What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] I got me another DNSChanger Trojan

12 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #17 last edited
:thumbup Here is the log from the scan. I find it strange that I have the ones in Thunderbird as all my email is scanned by my AV when I get it. The first 2 are the only one that concern me. ——————————————————————————– KASPERSKY ONLINE SCANNER 7 REPORT Sunday, February 1, 2009 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Sunday, February 01, 2009 08:00:19 Records in database: 1734743 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: A:\ B:\ C:\ E:\ F:\ G:\ H:\ I:\ J:\ K:\ L:\ M:\ Scan statistics: Files scanned: 102520 Threat name: 5 Infected objects: 28 Suspicious objects: 0 Duration of the scan: 05:11:10 File name / Threat name / Threats count C:\Documents and Settings\Mark\My Documents\Downloads\track-mega.v.3.227.exe Infected: Worm.Win32.AutoTDSS.bgc 1 C:\Documents and Settings\Mark\My Documents\Downloads\track-mega.v.3.227.exe Infected: Packed.Win32.Tdss.a 1 G:\Downloads\Vista Theme\Stardock Apps\LSpatch\LSPatch.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a 1 G:\Downloads\Vista Theme\Stardock Apps\Skins\Aero_Ultimate_RC3_1_by_fediaFedia\LSpatch\LSPatch.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a 1 G:\Downloads\Vista Theme\Stardock Apps\Skins\Aero_Ultimate_RC3_1_by_fediaFedia.zip Infected: not-a-virus:RiskTool.Win32.CloseApp.a 1 G:\Mozbackups\Thunderbird 2.0.0.14 (en-US) - 2008-06-21.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.14 (en-US) - 2008-07-13.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.14 (en-US) - 2008-07-15.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.14 (en-US) - 2008-07-21.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.14 (en-US) - 2008-07-26.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.16 (en-US) - 2008-08-16.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.16 (en-US) - 2008-09-01.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.16 (en-US) - 2008-09-14.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.17 (en-US) - 2008-10-10.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.18 (en-US) - 2008-11-19.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\Mozbackups\Thunderbird 2.0.0.18 (en-US) - 2008-12-13.pcv Infected: Trojan-Spy.HTML.Fraud.cd 2 G:\XPPROSP3NEW\$OEM$\$$\System32\cmdow.exe Infected: not-a-virus:RiskTool.Win32.HideWindows 1 The selected area was scanned. :
Post #18
ExTruckie,

There are a couple of reasons the emails got through. It's possible that the infection the email contained was newer than the definition file your AV was using. That's why AV's are updated daily. The infection may require you to click on a link. An AV can't know what you will get if you click the link. Or, AV's often miss infections in attachments. Your infected emails appear to be in backups. Hopefully you can use the dates on the files to delete them.

The first two entries are actually the same file and the results show indications of the same infection. This is an infection that a few months ago, we were struggling to contain. Few of our tools could find it, and even then, it was a major project to clean it up. That infection is responsible for literally hundreds of computers a day becoming unusable and many had to be reformatted to save. Tools have been developed to help deal with but it's still a very nasty one. Luckily, we did not have to clean that from your machine. No rootkits showed when you ran Rooter so I believe you don't have it. Did you never run that file?

ComboFix should be working again so I'm going to delete the copy you have. Then download a new copy to your desktop.

COMBOFIX-Script

  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

    File::
C:\Documents and Settings\Mark\My Documents\Downloads\track-mega.v.3.227.exe

Folder::

Registry::

Driver::
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

Then give me a HijackThis log.
Post #19
Here they are..

ComboFix 09-02-01.01 - Mark 2009-02-01 13:38:05.6 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2188 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Mark\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
FW: ZoneAlarm Firewall *enabled*
* Created a new restore point

FILE ::
c:\documents and settings\Mark\My Documents\Downloads\track-mega.v.3.227.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

E:\resycled
F:\resycled
G:\resycled

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Service_npf


((((((((((((((((((((((((( Files Created from 2009-01-01 to 2009-02-01 )))))))))))))))))))))))))))))))
.

2009-01-31 12:48 . 2009-02-01 10:57 d–h—– C:\$AVG8.VAULT$
2009-01-31 12:44 . 2009-01-31 20:01 d——– c:\windows\system32\drivers\Avg
2009-01-31 12:44 . 2009-02-01 13:19 325,128 –a—— c:\windows\system32\drivers\avgldx86.sys
2009-01-31 12:44 . 2009-02-01 13:18 107,272 –a—— c:\windows\system32\drivers\avgtdix.sys
2009-01-31 12:44 . 2009-02-01 13:19 10,520 –a—— c:\windows\system32\avgrsstx.dll
2009-01-31 11:40 . 2009-01-31 11:40 118 –a—— c:\windows\system32\MRT.INI
2009-01-31 11:36 . 2001-08-17 13:28 794,654 –a–c— c:\windows\system32\dllcache\usr1801.sys
2009-01-31 11:35 . 2001-08-17 12:18 285,760 –a–c— c:\windows\system32\dllcache\stlnata.sys
2009-01-31 11:34 . 2001-08-17 22:36 495,616 –a–c— c:\windows\system32\dllcache\sblfx.dll
2009-01-31 11:33 . 2001-08-17 13:28 899,146 –a–c— c:\windows\system32\dllcache\r2mdkxga.sys
2009-01-31 11:32 . 2001-08-17 14:05 351,616 –a–c— c:\windows\system32\dllcache\ovcodek2.sys
2009-01-31 11:31 . 2001-08-17 12:11 128,000 –a–c— c:\windows\system32\dllcache\n100325.sys
2009-01-31 11:30 . 2001-08-17 13:28 802,683 –a–c— c:\windows\system32\dllcache\ltsm.sys
2009-01-31 11:29 . 2008-04-14 05:42 151,552 –a–c— c:\windows\system32\dllcache\irftp.exe
2009-01-31 11:28 . 2008-04-14 05:41 702,845 –a–c— c:\windows\system32\dllcache\i81xdnt5.dll
2009-01-31 11:27 . 2001-08-17 13:28 907,456 –a–c— c:\windows\system32\dllcache\hcf_msft.sys
2009-01-31 11:27 . 2001-08-17 22:36 123,392 –a–c— c:\windows\system32\dllcache\hpgt21tk.dll
2009-01-31 11:27 . 2001-08-17 22:36 119,296 –a–c— c:\windows\system32\dllcache\hpdigwia.dll
2009-01-31 11:27 . 2001-08-17 22:36 89,088 –a–c— c:\windows\system32\dllcache\hpgt33.dll
2009-01-31 11:27 . 2001-08-17 22:36 83,968 –a–c— c:\windows\system32\dllcache\hpgt21.dll
2009-01-31 11:27 . 2008-04-14 05:41 21,504 –a–c— c:\windows\system32\dllcache\hidserv.dll
2009-01-31 11:27 . 2001-08-17 14:02 8,576 –a–c— c:\windows\system32\dllcache\hidgame.sys
2009-01-31 11:27 . 2001-08-17 14:02 2,688 –a–c— c:\windows\system32\dllcache\hidswvd.sys
2009-01-31 11:12 . 2001-08-17 14:56 1,733,120 –a–c— c:\windows\system32\dllcache\g400d.dll
2009-01-31 11:12 . 2001-08-17 14:56 470,144 –a–c— c:\windows\system32\dllcache\g200d.dll
2009-01-31 11:12 . 2001-08-17 12:15 454,912 –a–c— c:\windows\system32\dllcache\fxusbase.sys
2009-01-31 11:12 . 2001-08-17 12:49 322,432 –a–c— c:\windows\system32\dllcache\g400m.sys
2009-01-31 11:12 . 2001-08-17 12:49 320,384 –a–c— c:\windows\system32\dllcache\g200m.sys
2009-01-31 11:12 . 2001-08-17 13:51 82,304 –a–c— c:\windows\system32\dllcache\grclass.sys
2009-01-31 11:12 . 2008-04-14 00:15 59,136 –a–c— c:\windows\system32\dllcache\gckernel.sys
2009-01-31 11:12 . 2008-04-14 00:10 28,288 –a–c— c:\windows\system32\dllcache\grserial.sys
2009-01-31 11:12 . 2001-08-17 13:51 17,408 –a–c— c:\windows\system32\dllcache\gpr400.sys
2009-01-31 11:12 . 2008-04-14 00:15 10,624 –a–c— c:\windows\system32\dllcache\gameenum.sys
2009-01-31 11:10 . 2001-08-17 12:14 952,007 –a–c— c:\windows\system32\dllcache\diwan.sys
2009-01-31 11:09 . 2001-08-17 12:13 980,034 –a–c— c:\windows\system32\dllcache\cicap.sys
2009-01-31 11:09 . 2001-08-17 14:02 272,640 –a–c— c:\windows\system32\dllcache\cinemclc.sys
2009-01-31 11:09 . 2001-08-17 13:57 248,064 –a–c— c:\windows\system32\dllcache\cl546xm.sys
2009-01-31 11:09 . 2001-08-17 14:56 170,880 –a–c— c:\windows\system32\dllcache\cl546x.dll
2009-01-31 11:09 . 2001-08-17 14:56 111,232 –a–c— c:\windows\system32\dllcache\cl5465.dll
2009-01-31 11:09 . 2001-08-17 14:56 91,264 –a–c— c:\windows\system32\dllcache\cirrus.dll
2009-01-31 11:09 . 2001-08-17 13:57 45,696 –a–c— c:\windows\system32\dllcache\cirrus.sys
2009-01-31 11:09 . 2001-08-17 22:36 44,032 –a–c— c:\windows\system32\dllcache\cnusd.dll
2009-01-31 11:09 . 2001-08-17 12:11 39,936 –a–c— c:\windows\system32\dllcache\cnxt1803.sys
2009-01-31 11:09 . 2001-08-17 13:51 20,736 –a–c— c:\windows\system32\dllcache\cmbp0wdm.sys
2009-01-31 11:09 . 2008-04-14 00:06 13,952 –a–c— c:\windows\system32\dllcache\cmbatt.sys
2009-01-31 11:09 . 2001-08-17 13:51 6,656 –a–c— c:\windows\system32\dllcache\cmdide.sys
2009-01-31 11:02 . 2001-08-17 13:28 871,388 –a–c— c:\windows\system32\dllcache\bcmdm.sys
2009-01-31 11:01 . 2001-08-17 13:28 762,780 –a–c— c:\windows\system32\dllcache\3cwmcru.sys
2009-01-31 11:00 . 2001-08-17 14:56 66,048 –a–c— c:\windows\system32\dllcache\s3legacy.dll
2009-01-31 10:10 . 2009-02-01 13:19 d——– c:\documents and settings\All Users\Application Data\Avg8
2009-01-31 09:49 . 2009-01-31 09:49 d——– c:\windows\ERUNT
2009-01-31 09:45 . 2009-01-31 09:56 d——– C:\SDFix
2009-01-31 02:23 . 2009-01-31 02:23 d——– c:\program files\AVG
2009-01-28 20:41 . 2009-01-28 20:41 11 –a—— c:\windows\EuBcd.ini
2009-01-27 19:32 . 2009-01-27 19:32 d——– c:\program files\Trend Micro
2009-01-27 19:15 . 2009-01-27 19:16 d——– C:\Rooter$
2009-01-26 10:40 . 2009-01-26 10:40 d——– C:\D
2009-01-24 11:44 . 2008-08-10 14:14 64,254 –a—— c:\windows\system32\oemlogo.bmp
2009-01-24 10:51 . 2009-01-30 23:01 d-a—— c:\documents and settings\All Users\Application Data\TEMP
2009-01-24 10:51 . 2009-01-24 10:51 d——– c:\documents and settings\All Users\Application Data\PassMark
2009-01-24 10:32 . 2009-01-24 10:32 d——– c:\documents and settings\All Users\Application Data\TaskManager
2009-01-22 18:22 . 2009-01-22 18:22 632 –a—— C:\DPSFNSHR.INI
2009-01-22 18:21 . 2009-01-22 18:21 220 –a—— C:\NVIDIA.INS
2009-01-19 17:31 . 2009-01-29 20:22 d——– c:\documents and settings\Flying\Application Data\teamspeak2
2009-01-19 17:29 . 2009-01-19 17:29 d——– c:\documents and settings\Flying\Application Data\FindeXer
2009-01-19 17:27 . 2009-01-19 17:27 d——– c:\documents and settings\Flying\Application Data\Talkback
2009-01-19 17:26 . 2009-01-19 17:26 d——– c:\documents and settings\Flying\Application Data\FaxCtr
2009-01-19 17:26 . 2009-01-31 12:45 d——– c:\documents and settings\Flying
2009-01-17 15:44 . 2009-01-17 15:44 d——– c:\program files\ViSplore
2009-01-17 15:44 . 2009-01-17 15:44 d——– c:\documents and settings\Mark\Application Data\ViSplore
2009-01-17 11:56 . 2009-02-01 13:46 d——– c:\program files\SpeedFan
2009-01-17 11:56 . 2009-01-17 11:56 45 –a—— c:\windows\system32\initdebug.nfo
2009-01-17 09:58 . 2009-01-17 15:43 d——– c:\program files\ViStart
2009-01-17 09:58 . 2009-01-17 09:58 d——– c:\program files\ViOrb
2009-01-17 09:58 . 2009-01-17 09:59 d——– c:\documents and settings\Mark\Application Data\ViStart
2009-01-17 09:11 . 2009-01-17 09:11 d——– c:\program files\Vista Drive Icon
2009-01-17 09:11 . 2007-04-15 01:32 7,333,376 –a—— c:\windows\system32\vistaui.exe
2009-01-17 09:11 . 2008-11-15 13:29 334,422 –a—— c:\windows\system32\viwc.exe
2009-01-17 09:11 . 2007-11-25 22:11 49,208 –a—— c:\windows\system32\vistartup.bmp
2009-01-17 09:06 . 2009-01-17 09:06 76,214 –a—— c:\windows\Icon_3.ico
2009-01-17 08:10 . 2009-01-17 11:43 d——– c:\windows\system32\VIRepair
2009-01-16 20:04 . 2008-05-08 06:24 155,648 –a—— c:\windows\system32\wscript.exe
2009-01-16 20:04 . 2008-05-08 06:24 155,648 –a–c— c:\windows\system32\dllcache\wscript.exe
2009-01-16 19:41 . 2009-01-16 19:41 d——– c:\program files\StartMenuLSTRemover
2009-01-16 16:52 . 2008-04-14 05:41 562,176 –a–c— c:\windows\system32\dllcache\fxsst.dll
2009-01-16 00:55 . 2009-01-16 01:57 d——– c:\documents and settings\Mark\Application Data\Download Manager
2009-01-16 00:31 . 2008-10-16 15:38 6,066,176 —–c— c:\windows\system32\dllcache\ieframe.dll
2009-01-16 00:31 . 2007-04-17 04:32 2,455,488 —–c— c:\windows\system32\dllcache\ieapfltr.dat
2009-01-16 00:31 . 2007-03-08 00:10 991,232 —–c— c:\windows\system32\dllcache\ieframe.dll.mui
2009-01-16 00:31 . 2008-10-16 15:38 459,264 —–c— c:\windows\system32\dllcache\msfeeds.dll
2009-01-16 00:31 . 2008-10-16 15:38 383,488 —–c— c:\windows\system32\dllcache\ieapfltr.dll
2009-01-16 00:31 . 2008-10-16 15:38 267,776 —–c— c:\windows\system32\dllcache\iertutil.dll
2009-01-16 00:31 . 2008-10-16 15:38 63,488 —–c— c:\windows\system32\dllcache\icardie.dll
2009-01-16 00:31 . 2008-10-16 15:38 52,224 —–c— c:\windows\system32\dllcache\msfeedsbs.dll
2009-01-16 00:31 . 2008-10-16 08:11 13,824 —–c— c:\windows\system32\dllcache\ieudinit.exe
2009-01-14 20:33 . 2008-08-14 05:11 2,189,184 –a—— c:\windows\system32\ntoskrnl.exe
2009-01-14 20:33 . 2008-08-14 05:11 2,189,184 –a–c— c:\windows\system32\dllcache\ntoskrnl.exe
2009-01-14 20:33 . 2008-08-14 05:09 2,145,280 –a–c— c:\windows\system32\dllcache\ntkrnlmp.exe
2009-01-14 20:33 . 2008-08-14 04:33 2,066,048 –a—— c:\windows\system32\ntkrnlpa.exe
2009-01-14 20:33 . 2008-08-14 04:33 2,066,048 –a–c— c:\windows\system32\dllcache\ntkrnlpa.exe
2009-01-14 20:33 . 2008-08-14 04:33 2,023,936 –a–c— c:\windows\system32\dllcache\ntkrpamp.exe
2009-01-14 20:28 . 2008-05-02 08:25 465,920 —–c— c:\windows\system32\dllcache\imapi2fs.dll
2009-01-14 20:28 . 2008-05-02 08:25 317,952 —–c— c:\windows\system32\dllcache\imapi2.dll
2009-01-14 20:22 . 2009-01-14 20:22 d——– c:\program files\USMT301
2009-01-14 18:47 . 2008-04-14 00:06 20,352 –a—— c:\windows\system32\drivers\hidbatt.sys
2009-01-14 18:47 . 2008-04-14 00:06 20,352 –a–c— c:\windows\system32\dllcache\hidbatt.sys
2009-01-14 18:39 . 2008-05-19 02:42 21,598 –a—— c:\windows\system32\oemlogo1.bmp
2009-01-14 17:28 . 2009-01-14 17:28 262,144 –a—— c:\windows\system32\default_user_class.dat
2009-01-14 17:12 . 2001-08-23 02:00 131,584 –a–c— c:\windows\system32\dllcache\pmxviceo.dll
2009-01-14 17:11 . 2001-08-23 02:00 132,608 –a–c— c:\windows\system32\dllcache\fxsclntr.dll
2009-01-14 17:10 . 2001-08-23 02:00 195,618 –a–c— c:\windows\system32\dllcache\c_10002.nls
2009-01-14 17:09 . 2001-08-23 02:00 169,984 –a–c— c:\windows\system32\dllcache\iisui.dll
2009-01-14 17:09 . 2001-08-23 02:00 94,720 –a–c— c:\windows\system32\dllcache\certmap.ocx
2009-01-14 17:09 . 2001-08-23 02:00 19,968 –a–c— c:\windows\system32\dllcache\inetsloc.dll
2009-01-14 17:09 . 2001-08-23 02:00 14,336 –a–c— c:\windows\system32\dllcache\iisreset.exe
2009-01-14 17:09 . 2001-08-23 02:00 7,680 –a–c— c:\windows\system32\dllcache\inetmgr.exe
2009-01-14 17:09 . 2001-08-23 02:00 6,144 –a–c— c:\windows\system32\dllcache\ftpsapi2.dll
2009-01-14 17:09 . 2001-08-23 02:00 5,632 –a–c— c:\windows\system32\dllcache\iisrstap.dll
2009-01-14 17:08 . 2009-01-14 17:08 749 -rah—– c:\windows\WindowsShell.Manifest
2009-01-14 17:08 . 2009-01-14 17:08 749 -rah—– c:\windows\system32\wuaucpl.cpl.manifest
2009-01-14 17:08 . 2009-01-14 17:08 749 -rah—– c:\windows\system32\sapi.cpl.manifest
2009-01-14 17:08 . 2009-01-14 17:08 749 -rah—– c:\windows\system32\nwc.cpl.manifest
2009-01-14 17:08 . 2009-01-14 17:08 749 -rah—– c:\windows\system32\ncpa.cpl.manifest
2009-01-14 17:08 . 2009-01-14 17:08 488 -rah—– c:\windows\system32\logonui.exe.manifest
2009-01-14 17:07 . 2001-08-23 02:00 16,384 –a–c— c:\windows\system32\dllcache\isignup.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-01 18:44 ——— d—–w c:\program files\lx_cats
2009-02-01 17:55 ——— d—–w c:\program files\Mozilla Thunderbird
2009-01-19 22:15 ——— d—–w c:\documents and settings\Mark\Application Data\teamspeak2
2009-01-17 18:33 ——— d—–w c:\program files\Google
2009-01-14 23:48 ——— d–h–w c:\program files\InstallShield Installation Information
2009-01-14 23:47 ——— d—–w c:\program files\Common Files\InstallShield
2009-01-14 23:41 ——— d—–w c:\documents and settings\All Users\Application Data\Bluetooth
2009-01-10 02:57 ——— d—–w c:\documents and settings\LocalService\Application Data\SACore
2009-01-06 05:22 ——— d—–w c:\program files\Windows Media Connect 2
2009-01-06 05:22 ——— d—–w c:\program files\Lexmark 3400 Series
2009-01-06 05:22 ——— d—–w c:\program files\D4
2009-01-06 04:36 ——— d—–w c:\documents and settings\Mark\Application Data\Windows Desktop Search
2009-01-01 15:18 ——— d—–w c:\program files\Malwarebytes' Anti-Malware
2009-01-01 00:30 ——— d—–w c:\documents and settings\Mark\Application Data\OpenOffice.org
2009-01-01 00:18 ——— d—–w c:\program files\SpiritPyre Extensions
2008-12-31 23:55 ——— d—–w c:\documents and settings\Mark\Application Data\WinPatrol
2008-12-31 23:54 ——— d—–w c:\program files\ZSoft
2008-12-31 23:36 ——— d—–w c:\program files\Reference Assemblies
2008-12-31 23:36 ——— d—–w c:\program files\MSBuild
2008-12-31 23:26 ——— d—–w c:\program files\Microsoft Silverlight
2008-12-31 23:25 ——— d—–w c:\program files\Windows Desktop Search
2008-12-31 22:45 ——— d—–w c:\program files\MSXML 4.0
2008-12-31 18:10 ——— d—–w c:\program files\Foxit
2008-12-31 18:10 ——— d—–w c:\program files\Conduit
2008-12-31 08:03 ——— d—–w c:\documents and settings\Mark\Application Data\Thunderbird
2008-12-31 08:01 ——— d—–w c:\documents and settings\Mark\Application Data\Malwarebytes
2008-12-31 08:01 ——— d—–w c:\documents and settings\All Users\Application Data\Malwarebytes
2008-12-31 07:31 ——— d—–w c:\program files\McAfee
2008-12-31 07:22 ——— d—–w c:\program files\Common Files\McAfee
2008-12-31 07:21 ——— d—–w c:\documents and settings\Mark\Application Data\SiteAdvisor
2008-12-31 07:16 ——— d—–w c:\program files\EASEUS
2008-12-31 06:39 ——— d—–w c:\program files\Lexmark Fax Solutions
2008-12-31 02:51 ——— d—–w c:\program files\Lexmark Toolbar
2008-12-31 02:35 ——— d—–w c:\program files\Common Files\AnswerWorks 5.0
2008-12-31 02:33 ——— d—–w c:\program files\Common Files\Palo Alto Software
2008-12-31 02:33 ——— d—–w c:\documents and settings\Mark\Application Data\Intuit
2008-12-31 02:32 ——— d—–w c:\program files\Common Files\Intuit
2008-12-31 02:27 ——— d—–w c:\documents and settings\All Users\Application Data\Intuit
2008-12-31 02:17 ——— d—–w c:\documents and settings\All Users\Application Data\SiteAdvisor
2008-12-31 02:17 ——— d—–w c:\documents and settings\All Users\Application Data\McAfee
2008-12-31 02:16 ——— d—–w c:\program files\MozBackup
2008-12-31 02:15 ——— d—–w c:\documents and settings\Mark\Application Data\Talkback
2008-12-31 02:03 ——— d—–w c:\documents and settings\Mark\Application Data\FaxCtr
2008-12-31 01:49 ——— d—–w c:\program files\Abbyy FineReader 6.0 Sprint
2008-12-31 01:49 ——— d—–w c:\documents and settings\All Users\Application Data\FaxCtr
2008-12-31 01:33 ——— d—–w c:\program files\VIA
2008-12-31 01:11 ——— d—–w c:\program files\microsoft frontpage
2008-12-11 10:57 333,952 —-a-w c:\windows\system32\drivers\srv.sys
2008-12-04 12:18 43,520 —-a-w c:\windows\system32\drivers\fetnd5bv.sys
2008-12-04 00:52 38,496 —-a-w c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-04 00:52 15,504 —-a-w c:\windows\system32\drivers\mbam.sys
2008-11-25 06:23 3,221 —-a-w C:\DP_INSTALL_TOOL.CMD
2008-10-27 15:37 699,488 —-a-w c:\program files\JUN2007_d3dx10_34_x86.cab
2008-10-27 15:36 526,160 —-a-w c:\program files\DXSETUP.exe
2008-10-11 20:20 6,923,477 —-a-r c:\program files\ThunderBird.exe
2008-10-02 22:04 29,088,197 —-a-r c:\program files\Vista_Trasnformation_Pack.exe
2008-10-02 21:43 2,613,100 —-a-r c:\program files\PCWizard.exe
2008-10-02 21:37 896,083 —-a-r c:\program files\erunt-setup.exe
2008-10-02 20:53 8,595,439 —-a-r c:\program files\epm.exe
2008-10-02 20:47 3,121,727 —-a-r c:\program files\ccsetup212.exe
2008-08-31 17:54 912,812 —-a-r c:\program files\MozBkup.exe
2008-08-31 17:35 1,745,837 —-a-r c:\program files\Image_Burn.exe
2008-08-31 16:48 1,992,888 —-a-r c:\program files\TSO.EXE
2008-08-31 16:44 6,000,350 —-a-r c:\program files\TeamSpeak.exe
2008-08-31 16:30 322,449 —-a-r c:\program files\TASKSWITCH.EXE
2008-08-31 16:27 337,481 —-a-r c:\program files\SlideShow.exe
2008-08-31 16:21 60,140,922 —-a-r c:\program files\SAMSUNG_PC_STUDIO.EXE
2008-08-31 16:07 309,147 —-a-r c:\program files\IMAGERESIZER.exe
2008-08-31 16:00 15,817,845 —-a-r c:\program files\IE7X86ENU.EXE
2008-08-31 15:52 651,522 —-a-r c:\program files\DMSETUP.EXE
2008-08-31 15:24 221,280 —-a-r c:\program files\SelectAll.exe
2008-08-31 15:12 814,793 —-a-r c:\program files\Desktop_Clock.exe
2008-08-31 15:05 250,723 —-a-r c:\program files\Desktop_Weather.exe
2008-08-31 14:56 975,622 —-a-r c:\program files\7z.exe
2008-08-31 14:48 1,048,916 —-a-r c:\program files\Unistaller.exe
2008-08-31 14:23 1,864,599 —-a-r c:\program files\Advisor.exe
2008-08-30 21:32 748,515 —-a-r c:\program files\WinPatrol.exe
2008-08-28 23:06 166,724,421 —-a-r c:\program files\OOffice.exe
2008-08-24 20:28 5,518,508 —-a-r c:\program files\sunbird-0.8.en-US.win32.installer.exe
2008-08-24 20:26 6,073,931 —-a-r c:\program files\Firefox.exe
2008-08-24 15:00 17,207,702 —-a-r c:\program files\gimp-2.4.5-i686-setup.exe
2008-08-24 14:40 2,754,677 —-a-r c:\program files\foxitreader23_setup.exe
2008-08-24 14:15 256,152 —-a-r c:\program files\D4.exe
2008-08-24 13:55 326,407,571 —-a-r c:\program files\apup.exe
2008-08-13 23:28 6,104,632 —-a-r c:\program files\PICASAWEB-CURRENT-SETUP.EXE
2008-12-31 19:25 67,688 —-a-w c:\program files\mozilla firefox\components\jar50.dll
2008-12-31 19:25 54,368 —-a-w c:\program files\mozilla firefox\components\jsd3250.dll
2008-12-31 19:25 34,944 —-a-w c:\program files\mozilla firefox\components\myspell.dll
2008-12-31 19:25 46,712 —-a-w c:\program files\mozilla firefox\components\spellchk.dll
2008-12-31 19:25 172,136 —-a-w c:\program files\mozilla firefox\components\xpinstal.dll
.

