10 11:00:00 80,384 —-a-w c:\windows\system32\faultrep.dll
+ 2008-04-14 00:11:53 80,384 —-a-w c:\windows\system32\faultrep.dll
+ 2008-04-14 00:12:20 20,992 ——w c:\windows\system32\faxpatch.exe
- 2004-08-10 11:00:00 117,760 —-a-w c:\windows\system32\fde.dll
+ 2008-04-14 00:11:53 124,928 —-a-w c:\windows\system32\fde.dll
- 2004-08-10 11:00:00 73,728 —-a-w c:\windows\system32\fdeploy.dll
+ 2008-04-14 00:11:53 73,728 —-a-w c:\windows\system32\fdeploy.dll
- 2004-08-10 11:00:00 21,504 —-a-w c:\windows\system32\feclient.dll
+ 2008-04-14 00:11:53 21,504 —-a-w c:\windows\system32\feclient.dll
- 2004-08-10 11:00:00 337,920 —-a-w c:\windows\system32\filemgmt.dll
+ 2008-04-14 00:11:53 337,920 —-a-w c:\windows\system32\filemgmt.dll
- 2004-08-10 11:00:00 27,136 —-a-w c:\windows\system32\findstr.exe
+ 2008-04-14 00:12:20 27,136 —-a-w c:\windows\system32\findstr.exe
- 2004-08-10 11:00:00 87,552 —-a-w c:\windows\system32\fldrclnr.dll
+ 2008-04-14 00:11:53 87,552 —-a-w c:\windows\system32\fldrclnr.dll
- 2006-08-21 12:21:06 16,896 —-a-w c:\windows\system32\fltlib.dll
+ 2008-04-14 00:11:53 16,896 —-a-w c:\windows\system32\fltlib.dll
- 2006-08-21 09:14:58 23,040 —-a-w c:\windows\system32\fltmc.exe
+ 2008-04-14 00:12:20 23,040 —-a-w c:\windows\system32\fltmc.exe
- 2008-03-01 06:48:55 503,792 —-a-w c:\windows\system32\FNTCACHE.DAT
+ 2008-10-15 08:10:05 999,776 —-a-w c:\windows\system32\FNTCACHE.DAT
- 2004-08-10 11:00:00 382,976 —-a-w c:\windows\system32\fontext.dll
+ 2008-04-14 00:11:53 382,976 —-a-w c:\windows\system32\fontext.dll
- 2005-10-17 21:14:45 80,896 —-a-w c:\windows\system32\fontsub.dll
+ 2008-04-14 00:11:53 80,896 —-a-w c:\windows\system32\fontsub.dll
- 2004-08-10 11:00:00 20,992 —-a-w c:\windows\system32\fontview.exe
+ 2008-04-14 00:12:20 20,992 —-a-w c:\windows\system32\fontview.exe
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\forcedos.exe
+ 2008-04-14 00:12:20 7,680 —-a-w c:\windows\system32\forcedos.exe
- 2004-08-10 11:00:00 25,600 —-a-w c:\windows\system32\format.com
+ 2008-04-14 00:12:42 29,696 —-a-w c:\windows\system32\format.com
- 2004-08-10 11:00:00 9,344 —-a-w c:\windows\system32\framebuf.dll
+ 2008-04-14 00:09:33 9,344 —-a-w c:\windows\system32\framebuf.dll
- 2004-08-10 11:00:00 193,024 —-a-w c:\windows\system32\fsquirt.exe
+ 2008-04-14 00:12:20 193,024 —-a-w c:\windows\system32\fsquirt.exe
- 2004-08-10 11:00:00 42,496 —-a-w c:\windows\system32\ftp.exe
+ 2008-04-14 00:12:20 42,496 —-a-w c:\windows\system32\ftp.exe
- 2004-08-10 11:00:00 60,416 —-a-w c:\windows\system32\fwcfg.dll
+ 2008-04-14 00:11:53 60,416 —-a-w c:\windows\system32\fwcfg.dll
- 2004-08-10 11:00:00 452,096 —-a-w c:\windows\system32\fxsapi.dll
+ 2008-04-14 00:11:53 451,584 —-a-w c:\windows\system32\fxsapi.dll
- 2004-08-10 11:00:00 143,360 —-a-w c:\windows\system32\fxsclnt.exe
+ 2008-04-14 00:12:21 142,848 —-a-w c:\windows\system32\fxsclnt.exe
- 2004-08-10 11:00:00 72,192 —-a-w c:\windows\system32\fxscom.dll
+ 2008-04-14 00:11:54 72,192 —-a-w c:\windows\system32\fxscom.dll
- 2004-08-10 11:00:00 285,184 —-a-w c:\windows\system32\fxscomex.dll
+ 2008-04-14 00:11:54 285,184 —-a-w c:\windows\system32\fxscomex.dll
- 2004-08-10 11:00:00 229,376 —-a-w c:\windows\system32\fxscover.exe
+ 2008-04-14 00:12:21 229,376 —-a-w c:\windows\system32\fxscover.exe
- 2004-08-10 11:00:00 27,136 —-a-w c:\windows\system32\fxsdrv.dll
+ 2008-04-14 00:11:54 26,624 —-a-w c:\windows\system32\fxsdrv.dll
- 2004-08-10 11:00:00 55,296 —-a-w c:\windows\system32\fxsevent.dll
+ 2008-04-14 00:11:54 55,296 —-a-w c:\windows\system32\fxsevent.dll
- 2004-08-10 11:00:00 23,552 —-a-w c:\windows\system32\fxsext32.dll
+ 2008-04-14 00:11:54 23,552 —-a-w c:\windows\system32\fxsext32.dll
- 2004-08-10 11:00:00 23,552 —-a-w c:\windows\system32\fxsmon.dll
+ 2008-04-14 00:11:54 23,552 —-a-w c:\windows\system32\fxsmon.dll
- 2004-08-10 11:00:00 8,704 —-a-w c:\windows\system32\fxsperf.dll
+ 2008-04-14 00:11:54 8,704 —-a-w c:\windows\system32\fxsperf.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\fxsres.dll
+ 2008-04-14 00:09:33 6,656 —-a-w c:\windows\system32\fxsres.dll
- 2004-08-10 11:00:00 562,176 —-a-w c:\windows\system32\fxsst.dll
+ 2008-04-14 00:11:54 562,176 —-a-w c:\windows\system32\fxsst.dll
- 2004-08-10 11:00:00 267,776 —-a-w c:\windows\system32\fxssvc.exe
+ 2008-04-14 00:12:21 267,776 —-a-w c:\windows\system32\fxssvc.exe
- 2004-08-10 11:00:00 246,272 —-a-w c:\windows\system32\fxst30.dll
+ 2008-04-14 00:11:54 246,272 —-a-w c:\windows\system32\fxst30.dll
- 2004-08-10 11:00:00 397,312 —-a-w c:\windows\system32\fxstiff.dll
+ 2008-04-14 00:11:54 397,312 —-a-w c:\windows\system32\fxstiff.dll
- 2004-08-10 11:00:00 154,112 —-a-w c:\windows\system32\fxsui.dll
+ 2008-04-14 00:11:54 154,112 —-a-w c:\windows\system32\fxsui.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\fxswzrd.dll
+ 2008-04-14 00:11:54 192,512 —-a-w c:\windows\system32\fxswzrd.dll
- 2004-08-10 11:00:00 400,384 —-a-w c:\windows\system32\fxsxp32.dll
+ 2008-04-14 00:11:54 400,384 —-a-w c:\windows\system32\fxsxp32.dll
- 2007-06-19 13:31:19 282,112 —-a-w c:\windows\system32\gdi32.dll
+ 2008-10-23 12:36:14 286,720 —-a-w c:\windows\system32\gdi32.dll
- 2004-08-10 11:00:00 55,296 —-a-w c:\windows\system32\getmac.exe
+ 2008-04-14 00:12:21 59,904 —-a-w c:\windows\system32\getmac.exe
- 2004-08-10 11:00:00 122,880 —-a-w c:\windows\system32\glu32.dll
+ 2008-04-14 00:11:54 122,880 —-a-w c:\windows\system32\glu32.dll
- 2004-08-10 11:00:00 566,784 —-a-w c:\windows\system32\gpedit.dll
+ 2008-04-14 00:09:35 566,784 —-a-w c:\windows\system32\gpedit.dll
- 2004-08-10 11:00:00 9,728 —-a-w c:\windows\system32\gpkrsrc.dll
+ 2006-12-31 01:26:44 9,728 —-a-w c:\windows\system32\gpkrsrc.dll
- 2004-08-10 11:00:00 119,808 —-a-w c:\windows\system32\gpresult.exe
+ 2008-04-14 00:12:21 120,832 —-a-w c:\windows\system32\gpresult.exe
- 2004-08-10 11:00:00 198,656 —-a-w c:\windows\system32\gptext.dll
+ 2008-04-14 00:11:54 199,680 —-a-w c:\windows\system32\gptext.dll
- 2004-08-10 11:00:00 39,424 —-a-w c:\windows\system32\grpconv.exe
+ 2008-04-14 00:12:21 39,424 —-a-w c:\windows\system32\grpconv.exe
- 2004-08-10 11:00:00 614,912 —-a-w c:\windows\system32\h323msp.dll
+ 2008-04-14 00:11:54 614,912 —-a-w c:\windows\system32\h323msp.dll
- 2005-06-23 00:05:52 134,272 —-a-w c:\windows\system32\HAL.DLL
+ 2008-04-13 18:31:28 134,400 —-a-w c:\windows\system32\HAL.DLL
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\hccoin.dll
+ 2008-04-14 00:11:54 7,168 —-a-w c:\windows\system32\hccoin.dll
- 2004-08-10 11:00:00 14,848 —-a-w c:\windows\system32\help.exe
+ 2008-04-14 00:12:21 15,872 —-a-w c:\windows\system32\help.exe
- 2005-05-27 02:04:27 41,472 —-a-w c:\windows\system32\hhsetup.dll
+ 2008-04-14 00:11:54 41,472 —-a-w c:\windows\system32\hhsetup.dll
- 2004-08-10 11:00:00 20,992 —-a-w c:\windows\system32\hid.dll
+ 2008-04-14 00:11:54 20,992 —-a-w c:\windows\system32\hid.dll
- 2004-08-04 06:56:44 21,504 —-a-w c:\windows\system32\hidserv.dll
+ 2008-04-14 00:11:54 21,504 —-a-w c:\windows\system32\hidserv.dll
- 2006-07-21 08:24:43 72,704 —-a-w c:\windows\system32\hlink.dll
+ 2008-04-14 00:11:54 72,704 —-a-w c:\windows\system32\hlink.dll
- 2004-08-10 11:00:00 344,064 —-a-w c:\windows\system32\hnetcfg.dll
+ 2008-04-14 00:11:54 344,064 —-a-w c:\windows\system32\hnetcfg.dll
- 2004-08-10 11:00:00 330,752 —-a-w c:\windows\system32\hnetwiz.dll
+ 2008-04-14 00:11:54 330,752 —-a-w c:\windows\system32\hnetwiz.dll
- 2004-08-10 11:00:00 144,896 —-a-w c:\windows\system32\hotplug.dll
+ 2008-04-14 00:11:54 144,896 —-a-w c:\windows\system32\hotplug.dll
- 2004-09-29 17:14:36 69,632 —-a-w c:\windows\system32\HPZipm12.exe
+ 2007-08-09 07:27:52 73,728 —-a-w c:\windows\system32\HPZipm12.exe
+ 2008-04-14 00:11:54 32,285 ——w c:\windows\system32\hsfcisp2.dll
- 2004-08-10 11:00:00 24,576 —-a-w c:\windows\system32\httpapi.dll
+ 2008-04-14 00:11:54 24,576 —-a-w c:\windows\system32\httpapi.dll
- 2004-08-10 11:00:00 41,984 —-a-w c:\windows\system32\htui.dll
+ 2008-04-14 00:11:54 41,984 —-a-w c:\windows\system32\htui.dll
- 2004-11-17 17:41:24 347,136 —-a-w c:\windows\system32\hypertrm.dll
+ 2008-04-14 00:11:54 347,136 —-a-w c:\windows\system32\hypertrm.dll
- 2004-08-10 11:00:00 119,808 —-a-w c:\windows\system32\iasrad.dll
+ 2008-04-14 00:11:54 119,808 —-a-w c:\windows\system32\iasrad.dll
- 2004-08-10 11:00:00 11,264 —-a-w c:\windows\system32\icaapi.dll
+ 2008-04-14 00:11:54 11,264 —-a-w c:\windows\system32\icaapi.dll
- 2007-12-07 02:21:45 63,488 —-a-w c:\windows\system32\icardie.dll
+ 2008-10-16 20:38:35 63,488 —-a-w c:\windows\system32\icardie.dll
- 2004-08-10 11:00:00 80,384 —-a-w c:\windows\system32\iccvid.dll
+ 2008-04-14 00:11:54 80,384 —-a-w c:\windows\system32\iccvid.dll
- 2005-06-29 01:46:00 254,976 —-a-w c:\windows\system32\icm32.dll
+ 2008-04-14 00:11:54 254,976 —-a-w c:\windows\system32\icm32.dll
- 2004-08-10 11:00:00 3,584 —-a-w c:\windows\system32\icmp.dll
+ 2008-04-14 00:09:40 3,584 —-a-w c:\windows\system32\icmp.dll
- 2004-08-10 11:00:00 73,728 —-a-w c:\windows\system32\icwdial.dll
+ 2008-04-14 00:11:54 73,728 —-a-w c:\windows\system32\icwdial.dll
- 2004-08-10 11:00:00 65,536 —-a-w c:\windows\system32\icwphbk.dll
+ 2008-04-14 00:11:54 65,536 —-a-w c:\windows\system32\icwphbk.dll
- 2004-08-10 11:00:00 120,832 —-a-w c:\windows\system32\idq.dll
+ 2008-04-14 00:11:54 120,832 —-a-w c:\windows\system32\idq.dll
- 2007-12-06 11:00:57 70,656 —-a-w c:\windows\system32\ie4uinit.exe
+ 2008-10-16 13:11:09 70,656 —-a-w c:\windows\system32\ie4uinit.exe
- 2007-12-07 02:21:45 153,088 —-a-w c:\windows\system32\ieakeng.dll
+ 2008-10-16 20:38:35 153,088 —-a-w c:\windows\system32\ieakeng.dll
- 2007-12-07 02:21:45 230,400 —-a-w c:\windows\system32\ieaksie.dll
+ 2008-10-16 20:38:35 230,400 —-a-w c:\windows\system32\ieaksie.dll
- 2007-12-06 04:59:51 161,792 —-a-w c:\windows\system32\ieakui.dll
+ 2008-10-15 07:04:53 161,792 —-a-w c:\windows\system32\ieakui.dll
- 2007-12-07 02:21:45 383,488 —-a-w c:\windows\system32\ieapfltr.dll
+ 2008-10-16 20:38:35 383,488 —-a-w c:\windows\system32\ieapfltr.dll
- 2007-12-07 02:21:45 384,512 —-a-w c:\windows\system32\iedkcs32.dll
+ 2008-10-16 20:38:35 384,512 —-a-w c:\windows\system32\iedkcs32.dll
- 2006-10-17 18:06:00 78,336 —-a-w c:\windows\system32\ieencode.dll
+ 2008-04-14 00:11:54 81,920 —-a-w c:\windows\system32\ieencode.dll
- 2007-12-07 02:21:46 6,066,176 —-a-w c:\windows\system32\ieframe.dll
+ 2008-10-16 20:38:37 6,066,176 —-a-w c:\windows\system32\ieframe.dll
- 2007-12-07 02:21:46 44,544 —-a-w c:\windows\system32\iernonce.dll
+ 2008-10-16 20:38:37 44,544 —-a-w c:\windows\system32\iernonce.dll
- 2007-12-07 02:21:46 267,776 —-a-w c:\windows\system32\iertutil.dll
+ 2008-10-16 20:38:37 267,776 —-a-w c:\windows\system32\iertutil.dll
- 2007-12-06 11:00:58 13,824 —-a-w c:\windows\system32\ieudinit.exe
+ 2008-10-16 13:11:09 13,824 —-a-w c:\windows\system32\ieudinit.exe
- 2004-08-10 11:00:00 114,688 —-a-w c:\windows\system32\iexpress.exe
+ 2008-04-14 00:12:22 114,688 —-a-w c:\windows\system32\iexpress.exe
- 2004-08-10 11:00:00 135,680 —-a-w c:\windows\system32\ifmon.dll
+ 2008-04-14 00:11:54 135,680 —-a-w c:\windows\system32\ifmon.dll
- 2004-08-10 11:00:00 8,192 —-a-w c:\windows\system32\igmpagnt.dll
+ 2008-04-14 00:11:54 8,192 —-a-w c:\windows\system32\igmpagnt.dll
- 2004-08-10 11:00:00 81,920 —-a-w c:\windows\system32\ils.dll
+ 2008-04-14 00:11:54 81,920 —-a-w c:\windows\system32\ils.dll
- 2004-08-10 11:00:00 144,384 —-a-w c:\windows\system32\imagehlp.dll
+ 2008-04-14 00:11:54 144,384 —-a-w c:\windows\system32\imagehlp.dll
- 2004-08-10 11:00:00 150,016 —-a-w c:\windows\system32\imapi.exe
+ 2008-04-14 00:12:22 150,528 —-a-w c:\windows\system32\imapi.exe
- 2004-08-10 11:00:00 36,921 —-a-w c:\windows\system32\imeshare.dll
+ 2008-04-14 00:11:54 36,921 —-a-w c:\windows\system32\imeshare.dll
- 2004-08-10 11:00:00 110,080 —-a-w c:\windows\system32\imm32.dll
+ 2008-04-14 00:11:54 110,080 —-a-w c:\windows\system32\imm32.dll
- 2004-08-10 11:00:00 274,432 —-a-w c:\windows\system32\inetcfg.dll
+ 2008-04-14 00:11:54 274,432 —-a-w c:\windows\system32\inetcfg.dll
- 2007-08-21 06:15:44 683,520 —-a-w c:\windows\system32\inetcomm.dll
+ 2008-04-11 19:04:26 691,712 —-a-w c:\windows\system32\inetcomm.dll
- 2004-08-10 11:00:00 33,280 —-a-w c:\windows\system32\inetmib1.dll
+ 2008-04-14 00:11:55 32,768 —-a-w c:\windows\system32\inetmib1.dll
- 2004-08-10 11:00:00 75,264 —-a-w c:\windows\system32\inetpp.dll
+ 2008-04-14 00:11:55 75,264 —-a-w c:\windows\system32\inetpp.dll
- 2004-08-10 11:00:00 15,872 —-a-w c:\windows\system32\inetppui.dll
+ 2008-04-14 00:11:55 15,872 —-a-w c:\windows\system32\inetppui.dll
- 2004-08-10 11:00:00 48,128 —-a-w c:\windows\system32\inetres.dll
+ 2008-04-13 16:22:12 48,128 —-a-w c:\windows\system32\inetres.dll
+ 2008-04-14 00:12:05 221,696 ——w c:\windows\system32\inetsrv\seo.dll
+ 2008-04-14 00:12:06 189,440 ——w c:\windows\system32\inetsrv\smtpadm.dll
+ 2008-04-14 00:12:06 2,134,528 ——w c:\windows\system32\inetsrv\smtpsnap.dll
- 2004-08-10 11:00:00 147,456 —-a-w c:\windows\system32\initpki.dll
+ 2008-04-14 00:11:55 147,456 —-a-w c:\windows\system32\initpki.dll
- 2004-08-10 11:00:00 123,392 —-a-w c:\windows\system32\input.dll
+ 2008-04-14 00:11:55 123,392 —-a-w c:\windows\system32\input.dll
- 2004-08-10 11:00:00 55,808 —-a-w c:\windows\system32\ipconfig.exe
+ 2008-04-14 00:12:22 55,808 —-a-w c:\windows\system32\ipconfig.exe
- 2006-05-19 12:59:41 94,720 —-a-w c:\windows\system32\iphlpapi.dll
+ 2008-04-14 00:11:55 94,720 —-a-w c:\windows\system32\iphlpapi.dll
- 2004-08-10 11:00:00 154,112 —-a-w c:\windows\system32\ipmontr.dll
+ 2008-04-14 00:11:55 161,280 —-a-w c:\windows\system32\ipmontr.dll
- 2004-08-10 11:00:00 331,264 —-a-w c:\windows\system32\ipnathlp.dll
+ 2008-04-14 00:11:55 331,264 —-a-w c:\windows\system32\ipnathlp.dll
- 2004-08-10 11:00:00 330,752 —-a-w c:\windows\system32\ippromon.dll
+ 2008-04-14 00:11:55 330,752 —-a-w c:\windows\system32\ippromon.dll
- 2004-08-10 11:00:00 169,984 —-a-w c:\windows\system32\iprtrmgr.dll
+ 2008-04-14 00:11:55 177,152 —-a-w c:\windows\system32\iprtrmgr.dll
- 2004-08-10 11:00:00 349,696 —-a-w c:\windows\system32\ipsecsnp.dll
+ 2008-04-14 00:11:55 349,696 —-a-w c:\windows\system32\ipsecsnp.dll
- 2004-08-10 11:00:00 182,784 —-a-w c:\windows\system32\ipsecsvc.dll
+ 2008-04-14 00:11:55 183,808 —-a-w c:\windows\system32\ipsecsvc.dll
- 2004-08-10 11:00:00 384,000 —-a-w c:\windows\system32\ipsmsnap.dll
+ 2008-04-14 00:11:55 384,000 —-a-w c:\windows\system32\ipsmsnap.dll
- 2004-08-10 11:00:00 53,248 —-a-w c:\windows\system32\ipv6.exe
+ 2008-04-14 00:12:23 53,248 —-a-w c:\windows\system32\ipv6.exe
- 2004-08-10 11:00:00 59,904 —-a-w c:\windows\system32\ipv6mon.dll
+ 2008-04-14 00:11:55 59,904 —-a-w c:\windows\system32\ipv6mon.dll
- 2004-08-10 11:00:00 23,552 —-a-w c:\windows\system32\ipxroute.exe
+ 2008-04-14 00:12:23 23,552 —-a-w c:\windows\system32\ipxroute.exe
- 2004-08-10 11:00:00 20,992 —-a-w c:\windows\system32\ipxwan.dll
+ 2008-04-14 00:11:55 22,016 —-a-w c:\windows\system32\ipxwan.dll
- 2004-08-10 11:00:00 120,320 —-a-w c:\windows\system32\ir41_qc.dll
+ 2008-04-14 00:11:55 120,320 —-a-w c:\windows\system32\ir41_qc.dll
- 2004-08-10 11:00:00 338,432 —-a-w c:\windows\system32\ir41_qcx.dll
+ 2008-04-14 00:11:55 338,432 —-a-w c:\windows\system32\ir41_qcx.dll
- 2004-08-10 11:00:00 755,200 —-a-w c:\windows\system32\ir50_32.dll
+ 2008-04-14 00:11:55 755,200 —-a-w c:\windows\system32\ir50_32.dll
- 2004-08-10 11:00:00 200,192 —-a-w c:\windows\system32\ir50_qc.dll
+ 2008-04-14 00:11:55 200,192 —-a-w c:\windows\system32\ir50_qc.dll
- 2004-08-10 11:00:00 183,808 —-a-w c:\windows\system32\ir50_qcx.dll
+ 2008-04-14 00:11:55 183,808 —-a-w c:\windows\system32\ir50_qcx.dll
- 2004-08-10 11:00:00 81,920 —-a-w c:\windows\system32\isign32.dll
+ 2008-04-14 00:11:55 81,920 —-a-w c:\windows\system32\isign32.dll
- 2004-08-10 11:00:00 32,768 —-a-w c:\windows\system32\isrdbg32.dll
+ 2008-04-14 00:11:55 32,768 —-a-w c:\windows\system32\isrdbg32.dll
- 2005-05-27 02:04:27 155,136 —-a-w c:\windows\system32\itircl.dll
+ 2008-04-14 00:11:55 155,136 —-a-w c:\windows\system32\itircl.dll
- 2005-05-27 02:04:27 137,216 —-a-w c:\windows\system32\itss.dll
+ 2008-04-14 00:11:55 138,240 —-a-w c:\windows\system32\itss.dll
- 2004-08-10 11:00:00 54,272 —-a-w c:\windows\system32\ixsso.dll
+ 2008-04-14 00:11:55 54,272 —-a-w c:\windows\system32\ixsso.dll
- 2004-08-04 06:56:44 47,616 —-a-w c:\windows\system32\iyuv_32.dll
+ 2008-04-14 00:11:55 47,616 —-a-w c:\windows\system32\iyuv_32.dll
- 2007-12-14 06:57:22 135,168 —-a-w c:\windows\system32\java.exe
+ 2008-02-22 06:23:35 135,168 —-a-w c:\windows\system32\java.exe
- 2007-12-14 06:57:24 135,168 —-a-w c:\windows\system32\javaw.exe
+ 2008-02-22 06:23:39 135,168 —-a-w c:\windows\system32\javaw.exe
- 2007-12-14 07:59:16 139,264 —-a-w c:\windows\system32\javaws.exe
+ 2008-02-22 07:33:32 139,264 —-a-w c:\windows\system32\javaws.exe
- 2006-06-01 18:47:07 163,840 ——w c:\windows\system32\jgdw400.dll
+ 2008-04-14 00:11:55 163,840 ——w c:\windows\system32\jgdw400.dll
- 2006-06-01 18:47:07 27,648 ——w c:\windows\system32\jgpl400.dll
+ 2008-04-14 00:11:55 27,648 ——w c:\windows\system32\jgpl400.dll
- 2006-10-17 18:00:00 491,520 —-a-w c:\windows\system32\jscript.dll
+ 2008-05-09 10:53:39 512,000 —-a-w c:\windows\system32\jscript.dll
- 2007-12-07 02:21:47 27,648 —-a-w c:\windows\system32\jsproxy.dll
+ 2008-10-16 20:38:37 27,648 —-a-w c:\windows\system32\jsproxy.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\system32\kbdbhc.dll
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\kbdfi1.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdfi1.dll
- 2004-08-10 11:00:00 6,144 —-a-w c:\windows\system32\kbdinbe1.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdinbe1.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\kbdinben.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdinben.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\kbdinmal.dll
+ 2008-04-14 00:09:55 6,656 —-a-w c:\windows\system32\kbdinmal.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\system32\kbdiultn.dll
- 2004-08-10 11:00:00 5,632 —-a-w c:\windows\system32\kbdmaori.dll
+ 2008-04-14 00:09:55 5,632 —-a-w c:\windows\system32\kbdmaori.dll
- 2004-08-10 11:00:00 6,144 —-a-w c:\windows\system32\kbdmlt47.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdmlt47.dll
- 2004-08-10 11:00:00 6,144 —-a-w c:\windows\system32\kbdmlt48.dll
+ 2008-04-14 00:09:55 6,144 —-a-w c:\windows\system32\kbdmlt48.dll
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\kbdnec.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdnec.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\system32\kbdnepr.dll
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\kbdno1.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdno1.dll
+ 2008-04-14 00:09:55 6,144 ——w c:\windows\system32\kbdpash.dll
- 2004-08-10 11:00:00 7,680 —-a-w c:\windows\system32\kbdsmsfi.dll
+ 2008-04-14 00:09:55 7,680 —-a-w c:\windows\system32\kbdsmsfi.dll
- 2004-08-10 11:00:00 7,680 —-a-w c:\windows\system32\kbdsmsno.dll
+ 2008-04-14 00:09:55 7,680 —-a-w c:\windows\system32\kbdsmsno.dll
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\kbdukx.dll
+ 2008-04-14 00:09:55 7,168 —-a-w c:\windows\system32\kbdukx.dll
- 2004-08-10 11:00:00 7,424 —-a-w c:\windows\system32\kd1394.dll
+ 2008-04-13 18:31:35 7,424 —-a-w c:\windows\system32\kd1394.dll
- 2005-06-15 17:49:30 295,936 —-a-w c:\windows\system32\kerberos.dll
+ 2008-04-14 00:11:56 299,520 —-a-w c:\windows\system32\kerberos.dll
- 2007-04-16 15:52:53 984,576 —-a-w c:\windows\system32\kernel32.dll
+ 2008-04-14 00:11:56 989,696 —-a-w c:\windows\system32\kernel32.dll
+ 2004-08-10 11:00:00 2,000 —-a-w c:\windows\system32\keyboard.drv
- 2004-08-10 11:00:00 150,528 —-a-w c:\windows\system32\keymgr.dll
+ 2008-04-14 00:11:56 150,528 —-a-w c:\windows\system32\keymgr.dll
+ 2008-05-03 03:46:00 425,984 —-a-w c:\windows\system32\keystone.exe