——- Sigcheck ——-

2008-04-14 05:42 1423872 dc7c3534cf32c669705016aae6d8a334 c:\windows\explorer.exe
2004-08-03 18:56 1422336 4b0011b8e35843966a3ce5685058420f c:\windows\$NtServicePackUninstall$\explorer.exe
2008-04-14 05:42 1033216 82efc6e240332e1fda23f064bf485e74 c:\windows\ServicePackFiles\i386\explorer.exe
2008-04-13 19:12 1033728 12896823fb95bfb3dc9b46bcaedc9923 c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\explorer.exe
2008-04-14 05:42 1423872 dc7c3534cf32c669705016aae6d8a334 c:\windows\system32\VITrans\explorer.exe
.
((((((((((((((((((((((((((((( snapshot@2009-01-30_23.47.53.10 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-20 17:02:28 163,328 —-a-w c:\windows\ERDNT\AutoBackup\1-31-2009\ERDNT.EXE
+ 2009-01-31 05:01:13 3,313,664 —-a-w c:\windows\ERDNT\AutoBackup\1-31-2009\Users\00000001\NTUSER.DAT
+ 2009-01-31 05:01:18 192,512 —-a-w c:\windows\ERDNT\AutoBackup\1-31-2009\Users\00000002\UsrClass.dat
+ 2005-10-20 17:02:28 163,328 —-a-w c:\windows\ERDNT\AutoBackup\2-1-2009\ERDNT.EXE
+ 2009-02-01 15:03:38 3,325,952 —-a-w c:\windows\ERDNT\AutoBackup\2-1-2009\Users\00000001\NTUSER.DAT
+ 2009-02-01 15:03:39 192,512 —-a-w c:\windows\ERDNT\AutoBackup\2-1-2009\Users\00000002\UsrClass.dat
+ 2005-10-20 17:02:28 163,328 —-a-w c:\windows\ERDNT\AutoBackup\2009-01-31\ERDNT.EXE
+ 2009-01-31 15:18:03 3,325,952 —-a-w c:\windows\ERDNT\AutoBackup\2009-01-31\Users\00000001\NTUSER.DAT
+ 2009-01-31 15:18:03 192,512 —-a-w c:\windows\ERDNT\AutoBackup\2009-01-31\Users\00000002\UsrClass.dat
+ 2005-10-20 17:02:28 163,328 —-a-w c:\windows\ERDNT\AutoBackup\2009-02-01\ERDNT.EXE
+ 2009-02-01 18:44:37 3,325,952 —-a-w c:\windows\ERDNT\AutoBackup\2009-02-01\Users\00000001\NTUSER.DAT
+ 2009-02-01 18:44:38 192,512 —-a-w c:\windows\ERDNT\AutoBackup\2009-02-01\Users\00000002\UsrClass.dat
- 2005-10-21 01:02:28 163,328 —-a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2005-10-20 12:02:28 163,328 —-a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2005-10-20 12:02:28 163,328 —-a-w c:\windows\ERDNT\subs\ERDNT.EXE
+ 2008-08-07 20:27:04 163,328 —-a-w c:\windows\ERUNT\SDFIX\ERDNT.EXE
+ 2009-01-31 14:49:16 3,325,952 —-a-w c:\windows\ERUNT\SDFIX\Users\00000001\NTUSER.DAT
+ 2009-01-31 14:49:16 192,512 —-a-w c:\windows\ERUNT\SDFIX\Users\00000002\UsrClass.dat
+ 2008-08-07 20:27:04 163,328 —-a-w c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE
+ 2009-01-31 14:49:15 3,325,952 —-a-w c:\windows\ERUNT\SDFIX_First_Run\Users\00000001\NTUSER.DAT
+ 2009-01-31 14:49:15 192,512 —-a-w c:\windows\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat
- 2008-04-14 10:42:34 224,256 —-a-w c:\windows\regedit.exe
+ 2008-04-14 10:42:34 146,432 —-a-w c:\windows\regedit.exe
- 2000-08-31 13:00:00 161,792 —-a-w c:\windows\SWREG.exe
+ 2000-08-31 13:00:00 286,720 —-a-w c:\windows\SWREG.exe
- 2008-04-14 10:41:52 38,400 —-a-w c:\windows\system32\batmeter.dll
+ 2008-04-14 10:41:52 29,184 —-a-w c:\windows\system32\batmeter.dll
- 2008-08-17 01:49:18 117,760 —-a-w c:\windows\system32\calc.exe
+ 2001-08-23 07:00:00 114,688 —-a-w c:\windows\system32\calc.exe
- 2001-08-23 07:00:00 83,456 —-a-w c:\windows\system32\charmap.exe
+ 2001-08-23 07:00:00 80,384 —-a-w c:\windows\system32\charmap.exe
- 2008-04-14 10:41:52 501,248 —-a-w c:\windows\system32\cmdial32.dll
+ 2008-04-14 10:41:52 344,064 —-a-w c:\windows\system32\cmdial32.dll
+ 2008-04-14 05:16:20 53,376 -c–a-w c:\windows\system32\dllcache\1394bus.sys
+ 2001-08-17 19:06:48 11,264 -c–a-w c:\windows\system32\dllcache\1394vdbg.sys
+ 2001-08-17 19:55:58 689,216 -c–a-w c:\windows\system32\dllcache\3dfxvs.dll
+ 2001-08-17 17:48:32 148,352 -c–a-w c:\windows\system32\dllcache\3dfxvsm.sys
+ 2008-04-14 05:10:52 12,288 -c–a-w c:\windows\system32\dllcache\4mmdat.sys
+ 2008-04-14 05:16:22 48,128 -c–a-w c:\windows\system32\dllcache\61883.sys
+ 2001-08-17 19:55:58 38,400 -c–a-w c:\windows\system32\dllcache\8514a.dll
+ 2001-08-18 03:36:10 98,304 -c–a-w c:\windows\system32\dllcache\a3d.dll
+ 2001-08-18 03:36:10 462,848 -c–a-w c:\windows\system32\dllcache\a3dapi.dll
+ 2008-04-14 10:41:50 136,192 -c–a-w c:\windows\system32\dllcache\aaclient.dll
+ 2001-08-17 18:52:00 23,552 -c–a-w c:\windows\system32\dllcache\abp480n5.sys
+ 2008-04-14 03:06:02 231,552 -c–a-w c:\windows\system32\dllcache\ac97ali.sys
+ 2001-08-17 17:20:04 96,256 -c–a-w c:\windows\system32\dllcache\ac97intc.sys
+ 2001-08-17 17:20:16 297,728 -c–a-w c:\windows\system32\dllcache\ac97sis.sys
+ 2008-04-14 03:06:08 84,480 -c–a-w c:\windows\system32\dllcache\ac97via.sys
+ 2008-04-14 10:42:12 184,320 -c–a-w c:\windows\system32\dllcache\accwiz.exe
+ 2001-08-18 03:36:10 61,440 -c–a-w c:\windows\system32\dllcache\acerscad.dll
+ 2008-04-14 10:41:50 1,852,928 -c–a-w c:\windows\system32\dllcache\acgenral.dll
+ 2008-04-14 10:41:50 451,072 -c–a-w c:\windows\system32\dllcache\aclayers.dll
+ 2008-04-14 10:41:50 141,312 -c–a-w c:\windows\system32\dllcache\aclua.dll
+ 2008-04-14 05:06:36 187,776 -c–a-w c:\windows\system32\dllcache\acpi.sys
+ 2001-08-23 07:00:00 11,648 -c–a-w c:\windows\system32\dllcache\acpiec.sys
+ 2008-04-14 10:41:50 245,248 -c–a-w c:\windows\system32\dllcache\acspecfc.dll
+ 2008-04-14 10:41:50 193,536 -c–a-w c:\windows\system32\dllcache\activeds.dll
+ 2008-04-14 10:42:14 4,096 -c–a-w c:\windows\system32\dllcache\actmovie.exe
+ 2008-04-14 10:41:50 98,304 -c–a-w c:\windows\system32\dllcache\actxprxy.dll
+ 2008-04-14 10:41:50 116,224 -c–a-w c:\windows\system32\dllcache\acxtrnal.dll
+ 2001-08-17 18:53:02 7,424 -c–a-w c:\windows\system32\dllcache\adicvls.sys
+ 2001-08-17 17:11:18 20,160 -c–a-w c:\windows\system32\dllcache\adm8511.sys
+ 2001-08-17 17:19:10 584,448 -c–a-w c:\windows\system32\dllcache\adm8810.sys
+ 2001-08-17 17:19:14 553,984 -c–a-w c:\windows\system32\dllcache\adm8820.sys
+ 2001-08-17 17:19:14 747,392 -c–a-w c:\windows\system32\dllcache\adm8830.sys
+ 2008-04-14 10:41:50 29,696 -c–a-w c:\windows\system32\dllcache\admexs.dll
+ 2008-04-14 10:41:50 20,540 -c–a-w c:\windows\system32\dllcache\admin.dll
+ 2008-04-14 10:42:14 16,439 -c–a-w c:\windows\system32\dllcache\admin.exe
+ 2008-04-14 03:06:02 10,880 -c–a-w c:\windows\system32\dllcache\admjoy.sys
+ 2008-04-14 10:41:50 43,520 -c–a-w c:\windows\system32\dllcache\admwprox.dll
+ 2001-08-17 17:11:16 46,112 -c–a-w c:\windows\system32\dllcache\adptsf50.sys
+ 2001-08-17 19:07:32 101,888 -c–a-w c:\windows\system32\dllcache\adpu160m.sys
+ 2008-04-14 10:41:50 290,816 -c–a-w c:\windows\system32\dllcache\adsiis51.dll
+ 2008-04-14 10:41:50 143,360 -c–a-w c:\windows\system32\dllcache\adsldpc.dll
+ 2008-04-14 10:41:50 263,680 -c–a-w c:\windows\system32\dllcache\adsnt.dll
+ 2008-04-14 10:41:50 123,392 -c–a-w c:\windows\system32\dllcache\adsnw.dll
+ 2008-04-14 10:41:50 4,255 -c–a-w c:\windows\system32\dllcache\adv01nt5.dll
+ 2008-04-14 10:41:50 3,967 -c–a-w c:\windows\system32\dllcache\adv02nt5.dll
+ 2008-04-14 10:41:50 3,615 -c–a-w c:\windows\system32\dllcache\adv05nt5.dll
+ 2008-04-14 10:41:50 3,647 -c–a-w c:\windows\system32\dllcache\adv07nt5.dll
+ 2008-04-14 10:41:50 3,135 -c–a-w c:\windows\system32\dllcache\adv08nt5.dll
+ 2008-04-14 10:41:50 3,711 -c–a-w c:\windows\system32\dllcache\adv09nt5.dll
+ 2008-04-14 10:41:50 3,775 -c–a-w c:\windows\system32\dllcache\adv11nt5.dll
+ 2008-04-14 10:41:50 617,472 -c–a-w c:\windows\system32\dllcache\advapi32.dll
+ 2008-04-14 03:09:24 142,592 -c–a-w c:\windows\system32\dllcache\aec.sys
+ 2008-04-14 10:41:50 24,064 -c–a-w c:\windows\system32\dllcache\agentanm.dll
+ 2008-04-14 10:41:50 214,016 -c–a-w c:\windows\system32\dllcache\agentctl.dll
+ 2008-04-14 10:41:50 42,496 -c–a-w c:\windows\system32\dllcache\agentdp2.dll
+ 2008-04-14 10:41:50 57,344 -c–a-w c:\windows\system32\dllcache\agentdpv.dll
+ 2008-04-14 10:41:50 49,152 -c–a-w c:\windows\system32\dllcache\agentmpx.dll
+ 2008-04-14 10:41:50 24,064 -c–a-w c:\windows\system32\dllcache\agentpsh.dll
+ 2008-04-14 10:41:50 44,032 -c–a-w c:\windows\system32\dllcache\agentsr.dll
+ 2008-04-14 10:42:14 256,512 -c–a-w c:\windows\system32\dllcache\agentsvr.exe
+ 2008-04-14 05:06:40 42,368 -c–a-w c:\windows\system32\dllcache\agp440.sys
+ 2008-04-14 05:06:40 44,928 -c–a-w c:\windows\system32\dllcache\agpcpq.sys
+ 2007-04-03 04:56:00 19,456 -c–a-w c:\windows\system32\dllcache\agt0401.dll
+ 2007-04-03 04:56:00 19,456 -c–a-w c:\windows\system32\dllcache\agt0404.dll
+ 2007-04-03 04:56:00 19,456 -c–a-w c:\windows\system32\dllcache\agt0405.dll
+ 2007-04-03 04:56:00 19,456 -c–a-w c:\windows\system32\dllcache\agt0406.dll
+ 2007-04-03 04:56:02 21,504 -c–a-w c:\windows\system32\dllcache\agt0407.dll
+ 2007-04-03 04:56:02 22,016 -c–a-w c:\windows\system32\dllcache\agt0408.dll
+ 2008-04-14 04:02:30 19,968 -c–a-w c:\windows\system32\dllcache\agt0409.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt040b.dll
+ 2007-04-03 04:56:02 21,504 -c–a-w c:\windows\system32\dllcache\agt040c.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt040d.dll
+ 2007-04-03 04:56:02 19,968 -c–a-w c:\windows\system32\dllcache\agt040e.dll
+ 2007-04-03 04:56:02 20,992 -c–a-w c:\windows\system32\dllcache\agt0410.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt0411.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt0412.dll
+ 2007-04-03 04:56:02 20,992 -c–a-w c:\windows\system32\dllcache\agt0413.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt0414.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt0415.dll
+ 2007-04-03 04:56:02 20,480 -c–a-w c:\windows\system32\dllcache\agt0416.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt0419.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt041d.dll
+ 2007-04-03 04:56:02 19,456 -c–a-w c:\windows\system32\dllcache\agt041f.dll
+ 2007-04-03 04:56:04 19,456 -c–a-w c:\windows\system32\dllcache\agt0804.dll
+ 2007-04-03 04:56:04 20,992 -c–a-w c:\windows\system32\dllcache\agt0816.dll
+ 2007-04-03 04:56:04 20,480 -c–a-w c:\windows\system32\dllcache\agt0c0a.dll
+ 2008-04-14 10:41:50 24,064 -c–a-w c:\windows\system32\dllcache\agtintl.dll
+ 2001-08-17 18:52:02 12,800 -c–a-w c:\windows\system32\dllcache\aha154x.sys
+ 2008-04-14 10:42:14 98,304 -c–a-w c:\windows\system32\dllcache\ahui.exe
+ 2001-08-17 19:07:36 55,168 -c–a-w c:\windows\system32\dllcache\aic78u2.sys
+ 2001-08-17 19:07:38 56,960 -c–a-w c:\windows\system32\dllcache\aic78xx.sys
+ 2008-04-14 10:42:14 44,544 -c–a-w c:\windows\system32\dllcache\alg.exe
+ 2001-08-17 17:11:18 27,678 -c–a-w c:\windows\system32\dllcache\ali5261.sys
+ 2001-08-17 18:49:02 26,624 -c–a-w c:\windows\system32\dllcache\alifir.sys
+ 2001-08-17 18:51:56 5,248 -c–a-w c:\windows\system32\dllcache\aliide.sys
+ 2008-04-14 05:06:40 42,752 -c–a-w c:\windows\system32\dllcache\alim1541.sys
+ 2008-04-14 10:41:50 17,408 -c–a-w c:\windows\system32\dllcache\alrsvc.dll
+ 2001-08-17 17:11:20 16,969 -c–a-w c:\windows\system32\dllcache\amb8002.sys
+ 2008-04-14 05:06:40 43,008 -c–a-w c:\windows\system32\dllcache\amdagp.sys
+ 2008-04-14 05:01:34 37,376 -c–a-w c:\windows\system32\dllcache\amdk6.sys
+ 2008-04-14 05:01:34 37,760 -c–a-w c:\windows\system32\dllcache\amdk7.sys
+ 2001-08-17 18:52:04 12,032 -c–a-w c:\windows\system32\dllcache\amsint.sys
+ 2008-04-14 10:41:50 70,656 -c–a-w c:\windows\system32\dllcache\amstream.dll
+ 2008-04-14 03:05:30 36,224 -c–a-w c:\windows\system32\dllcache\an983.sys
+ 2001-08-17 18:47:22 6,272 -c–a-w c:\windows\system32\dllcache\apmbatt.sys
+ 2008-04-14 10:41:50 108,544 -c–a-w c:\windows\system32\dllcache\appconf.dll
+ 2008-04-14 10:41:50 125,952 -c–a-w c:\windows\system32\dllcache\apphelp.dll
+ 2008-04-14 10:41:50 167,936 -c–a-w c:\windows\system32\dllcache\appmgmts.dll
+ 2008-04-14 10:41:50 295,936 -c–a-w c:\windows\system32\dllcache\appmgr.dll
+ 2008-04-14 10:41:50 331,264 -c–a-w c:\windows\system32\dllcache\aqueue.dll
+ 2008-04-14 05:21:26 60,800 -c–a-w c:\windows\system32\dllcache\arp1394.sys
+ 2001-08-17 18:52:00 26,496 -c–a-w c:\windows\system32\dllcache\asc.sys
+ 2001-08-17 18:52:04 22,400 -c–a-w c:\windows\system32\dllcache\asc3350p.sys
+ 2001-08-17 18:51:58 14,848 -c–a-w c:\windows\system32\dllcache\asc3550.sys
+ 2008-04-14 10:41:50 369,664 -c–a-w c:\windows\system32\dllcache\asp51.dll
+ 2001-08-17 17:12:34 97,354 -c–a-w c:\windows\system32\dllcache\aspndis3.sys
+ 2008-04-14 10:42:14 30,208 -c–a-w c:\windows\system32\dllcache\asr_fmt.exe
+ 2008-04-14 10:42:14 32,768 -c–a-w c:\windows\system32\dllcache\asr_pfu.exe
+ 2008-04-14 10:41:50 65,024 -c–a-w c:\windows\system32\dllcache\asycfilt.dll
+ 2008-04-14 05:27:28 14,336 -c–a-w c:\windows\system32\dllcache\asyncmac.sys
+ 2008-04-14 10:42:14 25,088 -c–a-w c:\windows\system32\dllcache\at.exe
+ 2008-04-14 05:10:32 96,512 -c–a-w c:\windows\system32\dllcache\atapi.sys
+ 2001-08-17 19:55:58 96,128 -c–a-w c:\windows\system32\dllcache\ati.dll
+ 2001-08-17 18:57:12 77,568 -c–a-w c:\windows\system32\dllcache\ati.sys
+ 2008-04-14 03:04:18 56,623 -c–a-w c:\windows\system32\dllcache\ati1btxx.sys
+ 2008-04-14 03:04:18 11,615 -c–a-w c:\windows\system32\dllcache\ati1mdxx.sys
+ 2008-04-14 03:04:18 12,047 -c–a-w c:\windows\system32\dllcache\ati1pdxx.sys
+ 2008-04-14 03:04:18 30,671 -c–a-w c:\windows\system32\dllcache\ati1raxx.sys
+ 2008-04-14 03:04:18 63,663 -c–a-w c:\windows\system32\dllcache\ati1rvxx.sys
+ 2008-04-14 03:04:18 26,367 -c–a-w c:\windows\system32\dllcache\ati1snxx.sys
+ 2008-04-14 03:04:18 21,343 -c–a-w c:\windows\system32\dllcache\ati1ttxx.sys
+ 2008-04-14 03:04:18 36,463 -c–a-w c:\windows\system32\dllcache\ati1tuxx.sys
+ 2008-04-14 03:04:20 29,455 -c–a-w c:\windows\system32\dllcache\ati1xbxx.sys
+ 2008-04-14 03:04:20 34,735 -c–a-w c:\windows\system32\dllcache\ati1xsxx.sys
+ 2008-04-14 10:41:50 229,376 -c–a-w c:\windows\system32\dllcache\ati2cqag.dll
+ 2008-04-14 10:41:50 377,984 -c–a-w c:\windows\system32\dllcache\ati2dvaa.dll
+ 2008-04-14 10:41:50 201,728 -c–a-w c:\windows\system32\dllcache\ati2dvag.dll
+ 2008-04-14 03:04:16 327,040 -c–a-w c:\windows\system32\dllcache\ati2mtaa.sys
+ 2008-04-14 03:04:16 701,440 -c–a-w c:\windows\system32\dllcache\ati2mtag.sys
+ 2008-04-14 10:41:50 870,784 -c–a-w c:\windows\system32\dllcache\ati3d1ag.dll
+ 2008-04-14 10:41:52 1,888,992 -c–a-w c:\windows\system32\dllcache\ati3duag.dll
+ 2001-08-17 17:49:04 46,464 -c–a-w c:\windows\system32\dllcache\atibt829.sys
+ 2001-08-17 19:55:58 382,592 -c–a-w c:\windows\system32\dllcache\atidrab.dll
+ 2001-08-17 19:56:00 137,216 -c–a-w c:\windows\system32\dllcache\atidrae.dll
+ 2001-08-17 19:56:00 268,160 -c–a-w c:\windows\system32\dllcache\atidvai.dll
+ 2001-08-18 03:36:38 37,376 -c–a-w c:\windows\system32\dllcache\atievxx.exe
+ 2001-08-17 17:48:56 289,664 -c–a-w c:\windows\system32\dllcache\atimpab.sys
+ 2001-08-17 17:49:00 75,136 -c–a-w c:\windows\system32\dllcache\atimpae.sys
+ 2001-08-17 17:48:40 281,600 -c–a-w c:\windows\system32\dllcache\atimtai.sys
+ 2008-04-14 03:04:18 57,856 -c–a-w c:\windows\system32\dllcache\atinbtxx.sys
+ 2008-04-14 03:04:18 13,824 -c–a-w c:\windows\system32\dllcache\atinmdxx.sys
+ 2008-04-14 03:04:18 14,336 -c–a-w c:\windows\system32\dllcache\atinpdxx.sys
+ 2008-04-14 03:04:18 52,224 -c–a-w c:\windows\system32\dllcache\atinraxx.sys
+ 2008-04-14 03:04:18 104,960 -c–a-w c:\windows\system32\dllcache\atinrvxx.sys
+ 2008-04-14 03:04:18 28,672 -c–a-w c:\windows\system32\dllcache\atinsnxx.sys
+ 2008-04-14 03:04:18 13,824 -c–a-w c:\windows\system32\dllcache\atinttxx.sys
+ 2008-04-14 03:04:18 73,216 -c–a-w c:\windows\system32\dllcache\atintuxx.sys
+ 2008-04-14 03:04:20 31,744 -c–a-w c:\windows\system32\dllcache\atinxbxx.sys
+ 2008-04-14 03:04:20 63,488 -c–a-w c:\windows\system32\dllcache\atinxsxx.sys
+ 2001-08-17 17:49:36 10,240 -c–a-w c:\windows\system32\dllcache\atipcxxx.sys
+ 2001-08-17 19:56:00 104,832 -c–a-w c:\windows\system32\dllcache\atiraged.dll
+ 2001-08-17 17:48:48 70,528 -c–a-w c:\windows\system32\dllcache\atiragem.sys
+ 2001-08-17 17:49:12 49,920 -c–a-w c:\windows\system32\dllcache\atirtcap.sys
+ 2001-08-17 17:49:18 26,880 -c–a-w c:\windows\system32\dllcache\atirtsnd.sys
+ 2001-08-17 17:49:22 17,152 -c–a-w c:\windows\system32\dllcache\atitunep.sys
+ 2001-08-17 17:49:28 17,152 -c–a-w c:\windows\system32\dllcache\atitvsnd.sys
+ 2001-08-17 17:49:38 9,472 -c–a-w c:\windows\system32\dllcache\ativmdcd.sys
+ 2008-04-14 10:41:52 32,768 -c–a-w c:\windows\system32\dllcache\ativtmxx.dll
+ 2001-08-17 17:49:44 19,456 -c–a-w c:\windows\system32\dllcache\ativttxx.sys
+ 2008-04-14 10:41:52 516,768 -c–a-w c:\windows\system32\dllcache\ativvaxx.dll
+ 2001-08-17 17:49:48 26,624 -c–a-w c:\windows\system32\dllcache\ativxbar.sys
+ 2001-08-17 17:49:34 23,552 -c–a-w c:\windows\system32\dllcache\atixbar.sys
+ 2008-04-14 10:41:52 58,880 -c–a-w c:\windows\system32\dllcache\atl.dll
+ 2008-04-14 10:42:14 11,264 -c–a-w c:\windows\system32\dllcache\atmadm.exe
+ 2008-04-14 05:21:26 59,904 -c–a-w c:\windows\system32\dllcache\atmarpc.sys
+ 2008-04-14 10:39:02 285,696 -c–a-w c:\windows\system32\dllcache\atmfd.dll
+ 2008-04-14 05:21:32 55,808 -c–a-w c:\windows\system32\dllcache\atmlane.sys
+ 2008-04-14 10:41:52 30,208 -c–a-w c:\windows\system32\dllcache\atmlib.dll
+ 2008-04-14 10:42:14 12,288 -c–a-w c:\windows\system32\dllcache\attrib.exe
+ 2008-04-14 10:41:52 21,183 -c–a-w c:\windows\system32\dllcache\atv01nt5.dll
+ 2008-04-14 10:41:52 11,359 -c–a-w c:\windows\system32\dllcache\atv02nt5.dll
+ 2008-04-14 10:41:52 25,471 -c–a-w c:\windows\system32\dllcache\atv04nt5.dll
+ 2008-04-14 10:41:52 14,143 -c–a-w c:\windows\system32\dllcache\atv06nt5.dll
+ 2008-04-14 10:41:52 17,279 -c–a-w c:\windows\system32\dllcache\atv10nt5.dll
+ 2008-04-14 10:41:52 42,496 -c–a-w c:\windows\system32\dllcache\audiosrv.dll
+ 2008-04-14 10:42:14 14,336 -c–a-w c:\windows\system32\dllcache\auditusr.exe
+ 2001-08-17 17:59:44 3,072 -c–a-w c:\windows\system32\dllcache\audstub.sys
+ 2008-04-14 10:41:52 20,540 -c–a-w c:\windows\system32\dllcache\author.dll
+ 2008-04-14 10:42:14 16,439 -c–a-w c:\windows\system32\dllcache\author.exe
+ 2008-04-14 10:41:52 62,464 -c–a-w c:\windows\system32\dllcache\authz.dll
+ 2008-04-14 10:42:14 588,800 -c–a-w c:\windows\system32\dllcache\autochk.exe
+ 2008-04-14 10:42:14 602,624 -c–a-w c:\windows\system32\dllcache\autoconv.exe
+ 2008-04-14 10:42:14 580,608 -c–a-w c:\windows\system32\dllcache\autofmt.exe
+ 2008-04-14 10:42:14 11,264 -c–a-w c:\windows\system32\dllcache\autolfn.exe
+ 2008-04-14 05:16:22 38,912 -c–a-w c:\windows\system32\dllcache\avc.sys
+ 2001-08-17 19:01:12 36,096 -c–a-w c:\windows\system32\dllcache\avcaudio.sys
+ 2008-04-14 05:16:08 13,696 -c–a-w c:\windows\system32\dllcache\avcstrm.sys
+ 2008-04-14 10:41:52 84,992 -c–a-w c:\windows\system32\dllcache\avifil32.dll
+ 2001-08-18 03:36:10 87,552 -c–a-w c:\windows\system32\dllcache\avmcoxp.dll
+ 2001-08-18 03:36:10 144,384 -c–a-w c:\windows\system32\dllcache\avmenum.dll
+ 2001-08-17 17:13:48 37,568 -c–a-w c:\windows\system32\dllcache\avmwan.sys
+ 2008-04-14 09:41:52 233,472 -c–a-w c:\windows\system32\dllcache\azroles.dll
+ 2001-08-17 17:19:16 36,992 -c–a-w c:\windows\system32\dllcache\aztw2320.sys
+ 2001-08-17 17:13:56 89,952 -c–a-w c:\windows\system32\dllcache\b1cbase.sys
+ 2001-08-17 17:11:30 96,640 -c–a-w c:\windows\system32\dllcache\b57xp32.sys
+ 2001-08-17 19:56:00 342,336 -c–a-w c:\windows\system32\dllcache\banshee.dll
+ 2001-08-17 17:48:28 36,128 -c–a-w c:\windows\system32\dllcache\banshee.sys
+ 2008-04-14 10:41:52 52,736 -c–a-w c:\windows\system32\dllcache\basesrv.dll
+ 2008-04-14 10:41:52 29,184 -c–a-w c:\windows\system32\dllcache\batmeter.dll
+ 2008-04-14 10:41:52 8,704 -c–a-w c:\windows\system32\dllcache\batt.dll
+ 2008-04-14 05:06:34 14,208 -c–a-w c:\windows\system32\dllcache\battc.sys
+ 2001-08-17 17:11:28 66,557 -c–a-w c:\windows\system32\dllcache\bcm42u.sys
+ 2001-08-17 17:11:26 54,271 -c–a-w c:\windows\system32\dllcache\bcm42xx5.sys
+ 2001-08-17 17:11:30 26,568 -c–a-w c:\windows\system32\dllcache\bcm4e5.sys
+ 2008-04-14 05:16:22 11,776 -c–a-w c:\windows\system32\dllcache\bdasup.sys
+ 2008-04-14 10:41:52 17,408 -c–a-w c:\windows\system32\dllcache\bidispl.dll
+ 2001-08-18 03:36:10 102,400 -c–a-w c:\windows\system32\dllcache\binlsvc.dll
+ 2008-04-14 10:41:52 8,192 -c–a-w c:\windows\system32\dllcache\bitsprx2.dll
+ 2008-04-14 10:41:52 7,168 -c–a-w c:\windows\system32\dllcache\bitsprx3.dll
+ 2008-04-14 10:41:52 7,168 -c–a-w c:\windows\system32\dllcache\bitsprx4.dll
+ 2008-04-14 10:42:14 71,680 -c–a-w c:\windows\system32\dllcache\blastcln.exe
+ 2008-04-14 10:42:14 142,848 -c–a-w c:\windows\system32\dllcache\bootcfg.exe
+ 2001-08-18 03:36:10 19,456 -c–a-w c:\windows\system32\dllcache\brbidiif.dll
+ 2001-08-18 03:36:10 9,728 -c–a-w c:\windows\system32\dllcache\brcoinst.dll
+ 2001-08-18 03:36:10 12,800 -c–a-w c:\windows\system32\dllcache\brevif.dll
+ 2001-08-17 18:12:12 2,944 -c–a-w c:\windows\system32\dllcache\brfilt.sys
+ 2001-08-17 18:12:22 12,160 -c–a-w c:\windows\system32\dllcache\brfiltlo.sys
+ 2001-08-17 18:12:24 3,968 -c–a-w c:\windows\system32\dllcache\brfiltup.sys
+ 2008-04-14 05:23:24 71,552 -c–a-w c:\windows\system32\dllcache\bridge.sys
+ 2001-08-18 03:36:10 15,360 -c–a-w c:\windows\system32\dllcache\brmfbidi.dll
+ 2001-08-18 03:36:10 81,408 -c–a-w c:\windows\system32\dllcache\brmfcwia.dll
+ 2001-08-18 03:36:10 29,696 -c–a-w c:\windows\system32\dllcache\brmflpt.dll
+ 2001-08-18 03:36:38 32,256 -c–a-w c:\windows\system32\dllcache\brmfrsmg.exe
+ 2001-08-18 03:36:10 41,472 -c–a-w c:\windows\system32\dllcache\brmfusb.dll
+ 2008-04-14 03:33:26 63,488 -c–a-w c:\windows\system32\dllcache\browselc.dll
+ 2008-04-14 10:41:52 77,824 -c–a-w c:\windows\system32\dllcache\browser.dll
+ 2008-04-14 10:41:52 1,025,024 -c–a-w c:\windows\system32\dllcache\browseui.dll
+ 2008-04-14 10:41:52 78,336 -c–a-w c:\windows\system32\dllcache\browsewm.dll
+ 2001-08-17 18:12:24 3,168 -c–a-w c:\windows\system32\dllcache\brparimg.sys
+ 2001-08-17 18:12:18 39,552 -c–a-w c:\windows\system32\dllcache\brparwdm.sys
+ 2001-08-18 03:36:10 5,120 -c–a-w c:\windows\system32\dllcache\brscnrsm.dll
+ 2001-08-18 03:36:10 9,728 -c–a-w c:\windows\system32\dllcache\brserif.dll
+ 2001-08-17 18:12:20 60,416 -c–a-w c:\windows\system32\dllcache\brserwdm.sys
+ 2001-08-17 18:12:20 11,008 -c–a-w c:\windows\system32\dllcache\brusbmdm.sys
+ 2001-08-17 18:12:22 10,368 -c–a-w c:\windows\system32\dllcache\brusbscn.sys
+ 2001-08-17 17:11:24 31,529 -c–a-w c:\windows\system32\dllcache\brzwlan.sys
+ 2008-04-14 10:41:52 20,992 -c–a-w c:\windows\system32\dllcache\bthci.dll
+ 2008-04-14 05:16:34 17,024 -c–a-w c:\windows\system32\dllcache\bthenum.sys
+ 2008-04-14 05:16:34 37,888 -c–a-w c:\windows\system32\dllcache\bthmodem.sys
+ 2008-04-14 05:21:36 101,120 -c–a-w c:\windows\system32\dllcache\bthpan.sys
+ 2008-04-14 05:16:32 36,480 -c–a-w c:\windows\system32\dllcache\bthprint.sys
+ 2008-04-14 10:41:52 30,208 -c–a-w c:\windows\system32\dllcache\bthserv.dll
+ 2008-04-14 05:16:30 18,944 -c–a-w c:\windows\system32\dllcache\bthusb.sys
+ 2008-04-14 10:41:52 50,688 -c–a-w c:\windows\system32\dllcache\btpanui.dll
+ 2001-08-17 18:51:00 13,824 -c–a-w c:\windows\system32\dllcache\bulltlp3.sys
+ 2008-04-14 10:41:52 218,112 -c–a-w c:\windows\system32\dllcache\c_g18030.dll
+ 2008-04-14 10:41:52 60,416 -c–a-w c:\windows\system32\dllcache\cabinet.dll
+ 2008-04-14 10:41:52 84,480 -c–a-w c:\windows\system32\dllcache\cabview.dll
+ 2008-04-14 10:42:14 19,968 -c–a-w c:\windows\system32\dllcache\cacls.exe
+ 2008-04-14 10:41:52 385,024 -c–a-w c:\windows\system32\dllcache\callcont.dll
+ 2001-08-17 19:05:48 314,752 -c–a-w c:\windows\system32\dllcache\camdro21.sys
+ 2001-08-17 19:04:46 223,232 -c–a-w c:\windows\system32\dllcache\camdrv21.sys
+ 2001-08-17 19:04:48 171,264 -c–a-w c:\windows\system32\dllcache\camdrv30.sys
+ 2001-08-18 03:36:10 74,240 -c–a-w c:\windows\system32\dllcache\camexo20.dll
+ 2001-08-18 03:36:10 236,032 -c–a-w c:\windows\system32\dllcache\camext20.dll
+ 2008-04-14 10:41:52 121,856 -c–a-w c:\windows\system32\dllcache\camext30.dll
+ 2008-04-14 10:41:52 50,688 -c–a-w c:\windows\system32\dllcache\camocx.dll
+ 2008-04-14 10:41:52 150,016 -c–a-w c:\windows\system32\dllcache\capesnpn.dll
+ 2008-04-14 10:41:52 226,304 -c–a-w c:\windows\system32\dllcache\catsrv.dll
+ 2008-04-14 10:41:52 85,504 -c–a-w c:\windows\system32\dllcache\catsrvps.dll
+ 2008-04-14 10:41:52 625,664 -c–a-w c:\windows\system32\dllcache\catsrvut.dll
+ 2001-08-17 17:12:16 37,916 -c–a-w c:\windows\system32\dllcache\cb102.sys
+ 2001-08-17 17:12:42 39,680 -c–a-w c:\windows\system32\dllcache\cb325.sys
+ 2001-08-17 17:13:14 46,108 -c–a-w c:\windows\system32\dllcache\cben5.sys
+ 2001-08-23 07:00:00 13,952 -c–a-w c:\windows\system32\dllcache\cbidf2k.sys
+ 2001-08-17 18:28:16 714,698 -c–a-w c:\windows\system32\dllcache\cbmdmkxx.sys
+ 2008-04-14 05:16:24 17,024 -c–a-w c:\windows\system32\dllcache\ccdecode.sys
+ 2001-08-17 18:52:06 7,680 -c–a-w c:\windows\system32\dllcache\cd20xrnt.sys
+ 2001-08-23 07:00:00 18,688 -c–a-w c:\windows\system32\dllcache\cdaudio.sys
+ 2008-04-14 05:44:22 63,744 -c–a-w c:\windows\system32\dllcache\cdfs.sys
+ 2008-04-14 10:41:52 151,040 -c–a-w c:\windows\system32\dllcache\cdfview.dll
+ 2008-04-14 10:41:52 2,091,520 -c–a-w c:\windows\system32\dllcache\cdosys.dll
+ 2001-08-17 17:13:12 21,530 -c–a-w c:\windows\system32\dllcache\ce2n5.sys
+ 2001-08-17 17:13:20 27,164 -c–a-w c:\windows\system32\dllcache\ce3n5.sys
+ 2001-08-17 17:13:18 22,044 -c–a-w c:\windows\system32\dllcache\cem28n5.sys
+ 2001-08-17 17:13:18 22,044 -c–a-w c:\windows\system32\dllcache\cem33n5.sys
+ 2001-08-17 17:13:20 49,182 -c–a-w c:\windows\system32\dllcache\cem56n5.sys
+ 2008-04-14 10:41:52 194,560 -c–a-w c:\windows\system32\dllcache\certcli.dll
+ 2008-04-14 10:41:52 457,728 -c–a-w c:\windows\system32\dllcache\certmgr.dll
+ 2008-04-14 10:41:52 38,912 -c–a-w c:\windows\system32\dllcache\cfgbkend.dll
+ 2008-04-14 10:39:06 16,896 -c–a-w c:\windows\system32\dllcache\cfgmgr32.dll
+ 2008-04-14 10:42:16 188,480 -c–a-w c:\windows\system32\dllcache\cfgwiz.exe
+ 2008-04-14 10:41:52 15,423 -c–a-w c:\windows\system32\dllcache\ch7xxnt5.dll
+ 2008-04-14 05:11:00 8,192 -c–a-w c:\windows\system32\dllcache\changer.sys
+ 2008-04-14 10:39:06 97,792 -c–a-w c:\windows\system32\dllcache\chtmbx.dll
+ 2008-04-14 10:39:06 56,320 -c–a-w c:\windows\system32\dllcache\chtskdic.dll
+ 2008-04-14 10:39:06 173,568 -c–a-w c:\windows\system32\dllcache\chtskf.dll
+ 2008-04-14 10:41:52 148,480 -c–a-w c:\windows\system32\dllcache\cic.dll
+ 2008-04-14 10:41:52 1,358,848 -c–a-w c:\windows\system32\dllcache\cimwin32.dll
+ 2001-08-23 07:00:00 262,528 -c–a-w c:\windows\system32\dllcache\cinemst2.sys
+ 2008-04-14 10:39:08 198,656 -c–a-w c:\windows\system32\dllcache\cintime.dll
+ 2008-04-14 03:13:40 480,256 -c–a-w c:\windows\system32\dllcache\cintsetp.exe
+ 2008-04-14 10:41:52 69,120 -c–a-w c:\windows\system32\dllcache\ciodm.dll
+ 2008-04-14 10:42:16 56,832 -c–a-w c:\windows\system32\dllcache\cipher.exe
+ 2008-04-14 10:42:16 5,632 -c–a-w c:\windows\system32\dllcache\cisvc.exe
+ 2008-04-14 05:46:24 49,536 -c–a-w c:\windows\system32\dllcache\classpnp.sys
+ 2008-04-14 10:41:52 110,592 -c–a-w c:\windows\system32\dllcache\clbcatex.dll
+ 2008-04-14 10:41:52 498,688 -c–a-w c:\windows\system32\dllcache\clbcatq.dll
+ 2008-04-14 10:42:16 64,000 -c–a-w c:\windows\system32\dllcache\cleanmgr.exe
+ 2008-04-14 10:42:16 102,912 -c–a-w c:\windows\system32\dllcache\clipbrd.exe
+ 2008-04-14 10:42:16 33,280 -c–a-w c:\windows\system32\dllcache\clipsrv.exe
+ 2008-04-14 10:41:52 58,368 -c–a-w c:\windows\system32\dllcache\clusapi.dll
+ 2008-04-14 10:41:52 15,872 -c–a-w c:\windows\system32\dllcache\cmcfg32.dll
+ 2008-04-14 10:42:16 389,120 -c–a-w c:\windows\system32\dllcache\cmd.exe
+ 2008-04-14 10:41:52 344,064 -c–a-w c:\windows\system32\dllcache\cmdial32.dll
+ 2008-04-14 10:42:16 25,600 -c–a-w c:\windows\system32\dllcache\cmdl32.exe
+ 2008-04-14 10:42:16 39,936 -c–a-w c:\windows\system32\dllcache\cmmon32.exe
+ 2008-04-14 10:41:52 185,344 -c–a-w c:\windows\system32\dllcache\cmprops.dll
+ 2008-04-14 10:41:52 13,312 -c–a-w c:\windows\system32\dllcache\cmsetacl.dll
+ 2008-04-14 10:42:16 63,488 -c–a-w c:\windows\system32\dllcache\cmstp.exe
+ 2008-04-14 10:41:52 39,424 -c–a-w c:\windows\system32\dllcache\cmutil.dll
+ 2008-04-14 10:41:52 47,104 -c–a-w c:\windows\system32\dllcache\cnbjmon.dll
+ 2008-04-14 10:41:52 46,592 -c–a-w c:\windows\system32\dllcache\coadmin.dll
+ 2008-04-14 03:14:18 17,920 -c–a-w c:\windows\system32\dllcache\cobramsg.dll
+ 2008-04-14 10:41:52 60,416 -c–a-w c:\windows\system32\dllcache\colbact.dll
+ 2008-04-14 10:41:52 28,160 -c–a-w c:\windows\system32\dllcache\comaddin.dll
+ 2008-04-14 10:41:52 195,072 -c–a-w c:\windows\system32\dllcache\comadmin.dll
+ 2008-04-14 10:41:52 617,472 -c–a-w c:\windows\system32\dllcache\comctl32.dll
+ 2008-04-14 10:41:52 276,992 -c–a-w c:\windows\system32\dllcache\comdlg32.dll
+ 2008-04-14 10:41:52 252,928 -c–a-w c:\windows\system32\dllcache\compatui.dll
+ 2008-04-14 05:06:38 10,240 -c–a-w c:\windows\system32\dllcache\compbatt.sys
+ 2008-04-14 10:41:52 24,064 -c–a-w c:\windows\system32\dllcache\compfilt.dll
+ 2008-04-14 10:41:52 229,376 -c–a-w c:\windows\system32\dllcache\compstui.dll
+ 2008-04-14 10:41:52 97,792 -c–a-w c:\windows\system32\dllcache\comrepl.dll
+ 2008-04-14 10:42:16 9,728 -c–a-w c:\windows\system32\dllcache\comrepl.exe
+ 2008-04-14 10:42:16 6,144 -c–a-w c:\windows\system32\dllcache\comrereg.exe
+ 2008-04-14 10:41:52 792,064 -c–a-w c:\windows\system32\dllcache\comres.dll
+ 2008-04-14 10:41:52 274,944 -c–a-w c:\windows\system32\dllcache\comsetup.dll
+ 2008-04-14 10:41:52 167,424 -c–a-w c:\windows\system32\dllcache\comsnap.dll
+ 2008-04-14 10:41:52 1,267,200 -c–a-w c:\windows\system32\dllcache\comsvcs.dll
+ 2008-04-14 10:41:52 539,648 -c–a-w c:\windows\system32\dllcache\comuid.dll
+ 2008-04-14 10:42:16 1,032,192 -c–a-w c:\windows\system32\dllcache\conf.exe
+ 2008-04-14 10:41:52 45,056 -c–a-w c:\windows\system32\dllcache\confmrsl.dll
+ 2008-04-14 10:41:52 357,888 -c–a-w c:\windows\system32\dllcache\confmsp.dll
+ 2008-04-14 10:42:16 27,648 -c–a-w c:\windows\system32\dllcache\conime.exe
+ 2008-04-14 10:41:52 35,328 -c–a-w c:\windows\system32\dllcache\corpol.dll
+ 2008-04-14 03:13:34 57,399 -c–a-w c:\windows\system32\dllcache\cplexe.exe
+ 2001-08-17 18:52:06 14,976 -c–a-w c:\windows\system32\dllcache\cpqarray.sys
+ 2001-08-23 07:00:00 11,776 -c–a-w c:\windows\system32\dllcache\cpqdap01.sys
+ 2001-08-17 17:13:14 21,533 -c–a-w c:\windows\system32\dllcache\cpqndis5.sys