+ 2008-04-14 00:11:56 61,440 ——w c:\windows\system32\kmsvc.dll
- 2004-08-04 06:56:44 4,096 —-a-w c:\windows\system32\ksuser.dll
+ 2008-04-14 00:11:56 4,096 —-a-w c:\windows\system32\ksuser.dll
+ 2008-04-14 00:11:56 37,376 ——w c:\windows\system32\l2gpstore.dll
- 2007-12-11 22:34:44 1,044,480 —-a-w c:\windows\system32\libdivx.dll
+ 2008-09-19 21:55:58 1,044,480 —-a-w c:\windows\system32\libdivx.dll
- 2004-08-10 11:00:00 423,936 —-a-w c:\windows\system32\licdll.dll
+ 2008-04-14 10:41:58 423,936 —-a-w c:\windows\system32\licdll.dll
- 2004-08-10 11:00:00 58,880 —-a-w c:\windows\system32\licwmi.dll
+ 2008-04-14 00:11:56 58,880 —-a-w c:\windows\system32\licwmi.dll
- 2005-09-01 01:41:53 19,968 —-a-w c:\windows\system32\linkinfo.dll
+ 2008-04-14 00:11:56 19,968 —-a-w c:\windows\system32\linkinfo.dll
- 2004-08-10 11:00:00 13,824 —-a-w c:\windows\system32\lmhsvc.dll
+ 2008-04-14 00:11:56 13,824 —-a-w c:\windows\system32\lmhsvc.dll
- 2004-08-10 11:00:00 399,872 —-a-w c:\windows\system32\lmrt.dll
+ 2008-04-14 00:11:56 399,872 —-a-w c:\windows\system32\lmrt.dll
+ 2007-07-27 19:49:02 196,683 —-a-w c:\windows\system32\lnod32apiA.dll
+ 2007-07-27 19:49:02 225,355 —-a-w c:\windows\system32\lnod32apiW.dll
+ 2005-12-06 00:25:22 139,264 —-a-w c:\windows\system32\lnod32umc.dll
+ 2005-12-05 17:37:10 106,496 —-a-w c:\windows\system32\lnod32upd.dll
- 2004-08-10 11:00:00 97,280 —-a-w c:\windows\system32\loadperf.dll
+ 2008-04-14 00:11:56 97,280 —-a-w c:\windows\system32\loadperf.dll
- 2004-08-10 11:00:00 221,696 —-a-w c:\windows\system32\localsec.dll
+ 2008-04-14 00:11:56 221,696 —-a-w c:\windows\system32\localsec.dll
- 2004-08-10 11:00:00 341,504 —-a-w c:\windows\system32\localspl.dll
+ 2008-04-14 00:11:56 343,040 —-a-w c:\windows\system32\localspl.dll
- 2004-08-10 11:00:00 11,776 —-a-w c:\windows\system32\localui.dll
+ 2008-04-14 00:11:56 11,776 —-a-w c:\windows\system32\localui.dll
- 2004-08-10 11:00:00 75,264 —-a-w c:\windows\system32\locator.exe
+ 2008-04-14 00:12:24 75,264 —-a-w c:\windows\system32\locator.exe
- 2006-10-19 01:03:58 100,864 —-a-w c:\windows\system32\logagent.exe
+ 2008-06-18 07:09:22 100,864 —-a-w c:\windows\system32\logagent.exe
- 2004-08-10 11:00:00 59,392 —-a-w c:\windows\system32\logman.exe
+ 2008-04-14 00:12:24 59,392 —-a-w c:\windows\system32\logman.exe
- 2004-08-10 11:00:00 220,672 —-a-w c:\windows\system32\logon.scr
+ 2008-04-14 00:12:43 220,672 —-a-w c:\windows\system32\logon.scr
- 2004-08-10 11:00:00 514,560 —-a-w c:\windows\system32\logonui.exe
+ 2008-04-14 00:12:24 514,560 —-a-w c:\windows\system32\logonui.exe
- 2004-08-10 11:00:00 22,016 —-a-w c:\windows\system32\lpk.dll
+ 2008-04-14 00:11:56 22,016 —-a-w c:\windows\system32\lpk.dll
- 2004-08-10 11:00:00 10,240 —-a-w c:\windows\system32\lprhelp.dll
+ 2008-04-14 00:11:56 10,240 —-a-w c:\windows\system32\lprhelp.dll
- 2007-11-07 09:26:56 721,920 —-a-w c:\windows\system32\lsasrv.dll
+ 2008-04-14 00:11:56 728,064 —-a-w c:\windows\system32\lsasrv.dll
- 2004-08-10 11:00:00 13,312 —-a-w c:\windows\system32\lsass.exe
+ 2008-04-14 00:12:24 13,312 —-a-w c:\windows\system32\lsass.exe
+ 2008-05-16 16:58:04 12,632 —-a-w c:\windows\system32\lsdelete.exe
+ 2004-08-10 11:00:00 2,560 —-a-w c:\windows\system32\lz32.dll
+ 2008-10-05 03:16:26 235,936 —-a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.exe
+ 2003-09-04 20:14:28 94,208 —-a-w c:\windows\system32\Macromed\Flash\GetFlash.exe
- 2006-11-09 20:20:00 2,111,096 —-a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2008-03-25 03:21:18 2,889,088 —-a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
- 2006-11-09 20:20:00 190,072 —-a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-25 03:21:20 218,496 —-a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2008-02-05 01:46:42 74,649 —-a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2008-11-12 17:38:28 88,590 —-a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2008-08-16 07:36:27 70,264 —-a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
- 2006-10-04 08:48:36 72,704 —-a-w c:\windows\system32\magnify.exe
+ 2008-04-14 00:12:24 72,704 —-a-w c:\windows\system32\magnify.exe
- 2004-08-10 11:00:00 85,504 —-a-w c:\windows\system32\makecab.exe
+ 2008-04-14 00:12:25 57,344 —-a-w c:\windows\system32\makecab.exe
- 2004-08-10 11:00:00 14,848 —-a-w c:\windows\system32\mcastmib.dll
+ 2008-04-14 00:11:56 14,336 —-a-w c:\windows\system32\mcastmib.dll
- 2004-08-10 11:00:00 84,480 —-a-w c:\windows\system32\mciavi32.dll
+ 2008-04-14 00:11:56 84,480 —-a-w c:\windows\system32\mciavi32.dll
- 2004-08-10 11:00:00 35,328 —-a-w c:\windows\system32\mciqtz32.dll
+ 2008-04-14 00:11:56 35,328 —-a-w c:\windows\system32\mciqtz32.dll
- 2004-08-10 11:00:00 23,040 —-a-w c:\windows\system32\mciseq.dll
+ 2008-04-14 00:11:56 23,040 —-a-w c:\windows\system32\mciseq.dll
- 2004-08-10 11:00:00 23,552 —-a-w c:\windows\system32\mciwave.dll
+ 2008-04-14 00:11:56 23,552 —-a-w c:\windows\system32\mciwave.dll
- 2004-08-10 11:00:00 118,272 —-a-w c:\windows\system32\mdminst.dll
+ 2008-04-14 00:11:56 118,272 —-a-w c:\windows\system32\mdminst.dll
- 2007-03-08 15:36:28 40,960 —-a-w c:\windows\system32\mf3216.dll
+ 2008-04-14 00:11:56 40,960 —-a-w c:\windows\system32\mf3216.dll
- 2006-11-01 19:17:45 927,504 —-a-w c:\windows\system32\mfc40u.dll
+ 2008-04-14 00:11:56 927,504 —-a-w c:\windows\system32\mfc40u.dll
- 2004-08-10 11:00:00 22,528 —-a-w c:\windows\system32\mfcsubs.dll
+ 2008-04-14 00:11:56 22,528 —-a-w c:\windows\system32\mfcsubs.dll
- 2004-08-10 11:00:00 14,848 —-a-w c:\windows\system32\mgmtapi.dll
+ 2008-04-14 00:11:56 14,848 —-a-w c:\windows\system32\mgmtapi.dll
+ 2008-04-14 00:11:57 184,320 ——w c:\windows\system32\microsoft.managementconsole.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\midimap.dll
+ 2008-04-14 00:11:57 18,944 —-a-w c:\windows\system32\midimap.dll
- 2004-08-10 11:00:00 60,928 —-a-w c:\windows\system32\miglibnt.dll
+ 2008-04-14 00:11:57 60,928 —-a-w c:\windows\system32\miglibnt.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\mimefilt.dll
+ 2008-04-14 00:11:57 29,696 —-a-w c:\windows\system32\mimefilt.dll
- 2004-08-10 11:00:00 586,240 —-a-w c:\windows\system32\mlang.dll
+ 2008-04-14 00:11:57 586,240 —-a-w c:\windows\system32\mlang.dll
- 2004-08-10 11:00:00 815,104 —-a-w c:\windows\system32\mmc.exe
+ 2008-04-14 00:12:25 1,414,656 —-a-w c:\windows\system32\mmc.exe
- 2004-08-10 11:00:00 70,656 —-a-w c:\windows\system32\mmcbase.dll
+ 2008-04-14 00:11:57 163,328 —-a-w c:\windows\system32\mmcbase.dll
+ 2008-04-14 00:11:57 397,312 ——w c:\windows\system32\mmcex.dll
+ 2008-04-14 00:11:57 106,496 ——w c:\windows\system32\mmcfxcommon.dll
- 2004-08-10 11:00:00 1,192,960 —-a-w c:\windows\system32\mmcndmgr.dll
+ 2008-04-14 00:11:57 1,872,896 —-a-w c:\windows\system32\mmcndmgr.dll
+ 2008-04-14 00:12:25 33,792 ——w c:\windows\system32\mmcperf.exe
- 2004-08-10 11:00:00 50,688 —-a-w c:\windows\system32\mmcshext.dll
+ 2008-04-14 00:11:57 61,440 —-a-w c:\windows\system32\mmcshext.dll
- 2004-08-10 11:00:00 17,408 —-a-w c:\windows\system32\mmfutil.dll
+ 2008-04-14 00:11:57 17,408 —-a-w c:\windows\system32\mmfutil.dll
- 2004-08-10 11:00:00 34,560 —-a-w c:\windows\system32\mnmdd.dll
+ 2008-04-14 00:11:57 34,560 —-a-w c:\windows\system32\mnmdd.dll
- 2004-08-10 11:00:00 32,768 —-a-w c:\windows\system32\mnmsrvc.exe
+ 2008-04-14 00:12:25 32,768 —-a-w c:\windows\system32\mnmsrvc.exe
- 2004-08-10 11:00:00 207,360 —-a-w c:\windows\system32\mobsync.dll
+ 2008-04-14 00:11:57 207,360 —-a-w c:\windows\system32\mobsync.dll
- 2004-08-10 11:00:00 143,360 —-a-w c:\windows\system32\mobsync.exe
+ 2008-04-14 00:12:26 143,360 —-a-w c:\windows\system32\mobsync.exe
- 2004-08-10 11:00:00 153,600 —-a-w c:\windows\system32\modemui.dll
+ 2008-04-14 00:11:57 153,600 —-a-w c:\windows\system32\modemui.dll
- 2004-08-10 11:00:00 15,872 —-a-w c:\windows\system32\more.com
+ 2008-04-14 00:12:42 16,896 —-a-w c:\windows\system32\more.com
- 2004-08-10 11:00:00 216,064 —-a-w c:\windows\system32\moricons.dll
+ 2008-04-13 16:45:30 216,064 —-a-w c:\windows\system32\moricons.dll
+ 2004-08-10 11:00:00 2,032 —-a-w c:\windows\system32\mouse.drv
- 2004-08-10 11:00:00 123,392 —-a-w c:\windows\system32\mplay32.exe
+ 2008-04-14 00:12:27 123,392 —-a-w c:\windows\system32\mplay32.exe
- 2004-08-10 11:00:00 59,904 —-a-w c:\windows\system32\mpr.dll
+ 2008-04-14 00:11:57 59,904 —-a-w c:\windows\system32\mpr.dll
- 2004-08-10 11:00:00 87,040 —-a-w c:\windows\system32\mprapi.dll
+ 2008-04-14 00:11:57 87,040 —-a-w c:\windows\system32\mprapi.dll
- 2004-08-10 11:00:00 49,152 —-a-w c:\windows\system32\mprdim.dll
+ 2008-04-14 00:11:57 53,248 —-a-w c:\windows\system32\mprdim.dll
- 2007-07-06 12:46:59 138,240 —-a-w c:\windows\system32\mqad.dll
+ 2008-04-14 00:11:57 138,240 —-a-w c:\windows\system32\mqad.dll
- 2004-08-10 11:00:00 19,968 —-a-w c:\windows\system32\mqbkup.exe
+ 2008-04-14 00:12:27 19,968 —-a-w c:\windows\system32\mqbkup.exe
- 2007-07-06 12:46:59 47,104 —-a-w c:\windows\system32\mqdscli.dll
+ 2008-04-14 00:11:57 47,616 —-a-w c:\windows\system32\mqdscli.dll
- 2007-07-06 12:46:59 16,896 —-a-w c:\windows\system32\mqise.dll
+ 2008-04-14 00:11:57 16,896 —-a-w c:\windows\system32\mqise.dll
- 2004-08-10 11:00:00 89,088 —-a-w c:\windows\system32\mqlogmgr.dll
+ 2008-04-14 00:11:57 89,088 —-a-w c:\windows\system32\mqlogmgr.dll
- 2004-08-10 11:00:00 225,280 —-a-w c:\windows\system32\mqoa.dll
+ 2008-04-14 00:11:57 225,280 —-a-w c:\windows\system32\mqoa.dll
- 2007-07-06 12:46:59 660,992 —-a-w c:\windows\system32\mqqm.dll
+ 2008-04-14 00:11:57 663,040 —-a-w c:\windows\system32\mqqm.dll
- 2007-07-06 12:46:59 177,152 —-a-w c:\windows\system32\mqrt.dll
+ 2008-04-14 00:11:57 177,152 —-a-w c:\windows\system32\mqrt.dll
- 2004-08-10 11:00:00 123,392 —-a-w c:\windows\system32\mqrtdep.dll
+ 2008-04-14 00:11:57 123,904 —-a-w c:\windows\system32\mqrtdep.dll
- 2007-07-06 12:46:59 95,744 —-a-w c:\windows\system32\mqsec.dll
+ 2008-04-14 00:11:57 95,744 —-a-w c:\windows\system32\mqsec.dll
- 2004-08-10 11:00:00 517,632 —-a-w c:\windows\system32\mqsnap.dll
+ 2008-04-14 00:11:58 517,632 —-a-w c:\windows\system32\mqsnap.dll
- 2004-08-10 11:00:00 4,608 —-a-w c:\windows\system32\mqsvc.exe
+ 2008-04-14 00:12:27 4,608 —-a-w c:\windows\system32\mqsvc.exe
- 2004-08-10 11:00:00 117,248 —-a-w c:\windows\system32\mqtgsvc.exe
+ 2008-04-14 00:12:27 117,248 —-a-w c:\windows\system32\mqtgsvc.exe
- 2004-08-10 11:00:00 186,880 —-a-w c:\windows\system32\mqtrig.dll
+ 2008-04-14 00:11:58 187,392 —-a-w c:\windows\system32\mqtrig.dll
- 2007-07-06 12:46:59 48,640 —-a-w c:\windows\system32\mqupgrd.dll
+ 2008-04-14 00:11:58 49,152 —-a-w c:\windows\system32\mqupgrd.dll
- 2007-07-06 12:46:59 471,552 —-a-w c:\windows\system32\mqutil.dll
+ 2008-04-14 00:11:58 471,552 —-a-w c:\windows\system32\mqutil.dll
- 2008-02-04 23:09:46 18,214,008 —-a-w c:\windows\system32\MRT.exe
+ 2008-12-02 21:26:30 17,593,280 —-a-w c:\windows\system32\MRT.exe
- 2004-08-10 11:00:00 71,680 —-a-w c:\windows\system32\msacm32.dll
+ 2008-04-14 00:11:58 71,680 —-a-w c:\windows\system32\msacm32.dll
- 2004-08-10 11:00:00 3,584 —-a-w c:\windows\system32\msafd.dll
+ 2008-04-14 00:10:06 3,584 —-a-w c:\windows\system32\msafd.dll
- 2004-08-10 11:00:00 86,016 —-a-w c:\windows\system32\msapsspc.dll
+ 2008-04-14 00:11:58 86,016 —-a-w c:\windows\system32\msapsspc.dll
- 2004-08-10 11:00:00 57,344 —-a-w c:\windows\system32\msasn1.dll
+ 2008-04-14 00:11:58 57,344 —-a-w c:\windows\system32\msasn1.dll
- 2005-06-29 01:46:00 74,240 —-a-w c:\windows\system32\mscms.dll
+ 2008-06-24 16:43:16 74,240 —-a-w c:\windows\system32\mscms.dll
- 2004-08-10 11:00:00 69,632 —-a-w c:\windows\system32\msconf.dll
+ 2008-04-14 00:11:58 69,632 —-a-w c:\windows\system32\msconf.dll
- 2004-08-10 11:00:00 12,288 —-a-w c:\windows\system32\mscpx32r.dLL
+ 2008-04-13 17:26:07 12,288 —-a-w c:\windows\system32\mscpx32r.dll
- 2004-08-10 11:00:00 36,864 —-a-w c:\windows\system32\mscpxl32.dLL
+ 2008-04-14 00:11:58 36,864 —-a-w c:\windows\system32\mscpxl32.dll
- 2004-08-10 11:00:00 294,400 —-a-w c:\windows\system32\MSCTF.dll
+ 2008-04-14 00:11:58 297,984 —-a-w c:\windows\system32\msctf.dll
- 2004-08-10 11:00:00 69,120 —-a-w c:\windows\system32\MSCTFP.dll
+ 2008-04-14 00:11:58 68,608 —-a-w c:\windows\system32\msctfp.dll
- 2004-08-10 11:00:00 118,784 —-a-w c:\windows\system32\msdadiag.dll
+ 2008-04-14 00:11:58 118,784 —-a-w c:\windows\system32\msdadiag.dll
- 2004-08-10 11:00:00 151,552 —-a-w c:\windows\system32\msdart.dll
+ 2008-04-14 00:11:59 151,552 —-a-w c:\windows\system32\msdart.dll
- 2004-08-10 11:00:00 14,336 —-a-w c:\windows\system32\msdmo.dll
+ 2008-04-14 00:11:59 14,336 —-a-w c:\windows\system32\msdmo.dll
- 2004-08-10 11:00:00 6,144 —-a-w c:\windows\system32\msdtc.exe
+ 2008-04-14 00:12:27 6,144 —-a-w c:\windows\system32\msdtc.exe
- 2004-08-10 11:00:00 58,880 —-a-w c:\windows\system32\msdtclog.dll
+ 2008-04-14 00:11:59 58,880 —-a-w c:\windows\system32\msdtclog.dll
- 2006-03-01 19:42:42 426,496 —-a-w c:\windows\system32\msdtcprx.dll
+ 2008-04-14 00:11:59 427,008 —-a-w c:\windows\system32\msdtcprx.dll
- 2006-03-01 19:42:42 956,416 —-a-w c:\windows\system32\msdtctm.dll
+ 2008-04-14 00:11:59 956,928 —-a-w c:\windows\system32\msdtctm.dll
- 2006-03-01 19:42:42 161,280 —-a-w c:\windows\system32\msdtcuiu.dll
+ 2008-04-14 00:11:59 161,792 —-a-w c:\windows\system32\msdtcuiu.dll
- 2004-08-10 11:00:00 4,126 —-a-w c:\windows\system32\msdxmlc.dll
+ 2008-04-14 00:10:08 4,126 —-a-w c:\windows\system32\msdxmlc.dll
- 2004-08-10 11:00:00 512,029 —-a-w c:\windows\system32\msexch40.dll
+ 2008-03-25 04:50:28 518,944 —-a-w c:\windows\system32\msexch40.dll
- 2004-08-10 11:00:00 319,517 —-a-w c:\windows\system32\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 —-a-w c:\windows\system32\msexcl40.dll
- 2007-12-07 02:21:47 459,264 —-a-w c:\windows\system32\msfeeds.dll
+ 2008-10-16 20:38:37 459,264 —-a-w c:\windows\system32\msfeeds.dll
- 2007-12-07 02:21:47 52,224 —-a-w c:\windows\system32\msfeedsbs.dll
+ 2008-10-16 20:38:37 52,224 —-a-w c:\windows\system32\msfeedsbs.dll
- 2006-11-27 14:54:06 539,136 —-a-w c:\windows\system32\msftedit.dll
+ 2008-04-14 00:11:59 539,136 —-a-w c:\windows\system32\msftedit.dll
- 2004-08-10 11:00:00 994,304 —-a-w c:\windows\system32\msgina.dll
+ 2008-04-14 00:11:59 997,376 —-a-w c:\windows\system32\msgina.dll
- 2004-08-10 11:00:00 33,792 —-a-w c:\windows\system32\msgsvc.dll
+ 2008-04-14 00:11:59 33,792 —-a-w c:\windows\system32\msgsvc.dll
- 2004-08-10 11:00:00 188,416 —-a-w c:\windows\system32\msh261.drv
+ 2008-04-14 00:12:45 188,416 —-a-w c:\windows\system32\msh261.drv
- 2004-08-04 06:56:58 294,912 —-a-w c:\windows\system32\msh263.drv
+ 2008-04-14 00:12:45 294,912 —-a-w c:\windows\system32\msh263.drv
- 2007-12-08 05:21:48 3,592,192 —-a-w c:\windows\system32\mshtml.dll
+ 2008-12-13 06:40:02 3,593,216 —-a-w c:\windows\system32\mshtml.dll
- 2007-12-07 02:21:47 478,208 —-a-w c:\windows\system32\mshtmled.dll
+ 2008-10-16 20:38:38 477,696 —-a-w c:\windows\system32\mshtmled.dll
- 2007-04-18 16:12:23 2,854,400 —-a-w c:\windows\system32\msi.dll
+ 2008-04-14 00:11:59 2,843,136 —-a-w c:\windows\system32\msi.dll
- 2004-08-10 11:00:00 51,712 —-a-w c:\windows\system32\msident.dll
+ 2008-04-14 00:11:59 51,712 —-a-w c:\windows\system32\msident.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\msidle.dll
+ 2008-04-14 00:11:59 6,656 —-a-w c:\windows\system32\msidle.dll
- 2004-08-10 11:00:00 248,832 —-a-w c:\windows\system32\msieftp.dll
+ 2008-04-14 00:11:59 248,832 —-a-w c:\windows\system32\msieftp.dll
- 2005-05-04 18:45:36 78,848 —-a-w c:\windows\system32\msiexec.exe
+ 2008-04-14 00:12:28 78,848 —-a-w c:\windows\system32\msiexec.exe
- 2005-05-04 18:45:36 271,360 —-a-w c:\windows\system32\msihnd.dll
+ 2008-04-14 00:11:59 271,360 —-a-w c:\windows\system32\msihnd.dll
- 2004-08-10 11:00:00 4,608 —-a-w c:\windows\system32\msimg32.dll
+ 2008-04-14 00:11:59 4,608 —-a-w c:\windows\system32\msimg32.dll
- 2005-05-04 18:45:36 884,736 —-a-w c:\windows\system32\msimsg.dll
+ 2008-04-13 15:39:43 884,736 —-a-w c:\windows\system32\msimsg.dll
- 2004-08-10 11:00:00 159,232 —-a-w c:\windows\system32\MSIMTF.dll
+ 2008-04-14 00:11:59 159,232 —-a-w c:\windows\system32\msimtf.dll
- 2005-05-04 18:45:36 15,360 —-a-w c:\windows\system32\msisip.dll
+ 2008-04-14 00:11:59 15,360 —-a-w c:\windows\system32\msisip.dll
- 2004-08-10 11:00:00 1,507,356 —-a-w c:\windows\system32\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 —-a-w c:\windows\system32\msjet40.dll
- 2004-08-10 11:00:00 358,976 —-a-w c:\windows\system32\msjetoledb40.dll
+ 2008-03-25 04:50:40 355,112 —-a-w c:\windows\system32\msjetoledb40.dll
- 2004-08-10 11:00:00 151,583 —-a-w c:\windows\system32\msjint40.dll
+ 2008-04-14 00:12:00 151,583 —-a-w c:\windows\system32\msjint40.dll
- 2004-08-10 11:00:00 53,279 —-a-w c:\windows\system32\msjter40.dll
+ 2008-03-25 04:50:42 60,192 —-a-w c:\windows\system32\msjter40.dll
- 2004-08-10 11:00:00 241,693 —-a-w c:\windows\system32\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 —-a-w c:\windows\system32\msjtes40.dll
- 2004-08-10 11:00:00 25,088 —-a-w c:\windows\system32\mslbui.dll
+ 2008-04-14 00:12:00 25,088 —-a-w c:\windows\system32\mslbui.dll
- 2004-08-10 11:00:00 213,023 —-a-w c:\windows\system32\msltus40.dll
+ 2008-03-25 04:50:44 219,936 —-a-w c:\windows\system32\msltus40.dll
+ 1998-07-06 06:00:00 23,552 —-a-w c:\windows\system32\MSMPIDE.DLL
- 2004-08-10 11:00:00 290,816 —-a-w c:\windows\system32\msnsspc.dll
+ 2008-04-14 00:12:00 290,816 —-a-w c:\windows\system32\msnsspc.dll
- 2004-08-10 11:00:00 252,928 —-a-w c:\windows\system32\msoeacct.dll
+ 2008-04-14 00:12:00 252,928 —-a-w c:\windows\system32\msoeacct.dll
- 2004-08-10 11:00:00 105,984 —-a-w c:\windows\system32\msoert2.dll
+ 2008-04-14 00:12:00 105,984 —-a-w c:\windows\system32\msoert2.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\msorc32r.dll
+ 2008-04-13 17:24:14 20,480 —-a-w c:\windows\system32\msorc32r.dll
- 2004-08-10 11:00:00 143,360 —-a-w c:\windows\system32\msorcl32.dll
+ 2008-04-14 00:12:00 143,360 —-a-w c:\windows\system32\msorcl32.dll
- 2004-08-10 11:00:00 343,040 —-a-w c:\windows\system32\mspaint.exe
+ 2008-04-14 00:12:28 343,040 —-a-w c:\windows\system32\mspaint.exe
- 2004-08-10 11:00:00 30,208 —-a-w c:\windows\system32\mspatcha.dll
+ 2008-04-14 00:12:00 29,696 —-a-w c:\windows\system32\mspatcha.dll
- 2004-08-10 11:00:00 348,189 —-a-w c:\windows\system32\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 —-a-w c:\windows\system32\mspbde40.dll
- 2004-08-10 11:00:00 48,128 —-a-w c:\windows\system32\msprivs.dll
+ 2008-04-13 16:23:31 48,128 —-a-w c:\windows\system32\msprivs.dll
- 2007-12-07 02:21:48 193,024 —-a-w c:\windows\system32\msrating.dll
+ 2008-10-16 20:38:38 193,024 —-a-w c:\windows\system32\msrating.dll
- 2004-08-10 11:00:00 421,919 —-a-w c:\windows\system32\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 —-a-w c:\windows\system32\msrd2x40.dll
- 2004-08-10 11:00:00 315,423 —-a-w c:\windows\system32\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 —-a-w c:\windows\system32\msrd3x40.dll
- 2004-08-10 11:00:00 552,989 —-a-w c:\windows\system32\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 —-a-w c:\windows\system32\msrepl40.dll
- 2004-08-10 11:00:00 11,264 —-a-w c:\windows\system32\msrle32.dll
+ 2008-04-14 00:12:00 11,264 —-a-w c:\windows\system32\msrle32.dll
- 2004-08-10 11:00:00 134,656 —-a-w c:\windows\system32\mssap.dll
+ 2008-04-14 00:12:00 134,656 —-a-w c:\windows\system32\mssap.dll
+ 2008-04-14 00:12:00 155,136 ——w c:\windows\system32\mssha.dll
+ 2008-04-13 18:14:58 76,800 ——w c:\windows\system32\msshavmsg.dll
- 2004-08-10 11:00:00 274,944 —-a-w c:\windows\system32\mstask.dll
+ 2008-04-14 00:12:00 274,944 —-a-w c:\windows\system32\mstask.dll
- 2004-08-10 11:00:00 258,077 —-a-w c:\windows\system32\mstext40.dll
+ 2008-03-25 04:50:55 264,992 —-a-w c:\windows\system32\mstext40.dll
- 2007-12-07 02:21:48 671,232 —-a-w c:\windows\system32\mstime.dll
+ 2008-10-16 20:38:39 671,232 —-a-w c:\windows\system32\mstime.dll
- 2004-08-10 11:00:00 12,288 —-a-w c:\windows\system32\mstinit.exe
+ 2008-04-14 00:12:29 12,288 —-a-w c:\windows\system32\mstinit.exe
- 2004-08-10 11:00:00 115,712 —-a-w c:\windows\system32\mstlsapi.dll
+ 2008-04-14 00:12:00 116,224 —-a-w c:\windows\system32\mstlsapi.dll
- 2004-08-10 11:00:00 407,552 —-a-w c:\windows\system32\mstsc.exe
+ 2008-04-14 00:12:23 677,888 —-a-w c:\windows\system32\mstsc.exe
- 2004-08-10 11:00:00 655,360 —-a-w c:\windows\system32\mstscax.dll
+ 2008-04-14 00:11:56 2,061,824 —-a-w c:\windows\system32\mstscax.dll
- 2004-08-10 11:00:00 195,072 —-a-w c:\windows\system32\msutb.dll
+ 2008-04-14 00:12:00 195,072 —-a-w c:\windows\system32\msutb.dll
- 2004-08-10 11:00:00 129,536 —-a-w c:\windows\system32\msv1_0.dll
+ 2008-04-14 00:12:00 132,608 —-a-w c:\windows\system32\msv1_0.dll
- 2004-02-24 08:42:40 1,386,496 —-a-w c:\windows\system32\msvbvm60.dll
+ 2008-04-14 00:12:00 1,384,479 —-a-w c:\windows\system32\msvbvm60.dll
- 2004-08-10 11:00:00 343,040 ——w c:\windows\system32\msvcrt.dll
+ 2008-04-14 00:12:01 343,040 —-a-w c:\windows\system32\msvcrt.dll
- 2004-08-10 11:00:00 61,440 —-a-w c:\windows\system32\msvcrt40.dll
+ 2008-04-13 18:30:46 61,440 —-a-w c:\windows\system32\msvcrt40.dll
- 2004-08-10 11:00:00 120,832 —-a-w c:\windows\system32\msvfw32.dll
+ 2008-04-14 00:12:01 121,344 —-a-w c:\windows\system32\msvfw32.dll
- 2004-08-10 11:00:00 72,704 —-a-w c:\windows\system32\msw3prt.dll
+ 2008-04-14 00:12:01 72,704 —-a-w c:\windows\system32\msw3prt.dll
- 2004-08-10 11:00:00 831,519 —-a-w c:\windows\system32\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 —-a-w c:\windows\system32\mswdat10.dll
- 2004-08-10 11:00:00 204,288 —-a-w c:\windows\system32\mswebdvd.dll
+ 2008-04-14 00:12:01 203,776 —-a-w c:\windows\system32\mswebdvd.dll
- 2004-08-10 11:00:00 245,248 —-a-w c:\windows\system32\mswsock.dll
+ 2008-06-20 17:46:57 245,248 —-a-w c:\windows\system32\mswsock.dll
- 2004-08-10 11:00:00 614,429 —-a-w c:\windows\system32\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 —-a-w c:\windows\system32\mswstr10.dll
- 2004-08-10 11:00:00 348,189 —-a-w c:\windows\system32\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 —-a-w c:\windows\system32\msxbde40.dll
- 2004-08-10 11:00:00 506,368 —-a-w c:\windows\system32\msxml.dll
+ 2008-04-14 00:12:01 506,368 —-a-w c:\windows\system32\msxml.dll
- 2004-08-10 11:00:00 701,440 —-a-w c:\windows\system32\msxml2.dll
+ 2008-04-14 00:12:01 701,440 —-a-w c:\windows\system32\msxml2.dll
- 2007-06-26 06:08:16 1,104,896 —-a-w c:\windows\system32\msxml3.dll
+ 2008-09-04 17:15:04 1,106,944 —-a-w c:\windows\system32\msxml3.dll
- 2007-05-08 20:03:04 1,275,392 —-a-w c:\windows\system32\msxml4.dll
+ 2008-09-30 22:43:34 1,286,152 —-a-w c:\windows\system32\msxml4.dll
- 2007-05-15 21:43:10 1,320,800 —-a-w c:\windows\system32\msxml6.dll
+ 2008-09-10 01:14:56 1,307,648 —-a-w c:\windows\system32\msxml6.dll
- 2007-05-08 23:08:12 86,728 —-a-w c:\windows\system32\msxml6r.dll
+ 2008-04-13 17:27:18 79,872 —-a-w c:\windows\system32\msxml6r.dll
- 2004-08-04 06:56:46 17,408 —-a-w c:\windows\system32\msyuv.dll
+ 2008-04-14 00:12:01 16,896 —-a-w c:\windows\system32\msyuv.dll
- 2006-03-01 19:42:42 66,560 —-a-w c:\windows\system32\mtxclu.dll
+ 2008-04-14 00:12:01 66,560 —-a-w c:\windows\system32\mtxclu.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\mtxdm.dll
+ 2008-04-14 00:12:01 30,720 —-a-w c:\windows\system32\mtxdm.dll
- 2004-08-10 11:00:00 4,096 —-a-w c:\windows\system32\mtxex.dll
+ 2008-04-14 00:12:01 4,096 —-a-w c:\windows\system32\mtxex.dll
- 2004-08-10 11:00:00 25,088 —-a-w c:\windows\system32\mtxlegih.dll
+ 2008-04-14 00:12:01 34,304 —-a-w c:\windows\system32\mtxlegih.dll
- 2006-03-01 19:42:42 91,136 —-a-w c:\windows\system32\mtxoci.dll
+ 2008-04-14 00:12:01 91,648 —-a-w c:\windows\system32\mtxoci.dll
+ 2008-04-14 00:12:01 1,737,856 ——w c:\windows\system32\mtxparhd.dll
- 2007-07-31 00:19:10 271,224 —-a-w c:\windows\system32\mucltui.dll
+ 2008-10-16 20:06:48 268,648 —-a-w c:\windows\system32\mucltui.dll
- 2004-08-10 11:00:00 393,728 —-a-w c:\windows\system32\mui\
0401\xpob2res.dll
+ 2008-04-13 18:40:07 393,728 —-a-w c:\windows\system32\mui\
0401\xpob2res.dll
- 2004-08-10 11:00:00 186,880 —-a-w c:\windows\system32\mui\
0401\xpsp1res.dll
+ 2008-04-13 18:35:06 186,880 —-a-w c:\windows\system32\mui\
0401\xpsp1res.dll
- 2004-08-10 11:00:00 2,869,248 —-a-w c:\windows\system32\mui\
0401\xpsp2res.dll
+ 2008-04-13 18:35:49 2,869,248 —-a-w c:\windows\system32\mui\
0401\xpsp2res.dll
+ 2008-04-13 18:39:02 656,896 ——w c:\windows\system32\mui\
0401\xpsp3res.dll
- 2004-08-10 11:00:00 189,440 —-a-w c:\windows\system32\mui\
0402\xpsp1res.dll
+ 2008-04-13 18:35:08 189,440 —-a-w c:\windows\system32\mui\
0402\xpsp1res.dll
- 2004-08-10 11:00:00 212,480 —-a-w c:\windows\system32\mui\
0404\xpob2res.dll
+ 2008-04-13 18:40:23 212,480 —-a-w c:\windows\system32\mui\
0404\xpob2res.dll
- 2004-08-10 11:00:00 161,280 —-a-w c:\windows\system32\mui\
0404\xpsp1res.dll
+ 2008-04-13 18:35:09 161,280 —-a-w c:\windows\system32\mui\
0404\xpsp1res.dll
- 2004-08-10 11:00:00 477,696 —-a-w c:\windows\system32\mui\
0404\xpsp2res.dll
+ 2008-04-13 18:36:10 477,696 —-a-w c:\windows\system32\mui\
0404\xpsp2res.dll
+ 2008-04-13 18:39:13 327,680 ——w c:\windows\system32\mui\
0404\xpsp3res.dll
- 2004-08-10 11:00:00 428,032 —-a-w c:\windows\system32\mui\
0405\xpob2res.dll
+ 2008-04-13 18:40:24 428,032 —-a-w c:\windows\system32\mui\
0405\xpob2res.dll
- 2004-08-10 11:00:00 188,928 —-a-w c:\windows\system32\mui\
0405\xpsp1res.dll
+ 2008-04-13 18:35:09 188,928 —-a-w c:\windows\system32\mui\
0405\xpsp1res.dll
- 2004-08-10 11:00:00 734,720 —-a-w c:\windows\system32\mui\
0405\xpsp2res.dll
+ 2008-04-13 18:36:10 734,720 —-a-w c:\windows\system32\mui\
0405\xpsp2res.dll
+ 2008-04-13 18:39:02 601,088 ——w c:\windows\system32\mui\
0405\xpsp3res.dll
- 2004-08-10 11:00:00 418,816 —-a-w c:\windows\system32\mui\
0406\xpob2res.dll
+ 2008-04-13 18:40:27 418,816 —-a-w c:\windows\system32\mui\
0406\xpob2res.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\mui\
0406\xpsp1res.dll
+ 2008-04-13 18:35:09 192,000 —-a-w c:\windows\system32\mui\
0406\xpsp1res.dll
- 2004-08-10 11:00:00 742,912 —-a-w c:\windows\system32\mui\
0406\xpsp2res.dll
+ 2008-04-13 18:36:10 742,912 —-a-w c:\windows\system32\mui\
0406\xpsp2res.dll
+ 2008-04-13 18:39:12 605,696 ——w c:\windows\system32\mui\
0406\xpsp3res.dll
- 2004-08-10 11:00:00 403,456 —-a-w c:\windows\system32\mui\
0407\xpob2res.dll
+ 2008-04-13 18:40:34 403,456 —-a-w c:\windows\system32\mui\
0407\xpob2res.dll
- 2004-08-10 11:00:00 199,680 —-a-w c:\windows\system32\mui\
0407\xpsp1res.dll
+ 2008-04-13 18:35:21 199,680 —-a-w c:\windows\system32\mui\
0407\xpsp1res.dll
- 2004-08-10 11:00:00 788,992 —-a-w c:\windows\system32\mui\
0407\xpsp2res.dll
+ 2008-04-13 18:37:03 788,480 —-a-w c:\windows\system32\mui\
0407\xpsp2res.dll
+ 2008-04-13 18:39:19 663,552 ——w c:\windows\system32\mui\
0407\xpsp3res.dll
- 2004-08-10 11:00:00 419,328 —-a-w c:\windows\system32\mui\
0408\xpob2res.dll
+ 2008-04-13 18:40:30 419,328 —-a-w c:\windows\system32\mui\
0408\xpob2res.dll
- 2004-08-10 11:00:00 197,632 —-a-w c:\windows\system32\mui\
0408\xpsp1res.dll
+ 2008-04-13 18:35:11 197,632 —-a-w c:\windows\system32\mui\
0408\xpsp1res.dll
- 2004-08-10 11:00:00 801,280 —-a-w c:\windows\system32\mui\
0408\xpsp2res.dll
+ 2008-04-13 18:36:35 801,280 —-a-w c:\windows\system32\mui\
0408\xpsp2res.dll
+ 2008-04-13 18:39:12 679,936 ——w c:\windows\system32\mui\
0408\xpsp3res.dll
- 2004-08-10 11:00:00 405,504 —-a-w c:\windows\system32\mui\
040b\xpob2res.dll
+ 2008-04-13 18:40:32 405,504 —-a-w c:\windows\system32\mui\
040b\xpob2res.dll
- 2004-08-10 11:00:00 186,368 —-a-w c:\windows\system32\mui\
040b\xpsp1res.dll
+ 2008-04-13 18:35:11 186,368 —-a-w c:\windows\system32\mui\
040b\xpsp1res.dll
- 2004-08-10 11:00:00 729,088 —-a-w c:\windows\system32\mui\
040b\xpsp2res.dll
+ 2008-04-13 18:36:39 729,088 —-a-w c:\windows\system32\mui\
040b\xpsp2res.dll
+ 2008-04-13 18:39:17 604,672 ——w c:\windows\system32\mui\
040b\xpsp3res.dll
- 2004-08-10 11:00:00 410,624 —-a-w c:\windows\system32\mui\
040C\xpob2res.dll
+ 2008-04-13 18:40:33 410,624 —-a-w c:\windows\system32\mui\
040C\xpob2res.dll
- 2004-08-10 11:00:00 197,632 —-a-w c:\windows\system32\mui\
040C\xpsp1res.dll
+ 2008-04-13 18:35:20 197,632 —-a-w c:\windows\system32\mui\
040C\xpsp1res.dll
- 2004-08-10 11:00:00 793,600 —-a-w c:\windows\system32\mui\
040C\xpsp2res.dll
+ 2008-04-13 18:36:55 793,088 —-a-w c:\windows\system32\mui\
040C\xpsp2res.dll
+ 2008-04-13 18:39:20 663,040 ——w c:\windows\system32\mui\
040C\xpsp3res.dll
- 2004-08-10 11:00:00 384,000 —-a-w c:\windows\system32\mui\
040D\xpob2res.dll
+ 2008-04-13 18:40:32 384,000 —-a-w c:\windows\system32\mui\
040D\xpob2res.dll
- 2004-08-10 11:00:00 181,760 —-a-w c:\windows\system32\mui\
040D\xpsp1res.dll
+ 2008-04-13 18:35:21 181,760 —-a-w c:\windows\system32\mui\
040D\xpsp1res.dll
- 2004-08-10 11:00:00 2,842,112 —-a-w c:\windows\system32\mui\
040D\xpsp2res.dll
+ 2008-04-13 18:37:07 2,842,112 —-a-w c:\windows\system32\mui\
040D\xpsp2res.dll
+ 2008-04-13 18:39:28 620,544 ——w c:\windows\system32\mui\
040D\xpsp3res.dll
- 2004-08-10 11:00:00 434,176 —-a-w c:\windows\system32\mui\
040e\xpob2res.dll
+ 2008-04-13 18:40:39 434,176 —-a-w c:\windows\system32\mui\
040e\xpob2res.dll
- 2004-08-10 11:00:00 195,584 —-a-w c:\windows\system32\mui\
040e\xpsp1res.dll
+ 2008-04-13 18:35:23 195,584 —-a-w c:\windows\system32\mui\
040e\xpsp1res.dll
- 2004-08-10 11:00:00 769,536 —-a-w c:\windows\system32\mui\
040e\xpsp2res.dll
+ 2008-04-13 18:37:22 769,536 —-a-w c:\windows\system32\mui\
040e\xpsp2res.dll
+ 2008-04-13 18:39:28 645,120 ——w c:\windows\system32\mui\
040e\xpsp3res.dll
- 2004-08-10 11:00:00 413,696 —-a-w c:\windows\system32\mui\
0410\xpob2res.dll
+ 2008-04-13 18:40:39 413,696 —-a-w c:\windows\system32\mui\
0410\xpob2res.dll
- 2004-08-10 11:00:00 195,072 —-a-w c:\windows\system32\mui\
0410\xpsp1res.dll
+ 2008-04-13 18:35:23 195,072 —-a-w c:\windows\system32\mui\
0410\xpsp1res.dll
- 2004-08-10 11:00:00 769,536 —-a-w c:\windows\system32\mui\
0410\xpsp2res.dll
+ 2008-04-13 18:37:22 769,536 —-a-w c:\windows\system32\mui\
0410\xpsp2res.dll
+ 2008-04-13 18:39:28 658,432 ——w c:\windows\system32\mui\
0410\xpsp3res.dll
- 2004-08-10 11:00:00 275,456 —-a-w c:\windows\system32\mui\
0411\xpob2res.dll
+ 2008-04-13 18:40:44 275,456 —-a-w c:\windows\system32\mui\
0411\xpob2res.dll
- 2004-08-10 11:00:00 171,008 —-a-w c:\windows\system32\mui\
0411\xpsp1res.dll
+ 2008-04-13 18:35:23 171,008 —-a-w c:\windows\system32\mui\
0411\xpsp1res.dll
- 2004-08-10 11:00:00 562,688 —-a-w c:\windows\system32\mui\
0411\xpsp2res.dll
+ 2008-04-13 18:37:34 562,688 —-a-w c:\windows\system32\mui\
0411\xpsp2res.dll
+ 2008-04-13 18:39:49 412,672 ——w c:\windows\system32\mui\
0411\xpsp3res.dll
- 2004-08-10 11:00:00 306,688 —-a-w c:\windows\system32\mui\
0412\xpob2res.dll
+ 2008-04-13 18:40:48 306,688 —-a-w c:\windows\system32\mui\
0412\xpob2res.dll
- 2004-08-10 11:00:00 167,936 —-a-w c:\windows\system32\mui\
0412\xpsp1res.dll
+ 2008-04-13 18:35:23 167,936 —-a-w c:\windows\system32\mui\
0412\xpsp1res.dll
- 2004-08-10 11:00:00 543,744 —-a-w c:\windows\system32\mui\
0412\xpsp2res.dll
+ 2008-04-13 18:37:37 543,744 —-a-w c:\windows\system32\mui\
0412\xpsp2res.dll
+ 2008-04-13 18:39:49 392,704 ——w c:\windows\system32\mui\
0412\xpsp3res.dll
- 2004-08-10 11:00:00 401,920 —-a-w c:\windows\system32\mui\
0413\xpob2res.dll
+ 2008-04-13 18:40:44 401,920 —-a-w c:\windows\system32\mui\
0413\xpob2res.dll
- 2004-08-10 11:00:00 196,096 —-a-w c:\windows\system32\mui\
0413\xpsp1res.dll
+ 2008-04-13 18:35:25 196,096 —-a-w c:\windows\system32\mui\
0413\xpsp1res.dll
- 2004-08-10 11:00:00 769,024 —-a-w c:\windows\system32\mui\
0413\xpsp2res.dll
+ 2008-04-13 18:38:00 769,024 —-a-w c:\windows\system32\mui\
0413\xpsp2res.dll
+ 2008-04-13 18:39:47 645,120 ——w c:\windows\system32\mui\
0413\xpsp3res.dll
- 2004-08-10 11:00:00 353,792 —-a-w c:\windows\system32\mui\
0414\xpob2res.dll
+ 2008-04-13 18:40:44 353,792 —-a-w c:\windows\system32\mui\
0414\xpob2res.dll
- 2004-08-10 11:00:00 189,440 —-a-w c:\windows\system32\mui\
0414\xpsp1res.dll
+ 2008-04-13 18:35:25 189,440 —-a-w c:\windows\system32\mui\
0414\xpsp1res.dll
- 2004-08-10 11:00:00 716,288 —-a-w c:\windows\system32\mui\
0414\xpsp2res.dll
+ 2008-04-13 18:38:02 716,288 —-a-w c:\windows\system32\mui\
0414\xpsp2res.dll
+ 2008-04-13 18:39:48 591,872 ——w c:\windows\system32\mui\
0414\xpsp3res.dll
- 2004-08-10 11:00:00 391,680 —-a-w c:\windows\system32\mui\
0415\xpob2res.dll
+ 2008-04-13 18:40:47 391,680 —-a-w c:\windows\system32\mui\
0415\xpob2res.dll
- 2004-08-10 11:00:00 194,560 —-a-w c:\windows\system32\mui\
0415\xpsp1res.dll
+ 2008-04-13 18:35:26 194,560 —-a-w c:\windows\system32\mui\
0415\xpsp1res.dll
- 2004-08-10 11:00:00 759,808 —-a-w c:\windows\system32\mui\
0415\xpsp2res.dll
+ 2008-04-13 18:38:05 759,808 —-a-w c:\windows\system32\mui\
0415\xpsp2res.dll
+ 2008-04-13 18:39:52 641,024 ——w c:\windows\system32\mui\
0415\xpsp3res.dll
- 2004-08-10 11:00:00 409,600 —-a-w c:\windows\system32\mui\
0416\xpob2res.dll
+ 2008-04-13 18:40:10 409,600 —-a-w c:\windows\system32\mui\
0416\xpob2res.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\mui\
0416\xpsp1res.dll
+ 2008-04-13 18:35:08 192,512 —-a-w c:\windows\system32\mui\
0416\xpsp1res.dll
- 2004-08-10 11:00:00 752,128 —-a-w c:\windows\system32\mui\
0416\xpsp2res.dll
+ 2008-04-13 18:35:43 752,128 —-a-w c:\windows\system32\mui\
0416\xpsp2res.dll
+ 2008-04-13 18:38:56 620,032 ——w c:\windows\system32\mui\
0416\xpsp3res.dll
- 2004-08-10 11:00:00 190,464 —-a-w c:\windows\system32\mui\
0418\xpsp1res.dll
+ 2008-04-13 18:35:27 190,464 —-a-w c:\windows\system32\mui\
0418\xpsp1res.dll
- 2004-08-10 11:00:00 427,008 —-a-w c:\windows\system32\mui\
0419\xpob2res.dll
+ 2008-04-13 18:40:50 427,008 —-a-w c:\windows\system32\mui\
0419\xpob2res.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\mui\
0419\xpsp1res.dll
+ 2008-04-13 18:35:27 192,512 —-a-w c:\windows\system32\mui\
0419\xpsp1res.dll
- 2004-08-10 11:00:00 736,768 —-a-w c:\windows\system32\mui\
0419\xpsp2res.dll
+ 2008-04-13 18:38:28 736,768 —-a-w c:\windows\system32\mui\
0419\xpsp2res.dll
+ 2008-04-13 18:39:56 627,200 ——w c:\windows\system32\mui\
0419\xpsp3res.dll
- 2004-08-10 11:00:00 188,928 —-a-w c:\windows\system32\mui\
041a\xpsp1res.dll
+ 2008-04-13 18:35:21 188,928 —-a-w c:\windows\system32\mui\
041a\xpsp1res.dll
- 2004-08-10 11:00:00 405,504 —-a-w c:\windows\system32\mui\
041b\xpob2res.dll
+ 2008-04-13 18:40:52 405,504 —-a-w c:\windows\system32\mui\
041b\xpob2res.dll
- 2004-08-10 11:00:00 193,024 —-a-w c:\windows\system32\mui\
041b\xpsp1res.dll
+ 2008-04-13 18:35:28 192,512 —-a-w c:\windows\system32\mui\
041b\xpsp1res.dll
- 2004-08-10 11:00:00 757,248 —-a-w c:\windows\system32\mui\
041b\xpsp2res.dll
+ 2008-04-13 18:38:37 757,248 —-a-w c:\windows\system32\mui\
041b\xpsp2res.dll
+ 2008-04-13 18:40:04 577,536 ——w c:\windows\system32\mui\
041b\xpsp3res.dll
- 2004-08-10 11:00:00 363,520 —-a-w c:\windows\system32\mui\
041D\xpob2res.dll
+ 2008-04-13 18:40:56 363,008 —-a-w c:\windows\system32\mui\
041D\xpob2res.dll
- 2004-08-10 11:00:00 188,928 —-a-w c:\windows\system32\mui\
041D\xpsp1res.dll
+ 2008-04-13 18:35:28 188,928 —-a-w c:\windows\system32\mui\
041D\xpsp1res.dll
- 2004-08-10 11:00:00 724,992 —-a-w c:\windows\system32\mui\
041D\xpsp2res.dll
+ 2008-04-13 18:38:47 724,480 —-a-w c:\windows\system32\mui\
041D\xpsp2res.dll
+ 2008-04-13 18:40:05 590,848 ——w c:\windows\system32\mui\
041D\xpsp3res.dll
- 2004-08-10 11:00:00 188,416 —-a-w c:\windows\system32\mui\
041e\xpsp1res.dll
+ 2008-04-13 18:35:29 188,416 —-a-w c:\windows\system32\mui\
041e\xpsp1res.dll
- 2004-08-10 11:00:00 390,144 —-a-w c:\windows\system32\mui\
041f\xpob2res.dll
+ 2008-04-13 18:41:00 390,144 —-a-w c:\windows\system32\mui\
041f\xpob2res.dll
- 2004-08-10 11:00:00 188,928 —-a-w c:\windows\system32\mui\
041f\xpsp1res.dll
+ 2008-04-13 18:35:30 188,928 —-a-w c:\windows\system32\mui\
041f\xpsp1res.dll
- 2004-08-10 11:00:00 724,480 —-a-w c:\windows\system32\mui\
041f\xpsp2res.dll
+ 2008-04-13 18:38:51 724,480 —-a-w c:\windows\system32\mui\
041f\xpsp2res.dll
+ 2008-04-13 18:40:09 592,896 ——w c:\windows\system32\mui\
041f\xpsp3res.dll
- 2004-08-10 11:00:00 408,576 —-a-w c:\windows\system32\mui\
0424\xpob2res.dll
+ 2008-04-13 18:40:56 408,576 —-a-w c:\windows\system32\mui\
0424\xpob2res.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\mui\
0424\xpsp1res.dll
+ 2008-04-13 18:35:28 192,512 —-a-w c:\windows\system32\mui\
0424\xpsp1res.dll
- 2004-08-10 11:00:00 732,160 —-a-w c:\windows\system32\mui\
0424\xpsp2res.dll
+ 2008-04-13 18:38:36 732,160 —-a-w c:\windows\system32\mui\
0424\xpsp2res.dll
+ 2008-04-13 18:40:05 576,512 ——w c:\windows\system32\mui\
0424\xpsp3res.dll
- 2004-08-10 11:00:00 187,392 —-a-w c:\windows\system32\mui\
0425\xpsp1res.dll
+ 2008-04-13 18:35:11 186,880 —-a-w c:\windows\system32\mui\
0425\xpsp1res.dll
- 2004-08-10 11:00:00 188,928 —-a-w c:\windows\system32\mui\
0426\xpsp1res.dll
+ 2008-04-13 18:35:24 188,928 —-a-w c:\windows\system32\mui\
0426\xpsp1res.dll
- 2004-08-10 11:00:00 189,952 —-a-w c:\windows\system32\mui\
0427\xpsp1res.dll
+ 2008-04-13 18:35:24 189,952 —-a-w c:\windows\system32\mui\
0427\xpsp1res.dll
- 2004-08-10 11:00:00 270,336 —-a-w c:\windows\system32\mui\
0804\xpob2res.dll
+ 2008-04-13 18:40:24 270,336 —-a-w c:\windows\system32\mui\
0804\xpob2res.dll
- 2004-08-10 11:00:00 161,280 —-a-w c:\windows\system32\mui\
0804\xpsp1res.dll
+ 2008-04-13 18:35:06 161,280 —-a-w c:\windows\system32\mui\
0804\xpsp1res.dll
- 2004-08-10 11:00:00 470,016 —-a-w c:\windows\system32\mui\
0804\xpsp2res.dll
+ 2008-04-13 18:35:54 470,016 —-a-w c:\windows\system32\mui\
0804\xpsp2res.dll
+ 2008-04-13 18:39:03 322,560 ——w c:\windows\system32\mui\
0804\xpsp3res.dll
- 2004-08-10 11:00:00 435,200 —-a-w c:\windows\system32\mui\
0816\xpob2res.dll
+ 2008-04-13 18:40:48 435,200 —-a-w c:\windows\system32\mui\
0816\xpob2res.dll
- 2004-08-10 11:00:00 194,560 —-a-w c:\windows\system32\mui\
0816\xpsp1res.dll
+ 2008-04-13 18:35:26 194,560 —-a-w c:\windows\system32\mui\
0816\xpsp1res.dll
- 2004-08-10 11:00:00 751,616 —-a-w c:\windows\system32\mui\
0816\xpsp2res.dll
+ 2008-04-13 18:38:06 751,616 —-a-w c:\windows\system32\mui\
0816\xpsp2res.dll
+ 2008-04-13 18:39:53 639,488 ——w c:\windows\system32\mui\
0816\xpsp3res.dll
- 2004-08-10 11:00:00 446,464 —-a-w c:\windows\system32\mui\
0C0A\xpob2res.dll
+ 2008-04-13 18:40:30 446,464 —-a-w c:\windows\system32\mui\
0C0A\xpob2res.dll
- 2004-08-10 11:00:00 196,096 —-a-w c:\windows\system32\mui\
0C0A\xpsp1res.dll
+ 2008-04-13 18:35:11 196,096 —-a-w c:\windows\system32\mui\
0C0A\xpsp1res.dll
- 2004-08-10 11:00:00 773,632 —-a-w c:\windows\system32\mui\
0C0A\xpsp2res.dll
+ 2008-04-13 18:36:38 773,632 —-a-w c:\windows\system32\mui\
0C0A\xpsp2res.dll
+ 2008-04-13 18:39:13 648,704 ——w c:\windows\system32\mui\
0C0A\xpsp3res.dll
- 2007-07-31 00:19:04 207,736 —-a-w c:\windows\system32\muweb.dll
+ 2008-10-16 20:06:48 208,744 —-a-w c:\windows\system32\muweb.dll
- 2004-08-10 11:00:00 90,624 —-a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 00:12:01 90,624 —-a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 00:12:01 30,208 ——w c:\windows\system32\napipsec.dll
+ 2008-04-14 00:12:01 193,024 ——w c:\windows\system32\napmontr.dll
+ 2008-04-14 00:12:29 176,640 ——w c:\windows\system32\napstat.exe
- 2006-10-04 08:48:36 53,760 —-a-w c:\windows\system32\narrator.exe
+ 2008-04-14 00:12:29 53,760 —-a-w c:\windows\system32\narrator.exe
- 2004-08-10 11:00:00 36,352 —-a-w c:\windows\system32\ncobjapi.dll
+ 2008-04-14 00:12:01 36,352 —-a-w c:\windows\system32\ncobjapi.dll
- 2004-08-10 11:00:00 17,920 —-a-w c:\windows\system32\nddeapi.dll