+ 2001-08-17 17:11:32 60,970 -c–a-w c:\windows\system32\dllcache\cpqtrnd5.sys
+ 2001-08-18 03:36:10 216,064 -c–a-w c:\windows\system32\dllcache\cpscan.dll
+ 2008-04-14 09:41:52 12,800 -c–a-w c:\windows\system32\dllcache\credssp.dll
+ 2008-04-14 10:41:52 163,840 -c–a-w c:\windows\system32\dllcache\credui.dll
+ 2001-08-17 17:19:18 42,112 -c–a-w c:\windows\system32\dllcache\crtaud.sys
+ 2008-04-14 05:01:34 36,736 -c–a-w c:\windows\system32\dllcache\crusoe.sys
+ 2008-04-14 10:41:52 599,040 -c–a-w c:\windows\system32\dllcache\crypt32.dll
+ 2008-04-14 10:41:52 74,752 -c–a-w c:\windows\system32\dllcache\cryptdlg.dll
+ 2008-04-14 10:41:52 33,280 -c–a-w c:\windows\system32\dllcache\cryptdll.dll
+ 2008-04-14 10:41:52 53,760 -c–a-w c:\windows\system32\dllcache\cryptext.dll
+ 2008-04-14 10:41:52 64,512 -c–a-w c:\windows\system32\dllcache\cryptnet.dll
+ 2008-04-14 10:41:52 62,464 -c–a-w c:\windows\system32\dllcache\cryptsvc.dll
+ 2008-04-14 10:41:52 512,512 -c–a-w c:\windows\system32\dllcache\cryptui.dll
+ 2001-08-18 03:36:12 175,104 -c–a-w c:\windows\system32\dllcache\csamsp.dll
+ 2008-04-14 10:41:52 101,888 -c–a-w c:\windows\system32\dllcache\cscdll.dll
+ 2008-04-14 10:41:52 326,656 -c–a-w c:\windows\system32\dllcache\cscui.dll
+ 2008-04-14 10:41:52 32,256 -c–a-w c:\windows\system32\dllcache\csrsrv.dll
+ 2008-04-14 10:42:16 6,144 -c–a-w c:\windows\system32\dllcache\csrss.exe
+ 2008-04-14 10:42:18 15,360 -c–a-w c:\windows\system32\dllcache\ctfmon.exe
+ 2001-08-17 17:19:28 6,912 -c–a-w c:\windows\system32\dllcache\ctlfacem.sys
+ 2001-08-17 17:19:20 3,712 -c–a-w c:\windows\system32\dllcache\ctljystk.sys
+ 2001-08-17 17:19:20 96,256 -c–a-w c:\windows\system32\dllcache\ctlsb16.sys
+ 2008-04-14 10:41:52 249,856 -c–a-w c:\windows\system32\dllcache\ctmasetp.dll
+ 2001-08-18 03:36:12 4,096 -c–a-w c:\windows\system32\dllcache\ctwdm32.dll
- 2007-08-13 23:54:10 33,792 -c–a-w c:\windows\system32\dllcache\custsat.dll
+ 2004-08-03 23:56:42 28,672 -c–a-w c:\windows\system32\dllcache\custsat.dll
+ 2001-08-17 17:19:24 3,072 -c–a-w c:\windows\system32\dllcache\cwbase.sys
+ 2001-08-17 17:19:26 3,072 -c–a-w c:\windows\system32\dllcache\cwbmidi.sys
+ 2001-08-17 17:19:28 72,832 -c–a-w c:\windows\system32\dllcache\cwbwdm.sys
+ 2001-08-17 17:19:30 3,584 -c–a-w c:\windows\system32\dllcache\cwcosnt5.sys
+ 2001-08-17 17:19:36 111,872 -c–a-w c:\windows\system32\dllcache\cwcspud.sys
+ 2001-08-17 17:19:48 93,952 -c–a-w c:\windows\system32\dllcache\cwcwdm.sys
+ 2008-04-14 03:06:04 48,640 -c–a-w c:\windows\system32\dllcache\cwrwdm.sys
+ 2001-08-17 18:50:36 17,152 -c–a-w c:\windows\system32\dllcache\cyclad-z.sys
+ 2001-08-17 18:50:30 14,848 -c–a-w c:\windows\system32\dllcache\cyclom-y.sys
+ 2001-08-18 03:36:12 28,672 -c–a-w c:\windows\system32\dllcache\cyycoins.dll
+ 2001-08-17 18:50:38 50,176 -c–a-w c:\windows\system32\dllcache\cyyport.sys
+ 2001-08-18 03:36:12 27,648 -c–a-w c:\windows\system32\dllcache\cyyports.dll
+ 2001-08-18 03:36:12 27,136 -c–a-w c:\windows\system32\dllcache\cyzcoins.dll
+ 2001-08-17 18:50:40 49,792 -c–a-w c:\windows\system32\dllcache\cyzport.sys
+ 2001-08-18 03:36:12 27,648 -c–a-w c:\windows\system32\dllcache\cyzports.dll
+ 2001-08-17 17:12:02 117,760 -c–a-w c:\windows\system32\dllcache\d100ib5.sys
+ 2008-04-14 10:41:52 1,179,648 -c–a-w c:\windows\system32\dllcache\d3d8.dll
+ 2008-04-14 10:41:52 8,192 -c–a-w c:\windows\system32\dllcache\d3d8thk.dll
+ 2008-04-14 10:41:52 1,689,088 -c–a-w c:\windows\system32\dllcache\d3d9.dll
+ 2008-04-14 10:41:52 824,320 -c–a-w c:\windows\system32\dllcache\d3dim700.dll
+ 2001-08-17 18:52:16 179,584 -c–a-w c:\windows\system32\dllcache\dac2w2k.sys
+ 2001-08-17 18:52:16 14,720 -c–a-w c:\windows\system32\dllcache\dac960nt.sys
+ 2008-04-14 10:41:52 1,054,208 -c–a-w c:\windows\system32\dllcache\danim.dll
+ 2008-01-19 21:34:50 554,008 -c–a-w c:\windows\system32\dllcache\dao360.dll
+ 2008-04-14 10:41:52 54,272 -c–a-w c:\windows\system32\dllcache\dataclen.dll
+ 2008-04-14 10:41:52 165,376 -c–a-w c:\windows\system32\dllcache\datime.dll
+ 2008-04-14 10:42:18 42,496 -c–a-w c:\windows\system32\dllcache\davcdata.exe
+ 2008-04-14 10:41:52 25,088 -c–a-w c:\windows\system32\dllcache\davclnt.dll
+ 2008-04-14 10:41:52 640,000 -c–a-w c:\windows\system32\dllcache\dbghelp.dll
+ 2008-04-14 10:41:52 110,592 -c–a-w c:\windows\system32\dllcache\dbnetlib.dll
+ 2001-08-18 03:36:12 25,600 -c–a-w c:\windows\system32\dllcache\dc210_32.dll
+ 2001-08-18 03:36:12 80,896 -c–a-w c:\windows\system32\dllcache\dc210usd.dll
+ 2001-08-17 17:12:02 63,208 -c–a-w c:\windows\system32\dllcache\dc21x4.sys
+ 2001-08-18 03:36:12 86,016 -c–a-w c:\windows\system32\dllcache\dc240usd.dll
+ 2001-08-18 03:36:12 110,592 -c–a-w c:\windows\system32\dllcache\dc260usd.dll
+ 2008-04-14 10:41:52 40,960 -c–a-w c:\windows\system32\dllcache\dcap32.dll
+ 2008-04-14 10:41:52 8,704 -c–a-w c:\windows\system32\dllcache\dciman32.dll
+ 2008-04-14 10:42:18 6,144 -c–a-w c:\windows\system32\dllcache\dcomcnfg.exe
+ 2008-04-14 10:42:18 30,208 -c–a-w c:\windows\system32\dllcache\ddeshare.exe
+ 2008-04-14 10:41:52 279,552 -c–a-w c:\windows\system32\dllcache\ddraw.dll
+ 2008-04-14 10:41:52 27,136 -c–a-w c:\windows\system32\dllcache\ddrawex.dll
+ 2001-08-17 18:52:58 7,424 -c–a-w c:\windows\system32\dllcache\ddsmc.sys
+ 2001-08-17 17:11:44 20,928 -c–a-w c:\windows\system32\dllcache\defpa.sys
+ 2008-04-14 10:42:18 25,088 -c–a-w c:\windows\system32\dllcache\defrag.exe
+ 2001-08-18 03:36:14 256,512 -c–a-w c:\windows\system32\dllcache\devcon32.dll
+ 2008-04-14 10:41:52 59,904 -c–a-w c:\windows\system32\dllcache\devenum.dll
+ 2001-08-18 03:36:42 24,064 -c–a-w c:\windows\system32\dllcache\devldr32.exe
+ 2008-04-14 10:41:52 282,624 -c–a-w c:\windows\system32\dllcache\devmgr.dll
+ 2001-08-17 17:11:48 24,648 -c–a-w c:\windows\system32\dllcache\dfe650.sys
+ 2001-08-17 17:11:48 24,649 -c–a-w c:\windows\system32\dllcache\dfe650d.sys
+ 2008-04-14 10:42:18 82,944 -c–a-w c:\windows\system32\dllcache\dfrgfat.exe
+ 2008-04-14 10:42:18 105,472 -c–a-w c:\windows\system32\dllcache\dfrgntfs.exe
+ 2008-04-14 10:41:52 39,424 -c–a-w c:\windows\system32\dllcache\dfrgsnap.dll
+ 2008-04-14 10:41:52 124,416 -c–a-w c:\windows\system32\dllcache\dfrgui.dll
+ 2008-04-14 10:41:52 28,672 -c–a-w c:\windows\system32\dllcache\dfsshlex.dll
+ 2001-08-17 17:17:20 29,531 -c–a-w c:\windows\system32\dllcache\dgapci.sys
+ 2001-08-18 03:36:14 419,357 -c–a-w c:\windows\system32\dllcache\dgconfig.dll
+ 2008-04-14 10:41:52 111,104 -c–a-w c:\windows\system32\dllcache\dgnet.dll
+ 2008-04-14 10:41:52 126,976 -c–a-w c:\windows\system32\dllcache\dhcpcsvc.dll
+ 2008-04-14 10:41:54 379,904 -c–a-w c:\windows\system32\dllcache\dhcpmon.dll
+ 2008-04-14 09:41:54 48,640 -c–a-w c:\windows\system32\dllcache\dhcpqec.dll
+ 2008-04-14 10:42:18 539,136 -c–a-w c:\windows\system32\dllcache\dialer.exe
+ 2008-04-14 10:42:18 87,040 -c–a-w c:\windows\system32\dllcache\diantz.exe
+ 2001-08-17 17:13:48 164,923 -c–a-w c:\windows\system32\dllcache\diapi2.sys
+ 2001-08-18 03:36:14 32,256 -c–a-w c:\windows\system32\dllcache\diapi2NT.dll
+ 2008-04-14 10:41:54 68,608 -c–a-w c:\windows\system32\dllcache\digest.dll
+ 2001-08-18 03:36:14 65,622 -c–a-w c:\windows\system32\dllcache\digiasyn.dll
+ 2001-08-17 17:13:36 37,735 -c–a-w c:\windows\system32\dllcache\digiasyn.sys
+ 2001-08-18 03:36:14 131,156 -c–a-w c:\windows\system32\dllcache\digidbp.dll
+ 2001-08-17 17:13:52 103,044 -c–a-w c:\windows\system32\dllcache\digidxb.sys
+ 2001-08-17 17:17:40 90,525 -c–a-w c:\windows\system32\dllcache\digifep5.sys
+ 2001-08-18 03:36:14 229,462 -c–a-w c:\windows\system32\dllcache\digifwrk.dll
+ 2001-08-18 03:36:14 159,828 -c–a-w c:\windows\system32\dllcache\digihlc.dll
+ 2001-08-18 03:36:14 102,484 -c–a-w c:\windows\system32\dllcache\digiinf.dll
+ 2001-08-18 03:36:14 41,046 -c–a-w c:\windows\system32\dllcache\digiisdn.dll
+ 2001-08-17 17:14:44 21,606 -c–a-w c:\windows\system32\dllcache\digiisdn.sys
+ 2001-08-18 03:36:14 110,621 -c–a-w c:\windows\system32\dllcache\digirlpt.dll
+ 2001-08-17 17:17:44 42,432 -c–a-w c:\windows\system32\dllcache\digirlpt.sys
+ 2001-08-18 03:36:42 614,429 -c–a-w c:\windows\system32\dllcache\digiview.exe
+ 2001-08-17 17:13:52 91,305 -c–a-w c:\windows\system32\dllcache\dimaint.sys
+ 2008-04-14 09:41:54 19,456 -c–a-w c:\windows\system32\dllcache\dimsntfy.dll
+ 2008-04-14 09:41:54 39,936 -c–a-w c:\windows\system32\dllcache\dimsroam.dll
+ 2008-04-14 10:41:54 158,720 -c–a-w c:\windows\system32\dllcache\dinput.dll
+ 2008-04-14 10:41:54 181,760 -c–a-w c:\windows\system32\dllcache\dinput8.dll
+ 2008-04-14 10:41:54 86,528 -c–a-w c:\windows\system32\dllcache\directdb.dll
+ 2008-04-14 05:10:48 36,352 -c–a-w c:\windows\system32\dllcache\disk.sys
+ 2008-04-14 10:41:54 1,504,256 -c–a-w c:\windows\system32\dllcache\diskcopy.dll
+ 2008-04-14 05:10:46 14,208 -c–a-w c:\windows\system32\dllcache\diskdump.sys
+ 2008-04-14 10:42:18 163,840 -c–a-w c:\windows\system32\dllcache\diskpart.exe
+ 2008-04-14 10:41:54 32,768 -c–a-w c:\windows\system32\dllcache\dispex.dll
+ 2001-08-18 03:36:14 6,729 -c–a-w c:\windows\system32\dllcache\disrvci.dll
+ 2001-08-18 03:36:14 31,305 -c–a-w c:\windows\system32\dllcache\disrvpp.dll
+ 2001-08-18 03:36:14 38,985 -c–a-w c:\windows\system32\dllcache\disrvsu.dll
+ 2001-08-18 03:36:42 236,060 -c–a-w c:\windows\system32\dllcache\ditrace.exe
+ 2001-08-18 03:36:14 6,216 -c–a-w c:\windows\system32\dllcache\divaci.dll
+ 2001-08-18 03:36:14 37,962 -c–a-w c:\windows\system32\dllcache\divaprop.dll
+ 2001-08-18 03:36:14 29,768 -c–a-w c:\windows\system32\dllcache\divasu.dll
+ 2001-08-17 17:11:44 26,698 -c–a-w c:\windows\system32\dllcache\dlh5xnd5.sys
+ 2008-04-14 10:42:18 5,120 -c–a-w c:\windows\system32\dllcache\dllhost.exe
+ 2008-04-14 05:10:52 8,320 -c–a-w c:\windows\system32\dllcache\dlttape.sys
+ 2001-08-17 17:11:42 29,696 -c–a-w c:\windows\system32\dllcache\dm9pci5.sys
+ 2008-04-14 10:42:18 224,768 -c–a-w c:\windows\system32\dllcache\dmadmin.exe
+ 2008-04-14 10:41:54 28,672 -c–a-w c:\windows\system32\dllcache\dmband.dll
+ 2008-04-14 05:14:50 799,744 -c–a-w c:\windows\system32\dllcache\dmboot.sys
+ 2008-04-14 10:41:54 61,440 -c–a-w c:\windows\system32\dllcache\dmcompos.dll
+ 2008-04-14 10:41:54 285,184 -c–a-w c:\windows\system32\dllcache\dmdlgs.dll
+ 2008-04-14 10:41:54 200,704 -c–a-w c:\windows\system32\dllcache\dmdskmgr.dll
+ 2008-04-14 10:41:54 181,248 -c–a-w c:\windows\system32\dllcache\dmime.dll
+ 2008-04-14 05:14:48 153,344 -c–a-w c:\windows\system32\dllcache\dmio.sys
+ 2008-04-14 10:41:54 35,840 -c–a-w c:\windows\system32\dllcache\dmloader.dll
+ 2008-04-14 10:42:18 15,872 -c–a-w c:\windows\system32\dllcache\dmremote.exe
+ 2008-04-14 10:41:54 82,432 -c–a-w c:\windows\system32\dllcache\dmscript.dll
+ 2008-04-14 10:41:54 23,552 -c–a-w c:\windows\system32\dllcache\dmserver.dll
+ 2008-04-14 10:41:54 105,984 -c–a-w c:\windows\system32\dllcache\dmstyle.dll
+ 2008-04-14 10:41:54 103,424 -c–a-w c:\windows\system32\dllcache\dmsynth.dll
+ 2008-04-14 10:41:54 104,448 -c–a-w c:\windows\system32\dllcache\dmusic.dll
+ 2008-04-14 05:15:02 52,864 -c–a-w c:\windows\system32\dllcache\dmusic.sys
+ 2008-04-14 10:41:54 52,224 -c–a-w c:\windows\system32\dllcache\dmutil.dll
+ 2008-04-14 10:41:54 45,568 -c–a-w c:\windows\system32\dllcache\dnsrslvr.dll
+ 2008-04-14 10:41:54 48,128 -c–a-w c:\windows\system32\dllcache\docprop2.dll
+ 2008-04-14 09:41:54 26,112 -c–a-w c:\windows\system32\dllcache\dot3api.dll
+ 2008-04-14 09:41:54 57,856 -c–a-w c:\windows\system32\dllcache\dot3cfg.dll
+ 2008-04-14 09:41:54 39,936 -c–a-w c:\windows\system32\dllcache\dot3clnt.dll
+ 2008-04-14 09:41:54 9,216 -c–a-w c:\windows\system32\dllcache\dot3dlg.dll
+ 2008-04-14 09:41:54 56,320 -c–a-w c:\windows\system32\dllcache\dot3msm.dll
+ 2008-04-14 09:41:54 132,096 -c–a-w c:\windows\system32\dllcache\dot3svc.dll
+ 2008-04-14 09:41:54 650,752 -c–a-w c:\windows\system32\dllcache\dot3ui.dll
+ 2008-04-14 05:09:48 206,976 -c–a-w c:\windows\system32\dllcache\dot4.sys
+ 2001-08-17 18:47:32 12,928 -c–a-w c:\windows\system32\dllcache\dot4prt.sys
+ 2001-08-17 18:47:32 8,704 -c–a-w c:\windows\system32\dllcache\dot4scan.sys
+ 2001-08-17 18:47:32 23,808 -c–a-w c:\windows\system32\dllcache\dot4usb.sys
+ 2001-08-17 17:12:32 28,062 -c–a-w c:\windows\system32\dllcache\dp83820.sys
+ 2008-04-14 10:42:18 29,696 -c–a-w c:\windows\system32\dllcache\dplaysvr.exe
+ 2008-04-14 10:41:54 229,888 -c–a-w c:\windows\system32\dllcache\dplayx.dll
+ 2008-04-14 10:41:54 23,552 -c–a-w c:\windows\system32\dllcache\dpmodemx.dll
+ 2008-04-14 10:39:20 3,072 -c–a-w c:\windows\system32\dllcache\dpnaddr.dll
+ 2008-04-14 10:41:54 375,296 -c–a-w c:\windows\system32\dllcache\dpnet.dll
+ 2008-04-14 10:41:54 35,328 -c–a-w c:\windows\system32\dllcache\dpnhpast.dll
+ 2008-04-14 10:41:54 60,928 -c–a-w c:\windows\system32\dllcache\dpnhupnp.dll
+ 2008-04-14 10:39:22 3,072 -c–a-w c:\windows\system32\dllcache\dpnlobby.dll
+ 2008-04-14 10:42:18 17,920 -c–a-w c:\windows\system32\dllcache\dpnsvr.exe
+ 2001-08-17 19:07:44 20,192 -c–a-w c:\windows\system32\dllcache\dpti2o.sys
+ 2008-04-14 10:41:54 21,504 -c–a-w c:\windows\system32\dllcache\dpvacm.dll
+ 2008-04-14 10:41:54 212,480 -c–a-w c:\windows\system32\dllcache\dpvoice.dll
+ 2008-04-14 10:42:20 83,456 -c–a-w c:\windows\system32\dllcache\dpvsetup.exe
+ 2008-04-14 10:41:54 116,736 -c–a-w c:\windows\system32\dllcache\dpvvox.dll
+ 2008-04-14 10:41:54 57,344 -c–a-w c:\windows\system32\dllcache\dpwsockx.dll
+ 2008-04-14 05:15:16 60,160 -c–a-w c:\windows\system32\dllcache\drmk.sys
+ 2008-04-14 05:15:14 2,944 -c–a-w c:\windows\system32\dllcache\drmkaud.sys
+ 2008-04-14 10:41:54 14,336 -c–a-w c:\windows\system32\dllcache\drprov.dll
+ 2008-04-14 10:42:20 62,976 -c–a-w c:\windows\system32\dllcache\drvqry.exe
+ 2001-08-17 17:20:18 334,208 -c–a-w c:\windows\system32\dllcache\ds1wdm.sys
+ 2008-04-14 10:41:54 16,384 -c–a-w c:\windows\system32\dllcache\ds32gt.dll
+ 2008-04-14 10:41:54 181,248 -c–a-w c:\windows\system32\dllcache\dsdmo.dll
+ 2008-04-14 10:41:54 71,680 -c–a-w c:\windows\system32\dllcache\dsdmoprp.dll
+ 2008-04-14 10:41:54 92,672 -c–a-w c:\windows\system32\dllcache\dskquota.dll
+ 2008-04-14 10:41:54 155,648 -c–a-w c:\windows\system32\dllcache\dskquoui.dll
+ 2008-04-14 10:41:54 367,616 -c–a-w c:\windows\system32\dllcache\dsound.dll
+ 2008-04-14 10:41:54 1,293,824 -c–a-w c:\windows\system32\dllcache\dsound3d.dll
+ 2008-04-14 10:41:54 142,848 -c–a-w c:\windows\system32\dllcache\dsprop.dll
+ 2008-04-14 03:39:32 4,096 -c–a-w c:\windows\system32\dllcache\dsprpres.dll
+ 2008-04-14 10:41:54 239,104 -c–a-w c:\windows\system32\dllcache\dsquery.dll
+ 2008-04-14 10:41:54 51,200 -c–a-w c:\windows\system32\dllcache\dssec.dll
+ 2008-04-14 04:07:58 138,752 -c–a-w c:\windows\system32\dllcache\dssenh.dll
+ 2008-04-14 10:41:54 19,456 -c–a-w c:\windows\system32\dllcache\dswave.dll
+ 2008-04-14 10:42:20 10,752 -c–a-w c:\windows\system32\dllcache\dumprep.exe
+ 2008-04-14 10:41:54 304,128 -c–a-w c:\windows\system32\dllcache\duser.dll
+ 2001-08-23 07:00:00 55,296 -c–a-w c:\windows\system32\dllcache\dvdplay.exe
+ 2008-04-14 10:42:20 17,920 -c–a-w c:\windows\system32\dllcache\dvdupgrd.exe
+ 2008-04-14 10:42:20 180,224 -c–a-w c:\windows\system32\dllcache\dwwin.exe
+ 2008-04-14 10:41:54 619,008 -c–a-w c:\windows\system32\dllcache\dx7vb.dll
+ 2008-04-14 10:41:54 1,227,264 -c–a-w c:\windows\system32\dllcache\dx8vb.dll
+ 2008-04-14 10:42:20 1,298,432 -c–a-w c:\windows\system32\dllcache\dxdiag.exe
+ 2008-04-14 10:41:54 2,113,536 -c–a-w c:\windows\system32\dllcache\dxdiagn.dll
+ 2008-04-14 05:08:30 71,168 -c–a-w c:\windows\system32\dllcache\dxg.sys
+ 2001-08-17 17:12:08 50,719 -c–a-w c:\windows\system32\dllcache\e1000nt5.sys
+ 2001-08-17 17:12:10 117,760 -c–a-w c:\windows\system32\dllcache\e100b325.sys
+ 2001-08-17 17:12:12 19,594 -c–a-w c:\windows\system32\dllcache\e100isa4.sys
+ 2008-04-14 09:41:54 30,720 -c–a-w c:\windows\system32\dllcache\eapolqec.dll
+ 2008-04-14 09:41:54 184,832 -c–a-w c:\windows\system32\dllcache\eapp3hst.dll
+ 2008-04-14 09:41:54 126,976 -c–a-w c:\windows\system32\dllcache\eappcfg.dll
+ 2008-04-14 09:41:54 94,208 -c–a-w c:\windows\system32\dllcache\eappgnui.dll
+ 2008-04-14 09:41:54 180,224 -c–a-w c:\windows\system32\dllcache\eapphost.dll
+ 2008-04-14 09:41:54 40,960 -c–a-w c:\windows\system32\dllcache\eappprxy.dll
+ 2008-04-14 09:41:54 59,392 -c–a-w c:\windows\system32\dllcache\eapqec.dll
+ 2008-04-14 09:41:54 33,792 -c–a-w c:\windows\system32\dllcache\eapsvc.dll
+ 2008-04-14 10:41:54 26,624 -c–a-w c:\windows\system32\dllcache\efsadu.dll
+ 2001-08-17 17:10:50 44,103 -c–a-w c:\windows\system32\dllcache\el515.sys
+ 2001-08-17 17:10:56 55,999 -c–a-w c:\windows\system32\dllcache\el556nd5.sys
+ 2001-08-17 17:10:56 24,653 -c–a-w c:\windows\system32\dllcache\el574nd4.sys
+ 2001-08-17 17:10:58 69,692 -c–a-w c:\windows\system32\dllcache\el575nd5.sys
+ 2001-08-17 17:10:52 26,141 -c–a-w c:\windows\system32\dllcache\el589nd5.sys
+ 2001-08-17 17:11:00 69,194 -c–a-w c:\windows\system32\dllcache\el656cd5.sys
+ 2001-08-17 18:28:00 634,134 -c–a-w c:\windows\system32\dllcache\el656ct5.sys
+ 2001-08-17 17:11:00 77,386 -c–a-w c:\windows\system32\dllcache\el656nd5.sys
+ 2001-08-17 18:28:00 241,206 -c–a-w c:\windows\system32\dllcache\el656se5.sys
+ 2001-08-17 17:11:06 66,591 -c–a-w c:\windows\system32\dllcache\el90xbc5.sys
+ 2001-08-17 17:11:02 153,631 -c–a-w c:\windows\system32\dllcache\el90xnd5.sys
+ 2001-08-17 17:11:12 455,199 -c–a-w c:\windows\system32\dllcache\el985n51.sys
+ 2001-08-17 17:11:04 70,174 -c–a-w c:\windows\system32\dllcache\el98xn5.sys
+ 2001-08-17 17:11:08 171,520 -c–a-w c:\windows\system32\dllcache\el99xn51.sys
+ 2001-08-17 18:53:02 7,296 -c–a-w c:\windows\system32\dllcache\elmsmc.sys
+ 2001-08-17 17:10:52 25,159 -c–a-w c:\windows\system32\dllcache\elnk3.sys
+ 2008-04-14 10:41:54 183,296 -c–a-w c:\windows\system32\dllcache\els.dll
+ 2001-08-17 17:10:54 19,996 -c–a-w c:\windows\system32\dllcache\em556n4.sys
+ 2001-08-17 17:19:26 283,904 -c–a-w c:\windows\system32\dllcache\emu10k1m.sys
+ 2008-04-14 10:41:54 20,480 -c–a-w c:\windows\system32\dllcache\encapi.dll
+ 2008-04-14 10:41:54 186,880 -c–a-w c:\windows\system32\dllcache\encdec.dll
+ 2001-08-17 17:46:40 6,400 -c–a-w c:\windows\system32\dllcache\enum1394.sys
+ 2001-08-17 18:50:20 144,896 -c–a-w c:\windows\system32\dllcache\epcfw2k.sys
+ 2001-08-17 17:12:08 18,503 -c–a-w c:\windows\system32\dllcache\epro4.sys
+ 2001-08-17 18:50:20 114,944 -c–a-w c:\windows\system32\dllcache\epstw2k.sys
+ 2001-08-17 17:17:40 629,952 -c–a-w c:\windows\system32\dllcache\eqn.sys
+ 2001-08-18 03:36:44 53,248 -c–a-w c:\windows\system32\dllcache\eqndiag.exe
+ 2001-08-18 03:36:44 51,200 -c–a-w c:\windows\system32\dllcache\eqnlogr.exe
+ 2001-08-18 03:36:44 61,952 -c–a-w c:\windows\system32\dllcache\eqnloop.exe
+ 2008-04-14 10:41:54 23,040 -c–a-w c:\windows\system32\dllcache\ersvc.dll
+ 2001-08-17 17:19:38 37,120 -c–a-w c:\windows\system32\dllcache\es1370mp.sys
+ 2001-08-17 17:19:34 40,704 -c–a-w c:\windows\system32\dllcache\es1371mp.sys
+ 2001-08-17 17:19:58 72,192 -c–a-w c:\windows\system32\dllcache\es1969.sys
+ 2001-08-17 17:19:48 174,464 -c–a-w c:\windows\system32\dllcache\es198x.sys
+ 2001-08-17 18:28:02 595,647 -c–a-w c:\windows\system32\dllcache\es56cvmp.sys
+ 2001-08-17 18:28:04 594,238 -c–a-w c:\windows\system32\dllcache\es56hpi.sys
+ 2001-08-17 18:28:04 347,550 -c–a-w c:\windows\system32\dllcache\es56tpi.sys
+ 2008-04-14 10:41:54 1,082,368 -c–a-w c:\windows\system32\dllcache\esent.dll
+ 2001-08-17 17:19:56 63,360 -c–a-w c:\windows\system32\dllcache\ess.sys
+ 2008-04-14 10:41:54 247,808 -c–a-w c:\windows\system32\dllcache\esscli.dll
+ 2008-04-14 03:06:06 137,088 -c–a-w c:\windows\system32\dllcache\essm2e.sys
+ 2001-08-18 03:36:16 43,008 -c–a-w c:\windows\system32\dllcache\esucm.dll
+ 2001-08-18 03:36:16 34,816 -c–a-w c:\windows\system32\dllcache\esuimg.dll
+ 2001-08-18 03:36:16 45,568 -c–a-w c:\windows\system32\dllcache\esuni.dll
+ 2001-08-18 03:36:16 45,568 -c–a-w c:\windows\system32\dllcache\esunib.dll
+ 2008-04-14 10:42:20 193,024 -c–a-w c:\windows\system32\dllcache\eudcedit.exe
+ 2008-04-14 10:42:20 50,688 -c–a-w c:\windows\system32\dllcache\evcreate.exe
+ 2008-04-14 10:41:54 56,320 -c–a-w c:\windows\system32\dllcache\eventlog.dll
+ 2008-04-14 10:41:54 101,888 -c–a-w c:\windows\system32\dllcache\evntagnt.dll
+ 2008-04-14 10:42:20 24,064 -c–a-w c:\windows\system32\dllcache\evntcmd.exe
+ 2008-04-14 10:41:54 21,504 -c–a-w c:\windows\system32\dllcache\evntrprv.dll
+ 2008-04-14 10:42:20 92,160 -c–a-w c:\windows\system32\dllcache\evntwin.exe
+ 2008-04-14 10:41:54 45,056 -c–a-w c:\windows\system32\dllcache\evtgprov.dll
+ 2008-04-14 10:42:20 82,944 -c–a-w c:\windows\system32\dllcache\evtrig.exe
+ 2001-08-17 17:12:08 16,998 -c–a-w c:\windows\system32\dllcache\ex10.sys
+ 2001-08-17 18:52:48 7,040 -c–a-w c:\windows\system32\dllcache\exabyte2.sys
+ 2008-04-14 10:41:54 380,445 -c–a-w c:\windows\system32\dllcache\expsrv.dll
+ 2008-04-14 10:41:54 14,336 -c–a-w c:\windows\system32\dllcache\exstrace.dll
+ 2008-04-14 10:42:20 24,064 -c–a-w c:\windows\system32\dllcache\extrac32.exe
+ 2008-04-14 10:41:54 125,952 -c–a-w c:\windows\system32\dllcache\exts.dll
+ 2001-08-17 17:11:54 12,362 -c–a-w c:\windows\system32\dllcache\f3ab18xi.sys
+ 2001-08-17 17:11:56 11,850 -c–a-w c:\windows\system32\dllcache\f3ab18xj.sys
+ 2008-04-14 10:39:32 7,168 -c–a-w c:\windows\system32\dllcache\f3ahvoas.dll
+ 2001-08-17 17:12:32 16,074 -c–a-w c:\windows\system32\dllcache\fa312nd5.sys
+ 2001-08-17 17:12:32 24,618 -c–a-w c:\windows\system32\dllcache\fa410nd5.sys
+ 2008-04-14 05:44:30 143,744 -c–a-w c:\windows\system32\dllcache\fastfat.sys
+ 2008-04-14 10:41:54 472,064 -c–a-w c:\windows\system32\dllcache\fastprox.dll
+ 2008-04-14 10:41:54 80,384 -c–a-w c:\windows\system32\dllcache\faultrep.dll
+ 2008-04-14 05:10:26 27,392 -c–a-w c:\windows\system32\dllcache\fdc.sys
+ 2008-04-14 10:41:54 124,928 -c–a-w c:\windows\system32\dllcache\fde.dll
+ 2008-04-14 10:41:54 73,728 -c–a-w c:\windows\system32\dllcache\fdeploy.dll
+ 2008-04-14 10:41:54 21,504 -c–a-w c:\windows\system32\dllcache\feclient.dll
+ 2001-08-17 17:10:54 22,090 -c–a-w c:\windows\system32\dllcache\fem556n5.sys
+ 2001-08-17 17:13:08 27,165 -c–a-w c:\windows\system32\dllcache\fetnd5.sys
+ 2008-04-14 10:41:54 337,920 -c–a-w c:\windows\system32\dllcache\filemgmt.dll
+ 2008-04-14 10:42:22 27,136 -c–a-w c:\windows\system32\dllcache\findstr.exe
+ 2008-04-14 05:03:30 44,544 -c–a-w c:\windows\system32\dllcache\fips.sys
+ 2008-04-14 10:41:54 87,552 -c–a-w c:\windows\system32\dllcache\fldrclnr.dll
+ 2008-04-14 05:10:26 20,480 -c–a-w c:\windows\system32\dllcache\flpydisk.sys
+ 2008-04-14 10:41:54 16,896 -c–a-w c:\windows\system32\dllcache\fltlib.dll
+ 2008-04-14 10:42:22 23,040 -c–a-w c:\windows\system32\dllcache\fltmc.exe
+ 2008-04-14 05:03:00 129,792 -c–a-w c:\windows\system32\dllcache\fltmgr.sys
+ 2001-08-18 03:36:16 71,680 -c–a-w c:\windows\system32\dllcache\fnfilter.dll
+ 2008-04-14 10:41:54 382,976 -c–a-w c:\windows\system32\dllcache\fontext.dll
+ 2008-04-14 10:41:54 80,896 -c–a-w c:\windows\system32\dllcache\fontsub.dll
+ 2008-04-14 10:42:22 20,992 -c–a-w c:\windows\system32\dllcache\fontview.exe
+ 2008-04-14 10:42:22 7,680 -c–a-w c:\windows\system32\dllcache\forcedos.exe
+ 2008-04-14 03:05:32 34,173 -c–a-w c:\windows\system32\dllcache\forehe.sys
+ 2008-04-14 10:41:54 32,828 -c–a-w c:\windows\system32\dllcache\fp40ext.dll
+ 2008-04-14 10:41:54 184,435 -c–a-w c:\windows\system32\dllcache\fp4amsft.dll
+ 2008-04-14 10:41:54 82,035 -c–a-w c:\windows\system32\dllcache\fp4anscp.dll
+ 2008-04-14 10:41:54 147,513 -c–a-w c:\windows\system32\dllcache\fp4apws.dll
+ 2008-04-14 10:41:54 49,210 -c–a-w c:\windows\system32\dllcache\fp4areg.dll
+ 2008-04-14 10:41:54 102,509 -c–a-w c:\windows\system32\dllcache\fp4atxt.dll
+ 2008-04-14 10:41:54 618,605 -c–a-w c:\windows\system32\dllcache\fp4autl.dll
+ 2008-04-14 10:41:54 41,020 -c–a-w c:\windows\system32\dllcache\fp4avnb.dll
+ 2008-04-14 10:41:54 32,826 -c–a-w c:\windows\system32\dllcache\fp4avss.dll
+ 2008-04-14 10:41:54 49,212 -c–a-w c:\windows\system32\dllcache\fp4awebs.dll
+ 2008-04-14 10:41:54 876,653 -c–a-w c:\windows\system32\dllcache\fp4awel.dll
+ 2008-04-14 10:42:22 15,120 -c–a-w c:\windows\system32\dllcache\fp98sadm.exe
+ 2008-04-14 10:42:22 109,840 -c–a-w c:\windows\system32\dllcache\fp98swin.exe
+ 2008-04-14 10:42:22 24,632 -c–a-w c:\windows\system32\dllcache\fpadmcgi.exe
+ 2008-04-14 10:41:54 20,541 -c–a-w c:\windows\system32\dllcache\fpadmdll.dll
+ 2001-08-17 17:14:24 444,416 -c–a-w c:\windows\system32\dllcache\fpcibase.sys
+ 2001-08-17 17:14:44 441,728 -c–a-w c:\windows\system32\dllcache\fpcmbase.sys
+ 2008-04-14 10:42:22 188,494 -c–a-w c:\windows\system32\dllcache\fpcount.exe
+ 2008-04-14 10:41:54 94,208 -c–a-w c:\windows\system32\dllcache\fpencode.dll
+ 2008-04-14 10:41:54 20,541 -c–a-w c:\windows\system32\dllcache\fpexedll.dll
+ 2008-04-14 10:41:54 598,071 -c–a-w c:\windows\system32\dllcache\fpmmc.dll
+ 2007-04-03 03:06:06 208,896 -c–a-w c:\windows\system32\dllcache\fpmmcsat.dll
+ 2001-08-17 17:15:02 442,240 -c–a-w c:\windows\system32\dllcache\fpnpbase.sys
+ 2008-04-14 10:42:22 20,538 -c–a-w c:\windows\system32\dllcache\fpremadm.exe
+ 2008-04-14 10:39:34 9,344 -c–a-w c:\windows\system32\dllcache\framebuf.dll
+ 2008-04-14 10:41:54 185,344 -c–a-w c:\windows\system32\dllcache\framedyn.dll
+ 2008-04-14 10:42:22 193,024 -c–a-w c:\windows\system32\dllcache\fsquirt.exe
+ 2001-08-23 07:00:00 12,160 -c–a-w c:\windows\system32\dllcache\fsvga.sys
+ 2001-08-23 07:00:00 125,056 -c–a-w c:\windows\system32\dllcache\ftdisk.sys
+ 2008-04-14 10:42:22 42,496 -c–a-w c:\windows\system32\dllcache\ftp.exe
+ 2008-04-14 10:41:54 6,144 -c–a-w c:\windows\system32\dllcache\ftpmib.dll
+ 2008-04-14 10:41:54 125,952 -c–a-w c:\windows\system32\dllcache\ftpsv251.dll
+ 2001-08-17 17:15:22 455,680 -c–a-w c:\windows\system32\dllcache\fus2base.sys
+ 2001-08-17 17:15:38 455,296 -c–a-w c:\windows\system32\dllcache\fusbbase.sys
+ 2001-08-18 03:36:16 92,160 -c–a-w c:\windows\system32\dllcache\fuusd.dll
+ 2008-04-14 10:41:54 60,416 -c–a-w c:\windows\system32\dllcache\fwcfg.dll
+ 2008-04-14 10:41:54 451,584 -c–a-w c:\windows\system32\dllcache\fxsapi.dll
+ 2008-04-14 10:42:22 142,848 -c–a-w c:\windows\system32\dllcache\fxsclnt.exe
+ 2008-04-14 10:41:56 72,192 -c–a-w c:\windows\system32\dllcache\fxscom.dll
+ 2008-04-14 10:41:56 285,184 -c–a-w c:\windows\system32\dllcache\fxscomex.dll
+ 2008-04-14 10:42:22 229,376 -c–a-w c:\windows\system32\dllcache\fxscover.exe
+ 2008-04-14 10:41:56 26,624 -c–a-w c:\windows\system32\dllcache\fxsdrv.dll
+ 2008-04-14 10:41:56 55,296 -c–a-w c:\windows\system32\dllcache\fxsevent.dll
+ 2008-04-14 10:41:56 23,552 -c–a-w c:\windows\system32\dllcache\fxsext32.dll
+ 2008-04-14 10:41:56 23,552 -c–a-w c:\windows\system32\dllcache\fxsmon.dll
+ 2008-04-14 10:41:56 132,608 -c–a-w c:\windows\system32\dllcache\fxsocm.dll
+ 2008-04-14 10:41:56 8,704 -c–a-w c:\windows\system32\dllcache\fxsperf.dll
+ 2008-04-14 10:39:34 6,656 -c–a-w c:\windows\system32\dllcache\fxsres.dll
+ 2008-04-14 10:42:22 267,776 -c–a-w c:\windows\system32\dllcache\fxssvc.exe
+ 2008-04-14 10:41:56 246,272 -c–a-w c:\windows\system32\dllcache\fxst30.dll
+ 2008-04-14 10:41:56 397,312 -c–a-w c:\windows\system32\dllcache\fxstiff.dll
+ 2008-04-14 10:41:56 154,112 -c–a-w c:\windows\system32\dllcache\fxsui.dll
+ 2008-04-14 10:41:56 192,512 -c–a-w c:\windows\system32\dllcache\fxswzrd.dll
+ 2008-04-14 10:41:56 400,384 -c–a-w c:\windows\system32\dllcache\fxsxp32.dll
+ 2008-04-14 05:06:42 46,464 -c–a-w c:\windows\system32\dllcache\gagp30kx.sys
+ 2008-04-14 10:42:22 59,904 -c–a-w c:\windows\system32\dllcache\getmac.exe
+ 2008-04-14 10:41:56 122,880 -c–a-w c:\windows\system32\dllcache\glu32.dll
+ 2008-04-14 10:39:36 566,784 -c–a-w c:\windows\system32\dllcache\gpedit.dll
+ 2006-12-31 11:56:46 9,728 -c–a-w c:\windows\system32\dllcache\gpkrsrc.dll
+ 2008-04-14 10:42:22 120,832 -c–a-w c:\windows\system32\dllcache\gprslt.exe
+ 2008-04-14 10:42:22 39,424 -c–a-w c:\windows\system32\dllcache\grpconv.exe
+ 2008-04-14 10:41:56 133,120 -c–a-w c:\windows\system32\dllcache\guitrn.dll
+ 2008-04-14 10:41:56 115,200 -c–a-w c:\windows\system32\dllcache\guitrna.dll
+ 2008-04-14 10:41:56 32,256 -c–a-w c:\windows\system32\dllcache\gzip.dll
+ 2008-04-14 10:41:56 57,344 -c–a-w c:\windows\system32\dllcache\h323cc.dll
+ 2008-04-14 10:41:56 614,912 -c–a-w c:\windows\system32\dllcache\h323msp.dll
+ 2008-04-14 10:41:56 7,168 -c–a-w c:\windows\system32\dllcache\hccoin.dll
+ 2008-04-14 10:42:22 15,872 -c–a-w c:\windows\system32\dllcache\help.exe
+ 2008-04-14 10:42:22 769,024 -c–a-w c:\windows\system32\dllcache\helpctr.exe
+ 2008-04-14 10:42:22 744,448 -c–a-w c:\windows\system32\dllcache\helpsvc.exe
+ 2008-04-14 10:42:22 10,752 -c–a-w c:\windows\system32\dllcache\hh.exe
+ 2008-04-14 10:41:56 41,472 -c–a-w c:\windows\system32\dllcache\hhsetup.dll
+ 2008-04-14 10:41:56 20,992 -c–a-w c:\windows\system32\dllcache\hid.dll
+ 2008-04-14 05:16:32 25,600 -c–a-w c:\windows\system32\dllcache\hidbth.sys
+ 2008-04-14 05:15:28 36,864 -c–a-w c:\windows\system32\dllcache\hidclass.sys
+ 2008-04-14 05:15:28 19,200 -c–a-w c:\windows\system32\dllcache\hidir.sys
+ 2008-04-14 05:15:24 24,960 -c–a-w c:\windows\system32\dllcache\hidparse.sys
+ 2008-04-14 05:15:28 10,368 -c–a-w c:\windows\system32\dllcache\hidusb.sys
+ 2008-04-14 10:41:56 72,704 -c–a-w c:\windows\system32\dllcache\hlink.dll
+ 2008-04-14 10:41:56 344,064 -c–a-w c:\windows\system32\dllcache\hnetcfg.dll
+ 2008-04-14 10:41:56 330,752 -c–a-w c:\windows\system32\dllcache\hnetwiz.dll
+ 2008-04-14 10:41:56 39,936 -c–a-w c:\windows\system32\dllcache\hostmib.dll
+ 2008-04-14 10:41:56 144,896 -c–a-w c:\windows\system32\dllcache\hotplug.dll
+ 2001-08-18 03:36:16 48,128 -c–a-w c:\windows\system32\dllcache\hpgt33tk.dll
+ 2001-08-18 03:36:16 101,376 -c–a-w c:\windows\system32\dllcache\hpgt34.dll
+ 2001-08-18 03:36:16 126,976 -c–a-w c:\windows\system32\dllcache\hpgt34tk.dll
+ 2001-08-18 03:36:16 93,696 -c–a-w c:\windows\system32\dllcache\hpgt42.dll
+ 2001-08-18 03:36:16 31,232 -c–a-w c:\windows\system32\dllcache\hpgt42tk.dll
+ 2001-08-18 03:36:16 165,888 -c–a-w c:\windows\system32\dllcache\hpgt53.dll
+ 2001-08-18 03:36:16 68,608 -c–a-w c:\windows\system32\dllcache\hpgt53tk.dll
+ 2001-08-18 03:36:16 32,768 -c–a-w c:\windows\system32\dllcache\hpgtmcro.dll
+ 2001-08-17 19:07:44 25,952 -c–a-w c:\windows\system32\dllcache\hpn.sys
+ 2001-08-18 03:36:16 324,608 -c–a-w c:\windows\system32\dllcache\hpojwia.dll
+ 2001-08-18 03:36:16 13,312 -c–a-w c:\windows\system32\dllcache\hpsjmcro.dll
+ 2001-08-17 18:52:50 5,760 -c–a-w c:\windows\system32\dllcache\hpt4qic.sys
+ 2001-08-18 03:36:16 19,456 -c–a-w c:\windows\system32\dllcache\hr1w.dll
+ 2008-04-14 10:42:22 18,432 -c–a-w c:\windows\system32\dllcache\hscupd.exe
+ 2001-08-17 18:28:04 150,239 -c–a-w c:\windows\system32\dllcache\hsf_amos.sys
+ 2001-08-17 18:28:04 67,167 -c–a-w c:\windows\system32\dllcache\hsf_bsc2.sys
+ 2001-08-17 18:28:06 289,887 -c–a-w c:\windows\system32\dllcache\hsf_fall.sys
+ 2001-08-17 18:28:06 199,711 -c–a-w c:\windows\system32\dllcache\hsf_faxx.sys
+ 2001-08-17 18:28:06 115,807 -c–a-w c:\windows\system32\dllcache\hsf_fsks.sys
+ 2001-08-18 03:36:16 9,759 -c–a-w c:\windows\system32\dllcache\hsf_inst.dll
+ 2001-08-17 18:28:08 391,199 -c–a-w c:\windows\system32\dllcache\hsf_k56k.sys
+ 2001-08-17 18:28:10 542,879 -c–a-w c:\windows\system32\dllcache\hsf_msft.sys
+ 2001-08-17 18:28:10 57,471 -c–a-w c:\windows\system32\dllcache\hsf_samp.sys
+ 2001-08-17 18:28:10 44,863 -c–a-w c:\windows\system32\dllcache\hsf_soar.sys
+ 2001-08-17 18:28:10 73,279 -c–a-w c:\windows\system32\dllcache\hsf_spkp.sys
+ 2001-08-17 18:28:12 50,751 -c–a-w c:\windows\system32\dllcache\hsf_tone.sys
+ 2001-08-17 18:28:12 488,383 -c–a-w c:\windows\system32\dllcache\hsf_v124.sys
+ 2008-04-14 04:53:50 220,032 -c–a-w c:\windows\system32\dllcache\hsfbs2s2.sys
+ 2008-04-14 10:41:56 32,285 -c–a-w c:\windows\system32\dllcache\hsfcisp2.dll
+ 2008-04-14 04:53:52 685,056 -c–a-w c:\windows\system32\dllcache\hsfcxts2.sys
+ 2008-04-14 04:53:54 1,041,536 -c–a-w c:\windows\system32\dllcache\hsfdpsp2.sys
+ 2008-04-14 05:23:54 264,832 -c–a-w c:\windows\system32\dllcache\http.sys
+ 2008-04-14 10:41:56 24,576 -c–a-w c:\windows\system32\dllcache\httpapi.dll
+ 2008-04-14 10:41:56 268,288 -c–a-w c:\windows\system32\dllcache\httpext.dll
+ 2008-04-14 10:41:56 8,192 -c–a-w c:\windows\system32\dllcache\httpmb51.dll
+ 2008-04-14 10:41:56 61,440 -c–a-w c:\windows\system32\dllcache\httpod51.dll
+ 2008-04-14 10:41:56 41,984 -c–a-w c:\windows\system32\dllcache\htui.dll
+ 2008-04-14 10:39:40 13,463,552 -c–a-w c:\windows\system32\dllcache\hwxjpn.dll
+ 2008-04-14 05:11:24 8,576 -c–a-w c:\windows\system32\dllcache\i2omgmt.sys
+ 2008-04-14 05:11:24 18,560 -c–a-w c:\windows\system32\dllcache\i2omp.sys
+ 2001-08-17 19:56:00 353,184 -c–a-w c:\windows\system32\dllcache\i740dnt5.dll
+ 2001-08-17 17:49:06 58,592 -c–a-w c:\windows\system32\dllcache\i740nt5.sys
+ 2008-04-14 05:48:02 52,480 -c–a-w c:\windows\system32\dllcache\i8042prt.sys
+ 2008-04-14 03:04:28 161,020 -c–a-w c:\windows\system32\dllcache\i81xnt5.sys
+ 2008-04-14 10:41:56 119,808 -c–a-w c:\windows\system32\dllcache\iasrad.dll
+ 2001-08-17 17:11:58 28,700 -c–a-w c:\windows\system32\dllcache\ibmexmp.sys
+ 2001-08-18 03:34:30 9,216 -c–a-w c:\windows\system32\dllcache\ibmsgnet.dll
+ 2001-08-17 17:12:00 100,936 -c–a-w c:\windows\system32\dllcache\ibmtok.sys
+ 2001-08-17 17:12:02 109,085 -c–a-w c:\windows\system32\dllcache\ibmtrp.sys
+ 2001-08-17 19:06:46 38,528 -c–a-w c:\windows\system32\dllcache\ibmvcap.sys
+ 2008-04-14 10:41:56 11,264 -c–a-w c:\windows\system32\dllcache\icaapi.dll
+ 2001-08-17 19:05:44 141,056 -c–a-w c:\windows\system32\dllcache\icam3.sys
+ 2001-08-18 03:36:16 26,624 -c–a-w c:\windows\system32\dllcache\icam3ext.dll
+ 2001-08-18 03:36:16 91,136 -c–a-w c:\windows\system32\dllcache\icam4com.dll
+ 2001-08-18 03:36:16 61,952 -c–a-w c:\windows\system32\dllcache\icam4ext.dll
+ 2001-08-17 19:06:02 154,496 -c–a-w c:\windows\system32\dllcache\icam4usb.sys
+ 2001-08-18 03:36:16 45,056 -c–a-w c:\windows\system32\dllcache\icam5com.dll
+ 2001-08-18 03:36:16 20,480 -c–a-w c:\windows\system32\dllcache\icam5ext.dll
+ 2001-08-17 19:06:20 100,992 -c–a-w c:\windows\system32\dllcache\icam5usb.sys
+ 2008-04-14 10:41:56 254,976 -c–a-w c:\windows\system32\dllcache\icm32.dll
+ 2008-04-14 10:39:42 3,584 -c–a-w c:\windows\system32\dllcache\icmp.dll
+ 2001-08-18 03:36:16 372,824 -c–a-w c:\windows\system32\dllcache\iconf32.dll
+ 2008-04-14 10:41:56 61,440 -c–a-w c:\windows\system32\dllcache\icwconn.dll
+ 2008-04-14 10:42:24 214,528 -c–a-w c:\windows\system32\dllcache\icwconn1.exe
+ 2008-04-14 10:42:24 86,016 -c–a-w c:\windows\system32\dllcache\icwconn2.exe
+ 2008-04-14 10:41:56 73,728 -c–a-w c:\windows\system32\dllcache\icwdial.dll
+ 2008-04-14 10:41:56 32,768 -c–a-w c:\windows\system32\dllcache\icwdl.dll
+ 2008-04-14 10:41:56 172,032 -c–a-w c:\windows\system32\dllcache\icwhelp.dll
+ 2008-04-14 10:41:56 65,536 -c–a-w c:\windows\system32\dllcache\icwphbk.dll
+ 2008-04-14 10:42:24 24,576 -c–a-w c:\windows\system32\dllcache\icwrmind.exe
+ 2008-04-14 10:41:56 49,152 -c–a-w c:\windows\system32\dllcache\icwutil.dll
+ 2008-04-14 10:41:56 120,832 -c–a-w c:\windows\system32\dllcache\idq.dll
+ 2008-04-14 10:41:56 81,920 -c–a-w c:\windows\system32\dllcache\ieencode.dll
+ 2008-04-14 10:42:24 114,688 -c–a-w c:\windows\system32\dllcache\iexpress.exe
+ 2008-04-14 10:41:56 135,680 -c–a-w c:\windows\system32\dllcache\ifmon.dll
+ 2008-04-14 10:41:56 8,192 -c–a-w c:\windows\system32\dllcache\igmpagnt.dll
+ 2008-04-14 10:41:56 505,344 -c–a-w c:\windows\system32\dllcache\iis.dll
+ 2008-04-14 10:41:56 25,088 -c–a-w c:\windows\system32\dllcache\iisadmin.dll
+ 2008-04-14 10:41:56 145,408 -c–a-w c:\windows\system32\dllcache\iische51.dll
+ 2008-04-14 10:41:56 68,608 -c–a-w c:\windows\system32\dllcache\iisext51.dll
+ 2008-04-14 10:41:56 7,168 -c–a-w c:\windows\system32\dllcache\iisfecnv.dll
+ 2008-04-14 10:41:56 79,872 -c–a-w c:\windows\system32\dllcache\iislog51.dll
+ 2008-04-14 10:41:56 64,512 -c–a-w c:\windows\system32\dllcache\iismap.dll
+ 2008-04-14 10:42:24 30,720 -c–a-w c:\windows\system32\dllcache\iisrstas.exe
+ 2008-04-14 10:41:56 133,632 -c–a-w c:\windows\system32\dllcache\iisrtl.dll
+ 2008-04-14 10:41:56 81,920 -c–a-w c:\windows\system32\dllcache\ils.dll
+ 2008-04-14 10:41:56 144,384 -c–a-w c:\windows\system32\dllcache\imagehlp.dll
+ 2008-04-14 10:42:24 150,528 -c–a-w c:\windows\system32\dllcache\imapi.exe
+ 2008-04-14 05:11:00 42,112 -c–a-w c:\windows\system32\dllcache\imapi.sys
+ 2008-04-14 10:39:44 106,496 -c–a-w c:\windows\system32\dllcache\imekrcic.dll
+ 2008-04-14 10:39:44 86,016 -c–a-w c:\windows\system32\dllcache\imekrmbx.dll
+ 2008-04-14 10:41:56 36,921 -c–a-w c:\windows\system32\dllcache\imeshare.dll
+ 2008-04-14 10:39:46 811,064 -c–a-w c:\windows\system32\dllcache\imjp81k.dll
+ 2008-04-14 10:39:46 368,696 -c–a-w c:\windows\system32\dllcache\imjpcic.dll
+ 2008-04-14 10:39:46 716,856 -c–a-w c:\windows\system32\dllcache\imjpcus.dll
+ 2008-04-14 10:39:46 81,976 -c–a-w c:\windows\system32\dllcache\imjpdct.dll
+ 2008-04-14 03:13:46 307,257 -c–a-w c:\windows\system32\dllcache\imjpdct.exe
+ 2008-04-14 03:13:48 155,705 -c–a-w c:\windows\system32\dllcache\imjpdsvr.exe
+ 2008-04-14 03:13:50 196,665 -c–a-w c:\windows\system32\dllcache\imjpinst.exe
+ 2008-04-14 03:13:52 208,952 -c–a-w c:\windows\system32\dllcache\imjpmig.exe
+ 2008-04-14 03:14:00 233,527 -c–a-w c:\windows\system32\dllcache\imjprw.exe
+ 2008-04-14 03:14:02 262,200 -c–a-w c:\windows\system32\dllcache\imjputy.exe
+ 2008-04-14 10:39:48 274,489 -c–a-w c:\windows\system32\dllcache\imjputyc.dll
+ 2008-04-14 10:39:48 102,456 -c–a-w c:\windows\system32\dllcache\imlang.dll
+ 2008-04-14 10:41:56 110,080 -c–a-w c:\windows\system32\dllcache\imm32.dll
+ 2008-04-14 03:13:38 59,392 -c–a-w c:\windows\system32\dllcache\imscinst.exe
+ 2008-04-14 10:41:56 123,392 -c–a-w c:\windows\system32\dllcache\imsinsnt.dll
+ 2008-04-14 10:39:48 315,455 -c–a-w c:\windows\system32\dllcache\imskf.dll
+ 2008-04-14 10:41:56 274,432 -c–a-w c:\windows\system32\dllcache\inetcfg.dll
+ 2008-04-14 10:42:24 15,360 -c–a-w c:\windows\system32\dllcache\inetin51.exe
+ 2008-04-14 10:41:56 829,440 -c–a-w c:\windows\system32\dllcache\inetmgr.dll
+ 2008-04-14 10:41:56 32,768 -c–a-w c:\windows\system32\dllcache\inetmib1.dll
+ 2008-04-14 10:41:56 75,264 -c–a-w c:\windows\system32\dllcache\inetpp.dll
+ 2008-04-14 10:41:56 15,872 -c–a-w c:\windows\system32\dllcache\inetppui.dll
+ 2008-04-14 02:52:14 48,128 -c–a-w c:\windows\system32\dllcache\inetres.dll
+ 2008-04-14 10:42:24 20,480 -c–a-w c:\windows\system32\dllcache\inetwiz.exe
+ 2008-04-14 10:41:56 13,312 -c–a-w c:\windows\system32\dllcache\infoadmn.dll
+ 2008-04-14 10:41:56 257,024 -c–a-w c:\windows\system32\dllcache\infocomm.dll
+ 2001-08-17 18:52:08 16,000 -c–a-w c:\windows\system32\dllcache\ini910u.sys
+ 2008-04-14 10:41:56 147,456 -c–a-w c:\windows\system32\dllcache\initpki.dll
+ 2001-08-17 18:47:50 13,056 -c–a-w c:\windows\system32\dllcache\inport.sys
+ 2008-04-14 10:41:56 123,392 -c–a-w c:\windows\system32\dllcache\input.dll
+ 2008-04-14 05:10:30 5,504 -c–a-w c:\windows\system32\dllcache\intelide.sys
+ 2008-04-14 05:01:34 36,352 -c–a-w c:\windows\system32\dllcache\intelppm.sys
+ 2001-08-17 18:50:56 38,784 -c–a-w c:\windows\system32\dllcache\io8.sys
+ 2001-08-18 03:36:18 90,200 -c–a-w c:\windows\system32\dllcache\io8ports.dll
+ 2001-08-17 17:12:12 45,632 -c–a-w c:\windows\system32\dllcache\ip5515.sys
+ 2008-04-14 05:23:36 36,608 -c–a-w c:\windows\system32\dllcache\ip6fw.sys
+ 2008-04-14 10:42:24 55,808 -c–a-w c:\windows\system32\dllcache\ipconfig.exe
+ 2008-04-14 10:41:56 94,720 -c–a-w c:\windows\system32\dllcache\iphlpapi.dll
+ 2008-04-14 05:27:08 20,864 -c–a-w c:\windows\system32\dllcache\ipinip.sys
+ 2008-04-14 10:41:56 161,280 -c–a-w c:\windows\system32\dllcache\ipmontr.dll
+ 2008-04-14 05:27:16 152,832 -c–a-w c:\windows\system32\dllcache\ipnat.sys
+ 2008-04-14 10:41:56 331,264 -c–a-w c:\windows\system32\dllcache\ipnathlp.dll
+ 2008-04-14 10:41:56 330,752 -c–a-w c:\windows\system32\dllcache\ippromon.dll
+ 2008-04-14 10:41:56 35,328 -c–a-w c:\windows\system32\dllcache\iprip.dll
+ 2008-04-14 10:41:56 177,152 -c–a-w c:\windows\system32\dllcache\iprtrmgr.dll
+ 2008-04-14 05:49:44 75,264 -c–a-w c:\windows\system32\dllcache\ipsec.sys
+ 2008-04-14 10:41:56 349,696 -c–a-w c:\windows\system32\dllcache\ipsecsnp.dll
+ 2008-04-14 10:41:56 183,808 -c–a-w c:\windows\system32\dllcache\ipsecsvc.dll
+ 2008-04-14 10:41:56 384,000 -c–a-w c:\windows\system32\dllcache\ipsmsnap.dll
+ 2008-04-14 10:42:24 53,248 -c–a-w c:\windows\system32\dllcache\ipv6.exe
+ 2008-04-14 10:41:56 59,904 -c–a-w c:\windows\system32\dllcache\ipv6mon.dll
+ 2008-04-14 10:42:24 23,552 -c–a-w c:\windows\system32\dllcache\ipxroute.exe
+ 2008-04-14 10:41:56 22,016 -c–a-w c:\windows\system32\dllcache\ipxwan.dll
+ 2008-04-14 05:15:36 46,592 -c–a-w c:\windows\system32\dllcache\irbus.sys
+ 2008-04-14 05:24:38 88,192 -c–a-w c:\windows\system32\dllcache\irda.sys
+ 2008-04-14 05:24:30 11,264 -c–a-w c:\windows\system32\dllcache\irenum.sys
+ 2001-08-17 18:49:04 23,552 -c–a-w c:\windows\system32\dllcache\irmk7.sys
+ 2008-04-14 10:41:56 28,160 -c–a-w c:\windows\system32\dllcache\irmon.dll
+ 2001-08-17 18:51:32 18,688 -c–a-w c:\windows\system32\dllcache\irsir.sys
+ 2001-08-17 18:49:10 26,624 -c–a-w c:\windows\system32\dllcache\irstusb.sys
+ 2008-04-14 05:06:42 37,248 -c–a-w c:\windows\system32\dllcache\isapnp.sys
+ 2008-04-14 10:41:56 68,608 -c–a-w c:\windows\system32\dllcache\isatq.dll
+ 2008-04-14 10:41:56 26,624 -c–a-w c:\windows\system32\dllcache\iscomlog.dll
+ 2008-04-14 10:41:56 81,920 -c–a-w c:\windows\system32\dllcache\isign32.dll
+ 2008-04-14 10:41:56 32,768 -c–a-w c:\windows\system32\dllcache\isrdbg32.dll
+ 2008-04-14 10:41:56 155,136 -c–a-w c:\windows\system32\dllcache\itircl.dll
+ 2008-04-14 10:41:56 138,240 -c–a-w c:\windows\system32\dllcache\itss.dll
+ 2008-04-14 10:41:56 191,488 -c–a-w c:\windows\system32\dllcache\iuengine.dll
+ 2008-04-14 10:41:56 54,272 -c–a-w c:\windows\system32\dllcache\ixsso.dll
+ 2008-04-14 10:41:56 47,616 -c–a-w c:\windows\system32\dllcache\iyuv_32.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbd101.dll
+ 2001-08-17 19:55:56 6,144 -c–a-w c:\windows\system32\dllcache\kbd101b.dll
+ 2001-08-17 19:55:56 6,144 -c–a-w c:\windows\system32\dllcache\kbd101c.dll
+ 2001-08-17 19:55:56 5,632 -c–a-w c:\windows\system32\dllcache\kbd103.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbd106.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbd106n.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdax2.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdbhc.dll
+ 2008-04-14 05:09:48 24,576 -c–a-w c:\windows\system32\dllcache\kbdclass.sys
+ 2008-04-14 10:39:56 7,168 -c–a-w c:\windows\system32\dllcache\kbdfi1.dll
+ 2008-04-14 05:09:50 14,592 -c–a-w c:\windows\system32\dllcache\kbdhid.sys
+ 2008-04-14 10:39:56 7,168 -c–a-w c:\windows\system32\dllcache\kbdibm02.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdinbe1.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdinben.dll
+ 2008-04-14 10:39:56 6,656 -c–a-w c:\windows\system32\dllcache\kbdinmal.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdiultn.dll
+ 2001-08-18 03:36:18 8,704 -c–a-w c:\windows\system32\dllcache\kbdjpn.dll
+ 2001-08-18 03:36:18 8,192 -c–a-w c:\windows\system32\dllcache\kbdkor.dll
+ 2008-04-14 10:39:56 6,656 -c–a-w c:\windows\system32\dllcache\kbdlk41a.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdlk41j.dll
+ 2008-04-14 10:39:56 5,632 -c–a-w c:\windows\system32\dllcache\kbdmaori.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdmlt47.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdmlt48.dll
+ 2008-04-14 10:39:56 7,168 -c–a-w c:\windows\system32\dllcache\kbdnec.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdnepr.dll
+ 2008-04-14 10:39:56 7,168 -c–a-w c:\windows\system32\dllcache\kbdno1.dll
+ 2008-04-14 10:39:56 6,144 -c–a-w c:\windows\system32\dllcache\kbdpash.dll
+ 2008-04-14 10:39:56 7,680 -c–a-w c:\windows\system32\dllcache\kbdsmsfi.dll
+ 2008-04-14 10:39:56 7,680 -c–a-w c:\windows\system32\dllcache\kbdsmsno.dll
+ 2008-04-14 10:39:56 7,168 -c–a-w c:\windows\system32\dllcache\kbdukx.dll
+ 2008-04-14 05:01:36 7,424 -c–a-w c:\windows\system32\dllcache\kd1394.dll
+ 2008-04-14 10:41:58 48,640 -c–a-w c:\windows\system32\dllcache\kdsui.dll
+ 2008-04-14 10:41:58 253,952 -c–a-w c:\windows\system32\dllcache\kdsusd.dll
+ 2008-04-14 10:41:58 299,520 -c–a-w c:\windows\system32\dllcache\kerberos.dll
+ 2008-04-14 10:41:58 989,696 -c–a-w c:\windows\system32\dllcache\kernel32.dll
+ 2008-04-14 10:41:58 150,528 -c–a-w c:\windows\system32\dllcache\keymgr.dll
+ 2008-04-14 05:15:10 172,416 -c–a-w c:\windows\system32\dllcache\kmixer.sys
+ 2008-04-14 09:41:58 61,440 -c–a-w c:\windows\system32\dllcache\kmsvc.dll
+ 2001-08-18 03:36:18 37,376 -c–a-w c:\windows\system32\dllcache\kousd.dll
+ 2008-04-14 10:41:58 24,576 -c–a-w c:\windows\system32\dllcache\krnlprov.dll
+ 2008-04-14 05:46:38 141,056 -c–a-w c:\windows\system32\dllcache\ks.sys
+ 2008-04-14 05:01:44 92,288 -c–a-w c:\windows\system32\dllcache\ksecdd.sys
+ 2008-04-14 10:41:58 4,096 -c–a-w c:\windows\system32\dllcache\ksuser.dll
+ 2001-08-17 17:12:14 19,016 -c–a-w c:\windows\system32\dllcache\ktc111.sys
+ 2008-04-14 09:41:58 37,376 -c–a-w c:\windows\system32\dllcache\l2store.dll
+ 2001-08-17 17:12:50 26,442 -c–a-w c:\windows\system32\dllcache\lanepic5.sys
+ 2008-04-14 05:10:28 34,688 -c–a-w c:\windows\system32\dllcache\lbrtfdc.sys
+ 2008-04-14 10:42:24 677,888 -c–a-w c:\windows\system32\dllcache\lhmstsc.exe
+ 2008-04-14 10:41:58 2,061,824 -c–a-w c:\windows\system32\dllcache\lhmstscx.dll
+ 2008-04-14 10:41:58 423,936 -c–a-w c:\windows\system32\dllcache\licdll.dll
+ 2008-04-14 10:41:58 58,880 -c–a-w c:\windows\system32\dllcache\licwmi.dll
+ 2008-04-14 10:41:58 19,968 -c–a-w c:\windows\system32\dllcache\linkinfo.dll
+ 2001-08-17 18:51:10 15,744 -c–a-w c:\windows\system32\dllcache\lit220p.sys
+ 2008-04-14 10:41:58 13,824 -c–a-w c:\windows\system32\dllcache\lmhsvc.dll
+ 2008-04-14 10:41:58 33,792 -c–a-w c:\windows\system32\dllcache\lmmib2.dll
+ 2001-08-17 17:11:52 25,065 -c–a-w c:\windows\system32\dllcache\lmndis3.sys
+ 2008-04-14 10:41:58 399,872 -c–a-w c:\windows\system32\dllcache\lmrt.dll
+ 2001-08-17 17:12:20 20,573 -c–a-w c:\windows\system32\dllcache\lne100.sys
+ 2001-08-17 17:12:24 70,730 -c–a-w c:\windows\system32\dllcache\lne100tx.sys
+ 2008-04-14 10:41:58 97,280 -c–a-w c:\windows\system32\dllcache\loadperf.dll
+ 2008-04-14 10:41:58 221,696 -c–a-w c:\windows\system32\dllcache\localsec.dll
+ 2008-04-14 10:41:58 11,776 -c–a-w c:\windows\system32\dllcache\localui.dll
+ 2008-04-14 10:42:26 75,264 -c–a-w c:\windows\system32\dllcache\locator.exe
+ 2008-04-14 10:41:58 19,968 -c–a-w c:\windows\system32\dllcache\log.dll
+ 2008-04-14 10:42:26 59,392 -c–a-w c:\windows\system32\dllcache\logman.exe
+ 2008-04-14 10:42:26 514,560 -c–a-w c:\windows\system32\dllcache\logonui.exe
+ 2008-04-14 10:41:58 13,312 -c–a-w c:\windows\system32\dllcache\lonsint.dll
+ 2001-08-17 18:53:42 4,992 -c–a-w c:\windows\system32\dllcache\loop.sys
+ 2008-04-14 10:41:58 22,528 -c–a-w c:\windows\system32\dllcache\lpdsvc.dll
+ 2008-04-14 10:41:58 22,016 -c–a-w c:\windows\system32\dllcache\lpk.dll
+ 2008-04-14 10:41:58 10,240 -c–a-w c:\windows\system32\dllcache\lprhelp.dll
+ 2008-04-14 10:41:58 18,944 -c–a-w c:\windows\system32\dllcache\lprmon.dll
+ 2008-04-14 10:42:26 13,312 -c–a-w c:\windows\system32\dllcache\lsass.exe
+ 2001-08-17 18:28:18 727,786 -c–a-w c:\windows\system32\dllcache\ltck000c.sys
+ 2008-04-14 04:53:36 606,684 -c–a-w c:\windows\system32\dllcache\ltmdmnt.sys
+ 2001-08-17 18:28:08 576,746 -c–a-w c:\windows\system32\dllcache\ltmdmntl.sys
+ 2008-04-14 04:53:38 420,992 -c–a-w c:\windows\system32\dllcache\ltmdmntt.sys
+ 2008-04-14 05:10:54 7,040 -c–a-w c:\windows\system32\dllcache\ltotape.sys
+ 2001-08-17 18:28:12 797,500 -c–a-w c:\windows\system32\dllcache\ltsmt.sys
+ 2008-04-14 03:09:14 20,864 -c–a-w c:\windows\system32\dllcache\lwadihid.sys
+ 2001-08-17 17:49:20 22,848 -c–a-w c:\windows\system32\dllcache\lwusbhid.sys
+ 2001-08-18 03:36:18 58,368 -c–a-w c:\windows\system32\dllcache\m3091dc.dll
+ 2001-08-18 03:36:18 58,880 -c–a-w c:\windows\system32\dllcache\m3092dc.dll
+ 2001-08-17 17:19:58 48,768 -c–a-w c:\windows\system32\dllcache\maestro.sys
+ 2008-04-14 10:42:26 72,704 -c–a-w c:\windows\system32\dllcache\magnify.exe
+ 2008-04-14 10:42:26 57,344 -c–a-w c:\windows\system32\dllcache\makecab.exe
+ 2001-08-17 18:52:50 7,424 -c–a-w c:\windows\system32\dllcache\mammoth.sys
+ 2008-04-14 10:41:58 14,336 -c–a-w c:\windows\system32\dllcache\mcastmib.dll
+ 2008-04-14 10:41:58 84,480 -c–a-w c:\windows\system32\dllcache\mciavi32.dll
+ 2008-04-14 10:41:58 35,328 -c–a-w c:\windows\system32\dllcache\mciqtz32.dll
+ 2008-04-14 10:41:58 23,040 -c–a-w c:\windows\system32\dllcache\mciseq.dll
+ 2008-04-14 10:41:58 23,552 -c–a-w c:\windows\system32\dllcache\mciwave.dll
+ 2008-04-14 10:41:58 37,888 -c–a-w c:\windows\system32\dllcache\md5filt.dll
+ 2001-08-17 17:12:26 164,586 -c–a-w c:\windows\system32\dllcache\mdgndis5.sys
+ 2008-04-14 10:41:58 118,272 -c–a-w c:\windows\system32\dllcache\mdminst.dll
+ 2001-08-23 07:00:00 147,968 -c–a-w c:\windows\system32\dllcache\mdwmdmsp.dll
+ 2008-04-14 10:41:58 16,896 -c–a-w c:\windows\system32\dllcache\medctroc.dll
+ 2001-08-17 18:58:04 8,320 -c–a-w c:\windows\system32\dllcache\memcard.sys
+ 2001-08-18 03:36:20 47,616 -c–a-w c:\windows\system32\dllcache\memgrp.dll
+ 2008-04-14 05:11:22 26,112 -c–a-w c:\windows\system32\dllcache\memstpci.sys
+ 2008-04-14 10:41:58 85,504 -c–a-w c:\windows\system32\dllcache\metada51.dll
+ 2008-04-14 05:06:42 63,744 -c–a-w c:\windows\system32\dllcache\mf.sys
+ 2008-04-14 10:41:58 40,960 -c–a-w c:\windows\system32\dllcache\mf3216.dll
+ 2008-04-14 10:41:58 927,504 -c–a-w c:\windows\system32\dllcache\mfc40u.dll
+ 2008-04-14 10:41:58 1,028,096 -c–a-w c:\windows\system32\dllcache\mfc42.dll
+ 2007-04-03 13:44:48 981,760 -c–a-w c:\windows\system32\dllcache\mfc42u.dll
+ 2008-04-14 10:41:58 22,528 -c–a-w c:\windows\system32\dllcache\mfcsubs.dll
+ 2001-08-17 19:56:02 235,648 -c–a-w c:\windows\system32\dllcache\mgaud.dll
+ 2001-08-17 17:50:00 320,384 -c–a-w c:\windows\system32\dllcache\mgaum.sys
+ 2008-04-14 10:41:58 14,848 -c–a-w c:\windows\system32\dllcache\mgmtapi.dll
+ 2008-04-14 10:41:58 18,944 -c–a-w c:\windows\system32\dllcache\midimap.dll
+ 2008-04-14 10:41:58 274,432 -c–a-w c:\windows\system32\dllcache\migism.dll
+ 2008-04-14 10:41:58 261,120 -c–a-w c:\windows\system32\dllcache\migisma.dll
+ 2008-04-14 10:41:58 60,928 -c–a-w c:\windows\system32\dllcache\miglibnt.dll
+ 2008-04-14 10:42:26 103,936 -c–a-w c:\windows\system32\dllcache\migload.exe
+ 2008-04-14 10:42:26 7,680 -c–a-w c:\windows\system32\dllcache\migregdb.exe
+ 2008-04-14 10:42:26 245,248 -c–a-w c:\windows\system32\dllcache\migwiz.exe
+ 2008-04-14 10:42:26 241,152 -c–a-w c:\windows\system32\dllcache\migwiza.exe
+ 2001-08-17 18:52:50 6,528 -c–a-w c:\windows\system32\dllcache\miniqic.sys
+ 2008-04-14 10:41:58 586,240 -c–a-w c:\windows\system32\dllcache\mlang.dll
+ 2008-04-14 10:42:26 1,414,656 -c–a-w c:\windows\system32\dllcache\mmc.exe
+ 2008-04-14 10:41:58 184,320 -c–a-w c:\windows\system32\dllcache\mmc30.dll
+ 2008-04-14 10:41:58 163,328 -c–a-w c:\windows\system32\dllcache\mmcbase.dll
+ 2008-04-14 10:41:58 397,312 -c–a-w c:\windows\system32\dllcache\mmcex.dll
+ 2008-04-14 10:41:58 106,496 -c–a-w c:\windows\system32\dllcache\Mmcfxc.dll
+ 2008-04-14 10:41:58 1,872,896 -c–a-w c:\windows\system32\dllcache\mmcndmgr.dll
+ 2008-04-14 10:42:26 33,792 -c–a-w c:\windows\system32\dllcache\mmcperf.exe
+ 2008-04-14 10:41:58 61,440 -c–a-w c:\windows\system32\dllcache\mmcshext.dll
+ 2008-04-14 10:41:58 17,408 -c–a-w c:\windows\system32\dllcache\mmfutil.dll
+ 2008-04-14 10:41:58 34,560 -c–a-w c:\windows\system32\dllcache\mnmdd.dll
+ 2008-04-14 10:42:26 32,768 -c–a-w c:\windows\system32\dllcache\mnmsrvc.exe
+ 2008-04-14 10:41:58 207,360 -c–a-w c:\windows\system32\dllcache\mobsync.dll
+ 2008-04-14 10:42:28 143,360 -c–a-w c:\windows\system32\dllcache\mobsync.exe
+ 2008-04-14 05:30:20 30,080 -c–a-w c:\windows\system32\dllcache\modem.sys
+ 2001-08-17 18:57:38 16,128 -c–a-w c:\windows\system32\dllcache\modemcsa.sys
+ 2008-04-14 10:41:58 153,600 -c–a-w c:\windows\system32\dllcache\modemui.dll
+ 2008-04-14 10:42:28 16,384 -c–a-w c:\windows\system32\dllcache\mofcomp.exe
+ 2008-04-14 10:41:58 123,904 -c–a-w c:\windows\system32\dllcache\mofd.dll
+ 2008-04-14 03:15:32 216,064 -c–a-w c:\windows\system32\dllcache\moricons.dll
+ 2008-04-14 05:09:48 23,040 -c–a-w c:\windows\system32\dllcache\mouclass.sys
+ 2001-08-17 18:48:00 12,160 -c–a-w c:\windows\system32\dllcache\mouhid.sys
+ 2008-04-14 05:09:48 42,368 -c–a-w c:\windows\system32\dllcache\mountmgr.sys
+ 2008-04-14 10:42:28 3,558,912 -c–a-w c:\windows\system32\dllcache\moviemk.exe
+ 2008-04-14 05:16:24 15,232 -c–a-w c:\windows\system32\dllcache\mpe.sys
+ 2008-04-14 10:41:58 59,904 -c–a-w c:\windows\system32\dllcache\mpr.dll
+ 2008-04-14 10:41:58 87,040 -c–a-w c:\windows\system32\dllcache\mprapi.dll
+ 2008-04-14 10:41:58 53,248 -c–a-w c:\windows\system32\dllcache\mprdim.dll
+ 2008-04-14 05:09:46 92,544 -c–a-w c:\windows\system32\dllcache\mqac.sys
+ 2008-04-14 10:41:58 138,240 -c–a-w c:\windows\system32\dllcache\mqad.dll
+ 2008-04-14 10:42:28 19,968 -c–a-w c:\windows\system32\dllcache\mqbkup.exe
+ 2008-04-14 10:41:58 47,616 -c–a-w c:\windows\system32\dllcache\mqdscli.dll
+ 2008-04-14 10:41:58 16,896 -c–a-w c:\windows\system32\dllcache\mqise.dll
+ 2008-04-14 10:41:58 89,088 -c–a-w c:\windows\system32\dllcache\mqlogmgr.dll
+ 2008-04-14 10:41:58 225,280 -c–a-w c:\windows\system32\dllcache\mqoa.dll
+ 2008-04-14 10:41:58 663,040 -c–a-w c:\windows\system32\dllcache\mqqm.dll
+ 2008-04-14 10:41:58 177,152 -c–a-w c:\windows\system32\dllcache\mqrt.dll
+ 2008-04-14 10:41:58 123,904 -c–a-w c:\windows\system32\dllcache\mqrtdep.dll
+ 2008-04-14 10:41:58 95,744 -c–a-w c:\windows\system32\dllcache\mqsec.dll
+ 2008-04-14 10:42:00 517,632 -c–a-w c:\windows\system32\dllcache\mqsnap.dll
+ 2008-04-14 10:42:28 4,608 -c–a-w c:\windows\system32\dllcache\mqsvc.exe
+ 2008-04-14 10:42:28 117,248 -c–a-w c:\windows\system32\dllcache\mqtgsvc.exe
+ 2008-04-14 10:42:00 187,392 -c–a-w c:\windows\system32\dllcache\mqtrig.dll
+ 2008-04-14 10:42:00 49,152 -c–a-w c:\windows\system32\dllcache\mqupgrd.dll
+ 2008-04-14 10:42:00 471,552 -c–a-w c:\windows\system32\dllcache\mqutil.dll
+ 2001-08-17 18:52:12 17,280 -c–a-w c:\windows\system32\dllcache\mraid35x.sys
+ 2008-04-14 05:02:46 180,608 -c–a-w c:\windows\system32\dllcache\mrxdav.sys
+ 2008-04-14 10:42:00 71,680 -c–a-w c:\windows\system32\dllcache\msacm32.dll
+ 2008-04-14 03:55:58 20,480 -c–a-w c:\windows\system32\dllcache\msadcer.dll
+ 2008-04-14 10:42:00 61,440 -c–a-w c:\windows\system32\dllcache\msadcf.dll
+ 2008-04-14 03:55:58 16,384 -c–a-w c:\windows\system32\dllcache\msadcfr.dll
+ 2008-04-14 10:42:00 143,360 -c–a-w c:\windows\system32\dllcache\msadco.dll
+ 2008-04-14 03:55:58 16,384 -c–a-w c:\windows\system32\dllcache\msadcor.dll
+ 2008-04-14 10:42:00 53,248 -c–a-w c:\windows\system32\dllcache\msadcs.dll
+ 2008-04-14 10:42:00 155,648 -c–a-w c:\windows\system32\dllcache\msadds.dll
+ 2008-04-14 03:56:00 24,576 -c–a-w c:\windows\system32\dllcache\msaddsr.dll
+ 2008-04-14 03:56:18 24,576 -c–a-w c:\windows\system32\dllcache\msader15.dll
+ 2008-04-14 10:42:00 536,576 -c–a-w c:\windows\system32\dllcache\msado15.dll
+ 2008-04-14 10:42:00 180,224 -c–a-w c:\windows\system32\dllcache\msadomd.dll
+ 2008-04-14 10:42:00 57,344 -c–a-w c:\windows\system32\dllcache\msador15.dll
+ 2008-04-14 10:42:00 200,704 -c–a-w c:\windows\system32\dllcache\msadox.dll
+ 2008-04-14 10:42:00 57,344 -c–a-w c:\windows\system32\dllcache\msadrh15.dll
+ 2008-04-14 10:40:08 3,584 -c–a-w c:\windows\system32\dllcache\msafd.dll
+ 2008-04-14 10:42:00 86,016 -c–a-w c:\windows\system32\dllcache\msapsspc.dll
+ 2008-04-14 10:42:00 57,344 -c–a-w c:\windows\system32\dllcache\msasn1.dll
+ 2008-04-14 10:42:00 220,160 -c–a-w c:\windows\system32\dllcache\mscandui.dll
+ 2008-04-14 10:42:00 69,632 -c–a-w c:\windows\system32\dllcache\msconf.dll
+ 2008-04-14 10:42:28 169,984 -c–a-w c:\windows\system32\dllcache\msconfig.exe
+ 2008-04-14 03:56:08 12,288 -c–a-w c:\windows\system32\dllcache\mscpx32r.dll
+ 2008-04-14 10:42:00 36,864 -c–a-w c:\windows\system32\dllcache\mscpxl32.dll
+ 2008-04-14 10:42:00 297,984 -c–a-w c:\windows\system32\dllcache\msctf.dll
+ 2008-04-14 10:42:00 68,608 -c–a-w c:\windows\system32\dllcache\msctfp.dll
+ 2008-04-14 10:42:00 4,096 -c–a-w c:\windows\system32\dllcache\msdadc.dll
+ 2008-04-14 10:42:00 118,784 -c–a-w c:\windows\system32\dllcache\msdadiag.dll
+ 2008-04-14 10:42:00 4,096 -c–a-w c:\windows\system32\dllcache\msdaenum.dll
+ 2008-04-14 10:42:00 4,096 -c–a-w c:\windows\system32\dllcache\msdaer.dll
+ 2008-04-14 10:42:00 233,472 -c–a-w c:\windows\system32\dllcache\msdaora.dll
+ 2008-04-14 03:54:16 16,384 -c–a-w c:\windows\system32\dllcache\msdaorar.dll
+ 2008-04-14 10:42:00 77,824 -c–a-w c:\windows\system32\dllcache\msdaosp.dll
+ 2008-04-14 03:56:00 16,384 -c–a-w c:\windows\system32\dllcache\msdaprsr.dll
+ 2008-04-14 10:42:00 200,704 -c–a-w c:\windows\system32\dllcache\msdaprst.dll
+ 2008-04-14 10:42:00 204,800 -c–a-w c:\windows\system32\dllcache\msdaps.dll
+ 2008-04-14 10:42:00 118,784 -c–a-w c:\windows\system32\dllcache\msdarem.dll
+ 2008-04-14 03:56:00 16,384 -c–a-w c:\windows\system32\dllcache\msdaremr.dll
+ 2008-04-14 10:42:00 151,552 -c–a-w c:\windows\system32\dllcache\msdart.dll
+ 2008-04-14 10:42:00 4,096 -c–a-w c:\windows\system32\dllcache\msdasc.dll
+ 2008-04-14 10:42:00 315,392 -c–a-w c:\windows\system32\dllcache\msdasql.dll
+ 2008-04-14 03:56:08 16,384 -c–a-w c:\windows\system32\dllcache\msdasqlr.dll
+ 2008-04-14 10:42:00 94,208 -c–a-w c:\windows\system32\dllcache\msdatl3.dll
+ 2008-04-14 10:42:00 20,480 -c–a-w c:\windows\system32\dllcache\msdatt.dll
+ 2008-04-14 10:42:00 4,096 -c–a-w c:\windows\system32\dllcache\msdaurl.dll
+ 2008-04-14 10:42:00 36,864 -c–a-w c:\windows\system32\dllcache\msdfmap.dll
+ 2008-04-14 10:42:00 14,336 -c–a-w c:\windows\system32\dllcache\msdmo.dll
+ 2008-04-14 10:42:28 6,144 -c–a-w c:\windows\system32\dllcache\msdtc.exe
+ 2008-04-14 10:42:00 58,880 -c–a-w c:\windows\system32\dllcache\msdtclog.dll
+ 2008-04-14 10:42:00 427,008 -c–a-w c:\windows\system32\dllcache\msdtcprx.dll
+ 2008-04-14 10:42:00 90,112 -c–a-w c:\windows\system32\dllcache\msdtcstp.dll
+ 2008-04-14 10:42:00 956,928 -c–a-w c:\windows\system32\dllcache\msdtctm.dll
+ 2008-04-14 10:42:00 161,792 -c–a-w c:\windows\system32\dllcache\msdtcuiu.dll
+ 2008-04-14 05:16:10 51,200 -c–a-w c:\windows\system32\dllcache\msdv.sys
+ 2007-04-02 23:17:44 518,944 -c–a-w c:\windows\system32\dllcache\msexch40.dll
+ 2007-04-02 23:18:00 326,432 -c–a-w c:\windows\system32\dllcache\msexcl40.dll
+ 2008-04-14 05:02:40 19,072 -c–a-w c:\windows\system32\dllcache\msfs.sys
+ 2001-08-17 18:48:36 6,016 -c–a-w c:\windows\system32\dllcache\msfsio.sys
+ 2008-04-14 10:42:00 539,136 -c–a-w c:\windows\system32\dllcache\msftedit.dll
+ 2001-08-17 19:02:40 35,200 -c–a-w c:\windows\system32\dllcache\msgame.sys
+ 2008-04-14 10:42:00 997,376 -c–a-w c:\windows\system32\dllcache\msgina.dll
+ 2008-04-14 05:26:34 35,072 -c–a-w c:\windows\system32\dllcache\msgpc.sys
+ 2008-04-14 10:42:00 3,166,208 -c–a-w c:\windows\system32\dllcache\msgr3en.dll
+ 2008-04-14 10:42:00 15,360 -c–a-w c:\windows\system32\dllcache\msgrocm.dll
+ 2008-04-14 10:42:00 33,792 -c–a-w c:\windows\system32\dllcache\msgsvc.dll
+ 2008-04-14 10:42:00 51,712 -c–a-w c:\windows\system32\dllcache\msident.dll
+ 2008-04-14 10:42:00 6,656 -c–a-w c:\windows\system32\dllcache\msidle.dll
+ 2008-04-14 10:42:00 248,832 -c–a-w c:\windows\system32\dllcache\msieftp.dll
+ 2008-04-14 10:42:00 4,608 -c–a-w c:\windows\system32\dllcache\msimg32.dll
+ 2008-04-14 10:42:30 60,416 -c–a-w c:\windows\system32\dllcache\msimn.exe
+ 2008-04-14 10:42:00 159,232 -c–a-w c:\windows\system32\dllcache\msimtf.dll
+ 2008-04-14 10:42:00 376,832 -c–a-w c:\windows\system32\dllcache\msinfo.dll
+ 2008-04-14 05:24:30 22,016 -c–a-w c:\windows\system32\dllcache\msircomm.sys
+ 2008-04-14 10:42:30 40,960 -c–a-w c:\windows\system32\dllcache\msiregmv.exe
+ 2007-10-22 20:00:52 1,516,568 -c–a-w c:\windows\system32\dllcache\msjet40.dll
+ 2007-04-02 23:19:22 355,112 -c–a-w c:\windows\system32\dllcache\msjetol1.dll
+ 2008-04-14 10:42:02 151,583 -c–a-w c:\windows\system32\dllcache\msjint40.dll