+ 2008-04-14 00:12:01 17,920 —-a-w c:\windows\system32\nddeapi.dll
- 2004-08-10 11:00:00 4,096 —-a-w c:\windows\system32\nddeapir.exe
+ 2008-04-14 00:12:29 4,096 —-a-w c:\windows\system32\nddeapir.exe
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\nddenb32.dll
+ 2008-04-14 00:12:01 18,944 —-a-w c:\windows\system32\nddenb32.dll
- 2004-08-10 11:00:00 42,496 —-a-w c:\windows\system32\net.exe
+ 2008-04-14 00:12:29 42,496 —-a-w c:\windows\system32\net.exe
- 2004-08-10 11:00:00 124,928 —-a-w c:\windows\system32\net1.exe
+ 2008-04-14 00:12:29 124,928 —-a-w c:\windows\system32\net1.exe
- 2006-08-17 12:28:27 332,288 —-a-w c:\windows\system32\netapi32.dll
+ 2008-10-15 16:34:24 337,408 —-a-w c:\windows\system32\netapi32.dll
- 2004-08-10 11:00:00 622,080 —-a-w c:\windows\system32\netcfgx.dll
+ 2008-04-14 00:12:01 622,592 —-a-w c:\windows\system32\netcfgx.dll
- 2004-08-10 11:00:00 111,104 —-a-w c:\windows\system32\netdde.exe
+ 2008-04-14 00:12:29 111,104 —-a-w c:\windows\system32\netdde.exe
- 2004-08-10 11:00:00 139,264 —-a-w c:\windows\system32\netid.dll
+ 2008-04-14 00:12:01 139,264 —-a-w c:\windows\system32\netid.dll
- 2004-08-10 11:00:00 407,040 —-a-w c:\windows\system32\netlogon.dll
+ 2008-04-14 00:12:01 407,040 —-a-w c:\windows\system32\netlogon.dll
- 2005-08-22 18:29:46 197,632 —-a-w c:\windows\system32\netman.dll
+ 2008-04-14 00:12:01 198,144 —-a-w c:\windows\system32\netman.dll
- 2004-08-10 11:00:00 875,008 —-a-w c:\windows\system32\netplwiz.dll
+ 2008-04-14 00:12:01 875,008 —-a-w c:\windows\system32\netplwiz.dll
- 2004-08-10 11:00:00 12,288 —-a-w c:\windows\system32\netrap.dll
+ 2008-04-14 00:12:01 11,776 —-a-w c:\windows\system32\netrap.dll
- 2004-08-10 11:00:00 329,728 —-a-w c:\windows\system32\netsetup.exe
+ 2008-04-14 00:16:51 329,728 —-a-w c:\windows\system32\netsetup.exe
- 2004-08-10 11:00:00 86,016 —-a-w c:\windows\system32\netsh.exe
+ 2008-04-14 00:12:29 86,016 —-a-w c:\windows\system32\netsh.exe
- 2005-06-21 16:00:18 1,705,472 —-a-w c:\windows\system32\netshell.dll
+ 2008-04-14 00:12:02 1,703,936 —-a-w c:\windows\system32\netshell.dll
- 2004-08-10 11:00:00 36,864 —-a-w c:\windows\system32\netstat.exe
+ 2008-04-14 00:12:29 36,864 —-a-w c:\windows\system32\netstat.exe
- 2004-08-10 11:00:00 80,896 —-a-w c:\windows\system32\netui0.dll
+ 2008-04-14 00:12:02 80,896 —-a-w c:\windows\system32\netui0.dll
- 2004-08-10 11:00:00 245,760 —-a-w c:\windows\system32\netui1.dll
+ 2008-04-14 00:12:02 245,760 —-a-w c:\windows\system32\netui1.dll
+ 2004-08-10 11:00:00 2,656 —-a-w c:\windows\system32\netware.drv
- 2004-08-10 11:00:00 248,832 —-a-w c:\windows\system32\newdev.dll
+ 2008-04-14 00:12:02 247,808 —-a-w c:\windows\system32\newdev.dll
- 2004-08-10 11:00:00 103,936 —-a-w c:\windows\system32\nlhtml.dll
+ 2008-04-14 00:12:02 98,304 —-a-w c:\windows\system32\nlhtml.dll
- 2004-08-10 11:00:00 28,672 —-a-w c:\windows\system32\nmmkcert.dll
+ 2008-04-14 00:12:02 28,672 —-a-w c:\windows\system32\nmmkcert.dll
- 2004-08-10 11:00:00 69,120 —-a-w c:\windows\system32\notepad.exe
+ 2008-04-14 00:12:29 69,120 —-a-w c:\windows\system32\notepad.exe
- 2004-08-10 11:00:00 57,344 —-a-w c:\windows\system32\npp\ndisnpp.dll
+ 2008-04-14 00:12:01 57,344 —-a-w c:\windows\system32\npp\ndisnpp.dll
- 2004-08-10 11:00:00 15,360 —-a-w c:\windows\system32\npp\nppagent.exe
+ 2008-04-14 00:12:29 15,360 —-a-w c:\windows\system32\npp\nppagent.exe
- 2004-08-10 11:00:00 54,784 —-a-w c:\windows\system32\npptools.dll
+ 2008-04-14 00:12:02 54,784 —-a-w c:\windows\system32\npptools.dll
- 2004-08-10 11:00:00 76,800 —-a-w c:\windows\system32\nslookup.exe
+ 2008-04-14 00:12:29 76,800 —-a-w c:\windows\system32\nslookup.exe
- 2004-08-10 11:00:00 1,200,128 —-a-w c:\windows\system32\ntbackup.exe
+ 2008-04-14 00:12:30 1,200,640 —-a-w c:\windows\system32\ntbackup.exe
- 2004-08-10 11:00:00 708,096 —-a-w c:\windows\system32\ntdll.dll
+ 2008-04-14 00:11:24 706,048 —-a-w c:\windows\system32\ntdll.dll
- 2004-08-10 11:00:00 67,072 —-a-w c:\windows\system32\ntdsapi.dll
+ 2008-04-14 00:12:02 67,072 —-a-w c:\windows\system32\ntdsapi.dll
- 2007-02-28 09:15:59 2,017,280 —-a-w c:\windows\system32\ntkrnlpa.exe
+ 2008-08-14 09:33:16 2,023,936 —-a-w c:\windows\system32\ntkrnlpa.exe
- 2004-08-10 11:00:00 43,520 —-a-w c:\windows\system32\ntlanman.dll
+ 2008-04-14 00:12:02 44,032 —-a-w c:\windows\system32\ntlanman.dll
- 2004-08-10 11:00:00 8,192 —-a-w c:\windows\system32\ntlsapi.dll
+ 2008-04-14 00:12:02 8,192 —-a-w c:\windows\system32\ntlsapi.dll
- 2004-08-10 11:00:00 118,784 —-a-w c:\windows\system32\ntmarta.dll
+ 2008-04-14 00:12:02 118,784 —-a-w c:\windows\system32\ntmarta.dll
- 2004-08-10 11:00:00 40,960 —-a-w c:\windows\system32\ntmsapi.dll
+ 2008-04-14 00:12:02 40,960 —-a-w c:\windows\system32\ntmsapi.dll
- 2004-08-10 11:00:00 179,712 —-a-w c:\windows\system32\ntmsdba.dll
+ 2008-04-14 00:12:02 179,200 —-a-w c:\windows\system32\ntmsdba.dll
- 2004-08-10 11:00:00 488,448 —-a-w c:\windows\system32\ntmsmgr.dll
+ 2008-04-14 00:12:02 488,448 —-a-w c:\windows\system32\ntmsmgr.dll
- 2004-08-10 11:00:00 435,200 —-a-w c:\windows\system32\ntmssvc.dll
+ 2008-04-14 00:12:02 435,200 —-a-w c:\windows\system32\ntmssvc.dll
- 2007-02-28 09:53:04 2,137,600 —-a-w c:\windows\system32\ntoskrnl.exe
+ 2008-08-14 10:09:26 2,145,280 —-a-w c:\windows\system32\ntoskrnl.exe
- 2004-08-10 11:00:00 91,136 —-a-w c:\windows\system32\ntprint.dll
+ 2008-04-14 00:12:02 91,136 —-a-w c:\windows\system32\ntprint.dll
- 2004-08-10 11:00:00 143,872 —-a-w c:\windows\system32\ntshrui.dll
+ 2008-04-14 00:12:02 143,360 —-a-w c:\windows\system32\ntshrui.dll
- 2004-08-10 11:00:00 419,840 —-a-w c:\windows\system32\ntvdm.exe
+ 2008-04-14 00:12:30 420,864 —-a-w c:\windows\system32\ntvdm.exe
- 2004-08-10 11:00:00 13,312 —-a-w c:\windows\system32\ntvdmd.dll
+ 2008-04-14 00:12:02 15,360 —-a-w c:\windows\system32\ntvdmd.dll
- 2006-08-08 05:54:00 4,495,744 —-a-w c:\windows\system32\nv4_disp.dll
+ 2008-05-03 03:46:00 6,108,160 —-a-w c:\windows\system32\nv4_disp.dll
- 2006-08-08 05:54:00 196,608 —-a-w c:\windows\system32\nvapi.dll
+ 2008-05-03 03:46:00 425,984 —-a-w c:\windows\system32\nvapi.dll
+ 2008-05-03 03:46:00 442,368 —-a-w c:\windows\system32\nvappbar.exe
- 2006-08-08 05:54:00 35,840 —-a-w c:\windows\system32\nvcod.dll
+ 2008-05-03 03:46:00 41,984 —-a-w c:\windows\system32\nvcod.dll
- 2006-08-08 05:54:00 35,840 —-a-w c:\windows\system32\nvcodins.dll
+ 2008-05-03 03:46:00 41,984 —-a-w c:\windows\system32\nvcodins.dll
+ 2008-05-03 03:46:00 147,456 —-a-w c:\windows\system32\nvcolor.exe
- 2006-08-08 05:54:00 7,630,848 —-a-w c:\windows\system32\nvcpl.dll
+ 2008-05-03 03:46:00 13,529,088 —-a-w c:\windows\system32\nvcpl.dll
+ 2008-05-03 03:46:00 1,241,088 —-a-w c:\windows\system32\nvcuda.dll
- 2006-08-08 05:54:00 5,611,520 —-a-w c:\windows\system32\nvdisps.dll
+ 2008-05-03 03:46:00 6,582,272 —-a-w c:\windows\system32\nvdisps.dll
+ 2008-05-03 03:46:00 1,339,392 —-a-w c:\windows\system32\nvdspsch.exe
- 2006-08-08 05:54:00 3,039,232 —-a-w c:\windows\system32\nvgames.dll
+ 2008-05-03 03:46:00 3,391,488 —-a-w c:\windows\system32\nvgames.dll
+ 2008-05-03 03:46:00 1,486,848 —-a-w c:\windows\system32\nview.dll
- 2006-08-08 05:54:00 229,376 —-a-w c:\windows\system32\nvmccs.dll
+ 2008-05-03 03:46:00 229,376 —-a-w c:\windows\system32\nvmccs.dll
- 2006-08-08 05:54:00 188,416 —-a-w c:\windows\system32\nvmccss.dll
+ 2008-05-03 03:46:00 188,416 —-a-w c:\windows\system32\nvmccss.dll
- 2006-08-08 05:54:00 86,016 —-a-w c:\windows\system32\nvmctray.dll
+ 2008-05-03 03:46:00 86,016 —-a-w c:\windows\system32\nvmctray.dll
- 2006-08-08 05:54:00 888,832 —-a-w c:\windows\system32\nvmobls.dll
+ 2008-05-03 03:46:00 1,257,472 —-a-w c:\windows\system32\nvmobls.dll
+ 2008-05-03 03:46:00 286,720 —-a-w c:\windows\system32\nvnt4cpl.dll
- 2006-08-08 05:54:00 5,636,096 —-a-w c:\windows\system32\nvoglnt.dll
+ 2008-05-03 03:46:00 8,769,536 —-a-w c:\windows\system32\nvoglnt.dll
+ 2008-05-03 03:46:00 466,944 —-a-w c:\windows\system32\nvshell.dll
- 2006-08-08 05:54:00 155,715 —-a-w c:\windows\system32\nvsvc32.exe
+ 2008-05-03 03:46:00 159,812 —-a-w c:\windows\system32\nvsvc32.exe
- 2006-08-08 05:54:00 208,896 —-a-w c:\windows\system32\nvudisp.exe
+ 2008-05-03 03:46:00 442,368 —-a-w c:\windows\system32\nvudisp.exe
+ 2008-04-30 22:27:42 442,368 —-a-w c:\windows\system32\NVUNINST.EXE
- 2006-08-08 05:54:00 2,904,064 —-a-w c:\windows\system32\nvvitvs.dll
+ 2008-05-03 03:46:00 3,776,512 —-a-w c:\windows\system32\nvvitvs.dll
- 2006-08-08 05:54:00 81,920 —-a-w c:\windows\system32\nvwddi.dll
+ 2008-05-03 03:46:00 81,920 —-a-w c:\windows\system32\nvwddi.dll
+ 2008-05-03 03:46:00 1,703,936 —-a-w c:\windows\system32\nvwdmcpl.dll
+ 2008-05-03 03:46:00 1,019,904 —-a-w c:\windows\system32\nvwimg.dll
- 2006-08-08 05:54:00 1,232,896 —-a-w c:\windows\system32\nvwss.dll
+ 2008-05-03 03:46:00 2,629,632 —-a-w c:\windows\system32\nvwss.dll
- 2006-10-13 12:35:12 64,000 —-a-w c:\windows\system32\nwapi32.dll
+ 2008-04-14 00:12:02 64,000 —-a-w c:\windows\system32\nwapi32.dll
+ 2008-05-03 03:46:00 1,630,208 —-a-w c:\windows\system32\nwiz.exe
- 2006-10-13 12:35:12 142,336 —-a-w c:\windows\system32\nwprovau.dll
+ 2008-04-14 00:12:02 142,336 —-a-w c:\windows\system32\nwprovau.dll
- 2006-10-13 12:35:12 65,536 —-a-w c:\windows\system32\nwwks.dll
+ 2008-04-14 00:12:02 65,536 —-a-w c:\windows\system32\nwwks.dll
- 2004-08-10 11:00:00 266,752 —-a-w c:\windows\system32\oakley.dll
+ 2008-04-14 00:12:02 270,336 —-a-w c:\windows\system32\oakley.dll
- 2004-08-10 11:00:00 285,696 —-a-w c:\windows\system32\objsel.dll
+ 2008-04-14 00:12:02 286,208 —-a-w c:\windows\system32\objsel.dll
- 2007-12-07 02:21:48 102,912 —-a-w c:\windows\system32\occache.dll
+ 2008-10-16 20:38:39 102,912 —-a-w c:\windows\system32\occache.dll
- 2004-08-10 11:00:00 60,928 —-a-w c:\windows\system32\ocmanage.dll
+ 2008-04-14 00:12:02 67,584 —-a-w c:\windows\system32\ocmanage.dll
- 2004-08-10 11:00:00 249,856 —-a-w c:\windows\system32\odbc32.dll
+ 2008-04-14 00:12:02 249,856 —-a-w c:\windows\system32\odbc32.dll
- 2004-08-10 11:00:00 16,384 —-a-w c:\windows\system32\odbc32gt.dll
+ 2008-04-14 00:12:02 16,384 —-a-w c:\windows\system32\odbc32gt.dll
- 2004-08-10 11:00:00 32,768 —-a-w c:\windows\system32\odbcad32.exe
+ 2008-04-14 00:12:30 32,768 —-a-w c:\windows\system32\odbcad32.exe
- 2004-08-10 11:00:00 24,576 —-a-w c:\windows\system32\odbcbcp.dll
+ 2008-04-14 00:12:02 24,576 —-a-w c:\windows\system32\odbcbcp.dll
- 2004-08-10 11:00:00 135,168 —-a-w c:\windows\system32\odbcconf.dll
+ 2008-04-14 00:12:02 135,168 —-a-w c:\windows\system32\odbcconf.dll
- 2004-08-10 11:00:00 69,632 —-a-w c:\windows\system32\odbcconf.exe
+ 2008-04-14 00:12:30 69,632 —-a-w c:\windows\system32\odbcconf.exe
- 2004-08-10 11:00:00 106,496 —-a-w c:\windows\system32\odbccp32.dll
+ 2008-04-14 00:12:02 106,496 —-a-w c:\windows\system32\odbccp32.dll
- 2004-08-10 11:00:00 65,536 —-a-w c:\windows\system32\odbccr32.dll
+ 2008-04-14 00:12:02 65,536 —-a-w c:\windows\system32\odbccr32.dll
- 2004-08-10 11:00:00 65,536 —-a-w c:\windows\system32\odbccu32.dll
+ 2008-04-14 00:12:02 65,536 —-a-w c:\windows\system32\odbccu32.dll
- 2004-08-10 11:00:00 94,208 —-a-w c:\windows\system32\odbcint.dll
+ 2008-04-13 17:26:05 94,208 —-a-w c:\windows\system32\odbcint.dll
- 2004-08-10 11:00:00 53,279 —-a-w c:\windows\system32\odbcji32.dll
+ 2008-04-14 00:10:31 53,279 —-a-w c:\windows\system32\odbcji32.dll
- 2004-08-10 11:00:00 278,559 —-a-w c:\windows\system32\odbcjt32.dll
+ 2008-04-14 00:12:02 278,559 —-a-w c:\windows\system32\odbcjt32.dll
- 2004-08-10 11:00:00 12,288 —-a-w c:\windows\system32\odbcp32r.dll
+ 2008-04-13 17:26:05 12,288 —-a-w c:\windows\system32\odbcp32r.dll
- 2004-08-10 11:00:00 147,456 —-a-w c:\windows\system32\odbctrac.dll
+ 2008-04-14 00:12:02 147,456 —-a-w c:\windows\system32\odbctrac.dll
- 2004-08-10 11:00:00 20,511 —-a-w c:\windows\system32\oddbse32.dll
+ 2008-04-14 00:12:02 20,511 —-a-w c:\windows\system32\oddbse32.dll
- 2004-08-10 11:00:00 20,510 —-a-w c:\windows\system32\odexl32.dll
+ 2008-04-14 00:12:02 20,510 —-a-w c:\windows\system32\odexl32.dll
- 2004-08-10 11:00:00 20,510 —-a-w c:\windows\system32\odfox32.dll
+ 2008-04-14 00:12:02 20,510 —-a-w c:\windows\system32\odfox32.dll
- 2004-08-10 11:00:00 20,510 —-a-w c:\windows\system32\odpdx32.dll
+ 2008-04-14 00:12:02 20,510 —-a-w c:\windows\system32\odpdx32.dll
- 2004-08-10 11:00:00 20,511 —-a-w c:\windows\system32\odtext32.dll
+ 2008-04-14 00:12:02 20,511 —-a-w c:\windows\system32\odtext32.dll
- 2004-08-10 11:00:00 120,832 —-a-w c:\windows\system32\offfilt.dll
+ 2008-04-14 00:12:02 192,000 —-a-w c:\windows\system32\offfilt.dll
- 2005-07-26 04:39:48 1,285,120 —-a-w c:\windows\system32\ole32.dll
+ 2008-04-14 00:12:02 1,287,168 —-a-w c:\windows\system32\ole32.dll
- 2007-12-04 18:38:13 550,912 —-a-w c:\windows\system32\oleaut32.dll
+ 2008-04-14 00:12:02 551,936 —-a-w c:\windows\system32\oleaut32.dll
- 2005-07-26 04:39:48 74,752 —-a-w c:\windows\system32\olecli32.dll
+ 2008-04-14 00:12:02 74,752 —-a-w c:\windows\system32\olecli32.dll
- 2005-07-26 04:39:49 37,888 —-a-w c:\windows\system32\olecnv32.dll
+ 2008-04-14 00:12:02 37,376 —-a-w c:\windows\system32\olecnv32.dll
- 2006-10-16 16:15:00 122,880 —-a-w c:\windows\system32\oledlg.dll
+ 2008-04-14 00:12:02 122,880 —-a-w c:\windows\system32\oledlg.dll
- 2004-08-10 11:00:00 107,008 —-a-w c:\windows\system32\oleprn.dll
+ 2008-04-14 00:12:02 107,008 —-a-w c:\windows\system32\oleprn.dll
+ 2008-04-14 00:12:02 144,384 ——w c:\windows\system32\onex.dll
+ 2008-02-11 14:39:26 253,952 —-a-w c:\windows\system32\OnlineScannerDLLA.dll
+ 2008-02-11 14:39:18 237,568 —-a-w c:\windows\system32\OnlineScannerDLLW.dll
+ 2008-02-08 18:53:46 110,592 —-a-w c:\windows\system32\OnlineScannerLang.dll
+ 2008-02-05 13:48:04 77,824 —-a-w c:\windows\system32\OnlineScannerUninstaller.exe
- 2004-08-10 11:00:00 122,368 —-a-w c:\windows\system32\oobe\msobcomm.dll
+ 2008-04-14 00:12:00 122,368 —-a-w c:\windows\system32\oobe\msobcomm.dll
- 2004-08-10 11:00:00 16,384 —-a-w c:\windows\system32\oobe\msobdl.dll
+ 2008-04-14 00:12:00 16,384 —-a-w c:\windows\system32\oobe\msobdl.dll
- 2004-08-10 11:00:00 561,664 —-a-w c:\windows\system32\oobe\msobmain.dll
+ 2008-04-14 00:12:00 565,248 —-a-w c:\windows\system32\oobe\msobmain.dll
- 2004-08-10 11:00:00 30,720 —-a-w c:\windows\system32\oobe\msobshel.dll
+ 2008-04-14 00:12:00 30,720 —-a-w c:\windows\system32\oobe\msobshel.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\oobe\msobweb.dll
+ 2008-04-14 00:12:00 19,456 —-a-w c:\windows\system32\oobe\msobweb.dll
- 2004-08-10 11:00:00 28,160 —-a-w c:\windows\system32\oobe\msoobe.exe
+ 2008-04-14 00:12:28 29,184 —-a-w c:\windows\system32\oobe\msoobe.exe
- 2004-08-10 11:00:00 51,200 —-a-w c:\windows\system32\oobe\oobebaln.exe
+ 2008-04-14 00:12:31 51,200 —-a-w c:\windows\system32\oobe\oobebaln.exe
- 2004-08-10 11:00:00 67,584 —-a-w c:\windows\system32\openfiles.exe
+ 2008-04-14 00:12:31 67,584 —-a-w c:\windows\system32\openfiles.exe
- 2004-08-10 11:00:00 713,728 —-a-w c:\windows\system32\opengl32.dll
+ 2008-04-14 00:12:02 713,728 —-a-w c:\windows\system32\opengl32.dll
- 2006-10-04 08:48:37 215,552 —-a-w c:\windows\system32\osk.exe
+ 2008-04-14 00:12:31 215,552 —-a-w c:\windows\system32\osk.exe
- 2004-08-10 11:00:00 67,584 —-a-w c:\windows\system32\osuninst.dll
+ 2008-04-14 00:12:02 67,584 —-a-w c:\windows\system32\osuninst.dll
- 2006-10-11 16:24:45 153,088 —-a-w c:\windows\system32\p2p.dll
+ 2008-04-14 00:12:02 153,600 —-a-w c:\windows\system32\p2p.dll
- 2006-10-11 16:24:45 104,960 —-a-w c:\windows\system32\p2pgasvc.dll
+ 2008-04-14 00:12:02 105,472 —-a-w c:\windows\system32\p2pgasvc.dll
- 2006-10-11 16:24:45 313,344 —-a-w c:\windows\system32\p2pgraph.dll
+ 2008-04-14 00:12:02 313,856 —-a-w c:\windows\system32\p2pgraph.dll
- 2006-10-11 16:24:45 116,224 —-a-w c:\windows\system32\p2pnetsh.dll
+ 2008-04-14 00:12:02 115,712 —-a-w c:\windows\system32\p2pnetsh.dll
- 2006-10-11 16:24:45 553,984 —-a-w c:\windows\system32\p2psvc.dll
+ 2008-04-14 00:12:02 554,496 —-a-w c:\windows\system32\p2psvc.dll
- 2004-08-10 11:00:00 58,368 —-a-w c:\windows\system32\packager.exe
+ 2008-04-14 00:12:31 58,368 —-a-w c:\windows\system32\packager.exe
- 2004-08-10 11:00:00 62,976 —-a-w c:\windows\system32\pautoenr.dll
+ 2008-04-14 00:12:02 67,584 —-a-w c:\windows\system32\pautoenr.dll
+ 2001-10-28 22:42:30 116,224 —-a-w c:\windows\system32\pdfcmnnt.dll
- 2004-08-10 11:00:00 283,648 —-a-w c:\windows\system32\pdh.dll
+ 2008-04-14 00:12:02 284,160 —-a-w c:\windows\system32\pdh.dll
- 2007-12-01 07:30:32 72,824 —-a-w c:\windows\system32\perfc009.dat
+ 2008-11-12 09:14:24 73,056 —-a-w c:\windows\system32\perfc009.dat
- 2004-08-10 11:00:00 39,936 —-a-w c:\windows\system32\perfctrs.dll
+ 2008-04-14 00:12:02 39,936 —-a-w c:\windows\system32\perfctrs.dll
- 2004-08-10 11:00:00 26,624 —-a-w c:\windows\system32\perfdisk.dll
+ 2008-04-14 00:12:02 26,624 —-a-w c:\windows\system32\perfdisk.dll
- 2007-12-01 07:30:32 445,870 —-a-w c:\windows\system32\perfh009.dat
+ 2008-11-12 09:14:24 446,486 —-a-w c:\windows\system32\perfh009.dat
- 2004-08-10 11:00:00 15,872 —-a-w c:\windows\system32\perfmon.exe
+ 2008-04-14 00:12:31 15,872 —-a-w c:\windows\system32\perfmon.exe
- 2004-08-10 11:00:00 16,896 —-a-w c:\windows\system32\perfnet.dll
+ 2008-04-14 00:12:02 17,920 —-a-w c:\windows\system32\perfnet.dll
- 2004-08-10 11:00:00 25,088 —-a-w c:\windows\system32\perfos.dll
+ 2008-04-14 00:12:02 25,088 —-a-w c:\windows\system32\perfos.dll
- 2004-08-10 11:00:00 34,816 —-a-w c:\windows\system32\perfproc.dll
+ 2008-04-14 00:12:02 34,816 —-a-w c:\windows\system32\perfproc.dll
- 2006-10-24 18:30:20 412,160 ——w c:\windows\system32\photometadatahandler.dll
+ 2008-04-14 00:12:02 412,160 ——w c:\windows\system32\photometadatahandler.dll
- 2004-08-10 11:00:00 176,128 —-a-w c:\windows\system32\photowiz.dll
+ 2008-04-14 00:12:02 176,128 —-a-w c:\windows\system32\photowiz.dll
- 2004-08-10 11:00:00 35,328 —-a-w c:\windows\system32\pid.dll
+ 2008-04-14 00:12:02 35,328 —-a-w c:\windows\system32\pid.dll
- 2004-08-10 11:00:00 24,064 —-a-w c:\windows\system32\pidgen.dll
+ 2008-04-14 00:11:09 24,064 —-a-w c:\windows\system32\pidgen.dll
- 2004-08-10 11:00:00 17,920 —-a-w c:\windows\system32\ping.exe
+ 2008-04-14 00:12:31 17,920 —-a-w c:\windows\system32\ping.exe
- 2004-08-10 11:00:00 15,360 —-a-w c:\windows\system32\pjlmon.dll
+ 2008-04-14 00:12:02 15,360 —-a-w c:\windows\system32\pjlmon.dll
- 2007-01-12 00:39:57 278,528 —-a-w c:\windows\system32\pncrt.dll
+ 2008-05-25 03:44:12 278,528 —-a-w c:\windows\system32\pncrt.dll
- 2007-01-12 00:39:58 6,656 —-a-w c:\windows\system32\pndx5016.dll
+ 2008-05-25 03:44:14 6,656 —-a-w c:\windows\system32\pndx5016.dll
- 2007-01-12 00:39:58 5,632 —-a-w c:\windows\system32\pndx5032.dll
+ 2008-05-25 03:44:15 5,632 —-a-w c:\windows\system32\pndx5032.dll
- 2008-01-11 05:53:32 44,544 —-a-w c:\windows\system32\pngfilt.dll
+ 2008-10-16 20:38:39 44,544 —-a-w c:\windows\system32\pngfilt.dll
- 2006-10-11 16:24:45 58,880 —-a-w c:\windows\system32\pnrpnsp.dll
+ 2008-04-14 00:12:02 58,880 —-a-w c:\windows\system32\pnrpnsp.dll
- 2004-08-10 11:00:00 105,472 —-a-w c:\windows\system32\polstore.dll
+ 2008-04-14 00:12:02 105,472 —-a-w c:\windows\system32\polstore.dll
- 2004-08-10 11:00:00 49,152 —-a-w c:\windows\system32\powercfg.exe
+ 2008-04-14 00:12:31 49,152 —-a-w c:\windows\system32\powercfg.exe
- 2004-08-10 11:00:00 17,408 —-a-w c:\windows\system32\powrprof.dll
+ 2008-04-14 00:12:03 17,408 —-a-w c:\windows\system32\powrprof.dll
- 2004-08-10 11:00:00 560,640 —-a-w c:\windows\system32\printui.dll
+ 2008-04-14 00:12:03 560,640 —-a-w c:\windows\system32\printui.dll
- 2004-08-10 11:00:00 27,648 —-a-w c:\windows\system32\profmap.dll
+ 2008-04-14 00:12:03 27,648 —-a-w c:\windows\system32\profmap.dll
- 2004-08-10 11:00:00 109,568 —-a-w c:\windows\system32\progman.exe
+ 2008-04-14 00:12:31 109,568 —-a-w c:\windows\system32\progman.exe
- 2004-08-10 11:00:00 50,176 —-a-w c:\windows\system32\proquota.exe