+ 2008-04-14 10:42:02 102,400 -c–a-w c:\windows\system32\dllcache\msjro.dll
+ 2007-04-02 23:19:34 60,192 -c–a-w c:\windows\system32\dllcache\msjter40.dll
+ 2007-04-02 23:19:38 248,608 -c–a-w c:\windows\system32\dllcache\msjtes40.dll
+ 2008-04-14 05:09:54 7,552 -c–a-w c:\windows\system32\dllcache\mskssrv.sys
+ 2008-04-14 10:42:02 25,088 -c–a-w c:\windows\system32\dllcache\mslbui.dll
+ 2007-04-02 23:19:52 219,936 -c–a-w c:\windows\system32\dllcache\msltus40.dll
+ 2008-04-14 10:42:02 39,936 -c–a-w c:\windows\system32\dllcache\mslwvtts.dll
+ 2001-08-17 19:00:04 2,944 -c–a-w c:\windows\system32\dllcache\msmpu401.sys
+ 2008-04-14 10:42:02 170,496 -c–a-w c:\windows\system32\dllcache\msmqocm.dll
+ 2008-04-14 10:42:02 290,816 -c–a-w c:\windows\system32\dllcache\msnsspc.dll
+ 2008-04-14 10:42:02 122,368 -c–a-w c:\windows\system32\dllcache\msobcomm.dll
+ 2008-04-14 10:42:02 16,384 -c–a-w c:\windows\system32\dllcache\msobdl.dll
+ 2008-04-14 10:42:02 565,248 -c–a-w c:\windows\system32\dllcache\msobmain.dll
+ 2008-04-14 10:42:02 30,720 -c–a-w c:\windows\system32\dllcache\msobshel.dll
+ 2008-04-14 10:42:02 19,456 -c–a-w c:\windows\system32\dllcache\msobweb.dll
+ 2008-04-14 10:42:02 1,314,816 -c–a-w c:\windows\system32\dllcache\msoe.dll
+ 2008-04-14 10:42:02 252,928 -c–a-w c:\windows\system32\dllcache\msoeacct.dll
+ 2008-04-14 02:53:56 2,479,616 -c–a-w c:\windows\system32\dllcache\msoeres.dll
+ 2008-04-14 10:42:02 105,984 -c–a-w c:\windows\system32\dllcache\msoert2.dll
+ 2008-04-14 10:42:30 29,184 -c–a-w c:\windows\system32\dllcache\msoobe.exe
+ 2008-04-14 03:54:16 20,480 -c–a-w c:\windows\system32\dllcache\msorc32r.dll
+ 2008-04-14 10:42:02 143,360 -c–a-w c:\windows\system32\dllcache\msorcl32.dll
+ 2008-04-14 10:42:30 343,040 -c–a-w c:\windows\system32\dllcache\mspaint.exe
+ 2008-04-14 10:42:02 29,696 -c–a-w c:\windows\system32\dllcache\mspatcha.dll
+ 2007-04-02 23:20:06 355,104 -c–a-w c:\windows\system32\dllcache\mspbde40.dll
+ 2008-04-14 05:09:52 5,376 -c–a-w c:\windows\system32\dllcache\mspclock.sys
+ 2008-04-14 05:09:52 4,992 -c–a-w c:\windows\system32\dllcache\mspqm.sys
+ 2008-04-14 02:53:32 48,128 -c–a-w c:\windows\system32\dllcache\msprivs.dll
+ 2007-04-02 23:20:28 432,928 -c–a-w c:\windows\system32\dllcache\msrd2x40.dll
+ 2007-04-02 23:20:44 322,336 -c–a-w c:\windows\system32\dllcache\msrd3x40.dll
+ 2007-04-02 23:21:06 559,904 -c–a-w c:\windows\system32\dllcache\msrepl40.dll
+ 2001-08-17 18:48:50 12,416 -c–a-w c:\windows\system32\dllcache\msriffwv.sys
+ 2008-04-14 10:42:02 11,264 -c–a-w c:\windows\system32\dllcache\msrle32.dll
+ 2008-04-14 10:42:02 134,656 -c–a-w c:\windows\system32\dllcache\mssap.dll
+ 2008-04-14 09:42:02 155,136 -c–a-w c:\windows\system32\dllcache\mssha.dll
+ 2008-04-14 03:45:00 76,800 -c–a-w c:\windows\system32\dllcache\msshamsg.dll
+ 2008-04-14 05:06:48 15,488 -c–a-w c:\windows\system32\dllcache\mssmbios.sys
+ 2008-04-14 10:42:02 274,432 -c–a-w c:\windows\system32\dllcache\mst120.dll
+ 2008-04-14 10:42:02 57,344 -c–a-w c:\windows\system32\dllcache\mst123.dll
+ 2008-04-14 05:16:10 49,024 -c–a-w c:\windows\system32\dllcache\mstape.sys
+ 2008-04-14 10:42:02 274,944 -c–a-w c:\windows\system32\dllcache\mstask.dll
+ 2008-04-14 05:09:52 5,504 -c–a-w c:\windows\system32\dllcache\mstee.sys
+ 2007-04-02 23:21:28 264,992 -c–a-w c:\windows\system32\dllcache\mstext40.dll
+ 2008-04-14 10:42:30 12,288 -c–a-w c:\windows\system32\dllcache\mstinit.exe
+ 2008-04-14 10:42:02 116,224 -c–a-w c:\windows\system32\dllcache\mstlsapi.dll
+ 2008-04-14 10:42:02 195,072 -c–a-w c:\windows\system32\dllcache\msutb.dll
+ 2008-04-14 10:42:02 57,344 -c–a-w c:\windows\system32\dllcache\msvcirt.dll
+ 2008-04-14 10:42:02 413,696 -c–a-w c:\windows\system32\dllcache\msvcp60.dll
+ 2008-04-14 10:42:02 343,040 -c–a-w c:\windows\system32\dllcache\msvcrt.dll
+ 2008-04-14 05:00:48 61,440 -c–a-w c:\windows\system32\dllcache\msvcrt40.dll
+ 2008-04-14 10:42:02 121,344 -c–a-w c:\windows\system32\dllcache\msvfw32.dll
+ 2008-04-14 10:42:02 1,428,992 -c–a-w c:\windows\system32\dllcache\msvidctl.dll
+ 2007-04-02 23:21:48 838,432 -c–a-w c:\windows\system32\dllcache\mswdat10.dll
+ 2008-04-14 10:42:02 203,776 -c–a-w c:\windows\system32\dllcache\mswebdvd.dll
+ 2007-04-02 23:21:54 621,344 -c–a-w c:\windows\system32\dllcache\mswstr10.dll
+ 2008-04-14 10:42:02 24,576 -c–a-w c:\windows\system32\dllcache\msxactps.dll
+ 2007-04-02 23:22:02 355,104 -c–a-w c:\windows\system32\dllcache\msxbde40.dll
+ 2008-04-14 10:42:02 506,368 -c–a-w c:\windows\system32\dllcache\msxml.dll
+ 2008-04-14 10:42:02 701,440 -c–a-w c:\windows\system32\dllcache\msxml2.dll
- 2008-04-14 10:42:02 1,306,624 -c—-w c:\windows\system32\dllcache\msxml6.dll
+ 2008-09-10 01:14:56 1,307,648 -c–a-w c:\windows\system32\dllcache\msxml6.dll
- 2008-04-14 03:57:20 79,872 -c—-w c:\windows\system32\dllcache\msxml6r.dll
+ 2008-04-14 02:57:20 79,872 -c–a-w c:\windows\system32\dllcache\msxml6r.dll
+ 2008-04-14 10:42:02 16,896 -c–a-w c:\windows\system32\dllcache\msyuv.dll
+ 2008-04-14 04:53:42 126,686 -c–a-w c:\windows\system32\dllcache\mtlmnt5.sys
+ 2008-04-14 04:53:40 1,309,184 -c–a-w c:\windows\system32\dllcache\mtlstrm.sys
+ 2008-04-14 10:42:30 119,808 -c–a-w c:\windows\system32\dllcache\mtstocom.exe
+ 2008-04-14 10:42:02 66,560 -c–a-w c:\windows\system32\dllcache\mtxclu.dll
+ 2008-04-14 10:42:02 30,720 -c–a-w c:\windows\system32\dllcache\mtxdm.dll
+ 2008-04-14 10:42:02 4,096 -c–a-w c:\windows\system32\dllcache\mtxex.dll
+ 2008-04-14 10:42:02 34,304 -c–a-w c:\windows\system32\dllcache\mtxlegih.dll
+ 2008-04-14 10:42:02 91,648 -c–a-w c:\windows\system32\dllcache\mtxoci.dll
+ 2008-04-14 10:42:02 1,737,856 -c–a-w c:\windows\system32\dllcache\mtxparhd.dll
+ 2008-04-14 03:04:28 452,736 -c–a-w c:\windows\system32\dllcache\mtxparhm.sys
+ 2001-08-17 17:50:04 103,296 -c–a-w c:\windows\system32\dllcache\mtxvideo.sys
+ 2008-04-14 10:42:30 90,624 -c–a-w c:\windows\system32\dllcache\muisetup.exe
+ 2008-04-14 05:47:06 105,344 -c–a-w c:\windows\system32\dllcache\mup.sys
+ 2008-04-14 05:13:56 12,672 -c–a-w c:\windows\system32\dllcache\mutohpen.sys
+ 2001-08-17 18:50:48 21,888 -c–a-w c:\windows\system32\dllcache\mxcard.sys
+ 2001-08-18 03:36:26 19,968 -c–a-w c:\windows\system32\dllcache\mxicfg.dll
+ 2001-08-17 18:49:32 19,968 -c–a-w c:\windows\system32\dllcache\mxnic.sys
+ 2001-08-18 03:36:26 7,168 -c–a-w c:\windows\system32\dllcache\mxport.dll
+ 2001-08-17 18:50:54 75,520 -c–a-w c:\windows\system32\dllcache\mxport.sys
+ 2008-04-14 10:42:02 90,624 -c–a-w c:\windows\system32\dllcache\mydocs.dll
+ 2001-08-17 17:11:36 52,255 -c–a-w c:\windows\system32\dllcache\n1000nt5.sys
+ 2001-08-17 19:56:02 35,392 -c–a-w c:\windows\system32\dllcache\n9i128.dll
+ 2001-08-17 17:50:06 13,664 -c–a-w c:\windows\system32\dllcache\n9i128.sys
+ 2001-08-18 03:36:02 59,104 -c–a-w c:\windows\system32\dllcache\n9i128v2.dll
+ 2001-08-17 17:50:08 33,088 -c–a-w c:\windows\system32\dllcache\n9i128v2.sys
+ 2001-08-17 17:50:10 27,936 -c–a-w c:\windows\system32\dllcache\n9i3d.sys
+ 2001-08-17 19:56:02 91,488 -c–a-w c:\windows\system32\dllcache\n9i3disp.dll
+ 2008-04-14 05:16:26 85,248 -c–a-w c:\windows\system32\dllcache\nabtsfec.sys
+ 2008-04-14 10:42:02 221,184 -c–a-w c:\windows\system32\dllcache\nac.dll
+ 2008-04-14 09:42:02 30,208 -c–a-w c:\windows\system32\dllcache\napipsec.dll
+ 2008-04-14 09:42:02 193,024 -c–a-w c:\windows\system32\dllcache\napmontr.dll
+ 2008-04-14 09:42:30 176,640 -c–a-w c:\windows\system32\dllcache\napstat.exe
+ 2008-04-14 10:42:30 53,760 -c–a-w c:\windows\system32\dllcache\narrator.exe
+ 2008-04-14 10:42:02 36,352 -c–a-w c:\windows\system32\dllcache\ncobjapi.dll
+ 2008-04-14 10:42:02 47,104 -c–a-w c:\windows\system32\dllcache\ncprov.dll
+ 2008-04-14 10:42:02 17,920 -c–a-w c:\windows\system32\dllcache\nddeapi.dll
+ 2008-04-14 10:42:30 4,096 -c–a-w c:\windows\system32\dllcache\nddeapir.exe
+ 2008-04-14 10:42:02 18,944 -c–a-w c:\windows\system32\dllcache\nddenb32.dll
+ 2008-04-14 05:50:38 182,656 -c–a-w c:\windows\system32\dllcache\ndis.sys
+ 2008-04-14 05:16:24 10,880 -c–a-w c:\windows\system32\dllcache\ndisip.sys
+ 2008-04-14 10:42:02 57,344 -c–a-w c:\windows\system32\dllcache\ndisnpp.dll
+ 2008-04-14 05:27:28 10,112 -c–a-w c:\windows\system32\dllcache\ndistapi.sys
+ 2008-04-14 05:26:00 14,592 -c–a-w c:\windows\system32\dllcache\ndisuio.sys
+ 2008-04-14 05:50:44 91,520 -c–a-w c:\windows\system32\dllcache\ndiswan.sys
+ 2008-04-14 05:27:30 40,576 -c–a-w c:\windows\system32\dllcache\ndproxy.sys
+ 2001-08-17 18:49:14 15,872 -c–a-w c:\windows\system32\dllcache\ne2000.sys
+ 2001-08-18 03:36:02 60,480 -c–a-w c:\windows\system32\dllcache\neo20xx.dll
+ 2001-08-17 17:50:04 39,264 -c–a-w c:\windows\system32\dllcache\neo20xx.sys
+ 2008-04-14 10:42:30 42,496 -c–a-w c:\windows\system32\dllcache\net.exe
+ 2008-04-14 10:42:30 124,928 -c–a-w c:\windows\system32\dllcache\net1.exe
+ 2008-04-14 05:26:04 34,688 -c–a-w c:\windows\system32\dllcache\netbios.sys
+ 2008-04-14 05:51:02 162,816 -c–a-w c:\windows\system32\dllcache\netbt.sys
+ 2008-04-14 10:42:02 622,592 -c–a-w c:\windows\system32\dllcache\netcfgx.dll
+ 2008-04-14 10:42:30 111,104 -c–a-w c:\windows\system32\dllcache\netdde.exe
+ 2001-08-17 17:11:36 65,278 -c–a-w c:\windows\system32\dllcache\netflx3.sys
+ 2008-04-14 10:42:02 139,264 -c–a-w c:\windows\system32\dllcache\netid.dll
+ 2008-04-14 10:42:02 198,144 -c–a-w c:\windows\system32\dllcache\netman.dll
+ 2008-04-14 10:42:02 77,312 -c–a-w c:\windows\system32\dllcache\netoc.dll
+ 2008-04-14 10:42:02 875,008 -c–a-w c:\windows\system32\dllcache\netplwiz.dll
+ 2008-04-14 10:42:02 11,776 -c–a-w c:\windows\system32\dllcache\netrap.dll
+ 2008-04-14 10:46:52 329,728 -c–a-w c:\windows\system32\dllcache\netsetup.exe
+ 2008-04-14 10:42:30 86,016 -c–a-w c:\windows\system32\dllcache\netsh.exe
+ 2008-04-14 10:42:04 1,703,936 -c–a-w c:\windows\system32\dllcache\netshell.dll
+ 2008-04-14 10:42:30 36,864 -c–a-w c:\windows\system32\dllcache\netstat.exe
+ 2008-04-14 10:42:04 80,896 -c–a-w c:\windows\system32\dllcache\netui0.dll
+ 2008-04-14 10:42:04 245,760 -c–a-w c:\windows\system32\dllcache\netui1.dll
+ 2008-04-14 03:05:40 132,695 -c–a-w c:\windows\system32\dllcache\netwlan5.sys
+ 2008-04-14 10:42:04 247,808 -c–a-w c:\windows\system32\dllcache\newdev.dll
+ 2001-08-17 17:12:20 32,840 -c–a-w c:\windows\system32\dllcache\ngrpci.sys
+ 2008-04-14 05:21:26 61,824 -c–a-w c:\windows\system32\dllcache\nic1394.sys
+ 2001-08-23 07:00:00 12,032 -c–a-w c:\windows\system32\dllcache\nikedrv.sys
+ 2001-08-17 17:20:08 126,080 -c–a-w c:\windows\system32\dllcache\nm5a2wdm.sys
+ 2001-08-17 17:20:08 87,040 -c–a-w c:\windows\system32\dllcache\nm6wdm.sys
+ 2008-04-14 10:42:04 229,376 -c–a-w c:\windows\system32\dllcache\nmas.dll
+ 2008-04-14 10:42:04 28,672 -c–a-w c:\windows\system32\dllcache\nmasnt.dll
+ 2008-04-14 10:42:04 81,920 -c–a-w c:\windows\system32\dllcache\nmchat.dll
+ 2008-04-14 10:42:04 77,824 -c–a-w c:\windows\system32\dllcache\nmcom.dll
+ 2008-04-14 10:42:04 151,552 -c–a-w c:\windows\system32\dllcache\nmft.dll
+ 2008-04-14 10:42:04 28,672 -c–a-w c:\windows\system32\dllcache\nmmkcert.dll
+ 2008-04-14 05:23:10 40,320 -c–a-w c:\windows\system32\dllcache\nmnt.sys
+ 2008-04-14 10:42:04 172,032 -c–a-w c:\windows\system32\dllcache\nmoldwb.dll
+ 2008-04-14 10:42:04 188,416 -c–a-w c:\windows\system32\dllcache\nmwb.dll
+ 2008-04-14 10:42:30 69,120 -c–a-w c:\windows\system32\dllcache\notepad.exe
+ 2008-04-14 05:02:40 30,848 -c–a-w c:\windows\system32\dllcache\npfs.sys
+ 2008-04-14 10:42:30 15,360 -c–a-w c:\windows\system32\dllcache\nppagent.exe
+ 2008-04-14 10:42:04 54,784 -c–a-w c:\windows\system32\dllcache\npptools.dll
+ 2008-04-14 05:24:38 28,672 -c–a-w c:\windows\system32\dllcache\nscirda.sys
+ 2008-04-14 10:42:04 44,544 -c–a-w c:\windows\system32\dllcache\nsepm.dll
+ 2008-04-14 10:42:30 76,800 -c–a-w c:\windows\system32\dllcache\nslookup.exe
+ 2001-08-17 18:53:02 7,552 -c–a-w c:\windows\system32\dllcache\nsmmc.sys
+ 2001-08-17 18:47:22 9,344 -c–a-w c:\windows\system32\dllcache\ntapm.sys
+ 2008-04-14 10:42:32 1,200,640 -c–a-w c:\windows\system32\dllcache\ntbackup.exe
+ 2008-04-14 10:41:26 706,048 -c–a-w c:\windows\system32\dllcache\ntdll.dll
+ 2008-04-14 10:42:04 212,992 -c–a-w c:\windows\system32\dllcache\ntevt.dll
+ 2008-04-14 05:45:54 574,976 -c–a-w c:\windows\system32\dllcache\ntfs.sys
+ 2001-08-17 17:49:04 51,552 -c–a-w c:\windows\system32\dllcache\ntgrip.sys
+ 2008-04-14 10:42:04 44,032 -c–a-w c:\windows\system32\dllcache\ntlanman.dll
+ 2008-04-14 10:42:04 8,192 -c–a-w c:\windows\system32\dllcache\ntlsapi.dll
+ 2008-04-14 10:42:04 118,784 -c–a-w c:\windows\system32\dllcache\ntmarta.dll
+ 2008-04-14 10:42:04 40,960 -c–a-w c:\windows\system32\dllcache\ntmsapi.dll
+ 2008-04-14 10:42:04 179,200 -c–a-w c:\windows\system32\dllcache\ntmsdba.dll
+ 2008-04-14 10:42:04 488,448 -c–a-w c:\windows\system32\dllcache\ntmsmgr.dll
+ 2008-04-14 10:42:04 435,200 -c–a-w c:\windows\system32\dllcache\ntmssvc.dll
+ 2008-04-14 04:53:42 180,360 -c–a-w c:\windows\system32\dllcache\ntmtlfax.sys
+ 2008-04-14 10:42:04 62,976 -c–a-w c:\windows\system32\dllcache\ntoc.dll
+ 2008-04-14 10:42:04 91,136 -c–a-w c:\windows\system32\dllcache\ntprint.dll
+ 2008-04-14 10:42:04 143,360 -c–a-w c:\windows\system32\dllcache\ntshrui.dll
+ 2008-04-14 10:42:32 420,864 -c–a-w c:\windows\system32\dllcache\ntvdm.exe
+ 2008-04-14 10:42:04 15,360 -c–a-w c:\windows\system32\dllcache\ntvdmd.dll
+ 2001-08-18 03:36:02 123,776 -c–a-w c:\windows\system32\dllcache\nv3.dll
+ 2001-08-17 17:50:18 198,144 -c–a-w c:\windows\system32\dllcache\nv3.sys
+ 2008-09-18 04:55:00 6,057,472 -c–a-w c:\windows\system32\dllcache\nv4_disp.dll
+ 2008-09-18 04:55:00 6,132,576 -c–a-w c:\windows\system32\dllcache\nv4_mini.sys
+ 2008-04-14 10:42:04 64,000 -c–a-w c:\windows\system32\dllcache\nwapi32.dll
+ 2008-04-14 05:26:08 88,320 -c–a-w c:\windows\system32\dllcache\nwlnkipx.sys
+ 2008-04-14 10:42:04 142,336 -c–a-w c:\windows\system32\dllcache\nwprovau.dll
+ 2008-04-14 05:04:14 163,584 -c–a-w c:\windows\system32\dllcache\nwrdr.sys
+ 2008-04-14 10:42:04 65,536 -c–a-w c:\windows\system32\dllcache\nwwks.dll
+ 2008-04-14 10:42:04 270,336 -c–a-w c:\windows\system32\dllcache\oakley.dll
+ 2008-04-14 10:42:04 286,208 -c–a-w c:\windows\system32\dllcache\objsel.dll
+ 2008-04-14 05:10:08 393,728 -c–a-w c:\windows\system32\dllcache\obrb0401.dll
+ 2008-04-14 05:10:24 212,480 -c–a-w c:\windows\system32\dllcache\obrb0404.dll
+ 2008-04-14 05:10:26 428,032 -c–a-w c:\windows\system32\dllcache\obrb0405.dll
+ 2008-04-14 05:10:28 418,816 -c–a-w c:\windows\system32\dllcache\obrb0406.dll
+ 2008-04-14 05:10:36 403,456 -c–a-w c:\windows\system32\dllcache\obrb0407.dll
+ 2008-04-14 05:10:32 419,328 -c–a-w c:\windows\system32\dllcache\obrb0408.dll
+ 2008-04-14 05:10:34 405,504 -c–a-w c:\windows\system32\dllcache\obrb040b.dll
+ 2008-04-14 05:10:34 410,624 -c–a-w c:\windows\system32\dllcache\obrb040C.dll
+ 2008-04-14 05:10:34 384,000 -c–a-w c:\windows\system32\dllcache\obrb040D.dll
+ 2008-04-14 05:10:40 434,176 -c–a-w c:\windows\system32\dllcache\obrb040e.dll
+ 2008-04-14 05:10:40 413,696 -c–a-w c:\windows\system32\dllcache\obrb0410.dll
+ 2008-04-14 05:10:46 275,456 -c–a-w c:\windows\system32\dllcache\obrb0411.dll
+ 2008-04-14 05:10:50 306,688 -c–a-w c:\windows\system32\dllcache\obrb0412.dll
+ 2008-04-14 05:10:46 401,920 -c–a-w c:\windows\system32\dllcache\obrb0413.dll
+ 2008-04-14 05:10:46 353,792 -c–a-w c:\windows\system32\dllcache\obrb0414.dll
+ 2008-04-14 05:10:48 391,680 -c–a-w c:\windows\system32\dllcache\obrb0415.dll
+ 2008-04-14 05:10:12 409,600 -c–a-w c:\windows\system32\dllcache\obrb0416.dll
+ 2008-04-14 05:10:52 427,008 -c–a-w c:\windows\system32\dllcache\obrb0419.dll
+ 2008-04-14 05:10:54 405,504 -c–a-w c:\windows\system32\dllcache\obrb041b.dll
+ 2008-04-14 05:10:58 363,008 -c–a-w c:\windows\system32\dllcache\obrb041D.dll
+ 2008-04-14 05:11:02 390,144 -c–a-w c:\windows\system32\dllcache\obrb041f.dll
+ 2008-04-14 05:10:58 408,576 -c–a-w c:\windows\system32\dllcache\obrb0424.dll
+ 2008-04-14 05:10:26 270,336 -c–a-w c:\windows\system32\dllcache\obrb0804.dll
+ 2008-04-14 05:10:50 435,200 -c–a-w c:\windows\system32\dllcache\obrb0816.dll
+ 2008-04-14 05:10:32 446,464 -c–a-w c:\windows\system32\dllcache\obrb0C0A.dll
+ 2008-04-14 10:42:04 15,360 -c–a-w c:\windows\system32\dllcache\ocgen.dll
+ 2008-04-14 10:42:04 67,584 -c–a-w c:\windows\system32\dllcache\ocmanage.dll
+ 2008-04-14 10:42:04 17,408 -c–a-w c:\windows\system32\dllcache\ocmsn.dll
+ 2008-04-14 10:42:04 249,856 -c–a-w c:\windows\system32\dllcache\odbc32.dll
+ 2008-04-14 10:42:04 16,384 -c–a-w c:\windows\system32\dllcache\odbc32gt.dll
+ 2008-04-14 10:42:32 32,768 -c–a-w c:\windows\system32\dllcache\odbcad32.exe
+ 2008-04-14 10:42:04 135,168 -c–a-w c:\windows\system32\dllcache\odbcconf.dll
+ 2008-04-14 10:42:32 69,632 -c–a-w c:\windows\system32\dllcache\odbcconf.exe
+ 2008-04-14 10:42:04 106,496 -c–a-w c:\windows\system32\dllcache\odbccp32.dll
+ 2008-04-14 10:42:04 65,536 -c–a-w c:\windows\system32\dllcache\odbccr32.dll
+ 2008-04-14 10:42:04 65,536 -c–a-w c:\windows\system32\dllcache\odbccu32.dll
+ 2008-04-14 03:56:06 94,208 -c–a-w c:\windows\system32\dllcache\odbcint.dll
+ 2008-04-14 10:40:32 53,279 -c–a-w c:\windows\system32\dllcache\odbcji32.dll
+ 2008-04-14 10:42:04 278,559 -c–a-w c:\windows\system32\dllcache\odbcjt32.dll
+ 2008-04-14 03:56:06 12,288 -c–a-w c:\windows\system32\dllcache\odbcp32r.dll
+ 2008-04-14 10:42:04 147,456 -c–a-w c:\windows\system32\dllcache\odbctrac.dll
+ 2008-04-14 10:42:04 20,511 -c–a-w c:\windows\system32\dllcache\oddbse32.dll
+ 2008-04-14 10:42:04 20,510 -c–a-w c:\windows\system32\dllcache\odexl32.dll
+ 2008-04-14 10:42:04 20,510 -c–a-w c:\windows\system32\dllcache\odfox32.dll
+ 2008-04-14 10:42:04 20,510 -c–a-w c:\windows\system32\dllcache\odpdx32.dll
+ 2008-04-14 10:42:04 20,511 -c–a-w c:\windows\system32\dllcache\odtext32.dll
+ 2008-04-14 10:42:04 104,448 -c–a-w c:\windows\system32\dllcache\oeimport.dll
+ 2008-04-14 10:42:32 60,416 -c–a-w c:\windows\system32\dllcache\oemig50.exe
+ 2008-04-14 10:42:04 35,328 -c–a-w c:\windows\system32\dllcache\oemiglib.dll
+ 2008-04-14 05:16:20 61,696 -c–a-w c:\windows\system32\dllcache\ohci1394.sys
+ 2008-04-14 10:42:04 1,287,168 -c–a-w c:\windows\system32\dllcache\ole32.dll
+ 2008-04-14 10:42:04 551,936 -c–a-w c:\windows\system32\dllcache\oleaut32.dll
+ 2008-04-14 10:42:04 74,752 -c–a-w c:\windows\system32\dllcache\olecli32.dll
+ 2008-04-14 10:42:04 37,376 -c–a-w c:\windows\system32\dllcache\olecnv32.dll
+ 2008-04-14 10:42:04 487,424 -c–a-w c:\windows\system32\dllcache\oledb32.dll
+ 2008-04-14 10:42:04 65,536 -c–a-w c:\windows\system32\dllcache\oledb32r.dll
+ 2008-04-14 10:42:04 122,880 -c–a-w c:\windows\system32\dllcache\oledlg.dll
+ 2008-04-14 10:42:04 107,008 -c–a-w c:\windows\system32\dllcache\oleprn.dll
+ 2008-04-14 10:42:04 84,992 -c–a-w c:\windows\system32\dllcache\olepro32.dll
+ 2008-04-14 09:42:04 144,384 -c–a-w c:\windows\system32\dllcache\onex.dll
+ 2008-04-14 10:42:32 51,200 -c–a-w c:\windows\system32\dllcache\oobebaln.exe
+ 2008-04-14 10:42:04 713,728 -c–a-w c:\windows\system32\dllcache\opengl32.dll
+ 2001-08-17 17:20:16 54,528 -c–a-w c:\windows\system32\dllcache\opl3sax.sys
+ 2008-04-14 10:42:32 67,584 -c–a-w c:\windows\system32\dllcache\opnfiles.exe
+ 2001-08-23 07:00:00 3,456 -c–a-w c:\windows\system32\dllcache\oprghdlr.sys
+ 2008-04-14 10:42:32 215,552 -c–a-w c:\windows\system32\dllcache\osk.exe
+ 2008-04-14 10:42:04 67,584 -c–a-w c:\windows\system32\dllcache\osuninst.dll
+ 2001-08-17 17:12:36 27,209 -c–a-w c:\windows\system32\dllcache\otc06x5.sys
+ 2001-08-17 17:12:36 43,689 -c–a-w c:\windows\system32\dllcache\otceth5.sys
+ 2001-08-17 18:28:12 54,186 -c–a-w c:\windows\system32\dllcache\otcsercb.sys
+ 2001-08-17 19:05:04 25,088 -c–a-w c:\windows\system32\dllcache\ovca.sys
+ 2001-08-17 19:05:12 48,000 -c–a-w c:\windows\system32\dllcache\ovcam2.sys
+ 2001-08-17 19:05:16 28,032 -c–a-w c:\windows\system32\dllcache\ovcd.sys
+ 2001-08-17 19:05:20 31,872 -c–a-w c:\windows\system32\dllcache\ovce.sys
+ 2001-08-18 03:36:28 116,736 -c–a-w c:\windows\system32\dllcache\ovcodec2.dll
+ 2001-08-18 03:36:28 20,480 -c–a-w c:\windows\system32\dllcache\ovcomc.dll
+ 2001-08-18 03:36:54 39,424 -c–a-w c:\windows\system32\dllcache\ovcoms.exe
+ 2001-08-17 19:05:06 25,216 -c–a-w c:\windows\system32\dllcache\ovsound2.sys
+ 2001-08-18 03:36:28 44,544 -c–a-w c:\windows\system32\dllcache\ovui2.dll
+ 2001-08-18 03:36:28 41,984 -c–a-w c:\windows\system32\dllcache\ovui2rc.dll
+ 2008-04-14 10:42:04 153,600 -c–a-w c:\windows\system32\dllcache\p2p.dll
+ 2008-04-14 10:42:04 105,472 -c–a-w c:\windows\system32\dllcache\p2pgasvc.dll
+ 2008-04-14 10:42:04 313,856 -c–a-w c:\windows\system32\dllcache\p2pgraph.dll
+ 2008-04-14 10:42:04 115,712 -c–a-w c:\windows\system32\dllcache\p2pnetsh.dll
+ 2008-04-14 10:42:04 554,496 -c–a-w c:\windows\system32\dllcache\p2psvc.dll
+ 2008-04-14 05:01:32 42,752 -c–a-w c:\windows\system32\dllcache\p3.sys
+ 2008-04-14 10:42:32 58,368 -c–a-w c:\windows\system32\dllcache\packager.exe
+ 2008-04-14 10:40:34 15,872 -c–a-w c:\windows\system32\dllcache\padrs404.dll
+ 2008-04-14 10:40:34 15,360 -c–a-w c:\windows\system32\dllcache\padrs804.dll
+ 2001-08-23 07:00:00 157,696 -c–a-w c:\windows\system32\dllcache\paqsp.dll
+ 2008-04-14 05:10:12 80,128 -c–a-w c:\windows\system32\dllcache\parport.sys
+ 2008-04-14 05:10:50 19,712 -c–a-w c:\windows\system32\dllcache\partmgr.sys
+ 2008-04-14 10:42:04 67,584 -c–a-w c:\windows\system32\dllcache\pautoenr.dll
+ 2001-08-17 17:12:18 30,495 -c–a-w c:\windows\system32\dllcache\pc100nds.sys
+ 2008-04-14 03:05:34 29,502 -c–a-w c:\windows\system32\dllcache\pca200e.sys
+ 2008-04-14 10:42:04 102,912 -c–a-w c:\windows\system32\dllcache\pchshell.dll
+ 2008-04-14 10:42:04 38,400 -c–a-w c:\windows\system32\dllcache\pchsvc.dll
+ 2008-04-14 05:06:46 68,224 -c–a-w c:\windows\system32\dllcache\pci.sys
+ 2001-08-17 18:51:52 3,328 -c–a-w c:\windows\system32\dllcache\pciide.sys
+ 2008-04-14 05:10:30 24,960 -c–a-w c:\windows\system32\dllcache\pciidex.sys
+ 2008-04-14 05:06:44 120,192 -c–a-w c:\windows\system32\dllcache\pcmcia.sys
+ 2001-08-17 17:12:18 26,153 -c–a-w c:\windows\system32\dllcache\pcmlm56.sys
+ 2001-08-17 17:11:22 30,282 -c–a-w c:\windows\system32\dllcache\pcntn5hl.sys
+ 2001-08-17 17:11:20 29,769 -c–a-w c:\windows\system32\dllcache\pcntn5m.sys
+ 2001-08-17 17:11:22 35,328 -c–a-w c:\windows\system32\dllcache\pcntpci5.sys
+ 2001-08-18 03:36:54 86,016 -c–a-w c:\windows\system32\dllcache\pctspk.exe
+ 2008-04-14 02:42:44 169,984 -c–a-w c:\windows\system32\dllcache\pcx500.sys
+ 2008-04-14 10:42:04 284,160 -c–a-w c:\windows\system32\dllcache\pdh.dll
+ 2001-08-17 19:07:40 27,296 -c–a-w c:\windows\system32\dllcache\perc2.sys
+ 2001-08-17 19:07:42 5,504 -c–a-w c:\windows\system32\dllcache\perc2hib.sys
+ 2008-04-14 10:42:04 39,936 -c–a-w c:\windows\system32\dllcache\perfctrs.dll
+ 2008-04-14 10:42:04 26,624 -c–a-w c:\windows\system32\dllcache\perfdisk.dll
+ 2008-04-14 10:42:32 15,872 -c–a-w c:\windows\system32\dllcache\perfmon.exe
+ 2008-04-14 10:42:04 17,920 -c–a-w c:\windows\system32\dllcache\perfnet.dll
+ 2008-04-14 10:42:04 25,088 -c–a-w c:\windows\system32\dllcache\perfos.dll
+ 2008-04-14 10:42:04 34,816 -c–a-w c:\windows\system32\dllcache\perfproc.dll
+ 2008-04-14 05:14:30 27,904 -c–a-w c:\windows\system32\dllcache\perm2.sys
+ 2008-04-14 10:40:36 211,584 -c–a-w c:\windows\system32\dllcache\perm2dll.dll
+ 2008-04-14 05:14:32 28,032 -c–a-w c:\windows\system32\dllcache\perm3.sys
+ 2008-04-14 10:40:36 259,328 -c–a-w c:\windows\system32\dllcache\perm3dd.dll
+ 2001-08-18 03:36:28 16,384 -c–a-w c:\windows\system32\dllcache\philcam1.dll
+ 2001-08-17 19:04:50 75,776 -c–a-w c:\windows\system32\dllcache\philcam1.sys
+ 2001-08-17 19:04:08 173,696 -c–a-w c:\windows\system32\dllcache\philcam2.sys
+ 2001-08-17 19:04:04 92,416 -c–a-w c:\windows\system32\dllcache\phildec.sys
+ 2001-08-17 19:07:20 19,840 -c–a-w c:\windows\system32\dllcache\philtune.sys
+ 2008-04-14 10:42:04 176,128 -c–a-w c:\windows\system32\dllcache\photowiz.dll
+ 2001-08-18 03:36:28 121,344 -c–a-w c:\windows\system32\dllcache\phvfwext.dll
+ 2008-04-14 10:42:04 35,328 -c–a-w c:\windows\system32\dllcache\pid.dll
+ 2008-04-14 10:42:32 281,088 -c–a-w c:\windows\system32\dllcache\pinball.exe
+ 2008-04-14 10:42:32 17,920 -c–a-w c:\windows\system32\dllcache\ping.exe
+ 2008-04-14 10:40:36 175,104 -c–a-w c:\windows\system32\dllcache\pintlcsa.dll
+ 2008-04-14 10:40:36 53,760 -c–a-w c:\windows\system32\dllcache\pintlcsd.dll
+ 2008-04-14 03:13:38 70,144 -c–a-w c:\windows\system32\dllcache\pintlphr.exe
+ 2008-04-14 10:42:04 15,360 -c–a-w c:\windows\system32\dllcache\pjlmon.dll
+ 2008-04-14 10:40:36 67,584 -c–a-w c:\windows\system32\dllcache\pmigrate.dll
+ 2001-08-17 18:53:04 7,168 -c–a-w c:\windows\system32\dllcache\pnrmc.sys
+ 2008-04-14 10:42:04 58,880 -c–a-w c:\windows\system32\dllcache\pnrpnsp.dll
+ 2008-04-14 10:42:04 105,472 -c–a-w c:\windows\system32\dllcache\polstore.dll
+ 2008-04-14 05:49:42 146,048 -c–a-w c:\windows\system32\dllcache\portcls.sys
+ 2008-04-14 10:42:32 49,152 -c–a-w c:\windows\system32\dllcache\powercfg.exe
+ 2008-04-14 05:10:58 8,832 -c–a-w c:\windows\system32\dllcache\powerfil.sys
+ 2008-04-14 10:42:04 17,408 -c–a-w c:\windows\system32\dllcache\powrprof.dll
+ 2001-08-17 18:53:22 17,792 -c–a-w c:\windows\system32\dllcache\ppa.sys
+ 2008-04-14 05:11:02 17,664 -c–a-w c:\windows\system32\dllcache\ppa3.sys
+ 2008-04-14 10:42:04 560,640 -c–a-w c:\windows\system32\dllcache\printui.dll
+ 2008-04-14 05:01:32 35,840 -c–a-w c:\windows\system32\dllcache\processr.sys
+ 2008-04-14 10:42:04 27,648 -c–a-w c:\windows\system32\dllcache\profmap.dll
+ 2008-04-14 10:42:32 109,568 -c–a-w c:\windows\system32\dllcache\progman.exe
+ 2008-04-14 10:42:34 50,176 -c–a-w c:\windows\system32\dllcache\proquota.exe
+ 2008-04-14 10:42:04 237,056 -c–a-w c:\windows\system32\dllcache\provthrd.dll
+ 2008-04-14 10:42:34 9,216 -c–a-w c:\windows\system32\dllcache\proxycfg.exe
+ 2008-04-14 10:42:04 23,040 -c–a-w c:\windows\system32\dllcache\psapi.dll
+ 2008-04-14 05:26:40 69,120 -c–a-w c:\windows\system32\dllcache\psched.sys
+ 2001-08-17 18:51:08 16,128 -c–a-w c:\windows\system32\dllcache\pscr.sys
+ 2008-04-14 10:42:04 363,520 -c–a-w c:\windows\system32\dllcache\psisdecd.dll
+ 2001-08-18 03:36:28 35,328 -c–a-w c:\windows\system32\dllcache\psisload.dll
+ 2008-04-14 10:42:04 43,520 -c–a-w c:\windows\system32\dllcache\pstorec.dll
+ 2008-04-14 10:42:04 34,304 -c–a-w c:\windows\system32\dllcache\pstorsvc.dll
+ 2001-08-18 03:36:30 5,632 -c–a-w c:\windows\system32\dllcache\ptpusb.dll
+ 2008-04-14 10:42:04 159,232 -c–a-w c:\windows\system32\dllcache\ptpusd.dll
+ 2001-08-17 18:28:12 128,286 -c–a-w c:\windows\system32\dllcache\ptserli.sys
+ 2001-08-17 18:28:14 112,574 -c–a-w c:\windows\system32\dllcache\ptserlp.sys
+ 2001-08-17 18:28:14 130,942 -c–a-w c:\windows\system32\dllcache\ptserlv.sys
+ 2008-04-14 10:42:04 7,680 -c–a-w c:\windows\system32\dllcache\pwsdata.dll
+ 2008-04-14 09:42:04 150,528 -c–a-w c:\windows\system32\dllcache\qagent.dll
+ 2008-04-14 09:42:04 291,328 -c–a-w c:\windows\system32\dllcache\qagentrt.dll
+ 2008-04-14 10:42:04 192,512 -c–a-w c:\windows\system32\dllcache\qcap.dll
+ 2008-04-14 09:42:04 62,464 -c–a-w c:\windows\system32\dllcache\qcliprov.dll
+ 2008-04-14 10:42:04 279,040 -c–a-w c:\windows\system32\dllcache\qdv.dll
+ 2008-04-14 10:42:04 386,048 -c–a-w c:\windows\system32\dllcache\qdvd.dll
+ 2008-04-14 10:42:04 562,176 -c–a-w c:\windows\system32\dllcache\qedit.dll
+ 2008-04-14 03:51:34 733,696 -c–a-w c:\windows\system32\dllcache\qedwipes.dll
+ 2008-04-14 05:10:54 6,016 -c–a-w c:\windows\system32\dllcache\qic157.sys
+ 2001-08-17 18:52:20 40,320 -c–a-w c:\windows\system32\dllcache\ql1080.sys
+ 2001-08-17 18:52:16 33,152 -c–a-w c:\windows\system32\dllcache\ql10wnt.sys
+ 2001-08-17 18:52:20 45,312 -c–a-w c:\windows\system32\dllcache\ql12160.sys
+ 2001-08-17 18:52:16 40,448 -c–a-w c:\windows\system32\dllcache\ql1240.sys
+ 2001-08-17 18:52:18 49,024 -c–a-w c:\windows\system32\dllcache\ql1280.sys
+ 2008-04-14 10:42:04 409,088 -c–a-w c:\windows\system32\dllcache\qmgr.dll
+ 2008-04-14 10:42:04 18,944 -c–a-w c:\windows\system32\dllcache\qmgrprxy.dll
+ 2008-04-14 10:42:34 19,968 -c–a-w c:\windows\system32\dllcache\qprocess.exe
+ 2008-04-14 10:42:04 1,435,648 -c–a-w c:\windows\system32\dllcache\query.dll
+ 2008-04-14 09:42:04 76,800 -c–a-w c:\windows\system32\dllcache\qutil.dll
+ 2001-08-17 18:53:32 3,328 -c–a-w c:\windows\system32\dllcache\qv2kux.sys
+ 2001-08-18 03:36:30 41,472 -c–a-w c:\windows\system32\dllcache\qvusd.dll
+ 2001-08-17 18:28:20 714,762 -c–a-w c:\windows\system32\dllcache\r2mdmkxx.sys
+ 2008-04-14 10:42:04 43,520 -c–a-w c:\windows\system32\dllcache\racpldlg.dll
+ 2008-04-14 05:11:24 20,736 -c–a-w c:\windows\system32\dllcache\ramdisk.sys
+ 2008-04-14 10:42:04 7,680 -c–a-w c:\windows\system32\dllcache\rasadhlp.dll
+ 2008-04-14 10:42:04 237,056 -c–a-w c:\windows\system32\dllcache\rasapi32.dll
+ 2008-04-14 10:42:04 88,576 -c–a-w c:\windows\system32\dllcache\rasauto.dll
+ 2008-04-14 10:42:04 79,872 -c–a-w c:\windows\system32\dllcache\raschap.dll
+ 2008-04-14 10:42:04 658,432 -c–a-w c:\windows\system32\dllcache\rasdlg.dll
+ 2001-08-17 18:51:32 19,584 -c–a-w c:\windows\system32\dllcache\rasirda.sys
+ 2008-04-14 05:49:44 51,328 -c–a-w c:\windows\system32\dllcache\rasl2tp.sys
+ 2008-04-14 10:42:04 61,440 -c–a-w c:\windows\system32\dllcache\rasman.dll
+ 2008-04-14 10:42:04 186,368 -c–a-w c:\windows\system32\dllcache\rasmans.dll
+ 2008-04-14 10:42:34 56,832 -c–a-w c:\windows\system32\dllcache\rasphone.exe
+ 2008-04-14 10:42:04 210,944 -c–a-w c:\windows\system32\dllcache\rasppp.dll
+ 2008-04-14 05:27:34 41,472 -c–a-w c:\windows\system32\dllcache\raspppoe.sys
+ 2008-04-14 05:49:50 48,384 -c–a-w c:\windows\system32\dllcache\raspptp.sys
+ 2008-04-14 09:42:04 61,952 -c–a-w c:\windows\system32\dllcache\rasqec.dll
+ 2008-04-14 10:42:04 16,384 -c–a-w c:\windows\system32\dllcache\rassapi.dll
+ 2008-04-14 10:42:04 58,368 -c–a-w c:\windows\system32\dllcache\rastapi.dll
+ 2008-04-14 10:42:04 150,016 -c–a-w c:\windows\system32\dllcache\rastls.dll
+ 2008-04-14 10:42:04 102,400 -c–a-w c:\windows\system32\dllcache\rcbdyctl.dll
+ 2008-04-14 10:42:34 35,840 -c–a-w c:\windows\system32\dllcache\rcimlby.exe
+ 2008-04-14 10:42:34 21,504 -c–a-w c:\windows\system32\dllcache\rcp.exe
+ 2008-04-14 05:58:40 175,744 -c–a-w c:\windows\system32\dllcache\rdbss.sys
+ 2008-04-14 10:42:04 147,968 -c–a-w c:\windows\system32\dllcache\rdchost.dll
+ 2008-04-14 10:42:34 62,976 -c–a-w c:\windows\system32\dllcache\rdpclip.exe
+ 2008-04-14 10:43:24 92,424 -c–a-w c:\windows\system32\dllcache\rdpdd.dll
+ 2008-04-14 05:02:52 196,224 -c–a-w c:\windows\system32\dllcache\rdpdr.sys
+ 2008-04-14 10:42:06 19,968 -c–a-w c:\windows\system32\dllcache\rdpsnd.dll
+ 2008-04-14 10:43:24 139,656 -c–a-w c:\windows\system32\dllcache\rdpwd.sys
+ 2008-04-14 10:43:24 87,176 -c–a-w c:\windows\system32\dllcache\rdpwsx.dll
+ 2008-04-14 10:42:34 13,824 -c–a-w c:\windows\system32\dllcache\rdsaddin.exe
+ 2008-04-14 10:42:34 67,072 -c–a-w c:\windows\system32\dllcache\rdshost.exe
+ 2008-04-14 04:53:44 13,776 -c–a-w c:\windows\system32\dllcache\recagent.sys
+ 2008-04-14 05:10:28 57,600 -c–a-w c:\windows\system32\dllcache\redbook.sys
+ 2008-04-14 10:42:34 50,176 -c–a-w c:\windows\system32\dllcache\reg.exe
+ 2008-04-14 10:42:06 49,664 -c–a-w c:\windows\system32\dllcache\regapi.dll
+ 2008-04-14 10:42:34 146,432 -c–a-w c:\windows\system32\dllcache\regedit.exe
+ 2008-04-14 10:42:06 59,904 -c–a-w c:\windows\system32\dllcache\regsvc.dll
+ 2008-04-14 10:42:34 11,776 -c–a-w c:\windows\system32\dllcache\regsvr32.exe
+ 2008-04-14 10:42:06 397,824 -c–a-w c:\windows\system32\dllcache\regwizc.dll
+ 2008-04-14 10:42:06 60,416 -c–a-w c:\windows\system32\dllcache\remotepg.dll
+ 2008-04-14 10:42:06 178,176 -c–a-w c:\windows\system32\dllcache\repdrvfs.dll
+ 2001-08-18 03:36:30 86,097 -c–a-w c:\windows\system32\dllcache\reslog32.dll
+ 2008-04-14 10:42:06 58,880 -c–a-w c:\windows\system32\dllcache\resutils.dll
+ 2008-04-14 10:42:34 13,824 -c–a-w c:\windows\system32\dllcache\rexec.exe
+ 2008-04-14 05:16:34 59,136 -c–a-w c:\windows\system32\dllcache\rfcomm.sys
+ 2008-04-14 10:42:06 290,304 -c–a-w c:\windows\system32\dllcache\rhttpaa.dll
+ 2008-04-14 10:42:06 433,664 -c–a-w c:\windows\system32\dllcache\riched20.dll
+ 2001-08-23 07:00:00 12,032 -c–a-w c:\windows\system32\dllcache\rio8drv.sys
+ 2001-08-23 07:00:00 12,032 -c–a-w c:\windows\system32\dllcache\riodrv.sys
+ 2001-08-17 17:12:36 37,563 -c–a-w c:\windows\system32\dllcache\rlnet5.sys
+ 2008-04-14 05:26:50 30,592 -c–a-w c:\windows\system32\dllcache\rndismp.sys
+ 2008-04-14 05:26:50 30,592 -c–a-w c:\windows\system32\dllcache\rndismpx.sys
+ 2008-04-14 05:10:16 79,104 -c–a-w c:\windows\system32\dllcache\rocket.sys
+ 2008-04-14 10:42:06 4,096 -c–a-w c:\windows\system32\dllcache\rpcref.dll
+ 2008-04-14 10:42:06 584,704 -c–a-w c:\windows\system32\dllcache\rpcrt4.dll
+ 2008-04-14 10:42:06 399,360 -c–a-w c:\windows\system32\dllcache\rpcss.dll
+ 2001-08-17 17:19:20 3,840 -c–a-w c:\windows\system32\dllcache\rpfun.sys
+ 2008-04-14 10:42:06 61,440 -c–a-w c:\windows\system32\dllcache\rrcm.dll
+ 2008-04-14 04:07:58 208,384 -c–a-w c:\windows\system32\dllcache\rsaenh.dll
+ 2008-04-14 10:42:34 14,848 -c–a-w c:\windows\system32\dllcache\rsh.exe
+ 2008-04-14 10:42:06 39,936 -c–a-w c:\windows\system32\dllcache\rshx32.dll
+ 2001-08-18 03:36:30 9,216 -c–a-w c:\windows\system32\dllcache\rsmgrstr.dll
+ 2008-04-14 10:42:06 18,944 -c–a-w c:\windows\system32\dllcache\rsmps.dll
+ 2008-04-14 10:42:34 107,520 -c–a-w c:\windows\system32\dllcache\rsnotify.exe
+ 2008-04-14 10:42:34 380,416 -c–a-w c:\windows\system32\dllcache\rstrui.exe
+ 2008-04-14 10:42:06 92,672 -c–a-w c:\windows\system32\dllcache\rsvpsp.dll
+ 2008-04-14 10:42:34 77,312 -c–a-w c:\windows\system32\dllcache\rtcshare.exe
+ 2001-08-17 17:19:22 30,720 -c–a-w c:\windows\system32\dllcache\rthwcls.sys
+ 2008-04-14 10:42:06 31,744 -c–a-w c:\windows\system32\dllcache\rtipxmib.dll
+ 2001-08-17 17:12:40 19,017 -c–a-w c:\windows\system32\dllcache\rtl8029.sys
+ 2008-04-14 03:05:40 20,992 -c–a-w c:\windows\system32\dllcache\rtl8139.sys
+ 2008-04-14 10:42:06 44,032 -c–a-w c:\windows\system32\dllcache\rtutils.dll
+ 2008-04-14 10:42:34 33,280 -c–a-w c:\windows\system32\dllcache\rundll32.exe
+ 2008-04-14 10:42:34 14,336 -c–a-w c:\windows\system32\dllcache\runonce.exe
+ 2008-04-14 10:42:06 27,648 -c–a-w c:\windows\system32\dllcache\rw001ext.dll
+ 2008-04-14 10:42:06 29,184 -c–a-w c:\windows\system32\dllcache\rw330ext.dll
+ 2008-04-14 10:42:06 27,648 -c–a-w c:\windows\system32\dllcache\rw430ext.dll
+ 2008-04-14 10:42:06 29,696 -c–a-w c:\windows\system32\dllcache\rw450ext.dll
+ 2001-08-18 03:36:30 79,872 -c–a-w c:\windows\system32\dllcache\rwia430.dll
+ 2001-08-18 03:36:30 82,432 -c–a-w c:\windows\system32\dllcache\rwia450.dll
+ 2008-04-14 10:42:06 9,728 -c–a-w c:\windows\system32\dllcache\rwnh.dll
+ 2008-04-14 10:42:06 397,056 -c–a-w c:\windows\system32\dllcache\s3gnb.dll
+ 2008-04-14 03:04:34 166,912 -c–a-w c:\windows\system32\dllcache\s3gnbm.sys
+ 2001-08-17 18:57:46 65,664 -c–a-w c:\windows\system32\dllcache\s3legacy.sys
+ 2001-08-17 17:50:34 166,720 -c–a-w c:\windows\system32\dllcache\s3m.sys
+ 2001-08-17 19:56:04 182,272 -c–a-w c:\windows\system32\dllcache\s3mt3d.dll
+ 2001-08-17 17:50:40 41,216 -c–a-w c:\windows\system32\dllcache\s3mt3d.sys
+ 2001-08-18 03:36:02 62,496 -c–a-w c:\windows\system32\dllcache\s3mtrio.dll
+ 2001-08-17 19:56:04 210,496 -c–a-w c:\windows\system32\dllcache\s3mvirge.dll
+ 2001-08-17 19:56:04 179,264 -c–a-w c:\windows\system32\dllcache\s3sav3d.dll
+ 2001-08-17 17:50:22 61,504 -c–a-w c:\windows\system32\dllcache\s3sav3dm.sys
+ 2001-08-17 19:56:04 198,400 -c–a-w c:\windows\system32\dllcache\s3sav4.dll
+ 2001-08-17 17:50:28 77,824 -c–a-w c:\windows\system32\dllcache\s3sav4m.sys
+ 2001-08-17 19:56:04 245,632 -c–a-w c:\windows\system32\dllcache\s3savmx.dll
+ 2001-08-17 17:50:34 75,392 -c–a-w c:\windows\system32\dllcache\s3savmxm.sys
+ 2008-04-14 10:42:06 43,520 -c–a-w c:\windows\system32\dllcache\safrcdlg.dll
+ 2008-04-14 10:42:06 29,696 -c–a-w c:\windows\system32\dllcache\safrdm.dll
+ 2008-04-14 10:42:06 45,568 -c–a-w c:\windows\system32\dllcache\safrslv.dll
+ 2008-04-14 10:42:06 64,000 -c–a-w c:\windows\system32\dllcache\samlib.dll
+ 2008-04-14 10:42:06 415,744 -c–a-w c:\windows\system32\dllcache\samsrv.dll
+ 2008-04-14 10:42:06 741,376 -c–a-w c:\windows\system32\dllcache\sapi.dll
+ 2008-04-14 10:42:34 13,312 -c–a-w c:\windows\system32\dllcache\savedump.exe
+ 2008-04-14 10:42:06 270,848 -c–a-w c:\windows\system32\dllcache\sbe.dll
+ 2008-04-14 10:42:06 159,232 -c–a-w c:\windows\system32\dllcache\sbeio.dll
+ 2008-04-14 05:10:50 43,904 -c–a-w c:\windows\system32\dllcache\sbp2port.sys
+ 2008-04-14 10:42:06 69,632 -c–a-w c:\windows\system32\dllcache\scarddlg.dll
+ 2008-04-14 10:42:34 95,744 -c–a-w c:\windows\system32\dllcache\scardsvr.exe
+ 2001-08-17 18:51:10 23,936 -c–a-w c:\windows\system32\dllcache\sccmn50m.sys
+ 2001-08-17 18:51:14 23,936 -c–a-w c:\windows\system32\dllcache\sccmusbm.sys
+ 2008-04-14 10:42:06 171,008 -c–a-w c:\windows\system32\dllcache\sccsccp.dll
+ 2008-04-14 10:42:06 181,248 -c–a-w c:\windows\system32\dllcache\scecli.dll
+ 2008-04-14 10:42:06 314,880 -c–a-w c:\windows\system32\dllcache\scesrv.dll
+ 2008-04-14 10:42:06 144,384 -c–a-w c:\windows\system32\dllcache\schannel.dll
+ 2008-04-14 10:42:06 192,512 -c–a-w c:\windows\system32\dllcache\schedsvc.dll
+ 2008-04-14 10:42:06 20,480 -c–a-w c:\windows\system32\dllcache\sclgntfy.dll
+ 2001-08-17 18:51:14 16,640 -c–a-w c:\windows\system32\dllcache\scmstcs.sys
+ 2001-08-17 18:51:16 17,280 -c–a-w c:\windows\system32\dllcache\scr111.sys
+ 2008-04-14 10:42:36 36,352 -c–a-w c:\windows\system32\dllcache\scrcons.exe
+ 2008-04-14 10:42:06 215,552 -c–a-w c:\windows\system32\dllcache\script.dll
+ 2008-04-14 10:42:06 199,680 -c–a-w c:\windows\system32\dllcache\scripta.dll
+ 2008-04-14 10:42:44 9,216 -c–a-w c:\windows\system32\dllcache\scrnsave.scr
+ 2008-04-14 05:10:32 96,384 -c–a-w c:\windows\system32\dllcache\scsiport.sys
+ 2001-08-17 18:52:34 11,648 -c–a-w c:\windows\system32\dllcache\scsiprnt.sys
+ 2008-04-14 05:15:34 11,520 -c–a-w c:\windows\system32\dllcache\scsiscan.sys
+ 2008-04-14 10:42:36 121,856 -c–a-w c:\windows\system32\dllcache\sctasks.exe
+ 2008-04-14 10:42:36 77,312 -c–a-w c:\windows\system32\dllcache\sdbinst.exe
+ 2008-04-14 05:06:46 79,232 -c–a-w c:\windows\system32\dllcache\sdbus.sys
+ 2008-04-14 10:42:06 29,184 -c–a-w c:\windows\system32\dllcache\sdhcinst.dll
+ 2001-08-17 18:53:10 6,912 -c–a-w c:\windows\system32\dllcache\seaddsmc.sys
+ 2008-04-14 10:42:36 18,944 -c–a-w c:\windows\system32\dllcache\secedit.exe
+ 2008-04-14 10:42:06 18,944 -c–a-w c:\windows\system32\dllcache\seclogon.dll
+ 2008-04-14 10:42:06 56,320 -c–a-w c:\windows\system32\dllcache\secur32.dll
+ 2008-04-14 10:42:06 5,632 -c–a-w c:\windows\system32\dllcache\security.dll
+ 2008-04-14 10:42:06 29,184 -c–a-w c:\windows\system32\dllcache\sendcmsg.dll
+ 2008-04-14 10:42:06 54,784 -c–a-w c:\windows\system32\dllcache\sendmail.dll
+ 2008-04-14 10:42:06 39,424 -c–a-w c:\windows\system32\dllcache\sens.dll
+ 2008-04-14 10:42:06 7,168 -c–a-w c:\windows\system32\dllcache\sensapi.dll
+ 2008-04-14 10:42:06 221,696 -c–a-w c:\windows\system32\dllcache\seo.dll
+ 2008-04-14 05:10:14 15,744 -c–a-w c:\windows\system32\dllcache\serenum.sys
+ 2008-04-14 05:45:46 64,512 -c–a-w c:\windows\system32\dllcache\serial.sys
+ 2001-08-17 18:48:00 17,664 -c–a-w c:\windows\system32\dllcache\sermouse.sys
+ 2001-08-17 18:53:32 6,784 -c–a-w c:\windows\system32\dllcache\serscan.sys
+ 2008-04-14 10:42:06 56,320 -c–a-w c:\windows\system32\dllcache\servdeps.dll
+ 2008-04-14 10:42:36 108,544 -c–a-w c:\windows\system32\dllcache\services.exe
+ 2008-04-14 10:42:36 141,312 -c–a-w c:\windows\system32\dllcache\sessmgr.exe
+ 2008-04-14 10:42:36 31,232 -c–a-w c:\windows\system32\dllcache\sethc.exe
+ 2008-04-14 10:42:36 23,040 -c–a-w c:\windows\system32\dllcache\setup.exe
+ 2008-04-14 10:42:36 73,216 -c–a-w c:\windows\system32\dllcache\setup50.exe
+ 2008-04-14 10:42:06 985,088 -c–a-w c:\windows\system32\dllcache\setupapi.dll
+ 2008-04-14 09:42:36 32,768 -c–a-w c:\windows\system32\dllcache\setupn.exe
+ 2008-04-14 10:42:06 101,376 -c–a-w c:\windows\system32\dllcache\setupqry.dll
+ 2008-04-14 10:42:06 5,120 -c–a-w c:\windows\system32\dllcache\sfc.dll
+ 2008-04-14 10:42:06 140,288 -c–a-w c:\windows\system32\dllcache\sfc_os.dll
+ 2008-04-14 10:42:06 1,614,848 -c–a-w c:\windows\system32\dllcache\sfcfiles.dll
+ 2008-04-14 05:10:48 11,904 -c–a-w c:\windows\system32\dllcache\sffdisk.sys
+ 2008-04-14 05:10:48 11,008 -c–a-w c:\windows\system32\dllcache\sffp_sd.sys
+ 2008-04-14 05:10:50 11,392 -c–a-w c:\windows\system32\dllcache\sfloppy.sys
+ 2001-08-17 17:19:34 36,480 -c–a-w c:\windows\system32\dllcache\sfmanm.sys
+ 2001-08-18 03:36:02 386,560 -c–a-w c:\windows\system32\dllcache\sgiul50.dll
+ 2001-08-17 17:51:04 98,080 -c–a-w c:\windows\system32\dllcache\sgiulnt5.sys
+ 2001-07-21 19:29:20 18,400 -c–a-w c:\windows\system32\dllcache\sgsmld.sys
+ 2001-07-21 19:29:20 161,568 -c–a-w c:\windows\system32\dllcache\sgsmusb.sys
+ 2008-04-14 03:33:20 549,376 -c–a-w c:\windows\system32\dllcache\shdoclc.dll
+ 2008-04-14 10:42:06 1,499,136 -c–a-w c:\windows\system32\dllcache\shdocvw.dll
+ 2008-04-14 10:42:06 25,088 -c–a-w c:\windows\system32\dllcache\shfolder.dll
+ 2008-04-14 10:42:06 68,096 -c–a-w c:\windows\system32\dllcache\shgina.dll
+ 2008-04-14 10:42:06 65,024 -c–a-w c:\windows\system32\dllcache\shimeng.dll
+ 2008-04-14 10:42:06 438,272 -c–a-w c:\windows\system32\dllcache\shimgvw.dll
+ 2008-04-14 10:42:06 474,112 -c–a-w c:\windows\system32\dllcache\shlwapi.dll
+ 2008-04-14 10:42:36 45,056 -c–a-w c:\windows\system32\dllcache\shmgrate.exe
+ 2008-04-14 10:42:36 77,824 -c–a-w c:\windows\system32\dllcache\shrpubw.exe
+ 2008-04-14 10:42:06 27,648 -c–a-w c:\windows\system32\dllcache\shscrap.dll
+ 2008-04-14 10:42:06 135,168 -c–a-w c:\windows\system32\dllcache\shsvcs.dll
+ 2008-04-14 10:42:06 20,536 -c–a-w c:\windows\system32\dllcache\shtml.dll
+ 2008-04-14 10:42:36 16,437 -c–a-w c:\windows\system32\dllcache\shtml.exe
+ 2008-04-14 10:42:36 19,456 -c–a-w c:\windows\system32\dllcache\shutdown.exe
+ 2008-04-14 10:42:06 13,312 -c–a-w c:\windows\system32\dllcache\sigtab.dll
+ 2008-04-14 10:42:36 70,144 -c–a-w c:\windows\system32\dllcache\sigverif.exe
+ 2008-04-14 10:42:06 3,901 -c–a-w c:\windows\system32\dllcache\siint5.dll
+ 2001-08-17 17:50:46 101,760 -c–a-w c:\windows\system32\dllcache\sis300ip.sys
+ 2001-08-17 19:56:04 252,032 -c–a-w c:\windows\system32\dllcache\sis300iv.dll
+ 2001-08-17 17:50:56 68,608 -c–a-w c:\windows\system32\dllcache\sis6306p.sys
+ 2001-08-17 19:56:04 150,144 -c–a-w c:\windows\system32\dllcache\sis6306v.dll
+ 2008-04-14 05:06:40 40,960 -c–a-w c:\windows\system32\dllcache\sisagp.sys
+ 2001-08-17 17:50:48 104,064 -c–a-w c:\windows\system32\dllcache\sisgrp.sys
+ 2001-08-18 03:36:32 238,592 -c–a-w c:\windows\system32\dllcache\sisgrv.dll
+ 2008-04-14 03:05:40 32,768 -c–a-w c:\windows\system32\dllcache\sisnic.sys
+ 2001-08-17 17:50:56 50,432 -c–a-w c:\windows\system32\dllcache\sisv.sys
+ 2001-08-17 19:56:04 157,696 -c–a-w c:\windows\system32\dllcache\sisv256.dll
+ 2001-08-17 17:12:52 94,698 -c–a-w c:\windows\system32\dllcache\sk98xwin.sys
+ 2008-04-14 10:42:36 26,112 -c–a-w c:\windows\system32\dllcache\skeys.exe
+ 2001-08-17 17:12:52 91,294 -c–a-w c:\windows\system32\dllcache\skfpwin.sys
+ 2008-04-14 03:05:40 63,547 -c–a-w c:\windows\system32\dllcache\sla30nd5.sys
+ 2008-04-14 10:42:08 25,088 -c–a-w c:\windows\system32\dllcache\slayerxp.dll
+ 2008-04-14 10:42:08 98,304 -c–a-w c:\windows\system32\dllcache\slbiop.dll
+ 2008-04-14 10:42:08 73,832 -c–a-w c:\windows\system32\dllcache\slcoinst.dll
+ 2008-04-14 10:42:08 286,792 -c–a-w c:\windows\system32\dllcache\slextspk.dll
+ 2008-04-14 10:42:08 188,508 -c–a-w c:\windows\system32\dllcache\slgen.dll
+ 2008-04-14 05:16:24 11,136 -c–a-w c:\windows\system32\dllcache\slip.sys
+ 2008-04-14 04:53:44 129,535 -c–a-w c:\windows\system32\dllcache\slnt7554.sys
+ 2008-04-14 04:53:46 404,990 -c–a-w c:\windows\system32\dllcache\slntamr.sys
+ 2008-04-14 04:53:48 95,424 -c–a-w c:\windows\system32\dllcache\slnthal.sys
+ 2008-04-14 10:42:36 32,866 -c–a-w c:\windows\system32\dllcache\slrundll.exe
+ 2008-04-14 10:42:36 73,796 -c–a-w c:\windows\system32\dllcache\slserv.exe
+ 2008-04-14 04:53:48 13,240 -c–a-w c:\windows\system32\dllcache\slwdmsup.sys
+ 2001-08-18 03:36:32 28,160 -c–a-w c:\windows\system32\dllcache\sm91w.dll
+ 2001-08-18 03:36:32 28,672 -c–a-w c:\windows\system32\dllcache\sma0w.dll
+ 2001-08-18 03:36:32 33,792 -c–a-w c:\windows\system32\dllcache\smb0w.dll
+ 2001-08-18 03:36:32 45,568 -c–a-w c:\windows\system32\dllcache\smb3w.dll
+ 2008-04-14 05:06:36 5,888 -c–a-w c:\windows\system32\dllcache\smbali.sys
+ 2008-04-14 05:06:34 16,000 -c–a-w c:\windows\system32\dllcache\smbbatt.sys
+ 2008-04-14 05:06:34 6,912 -c–a-w c:\windows\system32\dllcache\smbclass.sys
+ 2001-08-17 18:57:56 6,784 -c–a-w c:\windows\system32\dllcache\smbhc.sys
+ 2008-04-14 10:42:36 8,192 -c–a-w c:\windows\system32\dllcache\smbinst.exe
+ 2001-08-17 17:12:46 24,576 -c–a-w c:\windows\system32\dllcache\smc8000n.sys
+ 2001-08-17 17:10:28 35,913 -c–a-w c:\windows\system32\dllcache\smcirda.sys
+ 2001-08-17 17:12:48 25,034 -c–a-w c:\windows\system32\dllcache\smcpwr2n.sys
+ 2008-04-14 10:42:36 236,544 -c–a-w c:\windows\system32\dllcache\smi2smir.exe
+ 2001-08-17 19:56:04 147,200 -c–a-w c:\windows\system32\dllcache\smidispb.dll
+ 2001-08-17 17:51:00 58,368 -c–a-w c:\windows\system32\dllcache\smiminib.sys
+ 2008-04-14 10:42:08 362,496 -c–a-w c:\windows\system32\dllcache\smlogcfg.dll
+ 2008-04-14 10:42:36 89,600 -c–a-w c:\windows\system32\dllcache\smlogsvc.exe
+ 2008-04-14 10:42:38 50,688 -c–a-w c:\windows\system32\dllcache\smss.exe
+ 2008-04-14 10:42:08 189,440 -c–a-w c:\windows\system32\dllcache\smtpadm.dll
+ 2008-04-14 10:42:08 10,752 -c–a-w c:\windows\system32\dllcache\smtpapi.dll
+ 2008-04-14 10:42:08 2,134,528 -c–a-w c:\windows\system32\dllcache\smtpsnap.dll
+ 2008-04-14 10:42:08 456,192 -c–a-w c:\windows\system32\dllcache\smtpsvc.dll
+ 2008-04-14 10:42:38 131,584 -c–a-w c:\windows\system32\dllcache\sndrec32.exe
+ 2008-04-14 10:42:08 34,816 -c–a-w c:\windows\system32\dllcache\sniffpol.dll
+ 2008-04-14 10:42:38 33,280 -c–a-w c:\windows\system32\dllcache\snmp.exe
+ 2008-04-14 10:42:08 18,944 -c–a-w c:\windows\system32\dllcache\snmpapi.dll
+ 2008-04-14 10:42:08 259,072 -c–a-w c:\windows\system32\dllcache\snmpcl.dll
+ 2008-04-14 10:42:08 358,400 -c–a-w c:\windows\system32\dllcache\snmpincl.dll
+ 2008-04-14 10:42:08 6,144 -c–a-w c:\windows\system32\dllcache\snmpmib.dll
+ 2008-04-14 10:42:08 188,416 -c–a-w c:\windows\system32\dllcache\snmpsmir.dll
+ 2008-04-14 10:42:08 182,272 -c–a-w c:\windows\system32\dllcache\snmpsnap.dll
+ 2008-04-14 10:42:08 39,936 -c–a-w c:\windows\system32\dllcache\snmpthrd.dll
+ 2008-04-14 10:42:38 8,704 -c–a-w c:\windows\system32\dllcache\snmptrap.exe
+ 2001-08-17 18:53:14 7,040 -c–a-w c:\windows\system32\dllcache\snyaitmc.sys
+ 2008-04-14 10:42:08 130,048 -c–a-w c:\windows\system32\dllcache\softkbd.dll
+ 2008-04-14 05:10:54 7,552 -c–a-w c:\windows\system32\dllcache\sonyait.sys
+ 2008-04-14 05:16:08 25,344 -c–a-w c:\windows\system32\dllcache\sonydcam.sys
+ 2001-08-17 18:53:04 9,600 -c–a-w c:\windows\system32\dllcache\sonymc.sys
+ 2001-08-17 17:51:20 20,752 -c–a-w c:\windows\system32\dllcache\sonync.sys
+ 2001-08-18 03:36:32 114,688 -c–a-w c:\windows\system32\dllcache\sonypi.dll
+ 2001-08-17 17:51:22 37,040 -c–a-w c:\windows\system32\dllcache\sonypi.sys
+ 2001-08-17 18:56:16 7,552 -c–a-w c:\windows\system32\dllcache\sonypvu1.sys
+ 2008-04-14 10:42:38 24,576 -c–a-w c:\windows\system32\dllcache\sort.exe
+ 2001-08-17 19:07:44 19,072 -c–a-w c:\windows\system32\dllcache\sparrow.sys
+ 2001-08-18 03:36:32 106,584 -c–a-w c:\windows\system32\dllcache\spdports.dll
+ 2001-08-17 18:51:00 61,824 -c–a-w c:\windows\system32\dllcache\speed.sys
+ 2008-04-14 03:13:20 62,976 -c–a-w c:\windows\system32\dllcache\spgrmr.dll
+ 2008-04-14 10:42:38 538,624 -c–a-w c:\windows\system32\dllcache\spider.exe
+ 2008-04-14 05:13:32 12,800 -c–a-w c:\windows\system32\dllcache\spiisupd.exe
+ 2008-04-14 05:15:08 6,272 -c–a-w c:\windows\system32\dllcache\splitter.sys
+ 2001-08-23 07:00:00 69,632 -c–a-w c:\windows\system32\dllcache\spnike.dll
+ 2008-04-14 10:42:38 11,264 -c–a-w c:\windows\system32\dllcache\spnpinst.exe
+ 2008-04-14 10:42:08 75,264 -c–a-w c:\windows\system32\dllcache\spoolss.dll
+ 2008-04-14 10:42:38 57,856 -c–a-w c:\windows\system32\dllcache\spoolsv.exe
+ 2008-04-14 05:05:08 186,880 -c–a-w c:\windows\system32\dllcache\spra0401.dll
+ 2008-04-14 05:05:10 189,440 -c–a-w c:\windows\system32\dllcache\spra0402.dll
+ 2008-04-14 05:05:10 161,280 -c–a-w c:\windows\system32\dllcache\spra0404.dll
+ 2008-04-14 05:05:10 188,928 -c–a-w c:\windows\system32\dllcache\spra0405.dll
+ 2008-04-14 05:05:10 192,000 -c–a-w c:\windows\system32\dllcache\spra0406.dll
+ 2008-04-14 05:05:22 199,680 -c–a-w c:\windows\system32\dllcache\spra0407.dll
+ 2008-04-14 05:05:12 197,632 -c–a-w c:\windows\system32\dllcache\spra0408.dll
+ 2008-04-14 05:05:12 186,368 -c–a-w c:\windows\system32\dllcache\spra040b.dll
+ 2008-04-14 05:05:22 197,632 -c–a-w c:\windows\system32\dllcache\spra040C.dll
+ 2008-04-14 05:05:22 181,760 -c–a-w c:\windows\system32\dllcache\spra040D.dll
+ 2008-04-14 05:05:24 195,584 -c–a-w c:\windows\system32\dllcache\spra040e.dll
+ 2008-04-14 05:05:24 195,072 -c–a-w c:\windows\system32\dllcache\spra0410.dll
+ 2008-04-14 05:05:24 171,008 -c–a-w c:\windows\system32\dllcache\spra0411.dll
+ 2008-04-14 05:05:24 167,936 -c–a-w c:\windows\system32\dllcache\spra0412.dll
+ 2008-04-14 05:05:26 196,096 -c–a-w c:\windows\system32\dllcache\spra0413.dll
+ 2008-04-14 05:05:26 189,440 -c–a-w c:\windows\system32\dllcache\spra0414.dll
+ 2008-04-14 05:05:28 194,560 -c–a-w c:\windows\system32\dllcache\spra0415.dll
+ 2008-04-14 05:05:10 192,512 -c–a-w c:\windows\system32\dllcache\spra0416.dll
+ 2008-04-14 05:05:28 190,464 -c–a-w c:\windows\system32\dllcache\spra0418.dll
+ 2008-04-14 05:05:28 192,512 -c–a-w c:\windows\system32\dllcache\spra0419.dll
+ 2008-04-14 05:05:22 188,928 -c–a-w c:\windows\system32\dllcache\spra041a.dll
+ 2008-04-14 05:05:30 192,512 -c–a-w c:\windows\system32\dllcache\spra041b.dll
+ 2008-04-14 05:05:30 188,928 -c–a-w c:\windows\system32\dllcache\spra041D.dll
+ 2008-04-14 05:05:30 188,416 -c–a-w c:\windows\system32\dllcache\spra041e.dll
+ 2008-04-14 05:05:32 188,928 -c–a-w c:\windows\system32\dllcache\spra041f.dll
+ 2008-04-14 05:05:30 192,512 -c–a-w c:\windows\system32\dllcache\spra0424.dll
+ 2008-04-14 05:05:12 186,880 -c–a-w c:\windows\system32\dllcache\spra0425.dll
+ 2008-04-14 05:05:26 188,928 -c–a-w c:\windows\system32\dllcache\spra0426.dll
+ 2008-04-14 05:05:26 189,952 -c–a-w c:\windows\system32\dllcache\spra0427.dll
+ 2008-04-14 05:05:08 161,280 -c–a-w c:\windows\system32\dllcache\spra0804.dll
+ 2008-04-14 05:05:28 194,560 -c–a-w c:\windows\system32\dllcache\spra0816.dll
+ 2008-04-14 05:05:12 196,096 -c–a-w c:\windows\system32\dllcache\spra0C0A.dll
+ 2008-04-14 05:05:50 2,869,248 -c–a-w c:\windows\system32\dllcache\sprb0401.dll
+ 2008-04-14 05:06:12 477,696 -c–a-w c:\windows\system32\dllcache\sprb0404.dll
+ 2008-04-14 05:06:12 734,720 -c–a-w c:\windows\system32\dllcache\sprb0405.dll
+ 2008-04-14 05:06:12 742,912 -c–a-w c:\windows\system32\dllcache\sprb0406.dll
+ 2008-04-14 05:07:04 788,480 -c–a-w c:\windows\system32\dllcache\sprb0407.dll
+ 2008-04-14 05:06:36 801,280 -c–a-w c:\windows\system32\dllcache\sprb0408.dll
+ 2008-04-14 05:06:40 729,088 -c–a-w c:\windows\system32\dllcache\sprb040b.dll
+ 2008-04-14 05:06:56 793,088 -c–a-w c:\windows\system32\dllcache\sprb040C.dll
+ 2008-04-14 05:07:08 2,842,112 -c–a-w c:\windows\system32\dllcache\sprb040D.dll
+ 2008-04-14 05:07:24 769,536 -c–a-w c:\windows\system32\dllcache\sprb040e.dll
+ 2008-04-14 05:07:24 769,536 -c–a-w c:\windows\system32\dllcache\sprb0410.dll
+ 2008-04-14 05:07:36 562,688 -c–a-w c:\windows\system32\dllcache\sprb0411.dll
+ 2008-04-14 05:07:38 543,744 -c–a-w c:\windows\system32\dllcache\sprb0412.dll
+ 2008-04-14 05:08:02 769,024 -c–a-w c:\windows\system32\dllcache\sprb0413.dll
+ 2008-04-14 05:08:04 716,288 -c–a-w c:\windows\system32\dllcache\sprb0414.dll
+ 2008-04-14 05:08:06 759,808 -c–a-w c:\windows\system32\dllcache\sprb0415.dll
+ 2008-04-14 05:05:44 752,128 -c–a-w c:\windows\system32\dllcache\sprb0416.dll
+ 2008-04-14 05:08:30 736,768 -c–a-w c:\windows\system32\dllcache\sprb0419.dll
+ 2008-04-14 05:08:38 757,248 -c–a-w c:\windows\system32\dllcache\sprb041b.dll
+ 2008-04-14 05:08:48 724,480 -c–a-w c:\windows\system32\dllcache\sprb041D.dll
+ 2008-04-14 05:08:52 724,480 -c–a-w c:\windows\system32\dllcache\sprb041f.dll
+ 2008-04-14 05:08:38 732,160 -c–a-w c:\windows\system32\dllcache\sprb0424.dll
+ 2008-04-14 05:05:56 470,016 -c–a-w c:\windows\system32\dllcache\sprb0804.dll
+ 2008-04-14 05:08:08 751,616 -c–a-w c:\windows\system32\dllcache\sprb0816.dll
+ 2008-04-14 05:06:40 773,632 -c–a-w c:\windows\system32\dllcache\sprb0C0A.dll
+ 2008-04-14 04:09:04 656,896 -c–a-w c:\windows\system32\dllcache\sprc0401.dll
+ 2008-04-14 04:09:14 327,680 -c–a-w c:\windows\system32\dllcache\sprc0404.dll
+ 2008-04-14 04:09:04 601,088 -c–a-w c:\windows\system32\dllcache\sprc0405.dll
+ 2008-04-14 04:09:14 605,696 -c–a-w c:\windows\system32\dllcache\sprc0406.dll
+ 2008-04-14 04:09:20 663,552 -c–a-w c:\windows\system32\dllcache\sprc0407.dll
+ 2008-04-14 04:09:14 679,936 -c–a-w c:\windows\system32\dllcache\sprc0408.dll
+ 2008-04-14 04:09:18 604,672 -c–a-w c:\windows\system32\dllcache\sprc040b.dll
+ 2008-04-14 04:09:22 663,040 -c–a-w c:\windows\system32\dllcache\sprc040C.dll
+ 2008-04-14 04:09:30 620,544 -c–a-w c:\windows\system32\dllcache\sprc040D.dll
+ 2008-04-14 04:09:30 645,120 -c–a-w c:\windows\system32\dllcache\sprc040e.dll
+ 2008-04-14 04:09:30 658,432 -c–a-w c:\windows\system32\dllcache\sprc0410.dll
+ 2008-04-14 04:09:50 412,672 -c–a-w c:\windows\system32\dllcache\sprc0411.dll
+ 2008-04-14 04:09:50 392,704 -c–a-w c:\windows\system32\dllcache\sprc0412.dll
+ 2008-04-14 04:09:48 645,120 -c–a-w c:\windows\system32\dllcache\sprc0413.dll
+ 2008-04-14 04:09:50 591,872 -c–a-w c:\windows\system32\dllcache\sprc0414.dll
+ 2008-04-14 04:09:54 641,024 -c–a-w c:\windows\system32\dllcache\sprc0415.dll
+ 2008-04-14 04:08:58 620,032 -c–a-w c:\windows\system32\dllcache\sprc0416.dll
+ 2008-04-14 04:09:58 627,200 -c–a-w c:\windows\system32\dllcache\sprc0419.dll
+ 2008-04-14 04:10:06 577,536 -c–a-w c:\windows\system32\dllcache\sprc041b.dll
+ 2008-04-14 04:10:06 590,848 -c–a-w c:\windows\system32\dllcache\sprc041D.dll
+ 2008-04-14 04:10:10 592,896 -c–a-w c:\windows\system32\dllcache\sprc041f.dll
+ 2008-04-14 04:10:06 576,512 -c–a-w c:\windows\system32\dllcache\sprc0424.dll
+ 2008-04-14 04:09:04 322,560 -c–a-w c:\windows\system32\dllcache\sprc0804.dll
+ 2008-04-14 04:09:54 639,488 -c–a-w c:\windows\system32\dllcache\sprc0816.dll
+ 2008-04-14 04:09:14 648,704 -c–a-w c:\windows\system32\dllcache\sprc0C0A.dll
+ 2001-08-23 07:00:00 70,656 -c–a-w c:\windows\system32\dllcache\sprio600.dll
+ 2001-08-23 07:00:00 72,192 -c–a-w c:\windows\system32\dllcache\sprio800.dll
+ 2008-04-14 10:42:08 250,368 -c–a-w c:\windows\system32\dllcache\sptip.dll
+ 2001-08-18 03:36:32 24,660 -c–a-w c:\windows\system32\dllcache\spxupchk.dll
+ 2008-04-14 10:42:08 151,552 -c–a-w c:\windows\system32\dllcache\sqldb20.dll
+ 2008-04-14 10:42:08 462,848 -c–a-w c:\windows\system32\dllcache\sqlqp20.dll
+ 2008-04-14 10:42:08 110,592 -c–a-w c:\windows\system32\dllcache\sqlse20.dll
+ 2008-04-14 10:42:08 180,800 -c–a-w c:\windows\system32\dllcache\sqlunirl.dll
+ 2008-04-14 10:42:08 217,088 -c–a-w c:\windows\system32\dllcache\sqlxmlx.dll
+ 2008-04-14 05:06:54 73,472 -c–a-w c:\windows\system32\dllcache\sr.sys
+ 2008-04-14 10:42:08 58,434 -c–a-w c:\windows\system32\dllcache\srchctls.dll
+ 2008-04-14 10:42:08 726,078 -c–a-w c:\windows\system32\dllcache\srchui.dll
+ 2008-04-14 10:42:08 67,584 -c–a-w c:\windows\system32\dllcache\srclient.dll
+ 2008-04-14 10:42:08 239,104 -c–a-w c:\windows\system32\dllcache\srrstr.dll
+ 2008-04-14 10:42:08 171,008 -c–a-w c:\windows\system32\dllcache\srsvc.dll
+ 2001-08-18 03:36:32 99,328 -c–a-w c:\windows\system32\dllcache\srusd.dll
+ 2008-04-14 10:42:08 96,768 -c–a-w c:\windows\system32\dllcache\srvsvc.dll
+ 2001-08-17 17:11:08 48,736 -c–a-w c:\windows\system32\dllcache\srwlnd5.sys
+ 2008-04-14 10:42:44 704,512 -c–a-w c:\windows\system32\dllcache\ss3dfo.scr
+ 2008-04-14 10:42:44 19,968 -c–a-w c:\windows\system32\dllcache\ssbezier.scr
+ 2008-04-14 10:42:08 34,816 -c–a-w c:\windows\system32\dllcache\ssdpapi.dll
+ 2008-04-14 10:42:08 71,680 -c–a-w c:\windows\system32\dllcache\ssdpsrv.dll
+ 2008-04-14 10:42:44 393,216 -c–a-w c:\windows\system32\dllcache\ssflwbox.scr
+ 2008-04-14 10:42:08 45,056 -c–a-w c:\windows\system32\dllcache\ssinc51.dll
+ 2008-04-14 10:42:46 20,992 -c–a-w c:\windows\system32\dllcache\ssmarque.scr
+ 2008-04-14 10:42:46 47,104 -c–a-w c:\windows\system32\dllcache\ssmypics.scr
+ 2008-04-14 10:42:46 18,944 -c–a-w c:\windows\system32\dllcache\ssmyst.scr
+ 2008-04-14 10:42:08 46,592 -c–a-w c:\windows\system32\dllcache\sspifilt.dll
+ 2008-04-14 10:42:46 610,304 -c–a-w c:\windows\system32\dllcache\sspipes.scr
+ 2008-04-14 10:42:46 14,336 -c–a-w c:\windows\system32\dllcache\ssstars.scr
+ 2008-04-14 10:42:46 679,936 -c–a-w c:\windows\system32\dllcache\sstext3d.scr
+ 2008-04-14 10:42:08 33,280 -c–a-w c:\windows\system32\dllcache\sstub.dll
+ 2008-04-14 10:42:08 8,192 -c–a-w c:\windows\system32\dllcache\staxmem.dll
+ 2008-04-14 10:42:08 59,392 -c–a-w c:\windows\system32\dllcache\stclient.dll
+ 2001-08-17 18:51:20 16,896 -c–a-w c:\windows\system32\dllcache\stcusb.sys
+ 2008-04-14 10:42:08 86,528 -c–a-w c:\windows\system32\dllcache\stdprov.dll
+ 2008-04-14 10:42:08 68,096 -c–a-w c:\windows\system32\dllcache\sti.dll
+ 2008-04-14 10:42:08 136,704 -c–a-w c:\windows\system32\dllcache\sti_ci.dll
+ 2008-04-14 10:42:38 14,848 -c–a-w c:\windows\system32\dllcache\stimon.exe
+ 2001-08-18 03:36:32 53,248 -c–a-w c:\windows\system32\dllcache\stlncoin.dll
+ 2001-08-18 03:36:32 155,648 -c–a-w c:\windows\system32\dllcache\stlnprop.dll
+ 2008-04-14 10:42:08 121,856 -c–a-w c:\windows\system32\dllcache\stobject.dll
+ 2008-04-14 10:42:08 74,752 -c–a-w c:\windows\system32\dllcache\storprop.dll
+ 2008-04-14 05:15:16 49,408 -c–a-w c:\windows\system32\dllcache\stream.sys
+ 2001-08-23 07:00:00 8,192 -c–a-w c:\windows\system32\dllcache\streamci.dll
+ 2008-04-14 05:16:22 15,232 -c–a-w c:\windows\system32\dllcache\streamip.sys
+ 2008-04-14 10:42:08 75,776 -c–a-w c:\windows\system32\dllcache\strmfilt.dll
+ 2008-04-14 10:42:08 46,592 -c–a-w c:\windows\system32\dllcache\svcext51.dll
+ 2008-04-14 10:42:38 14,336 -c–a-w c:\windows\system32\dllcache\svchost.exe
+ 2001-08-18 03:36:32 41,472 -c–a-w c:\windows\system32\dllcache\sw_effct.dll
+ 2001-08-18 03:36:32 53,760 -c–a-w c:\windows\system32\dllcache\sw_wheel.dll
+ 2008-04-14 05:09:54 4,352 -c–a-w c:\windows\system32\dllcache\swenum.sys
+ 2008-04-14 05:15:10 56,576 -c–a-w c:\windows\system32\dllcache\swmidi.sys
+ 2001-08-18 03:36:32 10,240 -c–a-w c:\windows\system32\dllcache\swpdflt2.dll
+ 2001-08-18 03:36:32 10,240 -c–a-w c:\windows\system32\dllcache\swpidflt.dll
+ 2001-08-17 19:02:56 3,968 -c–a-w c:\windows\system32\dllcache\swusbflt.sys
+ 2001-08-17 18:50:58 103,936 -c–a-w c:\windows\system32\dllcache\sx.sys
+ 2001-08-18 03:36:32 94,293 -c–a-w c:\windows\system32\dllcache\sxports.dll
+ 2008-04-14 10:42:08 713,216 -c–a-w c:\windows\system32\dllcache\sxs.dll
+ 2001-08-17 19:07:40 28,384 -c–a-w c:\windows\system32\dllcache\sym_hi.sys
+ 2001-08-17 19:07:42 30,688 -c–a-w c:\windows\system32\dllcache\sym_u3.sys
+ 2001-08-17 19:07:34 16,256 -c–a-w c:\windows\system32\dllcache\symc810.sys
+ 2001-08-17 19:07:36 32,640 -c–a-w c:\windows\system32\dllcache\symc8xx.sys
+ 2008-04-14 10:42:08 57,856 -c–a-w c:\windows\system32\dllcache\synceng.dll
+ 2008-04-14 10:42:08 191,488 -c–a-w c:\windows\system32\dllcache\syncui.dll
+ 2008-04-14 05:45:56 60,800 -c–a-w c:\windows\system32\dllcache\sysaudio.sys
+ 2008-04-14 10:42:38 71,680 -c–a-w c:\windows\system32\dllcache\sysinfo.exe
+ 2008-04-14 10:42:08 193,024 -c–a-w c:\windows\system32\dllcache\sysmod.dll
+ 2008-04-14 10:42:08 173,568 -c–a-w c:\windows\system32\dllcache\sysmoda.dll
+ 2008-04-14 10:42:38 106,496 -c–a-w c:\windows\system32\dllcache\sysocmgr.exe