+ 2008-04-14 00:12:32 50,176 —-a-w c:\windows\system32\proquota.exe
- 2004-08-10 11:00:00 9,216 —-a-w c:\windows\system32\proxycfg.exe
+ 2008-04-14 00:12:32 9,216 —-a-w c:\windows\system32\proxycfg.exe
- 2004-08-10 11:00:00 23,040 —-a-w c:\windows\system32\psapi.dll
+ 2008-04-14 00:12:03 23,040 —-a-w c:\windows\system32\psapi.dll
- 2004-08-10 11:00:00 96,768 —-a-w c:\windows\system32\psbase.dll
+ 2008-04-14 00:12:03 96,768 —-a-w c:\windows\system32\psbase.dll
- 2004-08-10 11:00:00 43,520 —-a-w c:\windows\system32\pstorec.dll
+ 2008-04-14 00:12:03 43,520 —-a-w c:\windows\system32\pstorec.dll
- 2004-08-10 11:00:00 34,304 —-a-w c:\windows\system32\pstorsvc.dll
+ 2008-04-14 00:12:03 34,304 —-a-w c:\windows\system32\pstorsvc.dll
+ 2001-08-18 03:36:30 5,632 —-a-w c:\windows\system32\ptpusb.dll
+ 2004-08-04 05:56:46 159,232 —-a-w c:\windows\system32\ptpusd.dll
+ 2008-04-14 00:12:03 150,528 ——w c:\windows\system32\qagent.dll
+ 2008-04-14 00:12:03 291,328 ——w c:\windows\system32\qagentrt.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\qcap.dll
+ 2008-04-14 00:12:03 192,512 —-a-w c:\windows\system32\qcap.dll
+ 2008-04-14 00:12:03 62,464 ——w c:\windows\system32\qcliprov.dll
- 2004-08-10 11:00:00 279,040 —-a-w c:\windows\system32\qdv.dll
+ 2008-04-14 00:12:03 279,040 —-a-w c:\windows\system32\qdv.dll
- 2005-06-28 19:55:08 385,024 —-a-w c:\windows\system32\qdvd.dll
+ 2008-04-14 00:12:03 386,048 —-a-w c:\windows\system32\qdvd.dll
- 2004-08-10 11:00:00 562,176 —-a-w c:\windows\system32\qedit.dll
+ 2008-04-14 00:12:03 562,176 —-a-w c:\windows\system32\qedit.dll
- 2004-08-10 11:00:00 733,696 —-a-w c:\windows\system32\qedwipes.dll
+ 2008-04-13 17:21:32 733,696 —-a-w c:\windows\system32\qedwipes.dll
- 2004-08-10 11:00:00 382,464 —-a-w c:\windows\system32\qmgr.dll
+ 2008-04-14 00:12:03 409,088 —-a-w c:\windows\system32\qmgr.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\qmgrprxy.dll
+ 2008-04-14 00:12:03 18,944 —-a-w c:\windows\system32\qmgrprxy.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\qprocess.exe
+ 2008-04-14 00:12:32 19,968 —-a-w c:\windows\system32\qprocess.exe
- 2007-03-27 07:55:48 3,596,288 —-a-w c:\windows\system32\qt-dx331.dll
+ 2008-09-19 21:57:34 3,596,288 —-a-w c:\windows\system32\qt-dx331.dll
- 2007-10-29 22:35:13 1,287,680 —-a-w c:\windows\system32\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 —-a-w c:\windows\system32\quartz.dll
- 2006-06-22 05:06:30 1,435,648 —-a-w c:\windows\system32\query.dll
+ 2008-04-14 00:12:03 1,435,648 —-a-w c:\windows\system32\query.dll
+ 2008-04-14 00:12:03 76,800 ——w c:\windows\system32\qutil.dll
- 2004-08-10 11:00:00 43,520 —-a-w c:\windows\system32\racpldlg.dll
+ 2008-04-14 00:12:03 43,520 —-a-w c:\windows\system32\racpldlg.dll
- 2006-06-26 17:37:10 8,192 —-a-w c:\windows\system32\rasadhlp.dll
+ 2008-04-14 00:12:03 7,680 —-a-w c:\windows\system32\rasadhlp.dll
- 2004-08-10 11:00:00 236,544 —-a-w c:\windows\system32\rasapi32.dll
+ 2008-04-14 00:12:03 237,056 —-a-w c:\windows\system32\rasapi32.dll
- 2004-08-10 11:00:00 89,088 —-a-w c:\windows\system32\rasauto.dll
+ 2008-04-14 00:12:03 88,576 —-a-w c:\windows\system32\rasauto.dll
- 2004-08-10 11:00:00 69,632 —-a-w c:\windows\system32\raschap.dll
+ 2008-04-14 00:12:03 79,872 —-a-w c:\windows\system32\raschap.dll
- 2004-08-10 11:00:00 657,920 —-a-w c:\windows\system32\rasdlg.dll
+ 2008-04-14 00:12:03 658,432 —-a-w c:\windows\system32\rasdlg.dll
- 2004-08-10 11:00:00 61,440 —-a-w c:\windows\system32\rasman.dll
+ 2008-04-14 00:12:03 61,440 —-a-w c:\windows\system32\rasman.dll
- 2006-06-22 10:47:18 181,248 —-a-w c:\windows\system32\rasmans.dll
+ 2008-04-14 00:12:03 186,368 —-a-w c:\windows\system32\rasmans.dll
- 2004-08-10 11:00:00 56,832 —-a-w c:\windows\system32\rasphone.exe
+ 2008-04-14 00:12:32 56,832 —-a-w c:\windows\system32\rasphone.exe
- 2004-08-10 11:00:00 206,336 —-a-w c:\windows\system32\rasppp.dll
+ 2008-04-14 00:12:03 210,944 —-a-w c:\windows\system32\rasppp.dll
+ 2008-04-14 00:12:03 61,952 ——w c:\windows\system32\rasqec.dll
- 2004-08-10 11:00:00 16,896 —-a-w c:\windows\system32\rassapi.dll
+ 2008-04-14 00:12:03 16,384 —-a-w c:\windows\system32\rassapi.dll
- 2004-08-10 11:00:00 58,880 —-a-w c:\windows\system32\rastapi.dll
+ 2008-04-14 00:12:03 58,368 —-a-w c:\windows\system32\rastapi.dll
- 2004-08-10 11:00:00 112,128 —-a-w c:\windows\system32\rastls.dll
+ 2008-04-14 00:12:03 150,016 —-a-w c:\windows\system32\rastls.dll
- 2004-08-10 11:00:00 102,400 —-a-w c:\windows\system32\rcbdyctl.dll
+ 2008-04-14 00:12:03 102,400 —-a-w c:\windows\system32\rcbdyctl.dll
- 2004-08-10 11:00:00 35,840 —-a-w c:\windows\system32\rcimlby.exe
+ 2008-04-14 00:12:32 35,840 —-a-w c:\windows\system32\rcimlby.exe
- 2004-08-10 11:00:00 21,504 —-a-w c:\windows\system32\rcp.exe
+ 2008-04-14 00:12:32 21,504 —-a-w c:\windows\system32\rcp.exe
- 2004-08-10 11:00:00 147,968 —-a-w c:\windows\system32\rdchost.dll
+ 2008-04-14 00:12:03 147,968 —-a-w c:\windows\system32\rdchost.dll
- 2004-08-10 11:00:00 62,464 —-a-w c:\windows\system32\rdpclip.exe
+ 2008-04-14 00:12:32 62,976 —-a-w c:\windows\system32\rdpclip.exe
- 2004-08-10 11:00:00 92,168 —-a-w c:\windows\system32\rdpdd.dll
+ 2008-04-14 00:13:22 92,424 —-a-w c:\windows\system32\rdpdd.dll
- 2004-08-10 11:00:00 19,968 —-a-w c:\windows\system32\rdpsnd.dll
+ 2008-04-14 00:12:04 19,968 —-a-w c:\windows\system32\rdpsnd.dll
- 2004-08-10 11:00:00 87,176 —-a-w c:\windows\system32\rdpwsx.dll
+ 2008-04-14 00:13:22 87,176 —-a-w c:\windows\system32\rdpwsx.dll
- 2004-08-10 11:00:00 13,824 —-a-w c:\windows\system32\rdsaddin.exe
+ 2008-04-14 00:12:32 13,824 —-a-w c:\windows\system32\rdsaddin.exe
- 2004-08-10 11:00:00 67,072 —-a-w c:\windows\system32\rdshost.exe
+ 2008-04-14 00:12:32 67,072 —-a-w c:\windows\system32\rdshost.exe
- 2004-08-10 11:00:00 50,176 —-a-w c:\windows\system32\reg.exe
+ 2008-04-14 00:12:32 50,176 —-a-w c:\windows\system32\reg.exe
- 2004-08-10 11:00:00 49,664 —-a-w c:\windows\system32\regapi.dll
+ 2008-04-14 00:12:04 49,664 —-a-w c:\windows\system32\regapi.dll
- 2004-08-10 11:00:00 59,904 —-a-w c:\windows\system32\regsvc.dll
+ 2008-04-14 00:12:04 59,904 —-a-w c:\windows\system32\regsvc.dll
- 2004-08-10 11:00:00 397,824 —-a-w c:\windows\system32\regwizc.dll
+ 2008-04-14 00:12:04 397,824 —-a-w c:\windows\system32\regwizc.dll
+ 2005-11-08 11:12:30 2,091 —-a-r c:\windows\system32\ReinstallBackups\
0020\DriverFiles\Win2K_XP\Data\cts20x.dat
+ 2006-08-08 05:54:00 4,495,744 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nv4_disp.dll
+ 2006-08-08 05:54:00 3,958,272 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nv4_mini.sys
+ 2006-08-08 05:54:00 196,608 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvapi.dll
+ 2006-08-08 05:54:00 35,840 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvcod.dll
+ 2006-08-08 05:54:00 7,630,848 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvcpl.dll
+ 2006-08-08 05:54:00 5,611,520 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvdisps.dll
+ 2006-08-08 05:54:00 5,251,072 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvdispsr.dll
+ 2006-08-08 05:54:00 3,039,232 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvgames.dll
+ 2006-08-08 05:54:00 2,928,640 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvgamesr.dll
+ 2006-08-08 05:54:00 229,376 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvmccs.dll
+ 2006-08-08 05:54:00 188,416 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvmccss.dll
+ 2006-08-08 05:54:00 458,752 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvmccssr.dll
+ 2006-08-08 05:54:00 86,016 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvmctray.dll
+ 2006-08-08 05:54:00 888,832 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvmobls.dll
+ 2006-08-08 05:54:00 2,859,008 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvmoblsr.dll
+ 2006-08-08 05:54:00 5,636,096 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvoglnt.dll
+ 2006-08-08 05:54:00 155,715 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvsvc32.exe
+ 2006-08-08 05:54:00 2,904,064 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvvitvs.dll
+ 2006-08-08 05:54:00 2,953,216 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvvitvsr.dll
+ 2006-08-08 05:54:00 81,920 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvwddi.dll
+ 2006-08-08 05:54:00 1,232,896 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvwss.dll
+ 2006-08-08 05:54:00 1,732,608 —-a-w c:\windows\system32\ReinstallBackups\
0022\DriverFiles\nvwssr.dll
+ 2006-08-08 05:54:00 4,495,744 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nv4_disp.dll
+ 2006-08-08 05:54:00 3,958,272 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nv4_mini.sys
+ 2006-08-08 05:54:00 196,608 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvapi.dll
+ 2006-08-08 05:54:00 35,840 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvcod.dll
+ 2006-08-08 05:54:00 7,630,848 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvcpl.dll
+ 2006-08-08 05:54:00 5,611,520 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvdisps.dll
+ 2006-08-08 05:54:00 5,251,072 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvdispsr.dll
+ 2006-08-08 05:54:00 3,039,232 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvgames.dll
+ 2006-08-08 05:54:00 2,928,640 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvgamesr.dll
+ 2006-08-08 05:54:00 229,376 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvmccs.dll
+ 2006-08-08 05:54:00 188,416 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvmccss.dll
+ 2006-08-08 05:54:00 458,752 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvmccssr.dll
+ 2006-08-08 05:54:00 86,016 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvmctray.dll
+ 2006-08-08 05:54:00 888,832 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvmobls.dll
+ 2006-08-08 05:54:00 2,859,008 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvmoblsr.dll
+ 2006-08-08 05:54:00 5,636,096 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvoglnt.dll
+ 2006-08-08 05:54:00 155,715 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvsvc32.exe
+ 2006-08-08 05:54:00 2,904,064 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvvitvs.dll
+ 2006-08-08 05:54:00 2,953,216 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvvitvsr.dll
+ 2006-08-08 05:54:00 81,920 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvwddi.dll
+ 2006-08-08 05:54:00 1,232,896 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvwss.dll
+ 2006-08-08 05:54:00 1,732,608 —-a-w c:\windows\system32\ReinstallBackups\
0023\DriverFiles\nvwssr.dll
+ 2004-08-10 11:00:00 36,096 —-a-w c:\windows\system32\ReinstallBackups\
0024\DriverFiles\i386\intelppm.sys
+ 2004-08-10 11:00:00 36,096 —-a-w c:\windows\system32\ReinstallBackups\
0025\DriverFiles\i386\intelppm.sys
- 2004-08-10 11:00:00 60,416 —-a-w c:\windows\system32\remotepg.dll
+ 2008-04-14 00:12:04 60,416 —-a-w c:\windows\system32\remotepg.dll
- 2008-03-02 23:39:36 734,072 —-a-w c:\windows\system32\Restore\rstrlog.dat
+ 2008-07-09 12:51:09 306,840 —-a-w c:\windows\system32\Restore\rstrlog.dat
- 2004-08-10 11:00:00 380,416 —-a-w c:\windows\system32\Restore\rstrui.exe
+ 2008-04-14 00:12:33 380,416 —-a-w c:\windows\system32\Restore\rstrui.exe
- 2004-08-10 11:00:00 58,880 —-a-w c:\windows\system32\resutils.dll
+ 2008-04-14 00:12:04 58,880 —-a-w c:\windows\system32\resutils.dll
- 2004-08-10 11:00:00 13,824 —-a-w c:\windows\system32\rexec.exe
+ 2008-04-14 00:12:33 13,824 —-a-w c:\windows\system32\rexec.exe
+ 2008-04-14 00:12:04 290,304 ——w c:\windows\system32\rhttpaa.dll
- 2006-11-27 14:54:06 433,152 —-a-w c:\windows\system32\riched20.dll
+ 2008-04-14 00:12:04 433,664 —-a-w c:\windows\system32\riched20.dll
- 2007-01-12 00:40:03 185,952 —-a-w c:\windows\system32\rmoc3260.dll
+ 2008-05-25 03:44:19 185,944 —-a-w c:\windows\system32\rmoc3260.dll
- 2007-07-09 13:16:16 582,656 —-a-w c:\windows\system32\rpcrt4.dll
+ 2008-04-14 00:12:04 584,704 —-a-w c:\windows\system32\rpcrt4.dll
- 2005-07-26 04:39:49 397,824 —-a-w c:\windows\system32\rpcss.dll
+ 2008-04-14 00:12:04 399,360 —-a-w c:\windows\system32\rpcss.dll
- 2004-08-10 11:00:00 152,576 —-a-w c:\windows\system32\rsaenh.dll
+ 2008-04-13 17:37:57 208,384 —-a-w c:\windows\system32\rsaenh.dll
- 2004-08-10 11:00:00 14,848 —-a-w c:\windows\system32\rsh.exe
+ 2008-04-14 00:12:33 14,848 —-a-w c:\windows\system32\rsh.exe
- 2004-08-10 11:00:00 39,936 —-a-w c:\windows\system32\rshx32.dll
+ 2008-04-14 00:12:04 39,936 —-a-w c:\windows\system32\rshx32.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\rsmps.dll
+ 2008-04-14 00:12:04 18,944 —-a-w c:\windows\system32\rsmps.dll
- 2004-08-10 11:00:00 107,520 —-a-w c:\windows\system32\rsnotify.exe
+ 2008-04-14 00:12:33 107,520 —-a-w c:\windows\system32\rsnotify.exe
- 2004-08-10 11:00:00 90,112 —-a-w c:\windows\system32\rsvpsp.dll
+ 2008-04-14 00:12:04 92,672 —-a-w c:\windows\system32\rsvpsp.dll
- 2004-08-10 11:00:00 77,312 —-a-w c:\windows\system32\rtcshare.exe
+ 2008-04-14 00:12:33 77,312 —-a-w c:\windows\system32\rtcshare.exe
- 2004-08-10 11:00:00 31,744 —-a-w c:\windows\system32\rtipxmib.dll
+ 2008-04-14 00:12:04 31,744 —-a-w c:\windows\system32\rtipxmib.dll
- 2004-08-10 11:00:00 44,032 —-a-w c:\windows\system32\rtutils.dll
+ 2008-04-14 00:12:04 44,032 —-a-w c:\windows\system32\rtutils.dll
- 2004-08-10 11:00:00 33,280 —-a-w c:\windows\system32\rundll32.exe
+ 2008-04-14 00:12:33 33,280 —-a-w c:\windows\system32\rundll32.exe
- 2004-08-10 11:00:00 14,336 —-a-w c:\windows\system32\runonce.exe
+ 2008-04-14 00:12:33 14,336 —-a-w c:\windows\system32\runonce.exe
+ 2008-04-14 00:12:04 9,728 ——w c:\windows\system32\rwnh.dll
+ 2008-04-14 00:12:04 397,056 ——w c:\windows\system32\s3gnb.dll
- 2004-08-10 11:00:00 43,520 —-a-w c:\windows\system32\safrcdlg.dll
+ 2008-04-14 00:12:04 43,520 —-a-w c:\windows\system32\safrcdlg.dll
- 2004-08-10 11:00:00 29,696 —-a-w c:\windows\system32\safrdm.dll
+ 2008-04-14 00:12:04 29,696 —-a-w c:\windows\system32\safrdm.dll
- 2004-08-10 11:00:00 45,568 —-a-w c:\windows\system32\safrslv.dll
+ 2008-04-14 00:12:04 45,568 —-a-w c:\windows\system32\safrslv.dll
- 2004-08-10 11:00:00 64,000 —-a-w c:\windows\system32\samlib.dll
+ 2008-04-14 00:12:04 64,000 —-a-w c:\windows\system32\samlib.dll
- 2004-08-10 11:00:00 415,744 —-a-w c:\windows\system32\samsrv.dll
+ 2008-04-14 00:12:04 415,744 —-a-w c:\windows\system32\samsrv.dll
- 2004-08-10 11:00:00 13,312 —-a-w c:\windows\system32\savedump.exe
+ 2008-04-14 00:12:33 13,312 —-a-w c:\windows\system32\savedump.exe
- 2004-08-10 11:00:00 159,232 —-a-w c:\windows\system32\sbeio.dll
+ 2008-04-14 00:12:04 159,232 —-a-w c:\windows\system32\sbeio.dll
- 2004-08-10 11:00:00 69,632 —-a-w c:\windows\system32\scarddlg.dll
+ 2008-04-14 00:12:04 69,632 —-a-w c:\windows\system32\scarddlg.dll
- 2004-08-10 11:00:00 95,744 —-a-w c:\windows\system32\scardsvr.exe
+ 2008-04-14 00:12:33 95,744 —-a-w c:\windows\system32\scardsvr.exe
- 2004-08-10 11:00:00 171,008 —-a-w c:\windows\system32\sccsccp.dll
+ 2008-04-14 00:12:05 171,008 —-a-w c:\windows\system32\sccsccp.dll
- 2004-08-10 11:00:00 180,224 —-a-w c:\windows\system32\scecli.dll
+ 2008-04-14 00:12:05 181,248 —-a-w c:\windows\system32\scecli.dll
- 2004-08-10 11:00:00 313,856 —-a-w c:\windows\system32\scesrv.dll
+ 2008-04-14 00:12:05 314,880 —-a-w c:\windows\system32\scesrv.dll
- 2007-04-25 14:21:15 144,896 —-a-w c:\windows\system32\schannel.dll
+ 2008-04-14 00:12:05 144,384 —-a-w c:\windows\system32\schannel.dll
- 2004-08-10 11:00:00 190,976 —-a-w c:\windows\system32\schedsvc.dll
+ 2008-04-14 00:12:05 192,512 —-a-w c:\windows\system32\schedsvc.dll
- 2004-08-10 11:00:00 121,856 —-a-w c:\windows\system32\schtasks.exe
+ 2008-04-14 00:12:34 121,856 —-a-w c:\windows\system32\schtasks.exe
- 2004-08-10 11:00:00 20,992 —-a-w c:\windows\system32\sclgntfy.dll
+ 2008-04-14 00:12:05 20,480 —-a-w c:\windows\system32\sclgntfy.dll
- 2004-08-10 11:00:00 9,216 —-a-w c:\windows\system32\scrnsave.scr
+ 2008-04-14 00:12:43 9,216 —-a-w c:\windows\system32\scrnsave.scr
- 2004-08-10 11:00:00 159,744 —-a-w c:\windows\system32\scrobj.dll
+ 2008-05-09 10:53:39 180,224 —-a-w c:\windows\system32\scrobj.dll
- 2004-08-10 11:00:00 151,552 ——w c:\windows\system32\scrrun.dll
+ 2008-05-09 10:53:40 172,032 ——w c:\windows\system32\scrrun.dll
- 2004-08-10 11:00:00 77,312 —-a-w c:\windows\system32\sdbinst.exe
+ 2008-04-14 00:12:34 77,312 —-a-w c:\windows\system32\sdbinst.exe
- 2004-08-10 11:00:00 29,184 —-a-w c:\windows\system32\sdhcinst.dll
+ 2008-04-14 00:12:05 29,184 —-a-w c:\windows\system32\sdhcinst.dll
- 2004-08-10 11:00:00 18,432 —-a-w c:\windows\system32\secedit.exe
+ 2008-04-14 00:12:34 18,944 —-a-w c:\windows\system32\secedit.exe
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\seclogon.dll
+ 2008-04-14 00:12:05 18,944 —-a-w c:\windows\system32\seclogon.dll
- 2004-08-10 11:00:00 55,808 —-a-w c:\windows\system32\secur32.dll
+ 2008-04-14 00:12:05 56,320 —-a-w c:\windows\system32\secur32.dll
- 2004-08-10 11:00:00 5,632 —-a-w c:\windows\system32\security.dll
+ 2008-04-14 00:12:05 5,632 —-a-w c:\windows\system32\security.dll
- 2004-08-10 11:00:00 29,184 —-a-w c:\windows\system32\sendcmsg.dll
+ 2008-04-14 00:12:05 29,184 —-a-w c:\windows\system32\sendcmsg.dll
- 2004-08-10 11:00:00 55,296 —-a-w c:\windows\system32\sendmail.dll
+ 2008-04-14 00:12:05 54,784 —-a-w c:\windows\system32\sendmail.dll
- 2004-08-10 11:00:00 38,912 —-a-w c:\windows\system32\sens.dll
+ 2008-04-14 00:12:05 39,424 —-a-w c:\windows\system32\sens.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\sensapi.dll
+ 2008-04-14 00:12:05 7,168 —-a-w c:\windows\system32\sensapi.dll
- 2004-08-10 11:00:00 56,320 —-a-w c:\windows\system32\servdeps.dll
+ 2008-04-14 00:12:05 56,320 —-a-w c:\windows\system32\servdeps.dll
- 2004-08-10 11:00:00 108,032 —-a-w c:\windows\system32\services.exe
+ 2008-04-14 00:12:34 108,544 —-a-w c:\windows\system32\services.exe
- 2004-08-10 11:00:00 140,800 —-a-w c:\windows\system32\sessmgr.exe
+ 2008-04-14 00:12:34 141,312 —-a-w c:\windows\system32\sessmgr.exe
- 2004-08-10 11:00:00 31,232 —-a-w c:\windows\system32\sethc.exe
+ 2008-04-14 00:12:34 31,232 —-a-w c:\windows\system32\sethc.exe
- 2004-08-10 11:00:00 23,040 —-a-w c:\windows\system32\setup.exe
+ 2008-04-14 00:12:34 23,040 —-a-w c:\windows\system32\setup.exe
- 2004-08-10 11:00:00 259,584 —-a-w c:\windows\system32\Setup\comsetup.dll
+ 2008-04-14 00:11:51 274,944 —-a-w c:\windows\system32\Setup\comsetup.dll
- 2004-08-10 11:00:00 32,828 —-a-w c:\windows\system32\Setup\fp40ext.dll
+ 2008-04-14 00:11:53 32,828 —-a-w c:\windows\system32\Setup\fp40ext.dll
- 2004-08-10 11:00:00 132,608 —-a-w c:\windows\system32\Setup\fxsocm.dll
+ 2008-04-14 00:11:54 132,608 —-a-w c:\windows\system32\Setup\fxsocm.dll
- 2004-08-10 11:00:00 505,344 —-a-w c:\windows\system32\Setup\iis.dll
+ 2008-04-14 00:11:54 505,344 —-a-w c:\windows\system32\Setup\iis.dll
- 2004-08-10 11:00:00 115,712 —-a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2008-04-14 00:11:54 123,392 —-a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2008-04-14 00:11:56 8,192 —-a-w c:\windows\system32\Setup\koc.dll
- 2004-08-10 11:00:00 82,432 —-a-w c:\windows\system32\Setup\msdtcstp.dll
+ 2008-04-14 00:11:59 90,112 —-a-w c:\windows\system32\Setup\msdtcstp.dll
- 2004-08-10 11:00:00 15,360 —-a-w c:\windows\system32\Setup\msgrocm.dll
+ 2008-04-14 00:11:59 15,360 —-a-w c:\windows\system32\Setup\msgrocm.dll
- 2004-08-10 11:00:00 169,984 —-a-w c:\windows\system32\Setup\msmqocm.dll
+ 2008-04-14 00:12:00 170,496 —-a-w c:\windows\system32\Setup\msmqocm.dll
- 2004-08-10 11:00:00 77,312 —-a-w c:\windows\system32\Setup\netoc.dll
+ 2008-04-14 00:12:01 77,312 —-a-w c:\windows\system32\Setup\netoc.dll
- 2004-08-10 11:00:00 62,976 —-a-w c:\windows\system32\Setup\ntoc.dll
+ 2008-04-14 00:12:02 62,976 —-a-w c:\windows\system32\Setup\ntoc.dll
- 2004-08-10 11:00:00 15,872 —-a-w c:\windows\system32\Setup\ocgen.dll
+ 2008-04-14 00:12:02 15,360 —-a-w c:\windows\system32\Setup\ocgen.dll
- 2004-08-10 11:00:00 17,408 —-a-w c:\windows\system32\Setup\ocmsn.dll
+ 2008-04-14 00:12:02 17,408 —-a-w c:\windows\system32\Setup\ocmsn.dll
- 2004-08-10 11:00:00 101,376 —-a-w c:\windows\system32\Setup\setupqry.dll
+ 2008-04-14 00:12:05 101,376 —-a-w c:\windows\system32\Setup\setupqry.dll
- 2004-08-10 11:00:00 33,792 —-a-w c:\windows\system32\Setup\tabletoc.dll
+ 2008-04-14 00:12:07 33,792 —-a-w c:\windows\system32\Setup\tabletoc.dll
- 2004-08-10 11:00:00 121,856 —-a-w c:\windows\system32\Setup\tsoc.dll
+ 2008-04-14 00:12:07 130,048 —-a-w c:\windows\system32\Setup\tsoc.dll
- 2006-06-26 16:51:30 985,088 —-a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 10:42:06 985,088 —-a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 00:12:35 32,768 ——w c:\windows\system32\setupn.exe
- 2004-08-10 11:00:00 5,120 —-a-w c:\windows\system32\sfc.dll
+ 2008-04-14 00:12:05 5,120 —-a-w c:\windows\system32\sfc.dll
- 2004-08-10 11:00:00 140,288 —-a-w c:\windows\system32\sfc_os.dll
+ 2008-04-14 00:12:05 140,288 —-a-w c:\windows\system32\sfc_os.dll
- 2004-08-10 11:00:00 1,580,544 —-a-w c:\windows\system32\sfcfiles.dll
+ 2008-04-14 00:12:05 1,614,848 —-a-w c:\windows\system32\sfcfiles.dll
- 2004-08-10 11:00:00 549,376 —-a-w c:\windows\system32\shdoclc.dll
+ 2008-04-13 17:03:19 549,376 —-a-w c:\windows\system32\shdoclc.dll
- 2006-10-23 15:34:22 1,497,600 —-a-w c:\windows\system32\shdocvw.dll
+ 2008-04-14 00:12:05 1,499,136 —-a-w c:\windows\system32\shdocvw.dll
- 2007-10-26 03:34:01 8,460,288 —-a-w c:\windows\system32\shell32.dll
+ 2008-04-14 00:12:05 8,461,312 —-a-w c:\windows\system32\shell32.dll
- 2004-08-10 11:00:00 25,088 —-a-w c:\windows\system32\shfolder.dll
+ 2008-04-14 00:12:05 25,088 —-a-w c:\windows\system32\shfolder.dll
- 2004-08-10 11:00:00 68,096 —-a-w c:\windows\system32\shgina.dll
+ 2008-04-14 00:12:05 68,096 —-a-w c:\windows\system32\shgina.dll
- 2004-08-10 11:00:00 65,536 —-a-w c:\windows\system32\shimeng.dll
+ 2008-04-14 00:12:05 65,024 —-a-w c:\windows\system32\shimeng.dll
- 2004-08-10 11:00:00 438,272 —-a-w c:\windows\system32\shimgvw.dll
+ 2008-04-14 00:12:05 438,272 —-a-w c:\windows\system32\shimgvw.dll
- 2006-10-23 15:34:22 474,112 —-a-w c:\windows\system32\shlwapi.dll
+ 2008-04-14 00:12:05 474,112 —-a-w c:\windows\system32\shlwapi.dll
- 2004-08-10 11:00:00 151,552 —-a-w c:\windows\system32\shmedia.dll
+ 2008-04-14 00:12:05 152,064 —-a-w c:\windows\system32\shmedia.dll
- 2004-08-10 11:00:00 42,496 —-a-w c:\windows\system32\shmgrate.exe
+ 2008-04-14 00:12:35 45,056 —-a-w c:\windows\system32\shmgrate.exe
- 2004-08-10 11:00:00 77,824 —-a-w c:\windows\system32\shrpubw.exe
+ 2008-04-14 00:12:35 77,824 —-a-w c:\windows\system32\shrpubw.exe
- 2004-08-10 11:00:00 27,648 —-a-w c:\windows\system32\shscrap.dll
+ 2008-04-14 00:12:05 27,648 —-a-w c:\windows\system32\shscrap.dll
- 2006-12-19 21:52:18 134,656 —-a-w c:\windows\system32\shsvcs.dll
+ 2008-04-14 00:12:05 135,168 —-a-w c:\windows\system32\shsvcs.dll
- 2004-08-10 11:00:00 19,456 —-a-w c:\windows\system32\shutdown.exe
+ 2008-04-14 00:12:35 19,456 —-a-w c:\windows\system32\shutdown.exe
- 2004-08-10 11:00:00 13,312 —-a-w c:\windows\system32\sigtab.dll
+ 2008-04-14 00:12:05 13,312 —-a-w c:\windows\system32\sigtab.dll
- 2004-08-10 11:00:00 70,144 —-a-w c:\windows\system32\sigverif.exe
+ 2008-04-14 00:12:35 70,144 —-a-w c:\windows\system32\sigverif.exe
- 2004-08-10 11:00:00 26,112 —-a-w c:\windows\system32\skeys.exe
+ 2008-04-14 00:12:35 26,112 —-a-w c:\windows\system32\skeys.exe
- 2004-08-10 11:00:00 25,088 —-a-w c:\windows\system32\slayerxp.dll
+ 2008-04-14 00:12:06 25,088 —-a-w c:\windows\system32\slayerxp.dll
- 2004-08-10 11:00:00 98,304 —-a-w c:\windows\system32\slbiop.dll
+ 2008-04-14 00:12:06 98,304 —-a-w c:\windows\system32\slbiop.dll
+ 2008-04-14 00:12:06 73,832 ——w c:\windows\system32\slcoinst.dll
+ 2008-04-14 00:12:06 286,792 ——w c:\windows\system32\slextspk.dll
+ 2008-04-14 00:12:06 188,508 ——w c:\windows\system32\slgen.dll
+ 2008-04-14 00:12:35 32,866 ——w c:\windows\system32\slrundll.exe
+ 2008-04-14 00:12:35 73,796 ——w c:\windows\system32\slserv.exe
- 2004-08-10 11:00:00 8,192 —-a-w c:\windows\system32\smbinst.exe
+ 2008-04-14 00:12:35 8,192 —-a-w c:\windows\system32\smbinst.exe
- 2004-08-10 11:00:00 363,008 —-a-w c:\windows\system32\smlogcfg.dll
+ 2008-04-14 00:12:06 362,496 —-a-w c:\windows\system32\smlogcfg.dll
- 2004-08-10 11:00:00 89,600 —-a-w c:\windows\system32\smlogsvc.exe
+ 2008-04-14 00:12:35 89,600 —-a-w c:\windows\system32\smlogsvc.exe
- 2004-08-10 11:00:00 50,688 —-a-w c:\windows\system32\smss.exe
+ 2008-04-14 00:12:36 50,688 —-a-w c:\windows\system32\smss.exe
+ 2008-04-14 00:12:06 10,752 ——w c:\windows\system32\smtpapi.dll
- 2004-08-10 11:00:00 131,584 —-a-w c:\windows\system32\sndrec32.exe
+ 2008-04-14 00:12:36 131,584 —-a-w c:\windows\system32\sndrec32.exe
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\snmpapi.dll
+ 2008-04-14 00:12:06 18,944 —-a-w c:\windows\system32\snmpapi.dll
- 2004-08-10 11:00:00 182,272 —-a-w c:\windows\system32\snmpsnap.dll
+ 2008-04-14 00:12:06 182,272 —-a-w c:\windows\system32\snmpsnap.dll
+ 2008-07-19 03:10:20 36,552 —-a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-10-16 20:08:58 34,328 —-a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
+ 2008-07-19 03:10:40 45,768 —-a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
+ 2008-10-16 20:09:44 43,544 —-a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll
- 2004-08-10 11:00:00 23,552 —-a-w c:\windows\system32\sort.exe
+ 2008-04-14 00:12:36 24,576 —-a-w c:\windows\system32\sort.exe
+ 2004-08-10 11:00:00 1,744 —-a-w c:\windows\system32\sound.drv
+ 2008-04-14 00:12:36 7,680 —-a-w c:\windows\system32\spdwnwxp.exe
- 2004-08-10 11:00:00 538,624 —-a-w c:\windows\system32\spider.exe
+ 2008-04-14 00:12:36 538,624 —-a-w c:\windows\system32\spider.exe
- 2004-08-10 11:00:00 12,800 —-a-w c:\windows\system32\spiisupd.exe
+ 2008-04-13 18:43:31 12,800 —-a-w c:\windows\system32\spiisupd.exe
- 2006-10-16 22:10:58 14,640 ——w c:\windows\system32\spmsg.dll
+ 2007-07-27 15:41:40 16,760 ——w c:\windows\system32\spmsg.dll
- 2004-08-10 11:00:00 11,776 —-a-w c:\windows\system32\spnpinst.exe
+ 2008-04-14 10:42:38 11,264 —-a-w c:\windows\system32\spnpinst.exe
- 2004-08-10 11:00:00 452,096 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSAPI.DLL
+ 2008-04-14 00:11:53 451,584 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsapi.dll
- 2004-08-10 11:00:00 27,136 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSDRV.DLL
+ 2008-04-14 00:11:54 26,624 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsdrv.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSRES.DLL
+ 2008-04-14 00:09:33 6,656 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsres.dll
- 2004-08-10 11:00:00 397,312 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSTIFF.DLL
+ 2008-04-14 00:11:54 397,312 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxstiff.dll
- 2004-08-10 11:00:00 154,112 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSUI.DLL
+ 2008-04-14 00:11:54 154,112 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxsui.dll
- 2004-08-10 11:00:00 192,512 —-a-w c:\windows\system32\spool\drivers\w32x86\3\FXSWZRD.DLL
+ 2008-04-14 00:11:54 192,512 —-a-w c:\windows\system32\spool\drivers\w32x86\3\fxswzrd.dll
- 2002-04-09 23:02:40 86,016 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpof1607.dll
+ 2002-04-10 00:02:40 86,016 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpof1607.dll
- 2002-03-18 19:03:56 16,966 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpofxv07.dat
+ 2002-03-18 20:03:56 16,966 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpofxv07.dat
- 2002-03-18 19:03:54 27,998 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpoprv07.dat
+ 2002-03-18 20:03:54 27,998 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpoprv07.dat
- 2001-10-31 17:39:34 118,784 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpz2ku04.dll
+ 2001-10-31 18:39:34 118,784 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpz2ku04.dll
- 2001-10-31 07:59:02 368,640 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzeng04.exe
+ 2001-10-31 08:59:02 368,640 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzeng04.exe
- 2001-10-31 07:59:06 757,760 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzimb04.dll
+ 2001-10-31 08:59:06 757,760 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzimb04.dll
- 2001-10-31 07:59:10 196,608 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzime04.dll
+ 2001-10-31 08:59:10 196,608 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzime04.dll
+ 2007-08-09 07:27:52 73,728 —-a-w c:\windows\system32\spool\drivers\w32x86\3\HPZIPM12.EXE
- 2001-10-31 07:59:12 167,936 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzjui04.dll
+ 2001-10-31 08:59:12 167,936 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzjui04.dll
- 2001-10-31 07:58:06 20,608 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzntk04.dll
+ 2001-10-31 08:58:06 20,608 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzntk04.dll
- 2001-10-31 07:58:08 270,336 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzntp04.dll
+ 2001-10-31 08:58:08 270,336 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzntp04.dll
- 2001-10-31 07:58:10 114,688 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzntu04.dll
+ 2001-10-31 08:58:10 114,688 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzntu04.dll
- 2001-10-31 07:59:14 135,168 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzpcl04.dll
+ 2001-10-31 08:59:14 135,168 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzpcl04.dll
- 2001-10-31 07:51:34 3,842,048 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzr3204.dll
+ 2001-10-31 08:51:34 3,842,048 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzr3204.dll
- 2001-10-31 07:59:18 106,496 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzres04.dll
+ 2001-10-31 08:59:18 106,496 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzres04.dll
- 2001-10-31 07:51:46 192,512 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzrpp04.dll
+ 2001-10-31 08:51:46 192,512 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpzrpp04.dll
- 2001-10-31 07:59:22 405,504 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpztbx04.exe
+ 2001-10-31 08:59:22 405,504 —-a-w c:\windows\system32\spool\drivers\w32x86\3\hpztbx04.exe
- 2002-07-22 18:05:04 129,024 —-a-w c:\windows\system32\spool\drivers\w32x86\3\PS5UI.DLL
+ 2008-04-14 00:12:03 728,576 —-a-w c:\windows\system32\spool\drivers\w32x86\3\ps5ui.dll
- 2002-07-22 18:05:04 455,168 —-a-w c:\windows\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL
+ 2008-04-14 00:12:03 543,232 —-a-w c:\windows\system32\spool\drivers\w32x86\3\pscript5.dll
- 2007-03-23 02:24:06 376,832 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
+ 2008-04-14 00:12:07 373,248 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
- 2007-03-23 03:03:54 749,568 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
+ 2008-04-14 00:12:07 744,448 —-a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
- 2004-08-10 11:00:00 74,752 —-a-w c:\windows\system32\spoolss.dll
+ 2008-04-14 00:12:06 75,264 —-a-w c:\windows\system32\spoolss.dll
- 2005-06-10 23:53:32 57,856 —-a-w c:\windows\system32\spoolsv.exe
+ 2008-04-14 00:12:36 57,856 —-a-w c:\windows\system32\spoolsv.exe
+ 2007-07-25 06:38:35 2,951 —-a-w c:\windows\system32\SpoonUninstall-dBpoweramp FLAC Codec.dat
- 2006-10-16 22:10:58 23,856 —-a-w c:\windows\system32\spupdsvc.exe
+ 2007-08-11 01:46:18 26,488 —-a-w c:\windows\system32\spupdsvc.exe
+ 2008-04-14 00:12:36 20,992 ——w c:\windows\system32\spupdwxp.exe
- 2004-08-10 11:00:00 442,368 —-a-w c:\windows\system32\sqlsrv32.dll
+ 2008-04-14 00:12:06 442,368 —-a-w c:\windows\system32\sqlsrv32.dll
- 2004-08-10 11:00:00 180,800 —-a-w c:\windows\system32\sqlunirl.dll
+ 2008-04-14 00:12:06 180,800 —-a-w c:\windows\system32\sqlunirl.dll
- 2004-08-10 11:00:00 67,584 —-a-w c:\windows\system32\srclient.dll
+ 2008-04-14 00:12:07 67,584 —-a-w c:\windows\system32\srclient.dll
- 2004-08-10 11:00:00 239,104 —-a-w c:\windows\system32\srrstr.dll
+ 2008-04-14 00:12:07 239,104 —-a-w c:\windows\system32\srrstr.dll
- 2004-08-10 11:00:00 170,496 —-a-w c:\windows\system32\srsvc.dll
+ 2008-04-14 00:12:07 171,008 —-a-w c:\windows\system32\srsvc.dll
- 2004-12-07 19:32:34 96,768 —-a-w c:\windows\system32\srvsvc.dll
+ 2008-04-14 00:12:07 96,768 —-a-w c:\windows\system32\srvsvc.dll
- 2004-08-10 11:00:00 704,512 —-a-w c:\windows\system32\ss3dfo.scr
+ 2008-04-14 00:12:43 704,512 —-a-w c:\windows\system32\ss3dfo.scr
- 2004-08-10 11:00:00 19,968 —-a-w c:\windows\system32\ssbezier.scr
+ 2008-04-14 00:12:43 19,968 —-a-w c:\windows\system32\ssbezier.scr
- 2004-08-10 11:00:00 34,816 —-a-w c:\windows\system32\ssdpapi.dll
+ 2008-04-14 00:12:07 34,816 —-a-w c:\windows\system32\ssdpapi.dll
- 2004-08-10 11:00:00 71,680 —-a-w c:\windows\system32\ssdpsrv.dll
+ 2008-04-14 00:12:07 71,680 —-a-w c:\windows\system32\ssdpsrv.dll
- 2004-08-10 11:00:00 393,216 —-a-w c:\windows\system32\ssflwbox.scr
+ 2008-04-14 00:12:43 393,216 —-a-w c:\windows\system32\ssflwbox.scr
- 2007-12-11 22:34:44 200,704 —-a-w c:\windows\system32\ssldivx.dll
+ 2008-09-19 21:55:58 200,704 —-a-w c:\windows\system32\ssldivx.dll
- 2004-08-10 11:00:00 20,992 —-a-w c:\windows\system32\ssmarque.scr
+ 2008-04-14 00:12:44 20,992 —-a-w c:\windows\system32\ssmarque.scr
- 2004-08-10 11:00:00 47,104 —-a-w c:\windows\system32\ssmypics.scr
+ 2008-04-14 00:12:44 47,104 —-a-w c:\windows\system32\ssmypics.scr
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\ssmyst.scr
+ 2008-04-14 00:12:44 18,944 —-a-w c:\windows\system32\ssmyst.scr
- 2004-08-10 11:00:00 610,304 —-a-w c:\windows\system32\sspipes.scr
+ 2008-04-14 00:12:44 610,304 —-a-w c:\windows\system32\sspipes.scr
- 2004-08-10 11:00:00 14,336 —-a-w c:\windows\system32\ssstars.scr
+ 2008-04-14 00:12:44 14,336 —-a-w c:\windows\system32\ssstars.scr
- 2004-08-10 11:00:00 679,936 —-a-w c:\windows\system32\sstext3d.scr
+ 2008-04-14 00:12:44 679,936 —-a-w c:\windows\system32\sstext3d.scr
- 2004-08-10 11:00:00 54,272 —-a-w c:\windows\system32\stclient.dll
+ 2008-04-14 00:12:07 59,392 —-a-w c:\windows\system32\stclient.dll
- 2004-08-10 11:00:00 67,584 —-a-w c:\windows\system32\sti.dll
+ 2008-04-14 00:12:07 68,096 —-a-w c:\windows\system32\sti.dll
- 2004-08-10 11:00:00 136,704 —-a-w c:\windows\system32\sti_ci.dll
+ 2008-04-14 00:12:07 136,704 —-a-w c:\windows\system32\sti_ci.dll
- 2004-08-10 11:00:00 14,848 —-a-w c:\windows\system32\stimon.exe
+ 2008-04-14 00:12:36 14,848 —-a-w c:\windows\system32\stimon.exe
- 2004-08-10 11:00:00 121,856 —-a-w c:\windows\system32\stobject.dll
+ 2008-04-14 00:12:07 121,856 —-a-w c:\windows\system32\stobject.dll
- 2004-08-04 06:56:46 74,752 —-a-w c:\windows\system32\storprop.dll
+ 2008-04-14 00:12:07 74,752 —-a-w c:\windows\system32\storprop.dll
- 2006-08-21 15:52:08 246,814 —-a-w c:\windows\system32\strmdll.dll
+ 2008-10-03 10:02:42 247,326 —-a-w c:\windows\system32\strmdll.dll
- 2004-08-10 11:00:00 75,776 —-a-w c:\windows\system32\strmfilt.dll
+ 2008-04-14 00:12:07 75,776 —-a-w c:\windows\system32\strmfilt.dll
- 2004-08-10 11:00:00 14,336 —-a-w c:\windows\system32\svchost.exe
+ 2009-01-05 03:26:27 14,336 —-a-w c:\windows\system32\svchost.exe
- 2006-10-19 13:56:32 713,216 —-a-w c:\windows\system32\sxs.dll
+ 2008-04-14 00:12:07 713,216 —-a-w c:\windows\system32\sxs.dll
- 2004-08-10 11:00:00 57,856 —-a-w c:\windows\system32\synceng.dll
+ 2008-04-14 00:12:07 57,856 —-a-w c:\windows\system32\synceng.dll
- 2004-08-10 11:00:00 191,488 —-a-w c:\windows\system32\syncui.dll
+ 2008-04-14 00:12:07 191,488 —-a-w c:\windows\system32\syncui.dll
- 2004-08-10 11:00:00 105,984 —-a-w c:\windows\system32\sysocmgr.exe
+ 2008-04-14 00:12:37 106,496 —-a-w c:\windows\system32\sysocmgr.exe
- 2004-08-10 11:00:00 984,576 —-a-w c:\windows\system32\syssetup.dll
+ 2008-04-14 00:12:07 990,208 —-a-w c:\windows\system32\syssetup.dll
- 2004-08-10 11:00:00 68,096 —-a-w c:\windows\system32\systeminfo.exe
+ 2008-04-14 00:12:36 71,680 —-a-w c:\windows\system32\systeminfo.exe
- 2005-10-17 21:14:46 118,272 —-a-w c:\windows\system32\t2embed.dll
+ 2008-04-14 00:12:07 117,760 —-a-w c:\windows\system32\t2embed.dll
- 2004-08-10 11:00:00 858,624 —-a-w c:\windows\system32\tapi3.dll
+ 2008-04-14 00:12:07 858,624 —-a-w c:\windows\system32\tapi3.dll
- 2004-08-10 11:00:00 181,760 —-a-w c:\windows\system32\tapi32.dll
+ 2008-04-14 00:12:07 181,760 —-a-w c:\windows\system32\tapi32.dll
- 2005-07-08 16:27:56 249,344 —-a-w c:\windows\system32\tapisrv.dll
+ 2008-04-14 00:12:07 249,856 —-a-w c:\windows\system32\tapisrv.dll
- 2004-08-10 11:00:00 72,192 —-a-w c:\windows\system32\taskkill.exe
+ 2008-04-14 00:12:37 76,288 —-a-w c:\windows\system32\taskkill.exe
- 2004-08-10 11:00:00 72,192 —-a-w c:\windows\system32\tasklist.exe
+ 2008-04-14 00:12:37 77,824 —-a-w c:\windows\system32\tasklist.exe
- 2004-08-10 11:00:00 135,680 —-a-w c:\windows\system32\taskmgr.exe
+ 2008-04-14 00:12:37 135,680 —-a-w c:\windows\system32\taskmgr.exe
- 2004-08-10 11:00:00 14,848 —-a-w c:\windows\system32\tcpmib.dll
+ 2008-04-14 00:12:07 14,848 —-a-w c:\windows\system32\tcpmib.dll
- 2004-08-10 11:00:00 45,568 —-a-w c:\windows\system32\tcpmon.dll
+ 2008-04-14 00:12:07 45,568 —-a-w c:\windows\system32\tcpmon.dll
- 2004-08-10 11:00:00 45,568 —-a-w c:\windows\system32\tcpmonui.dll
+ 2008-04-14 00:12:07 45,568 —-a-w c:\windows\system32\tcpmonui.dll
- 2005-05-10 23:45:48 75,776 —-a-w c:\windows\system32\telnet.exe
+ 2008-04-14 00:12:37 75,776 —-a-w c:\windows\system32\telnet.exe
- 2004-08-10 11:00:00 358,400 —-a-w c:\windows\system32\termmgr.dll
+ 2008-04-14 00:12:07 358,400 —-a-w c:\windows\system32\termmgr.dll
- 2005-03-10 01:49:52 295,424 —-a-w c:\windows\system32\termsrv.dll
+ 2008-04-14 00:12:07 295,424 —-a-w c:\windows\system32\termsrv.dll
- 2004-08-10 11:00:00 385,536 —-a-w c:\windows\system32\themeui.dll
+ 2008-04-14 00:12:07 385,536 —-a-w c:\windows\system32\themeui.dll
- 2004-08-10 11:00:00 61,440 —-a-w c:\windows\system32\tlntadmn.exe
+ 2008-04-14 00:12:37 61,440 —-a-w c:\windows\system32\tlntadmn.exe
- 2004-08-10 11:00:00 78,336 —-a-w c:\windows\system32\tlntsess.exe
+ 2008-04-14 00:12:37 78,336 —-a-w c:\windows\system32\tlntsess.exe
- 2004-08-10 11:00:00 73,216 —-a-w c:\windows\system32\tlntsvr.exe
+ 2008-04-14 00:12:38 73,216 —-a-w c:\windows\system32\tlntsvr.exe
- 2004-08-10 11:00:00 7,168 —-a-w c:\windows\system32\tlntsvrp.dll
+ 2008-04-14 00:12:07 7,168 —-a-w c:\windows\system32\tlntsvrp.dll
- 2004-08-10 11:00:00 347,136 —-a-w c:\windows\system32\tourstart.exe
+ 2008-04-14 00:12:38 347,136 —-a-w c:\windows\system32\tourstart.exe
- 2004-08-10 11:00:00 259,584 —-a-w c:\windows\system32\tracerpt.exe
+ 2008-04-14 00:12:38 259,584 —-a-w c:\windows\system32\tracerpt.exe
- 2004-08-10 11:00:00 12,288 —-a-w c:\windows\system32\tracert.exe
+ 2008-04-14 00:12:38 12,288 —-a-w c:\windows\system32\tracert.exe
- 2004-08-10 11:00:00 11,264 —-a-w c:\windows\system32\tree.com
+ 2008-04-14 00:12:42 12,800 —-a-w c:\windows\system32\tree.com
- 2004-08-10 11:00:00 90,624 —-a-w c:\windows\system32\trkwks.dll
+ 2008-04-14 00:12:07 90,112 —-a-w c:\windows\system32\trkwks.dll
- 2004-08-10 11:00:00 93,696 —-a-w c:\windows\system32\tscfgwmi.dll
+ 2008-04-14 00:12:07 93,696 —-a-w c:\windows\system32\tscfgwmi.dll
- 2004-08-10 11:00:00 12,168 —-a-w c:\windows\system32\tsddd.dll
+ 2008-04-14 00:13:21 12,168 —-a-w c:\windows\system32\tsddd.dll
+ 2008-04-14 00:12:07 53,248 ——w c:\windows\system32\tsgqec.dll
+ 2008-04-14 00:12:07 50,688 ——w c:\windows\system32\tspkg.dll
- 2004-08-10 11:00:00 44,032 —-a-w c:\windows\system32\twext.dll
+ 2008-04-14 00:12:07 57,856 —-a-w c:\windows\system32\twext.dll
- 2005-07-26 04:39:49 101,376 —-a-w c:\windows\system32\txflog.dll
+ 2008-04-14 00:12:07 101,376 —-a-w c:\windows\system32\txflog.dll
- 2007-11-13 11:31:11 60,416 ——w c:\windows\system32\tzchange.exe
+ 2008-10-23 10:06:59 62,976 ——w c:\windows\system32\tzchange.exe
- 2004-08-10 11:00:00 25,600 —-a-w c:\windows\system32\udhisapi.dll
+ 2008-04-14 00:12:07 26,624 —-a-w c:\windows\system32\udhisapi.dll
- 2004-08-10 11:00:00 275,456 —-a-w c:\windows\system32\ulib.dll
+ 2008-04-14 00:12:07 275,456 —-a-w c:\windows\system32\ulib.dll
- 2006-10-04 13:33:38 35,840 —-a-w c:\windows\system32\umandlg.dll
+ 2008-04-14 00:12:07 35,840 —-a-w c:\windows\system32\umandlg.dll
- 2005-08-23 03:35:42 123,392 —-a-w c:\windows\system32\umpnpmgr.dll
+ 2008-04-14 00:12:07 123,392 —-a-w c:\windows\system32\umpnpmgr.dll
- 2004-08-10 11:00:00 74,240 —-a-w c:\windows\system32\unimdmat.dll
+ 2008-04-14 00:12:07 74,240 —-a-w c:\windows\system32\unimdmat.dll
- 2004-08-10 11:00:00 13,824 —-a-w c:\windows\system32\uniplat.dll
+ 2008-04-14 00:12:07 13,824 —-a-w c:\windows\system32\uniplat.dll
- 2004-08-10 11:00:00 316,416 —-a-w c:\windows\system32\untfs.dll
+ 2008-04-14 00:12:07 316,416 —-a-w c:\windows\system32\untfs.dll
- 2004-08-10 11:00:00 132,608 —-a-w c:\windows\system32\upnp.dll
+ 2008-04-14 00:12:08 133,632 —-a-w c:\windows\system32\upnp.dll
- 2004-08-10 11:00:00 16,896 —-a-w c:\windows\system32\upnpcont.exe
+ 2008-04-14 00:12:38 16,896 —-a-w c:\windows\system32\upnpcont.exe
- 2007-02-05 20:17:02 185,344 —-a-w c:\windows\system32\upnphost.dll
+ 2008-04-14 00:12:08 185,856 —-a-w c:\windows\system32\upnphost.dll
- 2004-08-10 11:00:00 239,616 —-a-w c:\windows\system32\upnpui.dll
+ 2008-04-14 00:12:08 239,616 —-a-w c:\windows\system32\upnpui.dll
- 2004-08-10 11:00:00 18,432 —-a-w c:\windows\system32\ups.exe
+ 2008-04-14 00:12:38 18,432 —-a-w c:\windows\system32\ups.exe
- 2007-12-07 02:21:48 105,984 —-a-w c:\windows\system32\url.dll
+ 2008-10-16 20:38:39 105,984 —-a-w c:\windows\system32\url.dll
- 2007-12-07 02:21:48 1,159,680 —-a-w c:\windows\system32\urlmon.dll
+ 2008-10-16 20:38:39 1,160,192 —-a-w c:\windows\system32\urlmon.dll
- 2004-08-10 11:00:00 16,896 —-a-w c:\windows\system32\usbmon.dll
+ 2008-04-14 00:12:08 16,896 —-a-w c:\windows\system32\usbmon.dll
- 2004-08-04 06:56:48 74,240 —-a-w c:\windows\system32\usbui.dll
+ 2008-04-14 00:12:08 74,240 —-a-w c:\windows\system32\usbui.dll
- 2007-03-08 15:36:28 577,536 —-a-w c:\windows\system32\user32.dll
+ 2008-04-14 00:12:08 578,560 —-a-w c:\windows\system32\user32.dll
- 2004-08-10 11:00:00 723,456 —-a-w c:\windows\system32\userenv.dll
+ 2008-04-14 00:12:08 727,040 —-a-w c:\windows\system32\userenv.dll
- 2004-08-10 11:00:00 24,576 —-a-w c:\windows\system32\userinit.exe
+ 2008-04-14 00:12:38 26,112 —-a-w c:\windows\system32\userinit.exe
+ 2008-04-13 16:44:16 17,920 ——w c:\windows\system32\usmt\cobramsg.dll
- 2004-08-10 11:00:00 123,904 —-a-w c:\windows\system32\usmt\guitrn.dll
+ 2008-04-14 00:11:54 133,120 —-a-w c:\windows\system32\usmt\guitrn.dll
+ 2008-04-14 00:11:54 115,200 ——w c:\windows\system32\usmt\guitrna.dll
- 2004-08-10 11:00:00 4,096 —-a-w c:\windows\system32\usmt\iconlib.dll
+ 2008-04-13 16:44:29 2,560 —-a-w c:\windows\system32\usmt\iconlib.dll
- 2004-08-10 11:00:00 19,968 —-a-w c:\windows\system32\usmt\log.dll
+ 2008-04-14 00:11:56 19,968 —-a-w c:\windows\system32\usmt\log.dll
- 2004-08-10 11:00:00 201,216 —-a-w c:\windows\system32\usmt\migism.dll
+ 2008-04-14 00:11:57 274,432 —-a-w c:\windows\system32\usmt\migism.dll
+ 2008-04-14 00:11:57 261,120 ——w c:\windows\system32\usmt\migisma.dll
- 2004-08-10 11:00:00 103,424 —-a-w c:\windows\system32\usmt\migload.exe
+ 2008-04-14 00:12:25 103,936 —-a-w c:\windows\system32\usmt\migload.exe
- 2004-08-10 11:00:00 240,128 —-a-w c:\windows\system32\usmt\migwiz.exe
+ 2008-04-14 00:12:25 245,248 —-a-w c:\windows\system32\usmt\migwiz.exe
+ 2008-04-14 00:12:25 241,152 ——w c:\windows\system32\usmt\migwiza.exe
- 2004-08-10 11:00:00 202,752 —-a-w c:\windows\system32\usmt\script.dll
+ 2008-04-14 00:12:05 215,552 —-a-w c:\windows\system32\usmt\script.dll
+ 2008-04-14 00:12:05 199,680 ——w c:\windows\system32\usmt\scripta.dll
- 2004-08-10 11:00:00 168,960 —-a-w c:\windows\system32\usmt\sysmod.dll
+ 2008-04-14 00:12:07 193,024 —-a-w c:\windows\system32\usmt\sysmod.dll
+ 2008-04-14 00:12:07 173,568 ——w c:\windows\system32\usmt\sysmoda.dll
- 2004-08-10 11:00:00 406,528 —-a-w c:\windows\system32\usp10.dll
+ 2008-04-14 00:12:08 406,016 —-a-w c:\windows\system32\usp10.dll
- 2006-10-04 08:48:37 50,176 —-a-w c:\windows\system32\utilman.exe
+ 2008-04-14 00:12:38 50,176 —-a-w c:\windows\system32\utilman.exe
- 2004-08-10 11:00:00 218,624 —-a-w c:\windows\system32\uxtheme.dll
+ 2008-04-14 00:12:08 218,624 —-a-w c:\windows\system32\uxtheme.dll
- 2004-08-10 11:00:00 30,749 —-a-w c:\windows\system32\vbajet32.dll
+ 2008-04-14 00:12:08 30,749 —-a-w c:\windows\system32\vbajet32.dll
- 2006-11-08 03:03:36 413,696 —-a-w c:\windows\system32\vbscript.dll
+ 2008-05-09 10:53:40 430,080 —-a-w c:\windows\system32\vbscript.dll
- 2004-08-10 11:00:00 26,112 —-a-w c:\windows\system32\vdmdbg.dll
+ 2008-04-14 00:12:08 26,112 —-a-w c:\windows\system32\vdmdbg.dll
- 2004-08-10 11:00:00 51,712 —-a-w c:\windows\system32\vdmredir.dll
+ 2008-04-14 00:12:08 51,712 —-a-w c:\windows\system32\vdmredir.dll
- 2006-03-17 00:38:01 28,672 ——w c:\windows\system32\verclsid.exe
+ 2008-04-14 00:12:38 28,672 ——w c:\windows\system32\verclsid.exe
- 2004-08-10 11:00:00 13,312 —-a-w c:\windows\system32\verifier.dll
+ 2008-04-14 00:12:08 26,624 —-a-w c:\windows\system32\verifier.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\version.dll
+ 2008-04-14 00:12:08 18,944 —-a-w c:\windows\system32\version.dll
- 2004-08-04 06:56:48 53,760 —-a-w c:\windows\system32\vfwwdm32.dll
+ 2008-04-14 00:12:08 53,760 —-a-w c:\windows\system32\vfwwdm32.dll
+ 2004-08-10 11:00:00 2,176 —-a-w c:\windows\system32\vga.drv
- 2004-08-10 11:00:00 430,592 —-a-w c:\windows\system32\vssapi.dll
+ 2008-04-14 00:12:08 430,592 —-a-w c:\windows\system32\vssapi.dll
- 2004-08-10 11:00:00 289,792 —-a-w c:\windows\system32\vssvc.exe
+ 2008-04-14 00:12:38 289,792 —-a-w c:\windows\system32\vssvc.exe
- 2004-08-10 11:00:00 174,592 —-a-w c:\windows\system32\w32time.dll
+ 2008-04-14 00:12:08 175,104 —-a-w c:\windows\system32\w32time.dll
- 2004-08-10 11:00:00 15,872 —-a-w c:\windows\system32\w3ssl.dll
+ 2008-04-14 00:12:08 15,872 —-a-w c:\windows\system32\w3ssl.dll
- 2004-08-10 11:00:00 17,664 —-a-w c:\windows\system32\watchdog.sys
+ 2008-04-13 18:44:59 17,664 —-a-w c:\windows\system32\watchdog.sys
- 2004-08-10 11:00:00 208,896 —-a-w c:\windows\system32\wavemsp.dll
+ 2008-04-14 00:12:08 215,552 —-a-w c:\windows\system32\wavemsp.dll
- 2004-08-10 11:00:00 1,352,192 —-a-w c:\windows\system32\wbem\cimwin32.dll
+ 2008-04-14 00:11:50 1,358,848 —-a-w c:\windows\system32\wbem\cimwin32.dll
- 2004-08-10 11:00:00 45,568 —-a-w c:\windows\system32\wbem\CmdEvTgProv.dll
+ 2008-04-14 00:11:53 45,056 —-a-w c:\windows\system32\wbem\cmdevtgprov.dll
- 2004-08-10 11:00:00 247,808 —-a-w c:\windows\system32\wbem\esscli.dll
+ 2008-04-14 00:11:53 247,808 —-a-w c:\windows\system32\wbem\esscli.dll
- 2004-08-10 11:00:00 22,016 —-a-w c:\windows\system32\wbem\evntrprv.dll
+ 2008-04-14 00:11:53 21,504 —-a-w c:\windows\system32\wbem\evntrprv.dll
- 2004-08-10 11:00:00 472,064 —-a-w c:\windows\system32\wbem\fastprox.dll
+ 2008-04-14 00:11:53 472,064 —-a-w c:\windows\system32\wbem\fastprox.dll
- 2004-08-10 11:00:00 185,856 —-a-w c:\windows\system32\wbem\framedyn.dll
+ 2008-04-14 00:11:53 185,344 —-a-w c:\windows\system32\wbem\framedyn.dll
- 2004-08-10 11:00:00 24,576 —-a-w c:\windows\system32\wbem\krnlprov.dll
+ 2008-04-14 00:11:56 24,576 —-a-w c:\windows\system32\wbem\krnlprov.dll
- 2004-08-10 11:00:00 16,384 —-a-w c:\windows\system32\wbem\mofcomp.exe
+ 2008-04-14 00:12:26 16,384 —-a-w c:\windows\system32\wbem\mofcomp.exe
- 2004-08-10 11:00:00 123,904 —-a-w c:\windows\system32\wbem\mofd.dll
+ 2008-04-14 00:11:57 123,904 —-a-w c:\windows\system32\wbem\mofd.dll
- 2004-08-10 11:00:00 47,104 —-a-w c:\windows\system32\wbem\ncprov.dll
+ 2008-04-14 00:12:01 47,104 —-a-w c:\windows\system32\wbem\ncprov.dll
- 2004-08-10 11:00:00 212,992 —-a-w c:\windows\system32\wbem\ntevt.dll
+ 2008-04-14 00:12:02 212,992 —-a-w c:\windows\system32\wbem\ntevt.dll
- 2004-08-10 11:00:00 92,672 —-a-w c:\windows\system32\wbem\policman.dll
+ 2008-04-14 00:12:02 92,672 —-a-w c:\windows\system32\wbem\policman.dll
- 2004-08-10 11:00:00 237,056 —-a-w c:\windows\system32\wbem\provthrd.dll
+ 2008-04-14 00:12:03 237,056 —-a-w c:\windows\system32\wbem\provthrd.dll
- 2004-08-10 11:00:00 177,152 —-a-w c:\windows\system32\wbem\repdrvfs.dll
+ 2008-04-14 00:12:04 178,176 —-a-w c:\windows\system32\wbem\repdrvfs.dll
- 2004-08-10 11:00:00 36,864 —-a-w c:\windows\system32\wbem\scrcons.exe
+ 2008-04-14 00:12:34 36,352 —-a-w c:\windows\system32\wbem\scrcons.exe
- 2004-08-10 11:00:00 86,528 —-a-w c:\windows\system32\wbem\stdprov.dll
+ 2008-04-14 00:12:07 86,528 —-a-w c:\windows\system32\wbem\stdprov.dll
- 2004-08-10 11:00:00 131,584 —-a-w c:\windows\system32\wbem\viewprov.dll
+ 2008-04-14 00:12:08 131,584 —-a-w c:\windows\system32\wbem\viewprov.dll
- 2004-08-10 11:00:00 196,608 —-a-w c:\windows\system32\wbem\wbemcntl.dll
+ 2008-04-14 00:12:08 196,608 —-a-w c:\windows\system32\wbem\wbemcntl.dll
- 2004-08-10 11:00:00 214,528 —-a-w c:\windows\system32\wbem\wbemcomn.dll
+ 2008-04-14 00:12:08 214,528 —-a-w c:\windows\system32\wbem\wbemcomn.dll
- 2004-08-10 11:00:00 71,680 —-a-w c:\windows\system32\wbem\wbemcons.dll
+ 2008-04-14 00:12:08 71,680 —-a-w c:\windows\system32\wbem\wbemcons.dll
- 2004-08-10 11:00:00 530,944 —-a-w c:\windows\system32\wbem\wbemcore.dll
+ 2008-04-14 00:12:08 531,456 —-a-w c:\windows\system32\wbem\wbemcore.dll
- 2004-08-10 11:00:00 178,176 —-a-w c:\windows\system32\wbem\wbemdisp.dll
+ 2008-04-14 00:12:08 178,176 —-a-w c:\windows\system32\wbem\wbemdisp.dll
- 2004-08-10 11:00:00 273,920 —-a-w c:\windows\system32\wbem\wbemess.dll
+ 2008-04-14 00:12:08 273,920 —-a-w c:\windows\system32\wbem\wbemess.dll
- 2004-08-10 11:00:00 43,008 —-a-w c:\windows\system32\wbem\wbemperf.dll
+ 2008-04-14 00:12:08 43,008 —-a-w c:\windows\system32\wbem\wbemperf.dll
- 2004-08-10 11:00:00 18,944 —-a-w c:\windows\system32\wbem\wbemprox.dll
+ 2008-04-14 00:12:08 18,944 —-a-w c:\windows\system32\wbem\wbemprox.dll
- 2004-08-10 11:00:00 43,520 —-a-w c:\windows\system32\wbem\wbemsvc.dll
+ 2008-04-14 00:12:08 43,520 —-a-w c:\windows\system32\wbem\wbemsvc.dll
- 2004-08-10 11:00:00 116,224 —-a-w c:\windows\system32\wbem\wbemtest.exe
+ 2008-04-14 00:12:39 116,224 —-a-w c:\windows\system32\wbem\wbemtest.exe
- 2004-08-10 11:00:00 197,120 —-a-w c:\windows\system32\wbem\wbemupgd.dll
+ 2008-04-14 00:12:08 197,120 —-a-w c:\windows\system32\wbem\wbemupgd.dll
- 2004-08-10 11:00:00 196,608 —-a-w c:\windows\system32\wbem\wmiadap.exe
+ 2008-04-14 00:12:40 196,608 —-a-w c:\windows\system32\wbem\wmiadap.exe
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\wbem\wmiapres.dll
+ 2008-04-13 17:10:20 6,656 —-a-w c:\windows\system32\wbem\wmiapres.dll
- 2004-08-10 11:00:00 89,088 —-a-w c:\windows\system32\wbem\wmiaprpl.dll
+ 2008-04-14 00:12:09 88,576 —-a-w c:\windows\system32\wbem\wmiaprpl.dll
- 2004-08-10 11:00:00 126,464 —-a-w c:\windows\system32\wbem\wmiapsrv.exe
+ 2008-04-14 00:12:40 126,464 —-a-w c:\windows\system32\wbem\wmiapsrv.exe
- 2004-08-10 11:00:00 358,912 —-a-w c:\windows\system32\wbem\wmic.exe
+ 2008-04-14 00:12:40 358,912 —-a-w c:\windows\system32\wbem\wmic.exe
- 2004-08-10 11:00:00 60,928 —-a-w c:\windows\system32\wbem\wmicookr.dll
+ 2008-04-14 00:12:09 60,928 —-a-w c:\windows\system32\wbem\wmicookr.dll
- 2004-08-10 11:00:00 140,800 —-a-w c:\windows\system32\wbem\wmidcprv.dll
+ 2008-04-14 00:12:09 140,800 —-a-w c:\windows\system32\wbem\wmidcprv.dll
- 2004-08-10 11:00:00 156,672 —-a-w c:\windows\system32\wbem\wmipcima.dll
+ 2008-04-14 00:12:09 156,672 —-a-w c:\windows\system32\wbem\wmipcima.dll
- 2004-08-10 11:00:00 132,096 —-a-w c:\windows\system32\wbem\wmipdskq.dll
+ 2008-04-14 00:12:09 132,096 —-a-w c:\windows\system32\wbem\wmipdskq.dll
- 2004-08-10 11:00:00 62,464 —-a-w c:\windows\system32\wbem\wmipiprt.dll
+ 2008-04-14 00:12:09 61,952 —-a-w c:\windows\system32\wbem\wmipiprt.dll
- 2004-08-10 11:00:00 62,976 —-a-w c:\windows\system32\wbem\wmipjobj.dll
+ 2008-04-14 00:12:09 62,464 —-a-w c:\windows\system32\wbem\wmipjobj.dll
- 2004-08-10 11:00:00 144,896 —-a-w c:\windows\system32\wbem\wmiprov.dll
+ 2008-04-14 00:12:09 144,896 —-a-w c:\windows\system32\wbem\wmiprov.dll
- 2004-08-10 11:00:00 437,248 —-a-w c:\windows\system32\wbem\wmiprvsd.dll
+ 2008-04-14 00:12:09 437,248 —-a-w c:\windows\system32\wbem\wmiprvsd.dll
- 2004-08-10 11:00:00 218,112 —-a-w c:\windows\system32\wbem\wmiprvse.exe
+ 2008-04-14 00:12:40 218,112 —-a-w c:\windows\system32\wbem\wmiprvse.exe
- 2004-08-10 11:00:00 41,472 —-a-w c:\windows\system32\wbem\wmipsess.dll
+ 2008-04-14 00:12:09 41,472 —-a-w c:\windows\system32\wbem\wmipsess.dll
- 2004-08-10 11:00:00 144,896 —-a-w c:\windows\system32\wbem\wmisvc.dll
+ 2008-04-14 00:12:09 144,896 —-a-w c:\windows\system32\wbem\wmisvc.dll
- 2004-08-10 11:00:00 95,232 —-a-w c:\windows\system32\wbem\wmiutils.dll
+ 2008-04-14 00:12:09 95,232 —-a-w c:\windows\system32\wbem\wmiutils.dll
- 2006-03-24 04:37:50 49,152 —-a-w c:\windows\system32\wdigest.dll
+ 2008-04-14 00:12:08 49,152 —-a-w c:\windows\system32\wdigest.dll
- 2004-08-04 06:56:58 23,552 —-a-w c:\windows\system32\wdmaud.drv
+ 2008-04-14 00:12:45 23,552 —-a-w c:\windows\system32\wdmaud.drv
- 2007-12-07 02:21:48 233,472 —-a-w c:\windows\system32\webcheck.dll
+ 2008-10-16 20:38:39 233,472 —-a-w c:\windows\system32\webcheck.dll
- 2006-01-04 03:35:05 68,096 —-a-w c:\windows\system32\webclnt.dll
+ 2008-04-14 00:12:08 68,096 —-a-w c:\windows\system32\webclnt.dll
- 2004-08-10 11:00:00 135,680 —-a-w c:\windows\system32\webvw.dll
+ 2008-04-14 00:12:08 135,680 —-a-w c:\windows\system32\webvw.dll
- 2004-08-10 11:00:00 65,536 —-a-w c:\windows\system32\wextract.exe
+ 2008-04-14 00:12:39 65,024 —-a-w c:\windows\system32\wextract.exe
- 2004-08-10 11:00:00 433,664 —-a-w c:\windows\system32\wiaacmgr.exe
+ 2008-04-14 00:12:39 433,664 —-a-w c:\windows\system32\wiaacmgr.exe
- 2004-08-10 11:00:00 463,360 —-a-w c:\windows\system32\wiadefui.dll
+ 2008-04-14 00:12:08 463,360 —-a-w c:\windows\system32\wiadefui.dll
- 2004-08-10 11:00:00 124,416 —-a-w c:\windows\system32\wiadss.dll
+ 2008-04-14 00:12:08 124,416 —-a-w c:\windows\system32\wiadss.dll
- 2004-08-10 11:00:00 75,776 —-a-w c:\windows\system32\wiascr.dll
+ 2008-04-14 00:12:08 75,776 —-a-w c:\windows\system32\wiascr.dll
- 2006-12-19 18:16:47 333,824 —-a-w c:\windows\system32\wiaservc.dll
+ 2008-04-14 00:12:08 333,824 —-a-w c:\windows\system32\wiaservc.dll
- 2004-08-10 11:00:00 589,312 —-a-w c:\windows\system32\wiashext.dll
+ 2008-04-14 00:12:08 589,312 —-a-w c:\windows\system32\wiashext.dll
- 2004-08-10 11:00:00 111,104 —-a-w c:\windows\system32\wiavideo.dll
+ 2008-04-14 00:12:08 111,104 —-a-w c:\windows\system32\wiavideo.dll
- 2007-03-08 13:47:48 1,843,584 —-a-w c:\windows\system32\win32k.sys
+ 2008-09-15 12:12:56 1,846,400 —-a-w c:\windows\system32\win32k.sys
- 2004-08-10 11:00:00 101,888 —-a-w c:\windows\system32\win32spl.dll
+ 2008-04-14 00:12:08 102,400 —-a-w c:\windows\system32\win32spl.dll
- 2004-08-10 11:00:00 937,984 —-a-w c:\windows\system32\winbrand.dll
+ 2008-04-13 16:48:53 1,647,616 —-a-w c:\windows\system32\winbrand.dll
- 2006-10-24 18:30:06 716,288 ——w c:\windows\system32\WindowsCodecs.dll
+ 2008-04-14 00:12:08 712,704 ——w c:\windows\system32\windowscodecs.dll
- 2006-10-24 18:29:50 352,256 ——w c:\windows\system32\WindowsCodecsExt.dll
+ 2008-04-14 00:12:08 346,112 ——w c:\windows\system32\windowscodecsext.dll
- 2004-08-10 11:00:00 351,232 —-a-w c:\windows\system32\winhttp.dll
+ 2008-04-14 00:12:08 354,304 —-a-w c:\windows\system32\winhttp.dll
- 2007-12-07 02:21:48 824,832 —-a-w c:\windows\system32\wininet.dll
+ 2008-10-16 20:38:40 826,368 —-a-w c:\windows\system32\wininet.dll
- 2004-08-10 11:00:00 32,768 —-a-w c:\windows\system32\winipsec.dll
+ 2008-04-14 00:12:09 32,256 —-a-w c:\windows\system32\winipsec.dll
- 2004-08-10 11:00:00 502,272 —-a-w c:\windows\system32\winlogon.exe
+ 2008-04-14 00:12:39 507,904 —-a-w c:\windows\system32\winlogon.exe
- 2004-08-10 11:00:00 176,128 —-a-w c:\windows\system32\winmm.dll
+ 2008-04-14 00:12:09 176,128 —-a-w c:\windows\system32\winmm.dll
- 2004-08-10 11:00:00 764,928 —-a-w c:\windows\system32\winntbbu.dll
+ 2008-04-14 00:11:11 756,224 —-a-w c:\windows\system32\winntbbu.dll
- 2004-08-10 11:00:00 16,896 —-a-w c:\windows\system32\winrnr.dll
+ 2008-04-14 00:12:09 16,896 —-a-w c:\windows\system32\winrnr.dll
- 2004-08-10 11:00:00 99,328 —-a-w c:\windows\system32\winscard.dll
+ 2008-04-14 00:12:09 99,328 —-a-w c:\windows\system32\winscard.dll
- 2004-08-10 11:00:00 17,408 —-a-w c:\windows\system32\winshfhc.dll
+ 2008-04-14 00:12:09 17,408 —-a-w c:\windows\system32\winshfhc.dll
+ 2004-08-10 11:00:00 2,864 —-a-w c:\windows\system32\winsock.dll
- 2004-08-10 11:00:00 146,432 —-a-w c:\windows\system32\winspool.drv
+ 2008-04-14 00:12:45 146,432 —-a-w c:\windows\system32\winspool.drv
+ 2004-08-10 11:00:00 2,112 —-a-w c:\windows\system32\winspool.exe
- 2007-03-17 13:43:01 292,864 —-a-w c:\windows\system32\winsrv.dll
+ 2008-04-14 00:12:09 293,376 —-a-w c:\windows\system32\winsrv.dll
- 2004-08-10 11:00:00 53,760 —-a-w c:\windows\system32\winsta.dll
+ 2008-04-14 00:12:09 53,760 —-a-w c:\windows\system32\winsta.dll
- 2004-08-10 11:00:00 176,640 —-a-w c:\windows\system32\wintrust.dll
+ 2008-04-14 00:12:09 176,640 —-a-w c:\windows\system32\wintrust.dll
- 2004-08-10 11:00:00 5,632 —-a-w c:\windows\system32\winver.exe
+ 2008-04-14 00:12:40 5,632 —-a-w c:\windows\system32\winver.exe
- 2006-08-17 12:28:27 132,096 —-a-w c:\windows\system32\wkssvc.dll
+ 2008-04-14 00:12:09 132,096 —-a-w c:\windows\system32\wkssvc.dll
+ 2008-04-14 00:12:09 69,120 ——w c:\windows\system32\wlanapi.dll
- 2004-08-10 11:00:00 172,032 —-a-w c:\windows\system32\wldap32.dll
+ 2008-04-14 00:12:09 172,032 —-a-w c:\windows\system32\wldap32.dll
- 2004-08-10 11:00:00 92,672 —-a-w c:\windows\system32\wlnotify.dll
+ 2008-04-14 00:12:09 92,672 —-a-w c:\windows\system32\wlnotify.dll
- 2004-08-10 11:00:00 5,632 —-a-w c:\windows\system32\wmi.dll
+ 2008-04-14 00:11:15 5,632 —-a-w c:\windows\system32\wmi.dll
- 2006-10-19 02:47:20 937,984 —-a-w c:\windows\system32\WMNetMgr.dll
+ 2008-06-18 11:03:08 938,496 —-a-w c:\windows\system32\WMNetmgr.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\wmpcd.dll
+ 2008-04-14 00:12:09 20,480 —-a-w c:\windows\system32\wmpcd.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\wmpcore.dll
+ 2008-04-14 00:12:09 20,480 —-a-w c:\windows\system32\wmpcore.dll
- 2006-10-19 02:47:20 295,936 ——w c:\windows\system32\wmpeffects.dll
+ 2008-06-24 23:12:58 295,936 ——w c:\windows\system32\wmpeffects.dll
- 2006-10-24 18:30:00 276,992 ——w c:\windows\system32\WMPhoto.dll
+ 2008-04-14 00:12:09 276,992 ——w c:\windows\system32\wmphoto.dll
- 2004-08-10 11:00:00 20,480 —-a-w c:\windows\system32\wmpui.dll
+ 2008-04-14 00:12:09 20,480 —-a-w c:\windows\system32\wmpui.dll
- 2004-08-10 11:00:00 115,200 —-a-w c:\windows\system32\wmsdmoe.dll
+ 2008-04-14 00:12:09 115,200 —-a-w c:\windows\system32\wmsdmoe.dll
- 2004-08-10 11:00:00 303,616 —-a-w c:\windows\system32\wmstream.dll
+ 2008-04-14 00:12:10 303,616 —-a-w c:\windows\system32\wmstream.dll
- 2006-10-19 02:47:22 2,450,944 —-a-w c:\windows\system32\wmvcore.dll
+ 2008-06-18 11:03:14 2,458,112 —-a-w c:\windows\system32\WMVCore.dll
+ 2007-09-17 09:34:10 45,056 —-a-w c:\windows\system32\WNASPI32.DLL
- 2004-08-10 11:00:00 264,192 —-a-w c:\windows\system32\wow32.dll
+ 2008-04-14 00:12:10 264,192 —-a-w c:\windows\system32\wow32.dll
+ 2004-08-10 11:00:00 2,736 —-a-w c:\windows\system32\wowdeb.exe
- 2004-08-10 11:00:00 32,256 —-a-w c:\windows\system32\wpabaln.exe
+ 2008-04-14 00:12:40 32,256 —-a-w c:\windows\system32\wpabaln.exe
- 2004-08-10 11:00:00 32,256 —-a-w c:\windows\system32\wpnpinst.exe
+ 2008-04-14 00:12:41 11,264 —-a-w c:\windows\system32\wpnpinst.exe
- 2004-08-10 11:00:00 82,944 —-a-w c:\windows\system32\ws2_32.dll
+ 2008-04-14 00:12:10 82,432 —-a-w c:\windows\system32\ws2_32.dll
- 2004-08-10 11:00:00 19,968 —-a-w c:\windows\system32\ws2help.dll
+ 2008-04-14 00:12:10 19,968 —-a-w c:\windows\system32\ws2help.dll
- 2004-08-10 11:00:00 13,824 —-a-w c:\windows\system32\wscntfy.exe
+ 2008-04-14 00:12:41 13,824 —-a-w c:\windows\system32\wscntfy.exe
- 2004-08-10 11:00:00 114,688 —-a-w c:\windows\system32\wscript.exe
+ 2008-05-08 11:24:44 155,648 —-a-w c:\windows\system32\wscript.exe
- 2004-08-10 11:00:00 81,408 —-a-w c:\windows\system32\wscsvc.dll
+ 2008-04-14 00:12:10 80,896 —-a-w c:\windows\system32\wscsvc.dll
- 2004-08-10 11:00:00 596,992 —-a-w c:\windows\system32\wsecedit.dll
+ 2008-04-14 00:12:10 604,160 —-a-w c:\windows\system32\wsecedit.dll
- 2004-08-10 11:00:00 108,032 —-a-w c:\windows\system32\wshbth.dll
+ 2008-04-14 00:12:10 108,032 —-a-w c:\windows\system32\wshbth.dll
- 2004-08-10 11:00:00 28,672 —-a-w c:\windows\system32\wshcon.dll
+ 2008-04-14 00:12:10 36,864 —-a-w c:\windows\system32\wshcon.dll
- 2004-08-10 11:00:00 65,536 —-a-w c:\windows\system32\wshext.dll
+ 2008-05-09 10:53:40 90,112 —-a-w c:\windows\system32\wshext.dll
- 2004-08-10 11:00:00 14,336 —-a-w c:\windows\system32\wship6.dll
+ 2008-04-14 00:12:10 14,336 —-a-w c:\windows\system32\wship6.dll
- 2004-08-10 11:00:00 11,776 —-a-w c:\windows\system32\WshRm.dll
+ 2008-04-14 00:12:10 11,264 —-a-w c:\windows\system32\wshrm.dll
- 2004-08-10 11:00:00 19,968 —-a-w c:\windows\system32\wshtcpip.dll
+ 2008-04-14 00:12:10 19,456 —-a-w c:\windows\system32\wshtcpip.dll
- 2004-08-10 11:00:00 42,496 —-a-w c:\windows\system32\wsnmp32.dll
+ 2008-04-14 00:12:10 41,984 —-a-w c:\windows\system32\wsnmp32.dll
- 2004-08-10 11:00:00 22,528 —-a-w c:\windows\system32\wsock32.dll
+ 2008-04-14 00:12:10 22,528 —-a-w c:\windows\system32\wsock32.dll
- 2004-08-10 11:00:00 50,688 —-a-w c:\windows\system32\wstdecod.dll
+ 2008-04-14 00:12:10 50,688 —-a-w c:\windows\system32\wstdecod.dll
- 2004-08-10 11:00:00 18,432 —-a-w c:\windows\system32\wtsapi32.dll
+ 2008-04-14 00:12:10 18,432 —-a-w c:\windows\system32\wtsapi32.dll
- 2007-07-31 00:19:36 549,720 —-a-w c:\windows\system32\wuapi.dll
+ 2008-10-16 20:12:20 561,688 —-a-w c:\windows\system32\wuapi.dll
- 2007-07-31 00:19:16 53,080 —-a-w c:\windows\system32\wuauclt.exe
+ 2008-10-16 20:09:44 51,224 —-a-w c:\windows\system32\wuauclt.exe
- 2007-07-31 00:19:42 1,712,984 —-a-w c:\windows\system32\wuaueng.dll
+ 2008-10-16 20:13:40 1,809,944 —-a-w c:\windows\system32\wuaueng.dll
- 2004-08-10 11:00:00 6,656 —-a-w c:\windows\system32\wuauserv.dll
+ 2008-04-14 00:12:11 6,656 —-a-w c:\windows\system32\wuauserv.dll
- 2007-07-31 00:19:32 325,976 —-a-w c:\windows\system32\wucltui.dll
+ 2008-10-16 20:12:22 323,608 —-a-w c:\windows\system32\wucltui.dll
- 2007-07-31 00:18:40 33,624 —-a-w c:\windows\system32\wups.dll
+ 2008-10-16 20:08:58 34,328 —-a-w c:\windows\system32\wups.dll
- 2007-07-31 00:19:12 43,352 —-a-w c:\windows\system32\wups2.dll
+ 2008-10-16 20:09:44 43,544 —-a-w c:\windows\system32\wups2.dll
- 2007-07-31 00:19:28 203,096 —-a-w c:\windows\system32\wuweb.dll
+ 2008-10-16 20:13:40 202,776 —-a-w c:\windows\system32\wuweb.dll
- 2005-06-21 16:00:18 383,488 —-a-w c:\windows\system32\wzcdlg.dll
+ 2008-04-14 00:12:11 383,488 —-a-w c:\windows\system32\wzcdlg.dll
- 2005-06-21 16:00:18 52,736 —-a-w c:\windows\system32\wzcsapi.dll
+ 2008-04-14 00:12:11 52,736 —-a-w c:\windows\system32\wzcsapi.dll
- 2005-06-21 16:00:18 474,624 —-a-w c:\windows\system32\wzcsvc.dll
+ 2008-04-14 00:12:11 483,840 —-a-w c:\windows\system32\wzcsvc.dll
+ 2006-02-03 13:41:26 14,032 —-a-w c:\windows\system32\x3daudio1_0.dll
+ 2007-03-05 17:42:18 15,128 —-a-w c:\windows\system32\x3daudio1_1.dll
+ 2007-10-22 08:37:16 17,928 —-a-w c:\windows\system32\X3DAudio1_2.dll
+ 2008-03-05 21:00:06 25,608 —-a-w c:\windows\system32\X3DAudio1_3.dll
+ 2008-05-28 11:21:32 25,608 —-a-w c:\windows\system32\X3DAudio1_4.dll
+ 2006-02-03 13:42:06 230,096 —-a-w c:\windows\system32\xactengine2_0.dll
+ 2006-03-31 17:39:48 229,584 —-a-w c:\windows\system32\xactengine2_1.dll
+ 2007-10-22 08:39:54 267,272 —-a-w c:\windows\system32\xactengine2_10.dll
+ 2006-05-31 12:24:16 230,168 —-a-w c:\windows\system32\xactengine2_2.dll
+ 2006-07-28 14:30:32 236,824 —-a-w c:\windows\system32\xactengine2_3.dll
+ 2006-09-28 21:05:56 237,848 —-a-w c:\windows\system32\xactengine2_4.dll
+ 2006-12-08 17:02:00 251,672 —-a-w c:\windows\system32\xactengine2_5.dll
+ 2007-01-24 20:27:30 255,848 —-a-w c:\windows\system32\xactengine2_6.dll
+ 2007-04-04 23:55:00 261,480 —-a-w c:\windows\system32\xactengine2_7.dll
+ 2007-06-21 01:46:04 266,088 —-a-w c:\windows\system32\xactengine2_8.dll
+ 2007-07-20 05:57:12 267,112 —-a-w c:\windows\system32\xactengine2_9.dll
+ 2008-03-05 21:03:20 238,088 —-a-w c:\windows\system32\xactengine3_0.dll
+ 2008-05-28 11:22:04 238,088 —-a-w c:\windows\system32\xactengine3_1.dll
- 2004-08-10 11:00:00 91,648 —-a-w c:\windows\system32\xactsrv.dll
+ 2008-04-14 00:12:11 91,648 —-a-w c:\windows\system32\xactsrv.dll
+ 2008-05-28 11:21:52 65,032 —-a-w c:\windows\system32\XAPOFX1_0.dll
+ 2008-03-05 21:03:54 479,752 —-a-w c:\windows\system32\XAudio2_0.dll
+ 2008-05-28 11:22:28 507,400 —-a-w c:\windows\system32\XAudio2_1.dll
- 2004-08-10 11:00:00 30,720 —-a-w c:\windows\system32\xcopy.exe
+ 2008-04-14 00:12:41 30,720 —-a-w c:\windows\system32\xcopy.exe
+ 2006-03-31 17:39:24 62,672 —-a-w c:\windows\system32\xinput1_1.dll
+ 2006-07-28 14:30:14 62,744 —-a-w c:\windows\system32\xinput1_2.dll
+ 2007-04-04 23:53:42 81,768 —-a-w c:\windows\system32\xinput1_3.dll
+ 2005-12-05 23:07:30 61,136 —-a-w c:\windows\system32\xinput9_1_0.dll
- 2006-07-14 15:51:51 121,856 ——w c:\windows\system32\xmllite.dll
+ 2008-04-14 00:12:11 121,856 ——w c:\windows\system32\xmllite.dll
- 2004-08-10 11:00:00 129,536 —-a-w c:\windows\system32\xmlprov.dll
+ 2008-04-14 00:12:11 129,024 —-a-w c:\windows\system32\xmlprov.dll
- 2004-08-10 11:00:00 50,176 —-a-w c:\windows\system32\xmlprovi.dll
+ 2008-04-14 00:12:11 50,176 —-a-w c:\windows\system32\xmlprovi.dll
- 2006-03-01 19:42:42 11,776 —-a-w c:\windows\system32\xolehlp.dll
+ 2008-04-14 00:12:11 11,776 —-a-w c:\windows\system32\xolehlp.dll
- 2004-08-10 11:00:00 438,784 —-a-w c:\windows\system32\xpob2res.dll
+ 2008-04-13 17:39:29 438,784 —-a-w c:\windows\system32\xpob2res.dll
- 2004-08-10 11:00:00 187,392 —-a-w c:\windows\system32\xpsp1res.dll
+ 2008-04-13 17:39:22 187,392 —-a-w c:\windows\system32\xpsp1res.dll
- 2004-08-10 11:00:00 2,897,920 —-a-w c:\windows\system32\xpsp2res.dll
+ 2008-04-13 17:39:24 2,897,920 —-a-w c:\windows\system32\xpsp2res.dll
- 2007-10-29 10:04:03 350,720 —-a-w c:\windows\system32\xpsp3res.dll
+ 2008-04-13 17:39:26 689,152 —-a-w c:\windows\system32\xpsp3res.dll
- 2004-08-10 11:00:00 337,920 —-a-w c:\windows\system32\zipfldr.dll
+ 2008-04-14 00:12:11 338,432 —-a-w c:\windows\system32\zipfldr.dll
+ 2003-03-26 00:53:50 11,776 —-a-w c:\windows\system32\ZPORT4AS.dll
+ 2008-06-15 23:07:04 6,471 —-a-w c:\windows\unins000.dat
+ 2008-06-15 23:06:55 667,978 —-a-w c:\windows\unins000.exe
+ 2000-08-31 14:00:00 49,152 —-a-w c:\windows\VFIND.exe
- 2004-08-10 11:00:00 283,648 —-a-w c:\windows\winhlp32.exe
+ 2008-04-14 00:12:39 283,648 —-a-w c:\windows\winhlp32.exe
- 2007-05-01 10:46:37 1,230,336 —-a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
+ 2008-07-09 13:55:02 1,230,336 —-a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
+ 2008-09-30 22:42:08 1,286,152 —-a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
+ 2008-09-30 22:45:12 91,656 —-a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
- 2007-01-19 20:15:24 74,802 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
+ 2008-04-14 00:12:50 74,802 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
- 2007-01-19 20:15:24 995,383 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
+ 2008-04-14 00:12:50 995,383 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
- 2007-01-19 20:15:24 1,011,774 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
+ 2008-04-14 00:12:50 1,011,774 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
- 2007-01-19 20:15:24 401,462 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2008-04-14 00:12:50 401,462 —-a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2006-03-23 17:15:32 96,256 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_6e85597b\ATL80.dll
+ 2006-03-23 17:14:36 479,232 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcm80.dll
+ 2006-03-23 17:14:36 548,864 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcp80.dll
+ 2006-03-23 17:14:36 626,688 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcr80.dll
+ 2006-03-23 18:44:12 1,093,632 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80.dll
+ 2006-03-23 18:44:16 1,079,808 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80u.dll
+ 2006-03-23 18:44:20 69,632 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80.dll
+ 2006-03-23 18:44:20 57,344 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80u.dll
- 2005-09-23 07:35:10 65,536 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0ee63867\vcomp.dll
+ 2005-09-23 06:35:10 65,536 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0ee63867\vcomp.dll
+ 2006-12-02 05:46:44 65,536 —-a-w c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
+ 2008-04-14 00:12:51 1,054,208 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
+ 2008-04-14 00:12:51 57,344 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2008-04-14 00:12:51 343,040 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
+ 2008-04-14 00:12:47 1,724,416 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
+ 2008-04-15 17:47:33 1,724,416 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\GdiPlus.dll
- 2004-08-10 11:00:00 853,504 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2008-04-14 00:12:49 853,504 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2004-08-10 11:00:00 991,232 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2008-04-14 00:12:50 991,232 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2004-08-10 11:00:00 132,096 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
0\rtcres.dll
+ 2008-04-13 18:26:33 132,096 —-a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
0\rtcres.dll
+ 2004-04-20 20:34:48 387,584 —-a-w c:\windows\WriteReg.exe
+ 2000-08-31 14:00:00 68,096 —-a-w c:\windows\zip.exe
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-09-11 39408]
"Google Update"="c:\documents and settings\Greta\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-11-19 133104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-02 13529088]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-05-24 185896]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-01-10 385024]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
"WinPatrol"="c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2008-10-09 333120]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Logitech Utility"="Logi_MwX.Exe" [2003-11-07 c:\windows\LOGI_MWX.EXE]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IETI"="c:\program files\Skype\Phone\IEPlugin\unins000.exe" [2007-03-28 674138]
"SetDefaultMIDI"="MIDIDEF.EXE" [2005-11-08 c:\windows\MIDIDEF.EXE]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-12-22 24576]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-04 258048]
HP Image Zone Fast Start.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-04 53248]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-06-05 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2007-04-19 12:41 294912 c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-03-03 10:06 10792 c:\program files\Citrix\GoToAssist\480\g2awinlogon.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.avis"= ff_acm.acm
"MSACM.SPEEXACM"= SPEEXW.ACM
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\
0lsdelete
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
backup=c:\windows\pss\HP Image Zone Fast Start.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Greta^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=c:\documents and settings\Greta\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkStartup
[HKLM\~\startupfolder\C:^Documents and Settings^Greta^Start Menu^Programs^Startup^YouTube Uploader.lnk]
path=c:\documents and settings\Greta\Start Menu\Programs\Startup\YouTube Uploader.lnk
backup=c:\windows\pss\YouTube Uploader.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AudioDrvEmulator]
——— 2005-11-04 18:07 49152 c:\program files\Creative\Shared Files\Module Loader\DLLML.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ClocX]
–a—— 2004-04-13 08:12 103936 c:\program files\ClocX\ClocX.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTDVDDET]
——— 2003-06-18 01:00 45056 c:\program files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
–a—— 2008-04-13 18:12 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncU.exe]
——— 2006-06-12 14:32 700416 c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
–a—— 2006-08-28 21:57 395776 c:\program files\Dell Support\DSAgnt.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DLA]
–a—— 2005-09-08 05:20 122940 c:\windows\system32\DLA\DLACTRLW.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray]
–a—— 2005-09-29 14:01 67584 c:\windows\ehome\ehtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
–a—— 2007-05-08 16:24 54840 c:\program files\HP\HP Software Update\hpwuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
–a—— 2006-09-11 03:40 218032 c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
–a—— 2006-09-11 03:40 218032 c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
–a—— 2006-09-11 03:40 86960 c:\program files\Common Files\InstallShield\UpdateService\issch.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2007-11-02 18:36 267048 c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
–a—— 2007-01-19 11:54 5674352 c:\program files\MSN Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mxomssmenu]
–a—— 2007-09-06 14:53 169264 c:\program files\Maxtor\OneTouch Status\MaxMenuMgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
–a—— 2008-05-02 21:46 13529088 c:\windows\system32\nvcpl.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
–a—— 2008-05-02 21:46 86016 c:\windows\system32\nvmctray.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2008-01-10 15:27 385024 c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
–a—— 2008-02-22 03:25 144784 c:\program files\Java\jre1.6.0_05\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
–a—— 2008-06-05 03:00 1506544 c:\program files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
–a—— 2008-05-24 21:44 185896 c:\program files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
——— 2000-05-11 01:00 90112 c:\windows\Updreg.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel]
——— 2005-10-14 11:01 122880 c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper]
–a—— 2006-12-12 10:46 19456 c:\windows\system32\CtHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTxfiHlp]
–a—— 2006-03-01 21:00 18944 c:\windows\system32\Ctxfihlp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
–a—— 2008-05-02 21:46 1630208 c:\windows\system32\nwiz.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Adobe\\Photoshop Elements 5.0\\AdobePhotoshopElementsMediaServer.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Soulseek\\slsk.exe"=
"c:\\Program Files\\SoulseekNS\\slsk.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8662:TCP"= 8662:TCP:BitComet 8662 TCP
"8662:UDP"= 8662:UDP:BitComet 8662 UDP
"26020:UDP"= 26020:UDP:Slsk
"26020:TCP"= 26020:TCP:Slsk
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2008-02-29 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2008-02-29 55024]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]
S3 tmcfw;Trend Micro Common Firewall Service;c:\windows\system32\DRIVERS\TM_CFW.sys –> c:\windows\system32\DRIVERS\TM_CFW.sys [?]
S4 Abiidl;Abiidl; [x]
S4 gupdate1c9119b5bb51c2e;Google Update Service (gupdate1c9119b5bb51c2e);c:\program files\Google\Update\GoogleUpdate.exe [2008-09-08 133104]
S4 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe –> c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [?]
S4 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2009-01-01 24652]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe
.
Contents of the 'Scheduled Tasks' folder
2009-01-03 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2009-01-05 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2008-09-02 10:52]
2009-01-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2829470968-2219013028-3721105464-1006.job
- c:\documents and settings\Greta\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-11-19 15:09]
2007-09-02 c:\windows\Tasks\Untitled.job
- c:\program files\Roxio\Backup MyPC\System\sbestart.exe [2007-02-05 13:50]
2009-01-05 c:\windows\Tasks\User_Feed_Synchronization-{19C3145B-BBEA-42F3-9AF0-70A963CC3104}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 11:58]
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
MSConfigStartUp-Google Update - c:\documents and settings\Greta\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = localhost
IE: &D&ownload &with BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: &D&ownload all video with BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: &D&ownload all with BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000
Trusted Zone: www.modthesims2.com
TCP: {2931AC7F-E60B-41F3-9ED5-DE900D44067A} = 24.93.41.125,24.93.41.126
FF - ProfilePath - c:\documents and settings\Greta\Application Data\Mozilla\Firefox\Profiles\ch7lwgle.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - component: c:\documents and settings\Greta\Application Data\Mozilla\Firefox\Profiles\ch7lwgle.default\extensions\{7E7165E2-0767-448c-852F-5FA8714F2C37}\components\PlainOldFavorites.dll
FF - component: c:\program files\Google\Google Gears\Firefox\components\gears.dll
FF - plugin: c:\documents and settings\Greta\Local Settings\Application Data\Google\Update\1.2.133.33\npGoogleOneClick7.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.133.33\npGoogleOneClick7.dll
FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.1.0.30716.0.dll
FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
FF - plugin: c:\program files\Yahoo!\Common\npyaxmpb.dll
ATTENTION: FIREFOX POLICES IS IN FORCE
FF - user.js: general.useragent.extra.zencast - Creative ZENcast v1.02.08);user_pref(general.useragent.extra.zencast, .
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-01-05 16:33:47
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'winlogon.exe'(696)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\program files\Citrix\GoToAssist\480\G2AWinLogon.dll
.
———————— Other Running Processes ————————
.
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\system32\CTSVCCDA.EXE
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
c:\program files\Maxtor\Sync\SyncServices.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Logitech\MouseWare\system\EM_EXEC.EXE
c:\program files\HP\Digital Imaging\bin\hpqgalry.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\ELService.exe
c:\windows\system32\dllhost.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-01-05 16:46:13 - machine was rebooted [Greta]
ComboFix-quarantined-files.txt 2009-01-05 22:46:11
Pre-Run: 71,769,899,008 bytes free
Post-Run: 71,884,128,256 bytes free
8516 — E O F — 2008-12-18 09:01:02