+ 2008-04-14 10:42:08 990,208 -c–a-w c:\windows\system32\dllcache\syssetup.dll
+ 2008-04-14 10:42:08 117,760 -c–a-w c:\windows\system32\dllcache\t2embed.dll
+ 2001-08-17 19:56:04 172,768 -c–a-w c:\windows\system32\dllcache\t2r4disp.dll
+ 2001-08-17 17:50:12 36,640 -c–a-w c:\windows\system32\dllcache\t2r4mini.sys
+ 2008-04-14 10:42:08 33,792 -c–a-w c:\windows\system32\dllcache\tabletoc.dll
+ 2001-08-17 18:52:54 7,040 -c–a-w c:\windows\system32\dllcache\tandqic.sys
+ 2008-04-14 05:10:52 14,976 -c–a-w c:\windows\system32\dllcache\tape.sys
+ 2008-04-14 10:42:08 858,624 -c–a-w c:\windows\system32\dllcache\tapi3.dll
+ 2008-04-14 10:42:08 181,760 -c–a-w c:\windows\system32\dllcache\tapi32.dll
+ 2008-04-14 10:42:08 249,856 -c–a-w c:\windows\system32\dllcache\tapisrv.dll
+ 2008-04-14 10:42:38 76,288 -c–a-w c:\windows\system32\dllcache\taskkill.exe
+ 2008-04-14 10:42:38 77,824 -c–a-w c:\windows\system32\dllcache\tasklist.exe
+ 2008-04-14 10:42:38 135,680 -c–a-w c:\windows\system32\dllcache\taskmgr.exe
+ 2001-08-17 18:49:46 30,464 -c–a-w c:\windows\system32\dllcache\tbatm155.sys
+ 2008-04-14 10:42:08 14,848 -c–a-w c:\windows\system32\dllcache\tcpmib.dll
+ 2008-04-14 10:42:08 45,568 -c–a-w c:\windows\system32\dllcache\tcpmon.dll
+ 2008-04-14 10:42:08 45,568 -c–a-w c:\windows\system32\dllcache\tcpmonui.dll
+ 2008-04-14 10:42:38 32,827 -c–a-w c:\windows\system32\dllcache\tcptest.exe
+ 2007-04-03 03:06:08 16,384 -c–a-w c:\windows\system32\dllcache\tcptsat.dll
+ 2008-04-14 05:30:06 19,072 -c–a-w c:\windows\system32\dllcache\tdi.sys
+ 2001-08-17 17:13:00 37,961 -c–a-w c:\windows\system32\dllcache\tdk100b.sys
+ 2001-08-17 17:13:00 17,129 -c–a-w c:\windows\system32\dllcache\tdkcd31.sys
+ 2008-04-14 10:43:22 12,040 -c–a-w c:\windows\system32\dllcache\tdpipe.sys
+ 2008-04-14 10:43:22 21,896 -c–a-w c:\windows\system32\dllcache\tdtcp.sys
+ 2008-04-14 10:42:38 75,776 -c–a-w c:\windows\system32\dllcache\telnet.exe
+ 2008-04-14 10:43:22 40,840 -c–a-w c:\windows\system32\dllcache\termdd.sys
+ 2008-04-14 10:42:08 358,400 -c–a-w c:\windows\system32\dllcache\termmgr.dll
+ 2008-04-14 10:42:08 295,424 -c–a-w c:\windows\system32\dllcache\termsrv.dll
+ 2008-04-14 05:10:52 149,376 -c–a-w c:\windows\system32\dllcache\tffsport.sys
+ 2001-08-17 19:56:04 81,408 -c–a-w c:\windows\system32\dllcache\tgiul50.dll
+ 2001-08-17 17:51:10 138,528 -c–a-w c:\windows\system32\dllcache\tgiulnt5.sys
+ 2008-04-14 10:42:08 385,536 -c–a-w c:\windows\system32\dllcache\themeui.dll
+ 2008-04-14 03:13:52 44,032 -c–a-w c:\windows\system32\dllcache\tintlphr.exe
+ 2008-04-14 03:13:54 455,168 -c–a-w c:\windows\system32\dllcache\tintsetp.exe
+ 2001-08-17 17:14:26 123,995 -c–a-w c:\windows\system32\dllcache\tjisdn.sys
+ 2008-04-14 10:42:38 61,440 -c–a-w c:\windows\system32\dllcache\tlntadmn.exe
+ 2008-04-14 10:42:38 78,336 -c–a-w c:\windows\system32\dllcache\tlntsess.exe
+ 2008-04-14 10:42:40 73,216 -c–a-w c:\windows\system32\dllcache\tlntsvr.exe
+ 2008-04-14 10:42:08 7,168 -c–a-w c:\windows\system32\dllcache\tlntsvrp.dll
+ 2008-04-14 10:41:00 10,240 -c–a-w c:\windows\system32\dllcache\tmigrate.dll
+ 2008-04-14 10:42:08 33,792 -c–a-w c:\windows\system32\dllcache\tools.dll
+ 2001-08-17 17:10:26 28,232 -c–a-w c:\windows\system32\dllcache\tos4mo.sys
+ 2001-08-23 07:00:00 51,712 -c–a-w c:\windows\system32\dllcache\tosdvd.sys
+ 2001-08-17 19:01:52 241,664 -c–a-w c:\windows\system32\dllcache\tosdvd02.sys
+ 2001-08-17 19:02:00 230,912 -c–a-w c:\windows\system32\dllcache\tosdvd03.sys
+ 2001-08-17 18:51:56 4,992 -c–a-w c:\windows\system32\dllcache\toside.sys
+ 2008-04-14 10:42:40 347,136 -c–a-w c:\windows\system32\dllcache\tourstrt.exe
+ 2001-08-18 03:36:32 31,744 -c–a-w c:\windows\system32\dllcache\tp4.dll
+ 2008-04-14 10:42:40 82,944 -c–a-w c:\windows\system32\dllcache\tp4mon.exe
+ 2001-08-18 03:35:42 42,496 -c–a-w c:\windows\system32\dllcache\tp4res.dll
+ 2001-08-17 17:12:12 34,375 -c–a-w c:\windows\system32\dllcache\tpro4.sys
+ 2008-04-14 10:42:40 259,584 -c–a-w c:\windows\system32\dllcache\tracerpt.exe
+ 2008-04-14 10:42:40 12,288 -c–a-w c:\windows\system32\dllcache\tracert.exe
+ 2001-08-17 19:56:06 315,520 -c–a-w c:\windows\system32\dllcache\trid3d.dll
+ 2001-08-17 17:51:16 222,336 -c–a-w c:\windows\system32\dllcache\trid3dm.sys
+ 2001-08-17 19:56:06 440,576 -c–a-w c:\windows\system32\dllcache\tridkb.dll
+ 2001-08-17 17:51:16 159,232 -c–a-w c:\windows\system32\dllcache\tridkbm.sys
+ 2001-08-18 03:36:32 525,568 -c–a-w c:\windows\system32\dllcache\tridxp.dll
+ 2001-08-17 17:51:22 166,784 -c–a-w c:\windows\system32\dllcache\tridxpm.sys
+ 2008-04-14 10:42:08 153,088 -c–a-w c:\windows\system32\dllcache\triedit.dll
+ 2008-04-14 10:42:08 90,112 -c–a-w c:\windows\system32\dllcache\trkwks.dll
+ 2001-08-23 07:00:00 21,376 -c–a-w c:\windows\system32\dllcache\tsbvcap.sys
+ 2008-04-14 10:42:08 93,696 -c–a-w c:\windows\system32\dllcache\tscfgwmi.dll
+ 2008-04-14 10:43:22 12,168 -c–a-w c:\windows\system32\dllcache\tsddd.dll
+ 2008-04-14 10:42:08 53,248 -c–a-w c:\windows\system32\dllcache\tsgqec.dll
+ 2008-04-14 10:42:08 279,040 -c–a-w c:\windows\system32\dllcache\tshoot.dll
+ 2008-04-14 10:42:08 130,048 -c–a-w c:\windows\system32\dllcache\tsoc.dll
+ 2008-04-14 09:42:08 50,688 -c–a-w c:\windows\system32\dllcache\tspkg.dll
+ 2008-04-14 05:26:02 12,288 -c–a-w c:\windows\system32\dllcache\tunmp.sys
+ 2008-04-14 10:42:08 50,688 -c–a-w c:\windows\system32\dllcache\twain_32.dll
+ 2008-04-14 10:42:08 57,856 -c–a-w c:\windows\system32\dllcache\twext.dll
+ 2001-08-17 18:48:14 11,520 -c–a-w c:\windows\system32\dllcache\twotrack.sys
+ 2008-04-14 10:42:08 101,376 -c–a-w c:\windows\system32\dllcache\txflog.dll
+ 2008-04-14 05:06:42 44,672 -c–a-w c:\windows\system32\dllcache\uagp35.sys
+ 2008-04-14 05:02:38 66,048 -c–a-w c:\windows\system32\dllcache\udfs.sys
+ 2008-04-14 10:42:08 26,624 -c–a-w c:\windows\system32\dllcache\udhisapi.dll
+ 2008-04-14 10:42:08 103,424 -c–a-w c:\windows\system32\dllcache\uihelper.dll
+ 2008-04-14 10:42:08 275,456 -c–a-w c:\windows\system32\dllcache\ulib.dll
+ 2001-08-17 18:52:22 36,736 -c–a-w c:\windows\system32\dllcache\ultra.sys
+ 2001-08-18 03:36:34 216,064 -c–a-w c:\windows\system32\dllcache\um34scan.dll
+ 2001-08-18 03:36:34 211,968 -c–a-w c:\windows\system32\dllcache\um54scan.dll
+ 2008-04-14 10:42:08 35,840 -c–a-w c:\windows\system32\dllcache\umandlg.dll
+ 2001-08-18 03:36:34 47,616 -c–a-w c:\windows\system32\dllcache\umaxcam.dll
+ 2001-08-18 03:36:34 50,176 -c–a-w c:\windows\system32\dllcache\umaxp60.dll
+ 2001-08-17 18:58:12 22,912 -c–a-w c:\windows\system32\dllcache\umaxpcls.sys
+ 2001-08-18 03:36:34 50,688 -c–a-w c:\windows\system32\dllcache\umaxscan.dll
+ 2001-08-18 03:36:34 69,632 -c–a-w c:\windows\system32\dllcache\umaxu12.dll
+ 2001-08-18 03:36:34 26,624 -c–a-w c:\windows\system32\dllcache\umaxu22.dll
+ 2001-08-18 03:36:34 28,160 -c–a-w c:\windows\system32\dllcache\umaxu40.dll
+ 2001-08-18 03:36:34 94,720 -c–a-w c:\windows\system32\dllcache\umaxud32.dll
+ 2008-04-14 10:42:08 123,392 -c–a-w c:\windows\system32\dllcache\umpnpmgr.dll
+ 2008-04-14 10:41:02 76,288 -c–a-w c:\windows\system32\dllcache\uniime.dll
+ 2008-04-14 10:42:08 74,240 -c–a-w c:\windows\system32\dllcache\unimdmat.dll
+ 2008-04-14 10:42:08 13,824 -c–a-w c:\windows\system32\dllcache\uniplat.dll
+ 2008-04-14 10:42:08 316,416 -c–a-w c:\windows\system32\dllcache\untfs.dll
+ 2008-04-14 05:09:48 384,768 -c–a-w c:\windows\system32\dllcache\update.sys
+ 2008-04-14 10:42:40 150,528 -c–a-w c:\windows\system32\dllcache\uploadm.exe
+ 2008-04-14 10:42:10 133,632 -c–a-w c:\windows\system32\dllcache\upnp.dll
+ 2008-04-14 10:42:40 16,896 -c–a-w c:\windows\system32\dllcache\upnpcont.exe
+ 2008-04-14 10:42:10 185,856 -c–a-w c:\windows\system32\dllcache\upnphost.dll
+ 2008-04-14 10:42:10 239,616 -c–a-w c:\windows\system32\dllcache\upnpui.dll
+ 2008-04-14 10:42:40 18,432 -c–a-w c:\windows\system32\dllcache\ups.exe
+ 2008-04-14 03:05:36 32,384 -c–a-w c:\windows\system32\dllcache\usb101et.sys
+ 2008-04-14 05:26:50 12,800 -c–a-w c:\windows\system32\dllcache\usb8023.sys
+ 2008-04-14 05:26:50 12,800 -c–a-w c:\windows\system32\dllcache\usb8023x.sys
+ 2008-04-14 05:15:14 60,032 -c–a-w c:\windows\system32\dllcache\usbaudio.sys
+ 2008-04-14 05:15:42 25,600 -c–a-w c:\windows\system32\dllcache\usbcamd.sys
+ 2008-04-14 05:15:42 25,728 -c–a-w c:\windows\system32\dllcache\usbcamd2.sys
+ 2008-04-14 05:15:40 32,128 -c–a-w c:\windows\system32\dllcache\usbccgp.sys
+ 2001-08-23 07:00:00 4,736 -c–a-w c:\windows\system32\dllcache\usbd.sys
+ 2008-04-14 05:15:36 30,208 -c–a-w c:\windows\system32\dllcache\usbehci.sys
+ 2008-04-14 05:15:38 59,520 -c–a-w c:\windows\system32\dllcache\usbhub.sys
+ 2008-04-14 05:15:44 15,872 -c–a-w c:\windows\system32\dllcache\usbintel.sys
+ 2008-04-14 10:42:10 16,896 -c–a-w c:\windows\system32\dllcache\usbmon.dll
+ 2008-04-14 05:15:36 17,152 -c–a-w c:\windows\system32\dllcache\usbohci.sys
+ 2008-04-14 05:15:38 143,872 -c–a-w c:\windows\system32\dllcache\usbport.sys
+ 2008-04-14 05:17:38 25,856 -c–a-w c:\windows\system32\dllcache\usbprint.sys
+ 2008-04-14 05:15:36 15,104 -c–a-w c:\windows\system32\dllcache\usbscan.sys
+ 2008-04-14 05:15:38 26,112 -c–a-w c:\windows\system32\dllcache\usbser.sys
+ 2008-04-14 05:15:40 26,368 -c–a-w c:\windows\system32\dllcache\usbstor.sys
+ 2008-04-14 05:15:36 20,608 -c–a-w c:\windows\system32\dllcache\usbuhci.sys
+ 2008-04-14 10:42:10 74,240 -c–a-w c:\windows\system32\dllcache\usbui.dll
+ 2008-04-14 05:16:22 121,984 -c–a-w c:\windows\system32\dllcache\usbvideo.sys
+ 2008-04-14 10:42:10 578,560 -c–a-w c:\windows\system32\dllcache\user32.dll
+ 2008-04-14 10:42:10 727,040 -c–a-w c:\windows\system32\dllcache\userenv.dll
+ 2008-04-14 10:42:40 26,112 -c–a-w c:\windows\system32\dllcache\userinit.exe
+ 2008-04-14 10:42:10 406,016 -c–a-w c:\windows\system32\dllcache\usp10.dll
+ 2001-08-17 18:28:16 793,598 -c–a-w c:\windows\system32\dllcache\usr1806.sys
+ 2001-08-17 18:28:18 794,399 -c–a-w c:\windows\system32\dllcache\usr1806v.sys
+ 2001-08-17 18:28:24 224,802 -c–a-w c:\windows\system32\dllcache\usr1807a.sys
+ 2001-08-23 07:00:00 61,500 -c–a-w c:\windows\system32\dllcache\usrcntra.dll
+ 2001-08-23 07:00:00 69,699 -c–a-w c:\windows\system32\dllcache\usrcoina.dll
+ 2001-08-23 07:00:00 77,890 -c–a-w c:\windows\system32\dllcache\usrdpa.dll
+ 2001-08-23 07:00:00 323,641 -c–a-w c:\windows\system32\dllcache\usrdtea.dll
+ 2001-08-23 07:00:00 86,073 -c–a-w c:\windows\system32\dllcache\usrfaxa.dll
+ 2001-08-23 07:00:00 53,305 -c–a-w c:\windows\system32\dllcache\usrlbva.dll
+ 2001-08-23 07:00:00 77,891 -c–a-w c:\windows\system32\dllcache\usrmlnka.exe
+ 2001-08-17 18:28:24 7,556 -c–a-w c:\windows\system32\dllcache\usroslba.sys
+ 2001-08-17 18:28:26 113,762 -c–a-w c:\windows\system32\dllcache\usrpda.sys
+ 2001-08-23 07:00:00 61,508 -c–a-w c:\windows\system32\dllcache\usrprbda.exe
+ 2001-08-23 07:00:00 77,883 -c–a-w c:\windows\system32\dllcache\usrrtosa.dll
+ 2001-08-23 07:00:00 49,211 -c–a-w c:\windows\system32\dllcache\usrsdpia.dll
+ 2001-08-23 07:00:00 69,700 -c–a-w c:\windows\system32\dllcache\usrshuta.exe
+ 2001-08-23 07:00:00 41,019 -c–a-w c:\windows\system32\dllcache\usrsvpia.dll
+ 2001-08-17 18:28:14 765,884 -c–a-w c:\windows\system32\dllcache\usrti.sys
+ 2001-08-23 07:00:00 102,457 -c–a-w c:\windows\system32\dllcache\usrv42a.dll
+ 2001-08-23 07:00:00 49,209 -c–a-w c:\windows\system32\dllcache\usrv80a.dll
+ 2001-08-23 07:00:00 45,116 -c–a-w c:\windows\system32\dllcache\usrvoica.dll
+ 2001-08-23 07:00:00 49,211 -c–a-w c:\windows\system32\dllcache\usrvpa.dll
+ 2001-08-17 18:28:26 687,999 -c–a-w c:\windows\system32\dllcache\usrwdxjs.sys
+ 2008-04-14 10:42:40 50,176 -c–a-w c:\windows\system32\dllcache\utilman.exe
+ 2008-04-14 10:42:10 218,624 -c–a-w c:\windows\system32\dllcache\uxtheme.dll
+ 2008-04-14 10:42:10 30,749 -c–a-w c:\windows\system32\dllcache\vbajet32.dll
+ 2008-04-14 10:42:10 11,325 -c–a-w c:\windows\system32\dllcache\vchnt5.dll
+ 2008-04-14 10:42:10 26,112 -c–a-w c:\windows\system32\dllcache\vdmdbg.dll
+ 2001-08-23 07:00:00 58,112 -c–a-w c:\windows\system32\dllcache\vdmindvd.sys
+ 2008-04-14 10:42:10 51,712 -c–a-w c:\windows\system32\dllcache\vdmredir.dll
+ 2008-04-14 10:42:10 26,624 -c–a-w c:\windows\system32\dllcache\verifier.dll
+ 2008-04-14 10:42:10 18,944 -c–a-w c:\windows\system32\dllcache\version.dll
+ 2008-04-14 10:42:10 53,760 -c–a-w c:\windows\system32\dllcache\vfwwdm32.dll
+ 2008-04-14 05:14:42 20,992 -c–a-w c:\windows\system32\dllcache\vga.sys
+ 2008-04-14 05:06:42 42,240 -c–a-w c:\windows\system32\dllcache\viaagp.sys
+ 2008-04-14 05:10:32 5,376 -c–a-w c:\windows\system32\dllcache\viaide.sys
+ 2001-08-17 18:49:04 24,576 -c–a-w c:\windows\system32\dllcache\viairda.sys
+ 2008-04-14 05:14:42 81,664 -c–a-w c:\windows\system32\dllcache\videoprt.sys
+ 2008-04-14 10:42:10 131,584 -c–a-w c:\windows\system32\dllcache\viewprov.dll
+ 2001-08-17 17:14:12 249,402 -c–a-w c:\windows\system32\dllcache\vinwm.sys
+ 2001-08-17 18:28:14 604,253 -c–a-w c:\windows\system32\dllcache\vmodem.sys
+ 2008-04-14 10:41:06 426,041 -c–a-w c:\windows\system32\dllcache\voicepad.dll
+ 2008-04-14 10:41:06 86,073 -c–a-w c:\windows\system32\dllcache\voicesub.dll
+ 2008-04-14 05:11:02 52,352 -c–a-w c:\windows\system32\dllcache\volsnap.sys
+ 2001-08-17 18:28:16 397,502 -c–a-w c:\windows\system32\dllcache\vpctcom.sys
+ 2008-04-14 10:42:10 430,592 -c–a-w c:\windows\system32\dllcache\vssapi.dll
+ 2008-04-14 10:42:40 289,792 -c–a-w c:\windows\system32\dllcache\vssvc.exe
+ 2001-08-17 18:28:16 64,605 -c–a-w c:\windows\system32\dllcache\vvoice.sys
+ 2008-04-14 10:42:10 15,872 -c–a-w c:\windows\system32\dllcache\w3ssl.dll
+ 2008-04-14 10:42:10 364,032 -c–a-w c:\windows\system32\dllcache\w3svc.dll
+ 2001-08-17 17:13:08 19,528 -c–a-w c:\windows\system32\dllcache\w840nd.sys
+ 2001-08-17 17:13:08 19,016 -c–a-w c:\windows\system32\dllcache\w926nd.sys
+ 2001-08-17 17:13:12 16,925 -c–a-w c:\windows\system32\dllcache\w940nd.sys
+ 2008-04-14 10:42:40 46,080 -c–a-w c:\windows\system32\dllcache\wab.exe
+ 2008-04-14 10:42:10 510,976 -c–a-w c:\windows\system32\dllcache\wab32.dll
+ 2008-04-14 02:51:50 249,856 -c–a-w c:\windows\system32\dllcache\wab32res.dll
+ 2008-04-14 10:42:10 32,768 -c–a-w c:\windows\system32\dllcache\wabfind.dll
+ 2008-04-14 10:42:10 85,504 -c–a-w c:\windows\system32\dllcache\wabimp.dll
+ 2008-04-14 10:42:40 30,208 -c–a-w c:\windows\system32\dllcache\wabmig.exe
+ 2008-04-14 05:13:56 14,208 -c–a-w c:\windows\system32\dllcache\wacompen.sys
+ 2008-04-14 03:04:28 12,415 -c–a-w c:\windows\system32\dllcache\wadv01nt.sys
+ 2008-04-14 03:04:28 12,127 -c–a-w c:\windows\system32\dllcache\wadv02nt.sys
+ 2008-04-14 03:04:28 11,775 -c–a-w c:\windows\system32\dllcache\wadv05nt.sys
+ 2008-04-14 03:04:28 11,807 -c–a-w c:\windows\system32\dllcache\wadv07nt.sys
+ 2008-04-14 03:04:28 11,295 -c–a-w c:\windows\system32\dllcache\wadv08nt.sys
+ 2008-04-14 03:04:28 11,871 -c–a-w c:\windows\system32\dllcache\wadv09nt.sys
+ 2008-04-14 03:04:30 11,935 -c–a-w c:\windows\system32\dllcache\wadv11nt.sys
+ 2008-04-14 10:42:10 76,800 -c–a-w c:\windows\system32\dllcache\wam51.dll
+ 2008-04-14 10:42:10 53,248 -c–a-w c:\windows\system32\dllcache\wamreg51.dll
+ 2008-04-14 05:27:22 34,560 -c–a-w c:\windows\system32\dllcache\wanarp.sys
+ 2008-04-14 05:15:00 17,664 -c–a-w c:\windows\system32\dllcache\watchdog.sys
+ 2008-04-14 03:04:30 29,311 -c–a-w c:\windows\system32\dllcache\watv01nt.sys
+ 2008-04-14 03:04:30 19,551 -c–a-w c:\windows\system32\dllcache\watv02nt.sys
+ 2008-04-14 03:04:30 33,599 -c–a-w c:\windows\system32\dllcache\watv04nt.sys
+ 2008-04-14 03:04:30 22,271 -c–a-w c:\windows\system32\dllcache\watv06nt.sys
+ 2008-04-14 03:04:30 25,471 -c–a-w c:\windows\system32\dllcache\watv10nt.sys
+ 2008-04-14 10:42:10 215,552 -c–a-w c:\windows\system32\dllcache\wavemsp.dll
+ 2008-04-14 10:42:10 196,608 -c–a-w c:\windows\system32\dllcache\wbemcntl.dll
+ 2008-04-14 10:42:10 214,528 -c–a-w c:\windows\system32\dllcache\wbemcomn.dll
+ 2008-04-14 10:42:10 71,680 -c–a-w c:\windows\system32\dllcache\wbemcons.dll
+ 2008-04-14 10:42:10 531,456 -c–a-w c:\windows\system32\dllcache\wbemcore.dll
+ 2008-04-14 10:42:10 178,176 -c–a-w c:\windows\system32\dllcache\wbemdisp.dll
+ 2008-04-14 10:42:10 273,920 -c–a-w c:\windows\system32\dllcache\wbemess.dll
+ 2008-04-14 10:42:10 43,008 -c–a-w c:\windows\system32\dllcache\wbemperf.dll
+ 2008-04-14 10:42:10 18,944 -c–a-w c:\windows\system32\dllcache\wbemprox.dll
+ 2008-04-14 10:42:10 43,520 -c–a-w c:\windows\system32\dllcache\wbemsvc.dll
+ 2008-04-14 10:42:40 116,224 -c–a-w c:\windows\system32\dllcache\wbemtest.exe
+ 2008-04-14 10:42:10 197,120 -c–a-w c:\windows\system32\dllcache\wbemupgd.dll
+ 2001-08-17 17:10:30 35,871 -c–a-w c:\windows\system32\dllcache\wbfirdma.sys
+ 2008-04-14 05:15:40 31,744 -c–a-w c:\windows\system32\dllcache\wceusbsh.sys
+ 2008-04-14 03:04:30 23,615 -c–a-w c:\windows\system32\dllcache\wch7xxnt.sys
+ 2001-08-17 18:28:02 701,386 -c–a-w c:\windows\system32\dllcache\wdhaalba.sys
+ 2008-04-14 10:42:10 49,152 -c–a-w c:\windows\system32\dllcache\wdigest.dll
+ 2008-04-14 10:42:46 23,552 -c–a-w c:\windows\system32\dllcache\wdmaud.drv
+ 2008-04-14 05:47:20 83,072 -c–a-w c:\windows\system32\dllcache\wdmaud.sys
+ 2008-04-14 10:42:10 68,096 -c–a-w c:\windows\system32\dllcache\webclnt.dll
+ 2008-04-14 10:42:10 135,680 -c–a-w c:\windows\system32\dllcache\webvw.dll
+ 2008-04-14 10:42:40 65,024 -c–a-w c:\windows\system32\dllcache\wextract.exe
+ 2008-04-14 10:42:40 433,664 -c–a-w c:\windows\system32\dllcache\wiaacmgr.exe
+ 2008-04-14 10:42:10 463,360 -c–a-w c:\windows\system32\dllcache\wiadefui.dll
+ 2008-04-14 10:42:10 124,416 -c–a-w c:\windows\system32\dllcache\wiadss.dll
+ 2001-08-18 07:36:34 87,040 -c–a-w c:\windows\system32\dllcache\wiafbdrv.dll
+ 2001-08-18 03:36:34 53,760 -c–a-w c:\windows\system32\dllcache\wiamsmud.dll
+ 2008-04-14 10:42:10 75,776 -c–a-w c:\windows\system32\dllcache\wiascr.dll
+ 2008-04-14 10:42:10 333,824 -c–a-w c:\windows\system32\dllcache\wiaservc.dll
+ 2008-04-14 10:42:10 589,312 -c–a-w c:\windows\system32\dllcache\wiashext.dll
+ 2008-04-14 10:42:10 111,104 -c–a-w c:\windows\system32\dllcache\wiavideo.dll
+ 2001-08-17 18:28:14 771,581 -c–a-w c:\windows\system32\dllcache\winacisa.sys
+ 2008-04-14 03:18:54 1,647,616 -c–a-w c:\windows\system32\dllcache\winbrand.dll
+ 2008-04-14 10:42:40 283,648 -c–a-w c:\windows\system32\dllcache\winhlp32.exe
+ 2008-04-14 10:42:10 354,304 -c–a-w c:\windows\system32\dllcache\winhttp.dll
+ 2008-04-14 10:42:10 32,256 -c–a-w c:\windows\system32\dllcache\winipsec.dll
+ 2008-04-14 10:42:40 507,904 -c–a-w c:\windows\system32\dllcache\winlogon.exe
+ 2008-04-14 10:42:10 176,128 -c–a-w c:\windows\system32\dllcache\winmm.dll
+ 2008-04-14 10:41:12 756,224 -c–a-w c:\windows\system32\dllcache\winntbbu.dll
+ 2008-04-14 10:42:10 16,896 -c–a-w c:\windows\system32\dllcache\winrnr.dll
+ 2008-04-14 10:42:10 99,328 -c–a-w c:\windows\system32\dllcache\winscard.dll
+ 2008-04-14 10:42:10 17,408 -c–a-w c:\windows\system32\dllcache\winshfhc.dll
+ 2008-04-14 10:42:46 146,432 -c–a-w c:\windows\system32\dllcache\winspool.drv
+ 2008-04-14 10:42:10 293,376 -c–a-w c:\windows\system32\dllcache\winsrv.dll
+ 2008-04-14 10:42:10 53,760 -c–a-w c:\windows\system32\dllcache\winsta.dll
+ 2008-04-14 10:42:10 176,640 -c–a-w c:\windows\system32\dllcache\wintrust.dll
+ 2008-04-14 10:42:42 5,632 -c–a-w c:\windows\system32\dllcache\winver.exe
+ 2008-04-14 10:42:10 69,120 -c–a-w c:\windows\system32\dllcache\wlanapi.dll
+ 2001-08-17 17:12:38 34,890 -c–a-w c:\windows\system32\dllcache\wlandrv2.sys
+ 2008-04-14 10:42:10 172,032 -c–a-w c:\windows\system32\dllcache\wldap32.dll
+ 2008-04-14 03:05:36 154,624 -c–a-w c:\windows\system32\dllcache\wlluc48.sys
+ 2008-04-14 10:42:10 92,672 -c–a-w c:\windows\system32\dllcache\wlnotify.dll
+ 2008-04-14 10:41:16 5,632 -c–a-w c:\windows\system32\dllcache\wmi.dll
+ 2008-04-14 05:06:40 8,832 -c–a-w c:\windows\system32\dllcache\wmiacpi.sys
+ 2008-04-14 10:42:42 196,608 -c–a-w c:\windows\system32\dllcache\wmiadap.exe
+ 2008-04-14 03:40:22 6,656 -c–a-w c:\windows\system32\dllcache\wmiapres.dll
+ 2008-04-14 10:42:10 88,576 -c–a-w c:\windows\system32\dllcache\wmiaprpl.dll
+ 2008-04-14 10:42:42 126,464 -c–a-w c:\windows\system32\dllcache\wmiapsrv.exe
+ 2008-04-14 10:42:42 358,912 -c–a-w c:\windows\system32\dllcache\wmic.exe
+ 2008-04-14 10:42:10 60,928 -c–a-w c:\windows\system32\dllcache\wmicookr.dll
+ 2008-04-14 10:42:10 140,800 -c–a-w c:\windows\system32\dllcache\wmidcprv.dll
+ 2008-04-14 10:42:10 156,672 -c–a-w c:\windows\system32\dllcache\wmipcima.dll
+ 2008-04-14 10:42:10 132,096 -c–a-w c:\windows\system32\dllcache\wmipdskq.dll
+ 2008-04-14 10:42:10 61,952 -c–a-w c:\windows\system32\dllcache\wmipiprt.dll
+ 2008-04-14 10:42:10 62,464 -c–a-w c:\windows\system32\dllcache\wmipjobj.dll
+ 2008-04-14 10:42:10 144,896 -c–a-w c:\windows\system32\dllcache\wmiprov.dll
+ 2008-04-14 10:42:10 437,248 -c–a-w c:\windows\system32\dllcache\wmiprvsd.dll
+ 2008-04-14 10:42:42 218,112 -c–a-w c:\windows\system32\dllcache\wmiprvse.exe
+ 2008-04-14 10:42:10 41,472 -c–a-w c:\windows\system32\dllcache\wmipsess.dll
+ 2008-04-14 10:42:10 144,896 -c–a-w c:\windows\system32\dllcache\wmisvc.dll
+ 2008-04-14 10:42:10 95,232 -c–a-w c:\windows\system32\dllcache\wmiutils.dll
+ 2008-04-14 10:42:10 167,936 -c–a-w c:\windows\system32\dllcache\wmm2ae.dll
+ 2008-04-14 10:42:10 4,096 -c–a-w c:\windows\system32\dllcache\wmm2eres.dll
+ 2008-04-14 10:42:10 7,680 -c–a-w c:\windows\system32\dllcache\wmm2ext.dll
+ 2008-04-14 10:42:10 402,432 -c–a-w c:\windows\system32\dllcache\wmm2filt.dll
+ 2008-04-14 10:42:10 502,272 -c–a-w c:\windows\system32\dllcache\wmm2fxa.dll
+ 2008-04-14 10:42:10 325,632 -c–a-w c:\windows\system32\dllcache\wmm2fxb.dll
+ 2008-04-14 10:42:10 4,256,768 -c–a-w c:\windows\system32\dllcache\wmm2res.dll
+ 2008-04-14 10:42:10 5,632 -c–a-w c:\windows\system32\dllcache\wmm2res2.dll
+ 2008-04-14 10:42:42 214,528 -c–a-w c:\windows\system32\dllcache\wordpad.exe
+ 2008-04-14 10:42:12 264,192 -c–a-w c:\windows\system32\dllcache\wow32.dll
+ 2001-08-23 07:00:00 3,200 -c–a-w c:\windows\system32\dllcache\wowfax.dll
+ 2001-08-23 07:00:00 13,824 -c–a-w c:\windows\system32\dllcache\wowfaxui.dll
+ 2008-04-14 10:42:42 32,256 -c–a-w c:\windows\system32\dllcache\wpabaln.exe
+ 2008-04-14 10:42:42 11,264 -c–a-w c:\windows\system32\dllcache\wpnpinst.exe
+ 2008-04-14 10:42:12 82,432 -c–a-w c:\windows\system32\dllcache\ws2_32.dll
+ 2008-04-14 10:42:12 19,968 -c–a-w c:\windows\system32\dllcache\ws2help.dll
+ 2008-04-14 10:42:42 13,824 -c–a-w c:\windows\system32\dllcache\wscntfy.exe
+ 2008-04-14 10:42:12 80,896 -c–a-w c:\windows\system32\dllcache\wscsvc.dll
+ 2008-04-14 10:42:12 604,160 -c–a-w c:\windows\system32\dllcache\wsecedit.dll
+ 2008-04-14 10:42:12 108,032 -c–a-w c:\windows\system32\dllcache\wshbth.dll
+ 2008-04-14 10:42:12 36,864 -c–a-w c:\windows\system32\dllcache\wshcon.dll
+ 2008-04-14 10:42:12 14,336 -c–a-w c:\windows\system32\dllcache\wship6.dll
+ 2008-04-14 10:42:12 8,192 -c–a-w c:\windows\system32\dllcache\wshirda.dll
+ 2008-04-14 10:42:12 11,264 -c–a-w c:\windows\system32\dllcache\wshrm.dll
+ 2008-04-14 10:42:12 19,456 -c–a-w c:\windows\system32\dllcache\wshtcpip.dll
+ 2008-04-14 03:04:32 12,063 -c–a-w c:\windows\system32\dllcache\wsiintxx.sys
+ 2008-04-14 10:42:12 41,984 -c–a-w c:\windows\system32\dllcache\wsnmp32.dll
+ 2008-04-14 10:42:12 22,528 -c–a-w c:\windows\system32\dllcache\wsock32.dll
+ 2008-04-14 05:16:26 19,200 -c–a-w c:\windows\system32\dllcache\wstcodec.sys
+ 2008-04-14 10:42:12 50,688 -c–a-w c:\windows\system32\dllcache\wstdecod.dll
+ 2008-04-14 10:42:12 18,432 -c–a-w c:\windows\system32\dllcache\wtsapi32.dll
+ 2008-04-14 10:42:42 165,888 -c–a-w c:\windows\system32\dllcache\wuauclt1.exe
+ 2008-04-14 10:42:12 183,296 -c–a-w c:\windows\system32\dllcache\wuaueng1.dll
+ 2008-04-14 10:42:12 6,656 -c–a-w c:\windows\system32\dllcache\wuauserv.dll
+ 2008-04-14 03:04:34 19,455 -c–a-w c:\windows\system32\dllcache\wvchntxx.sys
+ 2008-04-14 10:42:12 383,488 -c–a-w c:\windows\system32\dllcache\wzcdlg.dll
+ 2008-04-14 10:42:12 52,736 -c–a-w c:\windows\system32\dllcache\wzcsapi.dll
+ 2008-04-14 10:42:12 483,840 -c–a-w c:\windows\system32\dllcache\wzcsvc.dll
+ 2008-04-14 10:42:12 91,648 -c–a-w c:\windows\system32\dllcache\xactsrv.dll
+ 2008-04-14 10:42:42 30,720 -c–a-w c:\windows\system32\dllcache\xcopy.exe
+ 2001-08-17 17:11:14 16,970 -c–a-w c:\windows\system32\dllcache\xem336n5.sys
+ 2001-08-18 03:37:02 99,865 -c–a-w c:\windows\system32\dllcache\xlog.exe
+ 2008-04-14 10:42:12 129,024 -c–a-w c:\windows\system32\dllcache\xmlprov.dll
+ 2008-04-14 10:42:12 50,176 -c–a-w c:\windows\system32\dllcache\xmlprovi.dll
+ 2008-04-14 10:42:12 11,776 -c–a-w c:\windows\system32\dllcache\xolehlp.dll
+ 2008-04-14 04:09:30 438,784 -c–a-w c:\windows\system32\dllcache\xpob2res.dll
+ 2008-04-14 04:09:24 187,392 -c–a-w c:\windows\system32\dllcache\xpsp1res.dll
+ 2008-04-14 04:09:26 2,897,920 -c–a-w c:\windows\system32\dllcache\xpsp2res.dll
+ 2008-04-14 04:09:28 689,152 -c–a-w c:\windows\system32\dllcache\xpsp3res.dll
+ 2001-08-18 03:37:02 4,608 -c–a-w c:\windows\system32\dllcache\xrxflnch.exe
+ 2001-08-18 03:37:02 27,648 -c–a-w c:\windows\system32\dllcache\xrxftplt.exe
+ 2008-04-14 10:42:12 18,944 -c–a-w c:\windows\system32\dllcache\xrxscnui.dll
+ 2001-08-18 03:36:36 23,040 -c–a-w c:\windows\system32\dllcache\xrxwbtmp.dll
+ 2008-04-14 10:42:12 116,224 -c–a-w c:\windows\system32\dllcache\xrxwiadr.dll
+ 2008-04-14 10:42:12 338,432 -c–a-w c:\windows\system32\dllcache\zipfldr.dll
- 2009-01-27 23:20:52 26,952 —-a-w c:\windows\system32\drivers\avgmfx86.sys
+ 2009-02-01 18:19:01 27,656 —-a-w c:\windows\system32\drivers\avgmfx86.sys
- 2008-04-14 10:41:54 402,944 —-a-w c:\windows\system32\fontext.dll
+ 2008-04-14 10:41:54 382,976 —-a-w c:\windows\system32\fontext.dll
- 2001-08-23 07:00:00 58,368 —-a-w c:\windows\system32\freecell.exe
+ 2001-08-23 07:00:00 55,296 —-a-w c:\windows\system32\freecell.exe
- 2008-04-14 03:15:32 212,480 —-a-w c:\windows\system32\moricons.dll
+ 2008-04-14 03:15:32 216,064 —-a-w c:\windows\system32\moricons.dll
- 2008-12-09 20:24:38 17,593,280 —-a-w c:\windows\system32\MRT.exe
+ 2009-01-10 01:35:28 20,853,704 —-a-w c:\windows\system32\MRT.exe
- 2008-04-14 10:42:00 1,478,656 —-a-w c:\windows\system32\msgina.dll
+ 2008-04-14 10:42:00 997,376 —-a-w c:\windows\system32\msgina.dll
- 2001-08-23 07:00:00 130,560 —-a-w c:\windows\system32\mshearts.exe
+ 2001-08-23 07:00:00 126,976 —-a-w c:\windows\system32\mshearts.exe
- 2008-12-13 06:40:02 3,802,112 —-a-w c:\windows\system32\mshtml.dll
+ 2008-12-13 06:40:02 3,593,216 —-a-w c:\windows\system32\mshtml.dll
- 2008-04-14 10:42:30 360,960 —-a-w c:\windows\system32\mspaint.exe
+ 2008-04-14 10:42:30 343,040 —-a-w c:\windows\system32\mspaint.exe
- 2008-04-14 10:42:02 331,776 —-a-w c:\windows\system32\mstask.dll
+ 2008-04-14 10:42:02 274,944 —-a-w c:\windows\system32\mstask.dll
- 2008-04-14 10:42:24 665,600 —-a-w c:\windows\system32\mstsc.exe
+ 2008-04-14 10:42:24 677,888 —-a-w c:\windows\system32\mstsc.exe
- 2008-04-14 10:42:02 80,896 —-a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 10:42:02 90,624 —-a-w c:\windows\system32\mydocs.dll
- 2008-04-14 10:42:04 2,231,808 —-a-w c:\windows\system32\netshell.dll
+ 2008-04-14 10:42:04 1,703,936 —-a-w c:\windows\system32\netshell.dll
- 2008-04-14 10:42:30 70,656 —-a-w c:\windows\system32\notepad.exe
+ 2008-04-14 10:42:30 69,120 —-a-w c:\windows\system32\notepad.exe
- 2008-04-14 10:42:04 179,712 —-a-w c:\windows\system32\photowiz.dll
+ 2008-04-14 10:42:04 176,128 —-a-w c:\windows\system32\photowiz.dll
- 2008-04-14 10:42:04 840,704 —-a-w c:\windows\system32\rasdlg.dll
+ 2008-04-14 10:42:04 658,432 —-a-w c:\windows\system32\rasdlg.dll
- 2008-04-14 10:42:34 420,352 —-a-w c:\windows\system32\Restore\rstrui.exe
+ 2008-04-14 10:42:34 380,416 —-a-w c:\windows\system32\Restore\rstrui.exe
- 2008-04-14 10:42:06 1,259,520 —-a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 10:42:06 985,088 —-a-w c:\windows\system32\setupapi.dll
- 2008-06-17 19:02:20 14,582,784 —-a-w c:\windows\system32\shell32.dll
+ 2008-06-17 19:02:19 8,461,312 —-a-w c:\windows\system32\shell32.dll
- 2008-04-14 10:42:06 493,056 —-a-w c:\windows\system32\shimgvw.dll
+ 2008-04-14 10:42:06 438,272 —-a-w c:\windows\system32\shimgvw.dll
- 2008-08-17 01:50:00 158,720 —-a-w c:\windows\system32\sndvol32.exe
+ 2001-08-23 07:00:00 138,752 —-a-w c:\windows\system32\sndvol32.exe
- 2001-08-23 07:00:00 59,904 —-a-w c:\windows\system32\sol.exe
+ 2001-08-23 07:00:00 56,832 —-a-w c:\windows\system32\sol.exe
- 2008-04-14 10:42:38 542,720 —-a-w c:\windows\system32\spider.exe
+ 2008-04-14 10:42:38 538,624 —-a-w c:\windows\system32\spider.exe
- 2007-07-27 14:41:40 16,760 ——w c:\windows\system32\spmsg.dll
+ 2007-11-30 12:39:22 17,272 ——w c:\windows\system32\spmsg.dll
- 2008-04-14 10:42:08 113,664 —-a-w c:\windows\system32\stobject.dll
+ 2008-04-14 10:42:08 121,856 —-a-w c:\windows\system32\stobject.dll
- 2008-04-14 10:42:38 221,184 —-a-w c:\windows\system32\taskmgr.exe
+ 2008-04-14 10:42:38 135,680 —-a-w c:\windows\system32\taskmgr.exe
- 2008-04-26 00:41:40 218,624 —-a-w c:\windows\system32\uxtheme.dll
+ 2008-04-14 10:42:10 218,624 —-a-w c:\windows\system32\uxtheme.dll
- 2008-10-16 20:38:40 358,400 —-a-w c:\windows\system32\webcheck.dll
+ 2008-10-16 20:38:39 233,472 —-a-w c:\windows\system32\webcheck.dll
- 2008-04-14 10:42:40 492,032 —-a-w c:\windows\system32\wiaacmgr.exe
+ 2008-04-14 10:42:40 433,664 —-a-w c:\windows\system32\wiaacmgr.exe
- 2008-04-14 10:42:10 761,856 —-a-w c:\windows\system32\wiashext.dll
+ 2008-04-14 10:42:10 589,312 —-a-w c:\windows\system32\wiashext.dll
- 2008-04-14 03:18:54 1,791,488 —-a-w c:\windows\system32\WINbrand.dll
+ 2008-04-14 03:18:54 1,647,616 —-a-w c:\windows\system32\winbrand.dll
- 2001-08-23 07:00:00 122,880 —-a-w c:\windows\system32\WINmine.exe
+ 2001-08-23 07:00:00 119,808 —-a-w c:\windows\system32\winmine.exe
- 2008-04-14 04:09:26 3,385,856 —-a-w c:\windows\system32\xpsp2res.dll
+ 2008-04-14 04:09:26 2,897,920 —-a-w c:\windows\system32\xpsp2res.dll
- 2008-04-14 10:42:12 475,648 —-a-w c:\windows\system32\zipfldr.dll
+ 2008-04-14 10:42:12 338,432 —-a-w c:\windows\system32\zipfldr.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}"= "c:\program files\Foxit\tbFox1.dll" [2008-12-31 1784856]

[HKEY_CLASSES_ROOT\clsid\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]
2008-12-31 13:10 1784856 –a—— c:\program files\Foxit\tbFox1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}"= "c:\program files\Foxit\tbFox1.dll" [2008-12-31 1784856]

[HKEY_CLASSES_ROOT\clsid\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{73C7D5B0-7B03-444A-84C7-CE1BA03B5573}"= "c:\program files\Foxit\tbFox1.dll" [2008-12-31 1784856]

[HKEY_CLASSES_ROOT\clsid\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor"="e:\program files\Olympus\MMonitor.exe" [2007-02-08 95800]
"Google Update"="c:\documents and settings\Mark\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-01-01 133104]
"VisualTaskTips"="e:\program files\VisualTaskTips\VisualTaskTips.exe" [2008-06-22 65536]
"CursorFX"="e:\program files\Stardock\Stardock\CursorFX\CursorFX.exe" [2008-07-07 416768]
"ImpulseFastStart"="e:\program files\Stardock\Impulse\Impulse.exe" [2008-12-15 1779056]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-01 39408]
"LClock"="e:\program files\LClock\LClock.exe" [2004-09-19 65536]
"Rainmeter"="c:\program files\Vista Rainbar\Rainmeter.exe" [2006-01-21 118784]
"SpeedFan"="c:\program files\SpeedFan\speedfan.exe" [2008-11-21 3835904]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13574144]
"lxcymon.exe"="c:\program files\Lexmark 3400 Series\lxcymon.exe" [2007-06-25 291504]
"EzPrint"="c:\program files\Lexmark 3400 Series\ezprint.exe" [2007-06-25 82608]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2007-06-25 295600]
"Dimension4"="c:\program files\D4\D4.exe" [2004-02-04 200704]
"LXCYCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll" [2006-11-21 106496]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 86016]
"WinPatrol"="e:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2008-01-27 316728]
"ZoneAlarm Client"="e:\program files\ZoneAlarm\zlclient.exe" [2008-11-13 981904]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-01 136600]
"CoolSwitch"="c:\windows\system32\taskswitch.exe" [2002-03-19 45632]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="e:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"DrvIcon"="c:\program files\Vista Drive Icon\DrvIcon.exe" [2008-04-13 49152]
"LogonStudio"="e:\program files\Stardock\LogonStudio\logonstudio.exe" [2002-09-03 987187]
"BootSkin Startup Jobs"="e:\program files\Stardock\BootSkin\BootSkin.exe" [2004-04-26 270336]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
"PowerMenu"="c:\program files\PowerMenu\PowerMenu.exe" [2002-12-20 57344]
"OTFSDMS"="c:\program files\AddinForUNCFAT\UNCFATDMS.exe" [2008-06-19 129024]
"IEHistory"="c:\program files\IEHistoryPH\IEHistoryShellNotifier.exe" [2006-12-13 138752]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-01 1601304]
"nwiz"="nwiz.exe" [2008-09-17 c:\windows\system32\nwiz.exe]
"SoundMan"="SOUNDMAN.EXE" [2008-07-29 c:\windows\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-03 44544]
"nltide_3"="advpack.dll" [2008-10-16 c:\windows\system32\advpack.dll]
"_nltide_3"="advpack.dll" [2008-10-16 c:\windows\system32\advpack.dll]

c:\documents and settings\Mark\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - e:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
Stardock ObjectDock.lnk - e:\program files\Stardock\ObjectDock\ObjectDock.exe [2009-01-03 3446512]
Styler.lnk - c:\documents and settings\Mark\Application Data\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe [2009-01-02 15086]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
APC UPS Status.lnk - e:\program files\APC\Display.exe [2009-01-14 221247]
BlueSoleil.lnk - e:\program files\BlueSoleil.exe [2006-07-16 626176]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"=hex(2):76,69,73,74,61,75,69,2e,65,78,65,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 15:13 49152 c:\progra~1\COMMON~1\Stardock\MCPStub.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2008-09-22 16:59 174328 e:\progra~1\Stardock\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-02-01 13:19 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\lxcycoms.exe"=
"c:\\Program Files\\D4\\D4.exe"=
"e:\\Program Files\\Fighter Ace\\rsync.exe"=
"e:\\Program Files\\Fighter Ace\\FA.exe"=
"e:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"e:\\Program Files\\BlueSoleil.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-01-31 325128]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-01-31 107272]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-01-31 903960]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-31 298264]
R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service –> c:\windows\system32\lxcycoms.exe -service [?]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2008-12-31 206096]
R2 OTFSDMS;UNCFAT DMS;c:\program files\AddinForUNCFAT\UNCFATDMS.exe [2008-06-19 129024]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S0 BootScreen;BootScreen;\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys –> \SystemRoot\\SystemRoot\System32\drivers\vidstub.sys [?]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2008-12-31 8704]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2008-12-31 3072]

— Other Services/Drivers In Memory —

*Deregistered* - uphcleanhlp
.
Contents of the 'Scheduled Tasks' folder

2009-01-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-02-01 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-01 03:32]

2009-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1336601894-1417001333-1003.job
- c:\documents and settings\Mark\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-01-01 03:24]

2009-02-01 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.comcast.net/a
uInternet Settings,ProxyOverride = *.local
IE: &ieSpell Options - c:\program files\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Check &Spelling - c:\program files\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
Trusted Zone: ketsujin.com\fighterace
Trusted Zone: ketsujin.com\primary
Trusted Zone: ketsujin.com\update
Trusted Zone: ketsujin.com\www
Trusted Zone: stormofaces.com\www
FF - ProfilePath - c:\documents and settings\Mark\Application Data\Mozilla\Firefox\Profiles\vxow49wb.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1048306&SearchSource=3&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.centralpafire.com
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1048306&SearchSource=2&q=
FF - component: c:\documents and settings\Mark\Application Data\Mozilla\Firefox\Profiles\vxow49wb.default\extensions\{0784CD66-62FE-4cef-ABF4-F8ED9B654ACC}\components\tab_effect_xpcom.dll
FF - component: c:\documents and settings\Mark\Application Data\Mozilla\Firefox\Profiles\vxow49wb.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayAccessService.dll
FF - component: c:\documents and settings\Mark\Application Data\Mozilla\Firefox\Profiles\vxow49wb.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayFormSubmitObserver.dll
FF - component: c:\documents and settings\Mark\Application Data\Mozilla\Firefox\Profiles\vxow49wb.default\extensions\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}\components\FFAlert.dll
FF - component: c:\progra~1\MOZILL~1\extensions\[removed]\components\qfaservices.dll
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll

—- FIREFOX POLICIES —-
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-01 13:45:20
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCYCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(932)
c:\progra~1\COMMON~1\Stardock\mcpstub.dll
e:\progra~1\Stardock\WINDOW~1\wbsrv.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\ZoneLabs\vsmon.exe
c:\progra~1\COMMON~1\Stardock\SDMCP.exe
e:\program files\APC\mainserv.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
e:\program files\BTNtService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\rundll32.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\lxcycoms.exe
c:\windows\system32\nvsvc32.exe
c:\program files\UPHClean\uphclean.exe
c:\windows\system32\searchindexer.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\program files\ViSplore\ViSplore.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
e:\program files\Styler\Styler.exe
c:\program files\iPod\bin\iPodService.exe
e:\program files\APC\apcsystray.exe
c:\windows\system32\searchprotocolhost.exe
c:\program files\AVG\AVG8\avgupd.exe
c:\windows\system32\searchfilterhost.exe
c:\program files\AVG\AVG8\fixcfg.exe
.
**************************************************************************
.
Completion time: 2009-02-01 13:50:22 - machine was rebooted
ComboFix-quarantined-files.txt 2009-02-01 18:50:11
ComboFix2.txt 2009-01-31 15:25:07
ComboFix3.txt 2009-01-31 13:53:22
ComboFix4.txt 2009-01-31 04:49:04

Pre-Run: 43,283,255,296 bytes free
Post-Run: 43,268,059,136 bytes free

2805 — E O F — 2009-01-31 18:43:36




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:07, on 2/1/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\system32\spoolsv.exe
E:\Program Files\APC\mainserv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
E:\Program Files\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
E:\Program Files\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\AddinForUNCFAT\UNCFATDMS.exe
E:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\PowerMenu\PowerMenu.exe
C:\Program Files\AddinForUNCFAT\UNCFATDMS.exe
C:\Program Files\IEHistoryPH\IEHistoryShellNotifier.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
E:\Program Files\Olympus\MMonitor.exe
C:\Documents and Settings\Mark\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
E:\Program Files\VisualTaskTips\VisualTaskTips.exe
E:\Program Files\Stardock\Stardock\CursorFX\CursorFX.exe
E:\Program Files\Stardock\Impulse\Impulse.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Vista Rainbar\Rainmeter.exe
C:\Program Files\ViSplore\ViSplore.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
E:\Program Files\Stardock\ObjectDock\ObjectDock.exe
E:\Program Files\Styler\Styler.exe
C:\Program Files\iPod\bin\iPodService.exe
E:\Program Files\APC\apcsystray.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
E:\Program Files\BlueSoleil.exe
E:\Program Files\LClock\LClock.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/a
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox1.dll
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox1.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - G:\Downloads\Vista Theme\Stardock Apps\FindeXer win7 kit\FindeXer\FindeXer.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox1.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - E:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [Dimension4] C:\Program Files\D4\D4.exe
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinPatrol] E:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [ZoneAlarm Client] "E:\Program Files\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [LogonStudio] "E:\Program Files\Stardock\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "E:\Program Files\Stardock\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [PowerMenu] C:\Program Files\PowerMenu\PowerMenu.exe -hideself on
O4 - HKLM\..\Run: [OTFSDMS] C:\Program Files\AddinForUNCFAT\UNCFATDMS.exe /p
O4 - HKLM\..\Run: [IEHistory] C:\Program Files\IEHistoryPH\IEHistoryShellNotifier.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [OM2_Monitor] "E:\Program Files\Olympus\MMonitor.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Mark\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [VisualTaskTips] E:\Program Files\VisualTaskTips\VisualTaskTips.exe
O4 - HKCU\..\Run: [CursorFX] "E:\Program Files\Stardock\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [ImpulseFastStart] "E:\Program Files\Stardock\Impulse\Impulse.exe" /fastload
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LClock] E:\Program Files\LClock\LClock.exe
O4 - HKCU\..\Run: [Rainmeter] C:\Program Files\Vista Rainbar\Rainmeter.exe
O4 - HKCU\..\Run: [ViSplore, Vista Explorer Simulator] C:\Program Files\ViSplore\ViSplore.exe
O4 - HKCU\..\Run: [SpeedFan] C:\Program Files\SpeedFan\speedfan.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = E:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Stardock ObjectDock.lnk = E:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Styler.lnk = ?
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: BlueSoleil.lnk = E:\Program Files\BlueSoleil.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1230756726015
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1230756711093
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: APC UPS Service - American Power Conversion Corporation - E:\Program Files\APC\mainserv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - E:\Program Files\BTNtService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O24 - Desktop Component 0: (no name) - (no file)

–
End of file - 12311 bytes
Post #20
ExTruckie,

Go to start -> control panel -> Display properties -> Desktop -> Customize Desktop… -> Web tab, then uncheck and delete everything you find in there (except for "My current home page"),

Also remove the checkmark from the the Lock Desktop Items box if it is checked.
Apply.
Apply and Exit Display properties.

Log looks good :D


Time for some housekeeping
  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK
  • Note the space between the X and the U, it needs to be there.
  • [external image: Posted Image]
The above procedure will:
  • Implement some cleanup procedures.
  • Reset System Restore.

Please re-enable any security that was disabled.

  • Make sure you have an Internet Connection.
  • Download OTCleanIt to your desktop and run it
  • A list of tool components used in the Cleanup of malware will be downloaded.
  • If your Firewall or Real Time protection attempts to block OTCleanUp to reach the Internet, please allow the application to do so.
  • Click Yes to begin the Cleanup process and remove these components, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.

The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.

Please take time to read Preventing Malware - Tools and Practices for Safe Computing. Very important information for your consideration is contained therein.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein


Also: "How to prevent malware"
by miekiemoes

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved. :thumbup:
Post #23
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI