Issues With Spyware/Malware/Etc..[RESOLVED]

Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!

> Geeks to Go! » Security » Virus, Spyware and Trojan Removal

3 Pages

1 2 3 >

Issues With Spyware/Malware/Etc..[RESOLVED], cnetcf.dll?

Options

BTMark View Member Profile	Jan 9 2008, 12:58 PM Post #1
Member Posts: 23 OS: Windows XP SP2	Hey, been having issues for the past few months with strange pop-ups coming through on IE. I exclusively use Firefox, but these pop-ups only seem to come in on IE after I open up "My Computer." The main page that pops up now is "systemerrorfixer.com". I did a little researching which brought me here to search for help. I have followed all the steps provided in the tutorial (big help by the way!). Anyway, here's the HJTLog: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:48, on 2008-01-09 Platform: Windows XP SP3, v.3244 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\program files\common files\mcafee\mna\mcnasvc.exe c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\MICROS~2\rapimgr.exe C:\Program Files\AOL 9.0\waol.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Common Files\AOL\1185149318\ee\aolsoftware.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\AOL 9.0\shellmon.exe C:\Program Files\McAfee\MSC\mcuimgr.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {28BDDBBC-6DD5-4B1D-BC5E-777EAFF726CC} - C:\WINDOWS\system32\cnetcf.dll O2 - BHO: (no name) - {60D99F17-5890-4D53-9949-A1442EB655F8} - C:\WINDOWS\system32\cnetcf.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {CEADB2EC-7AEA-4374-A769-5A78817A6107} - C:\WINDOWS\system32\tdlRMS.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://ca.com/us/securityadvisor/pestscan/pestscan.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/ghbabeld...zylomplayer.cab O16 - DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} (CPlayFirstWeddingDashControl Object) - http://games.bigfishgames.com/en_wedding-d...sh.1.0.0.47.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 6318 bytes And the uninstall log: AC3Filter (remove only) Adobe AIR 1.0 Beta 1 Adobe Flash Player ActiveX Adobe Reader 6.0 Adobe Reader 8.1.1 Adobe Shockwave Player Ahoihoi AOL Uninstaller (Choose which Products to Remove) Aspell English Dictionary-0.50-2 AVG Anti-Spyware 7.5 Big Fish Games Client Burger Shop (remove only) Cake Mania 2 (remove only) Champion Chef (remove only) Client Mod v13 for SWAT 4 v1.1 Conexant D850 56K V.9x DFVc Modem ConvertXtoDVD 2.2.3.258 CopyToDVD 4 CPL All-in-One DFX 8 for Windows Media Player Diner Dash: Hometown Hero (remove only) DING! DivX Codec DivX Content Uploader DivX Converter DivX Player DivX Web Player Dr. Daisy Pet Vet (remove only) EA SPORTS online 2008 ebgcInfra ebgcRes ebgcRes ebgcRes ebgcSDK ebgcSDK Fraps (remove only) Frets On Fire Futuremark SystemInfo GNU Aspell 0.50-3 Google Gmail Notifier GTK+ Runtime 2.12.1 rev a (remove only) HijackThis 2.0.2 Intel® Graphics Media Accelerator Driver Intel® PRO Network Connections Drivers Java™ 6 Update 2 Java™ 6 Update 3 Jewel Quest (remove only) Jewel Quest 2 K-Lite Mega Codec Pack 2.01 LimeWire 4.14.8 Luxor Amun Rising with Luxor McAfee SecurityCenter MetaFrame Presentation Server Web Client for Win32 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 1.1 SP1 with KB886903 Hotfix Microsoft .NET Framework 2.0 Microsoft ActiveSync Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft Visual C++ 2005 SP1 Redistributable Microsoft Visual J# 1.1 Redistributable Package Microsoft Visual J# 2.0 Redistributable Package mIRC Moffsoft FreeCalc Mozilla Firefox (2.0.0.11) MP3 Player Utilities 5.10 Mpeg Layer3 Codec FHG-Radium v1.263 MSN MSXML 4.0 SP2 (KB936181) MSXML 6.0 Parser (KB933579) Mystery Case Files: Madame Fate (remove only) Nanny Mania (remove only) Panda ActiveScan Paradise Pet Salon (remove only) PHM Registry Editor Picture Package Music Transfer Pidgin PowerISO Pownce PunkBuster Services RealArcade Security Update for Microsoft .NET Framework 2.0 (KB928365) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB941569) SigmaTel Audio Sony Picture Utility Sony USB Driver Styler Super Granny 4 (remove only) SUPERAntiSpyware Free Edition SWAT 4 TeamSpeak 2 RC2 ThinkTanks Demo (remove only) ThumbView_Lite 1.0 Undelete Plus 2.8 VideoLAN VLC media player 0.8.6d Vista Drive Indicator! Wedding Dash (remove only) Winamp WindowBlinds Windows Media Format 11 runtime Windows Media Player 11 Windows Vista Sounds Pack Windows XP Service Pack 3 WinRAR archiver Xfire (remove only) XoftSpySE Xvid 1.1.2 final uninstall SuperANTISPYWARE Log: SUPERAntiSpyware Scan Log Generated 01/09/2008 at 11:52 AM Application Version : 3.6.1000 Core Rules Database Version : 3377 Trace Rules Database Version: 1371 Scan type : Complete Scan Total Scan Time : 01:40:18 Memory items scanned : 450 Memory threats detected : 0 Registry items scanned : 6325 Registry threats detected : 6 File items scanned : 105482 File threats detected : 0 Rootkit.RunTime2/CTLW32 HKLM\SYSTEM\CurrentControlSet\Services\ctl_w32 HKLM\SYSTEM\CurrentControlSet\Services\ctl_w32#ImagePath HKLM\SYSTEM\CurrentControlSet\Services\ctl_w32#Type HKLM\SYSTEM\CurrentControlSet\Services\ctl_w32#ErrorControl HKLM\SYSTEM\CurrentControlSet\Services\ctl_w32#Start HKLM\SYSTEM\CurrentControlSet\Services\ctl_w32#DependOnGroup Panda Activescan Log: Incident Status Location Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\ComboFix\nircmd.cfexe Adware:Adware/VirusProtectPro Not disinfected C:\Documents and Settings\Chuck\Desktop\setup(2).exe[ІЬЗ\refr.dll] Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\oklfm9go.default\cookies.txt[.adserver.easyad.info/] Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\oklfm9go.default\cookies.txt[.apmebf.com/] Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\oklfm9go.default\cookies.txt[.go.com/] Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\oklfm9go.default\cookies.txt[.com.com/] Virus:Generic Malware Disinfected C:\Documents and Settings\Mark\My Documents\WM_Mark1 My Documents\AimMonitor_trial_setup.exe[AIMMONITOR.EXE] Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\fixwareout\FindT\nircmd.exe Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\NirCmd.exe Potentially unwanted tool:Application/CloseApp Not disinfected C:\WINDOWS\system32\CloseApp.exe Adware:Adware/AVSystemCare Not disinfected C:\WINDOWS\system32\cnetcf.dll Edited for added logs and topic description. This post has been edited by BTMark: Jan 9 2008, 01:05 PM

andrewuk View Member Profile	Jan 13 2008, 12:00 AM Post #2
Trusted Helper Posts: 4,530 From: London, UK OS: XP	Hi BTMark welcome to geekstogo sorry to keep you waiting. Lets do a deeper scan of your machine for me to work off Please download Deckard's System Scanner (DSS) and save it to your Desktop. Close all other windows before proceeding. Double-click on dss.exe and follow the prompts. When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply. you may need to post over two replies to get all the information in. andrewuk

BTMark View Member Profile	Jan 13 2008, 01:29 AM Post #3
Member Posts: 23 OS: Windows XP SP2	Attempting to run DSS, it gets to the step past Backing up Registry Hives, and then disappears...

andrewuk View Member Profile	Jan 13 2008, 08:26 AM Post #4
Trusted Helper Posts: 4,530 From: London, UK OS: XP	Hi BTMark for the DSS scan, try this: Go to Start > Run then copy and paste the red line of text below into the run box & click OK "%userprofile%\desktop\dss.exe" /config When the DSS config box appears, uncheck Backup Registry Hives in the lower right corner. Then click 'Scan!' ......if that does not work, then could you post a new Hijackthis Log andrewuk

BTMark View Member Profile	Jan 13 2008, 09:15 PM Post #5
Member Posts: 23 OS: Windows XP SP2	Hey, thanks very much for your insight. That worked perfectly. Here are the two txtfiles: Main.txt: Deckard's System Scanner v20071014.68 Run by Mark on 2008-01-13 22:11:28 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- -- Last 5 Restore Point(s) -- 14: 2008-01-13 07:17:17 UTC - RP62 - Deckard's System Scanner Restore Point 13: 2008-01-10 20:21:56 UTC - RP61 - Removed Microsoft Office Enterprise 2007 12: 2008-01-10 20:21:27 UTC - RP60 - Removed SBS_PXEngine 11: 2008-01-10 20:21:20 UTC - RP59 - Removed Shared2 10: 2008-01-10 20:21:13 UTC - RP58 - Removed DataDiscMaker -- First Restore Point -- 1: 2008-01-09 14:09:23 UTC - RP49 - 1/9/08 Backed up registry hives. -- HijackThis (run as Mark.exe) ------------------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:11, on 2008-01-13 Platform: Windows XP SP3, v.3244 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\program files\common files\mcafee\mna\mcnasvc.exe c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\MICROS~2\rapimgr.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Common Files\AOL\1185149318\ee\aolsoftware.exe C:\Program Files\McAfee\MSC\mcuimgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\AOL 9.0\waol.exe C:\Program Files\AOL 9.0\shellmon.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Documents and Settings\Mark\desktop\dss.exe C:\PROGRA~1\TRENDM~1\HIJACK~1\Mark.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {28BDDBBC-6DD5-4B1D-BC5E-777EAFF726CC} - C:\WINDOWS\system32\cnetcf.dll O2 - BHO: (no name) - {60D99F17-5890-4D53-9949-A1442EB655F8} - C:\WINDOWS\system32\cnetcf.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {CEADB2EC-7AEA-4374-A769-5A78817A6107} - C:\WINDOWS\system32\tdlRMS.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://ca.com/us/securityadvisor/pestscan/pestscan.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/ghbabeld...zylomplayer.cab O16 - DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} (CPlayFirstWeddingDashControl Object) - http://games.bigfishgames.com/en_wedding-d...sh.1.0.0.47.cab O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 5731 bytes -- File Associations ----------------------------------------------------------- .cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%* .cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 ahepmviy - c:\windows\system32\drivers\mouqxwdw.dat R0 sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - c:\windows\system32\drivers\sfdrv01.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - c:\windows\system32\drivers\sfhlp02.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - c:\windows\system32\drivers\sfvfs02.sys <Not Verified; Protection Technology; StarForce Protection System> R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys R1 SCDEmu - c:\windows\system32\drivers\scdemu.sys <Not Verified; PowerISO Computing, Inc.; scdemu> R3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine> R3 SASENUM - c:\program files\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware> S3 Ad-Watch Connect Filter (Ad-Watch Connect Kernel Filter) - c:\windows\system32\drivers\nsdriver.sys (file missing) S3 catchme - c:\docume~1\mark\locals~1\temp\catchme.sys (file missing) S3 ip_fw (ipfw kernel-mode driver) - c:\windows\system32\drivers\ip_fw.sys <Not Verified; WIPFW Project.; WIPFW Firewall> S3 SDTHOOK - c:\windows\system32\drivers\sdthook.sys <Not Verified; Panda Software; Panda® Antivirus> -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- S4 ipfw (ipfw_helper) - c:\program files\wipfw\bin\ipfw.exe S4 StarWindServiceAE (StarWind AE Service) - c:\program files\alcohol soft\alcohol 120\starwind\starwindserviceae.exe <Not Verified; Rocket Division Software; StarWind Alcohol Edition> -- Device Manager: Disabled ---------------------------------------------------- Class GUID: Description: Network Controller Device ID: PCI\VEN_14E4&DEV_4329&SUBSYS_7D001385&REV_01\4&10BD256C&0&08F0 Manufacturer: Name: Network Controller PNP Device ID: PCI\VEN_14E4&DEV_4329&SUBSYS_7D001385&REV_01\4&10BD256C&0&08F0 Service: Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1} Description: Beep Device ID: ROOT\LEGACY_BEEP\0000 Manufacturer: Name: Beep PNP Device ID: ROOT\LEGACY_BEEP\0000 Service: Beep -- Scheduled Tasks ------------------------------------------------------------- 2008-01-09 08:32:53 360 --a------ C:\WINDOWS\Tasks\XoftSpySE.job 2008-01-09 08:32:53 446 --a------ C:\WINDOWS\Tasks\XoftSpySE 2.job 2008-01-01 21:04:42 352 --a------ C:\WINDOWS\Tasks\McQcTask.job 2008-01-01 21:04:42 350 --a------ C:\WINDOWS\Tasks\McDefragTask.job -- Files created between 2007-12-13 and 2008-01-13 ----------------------------- 2008-01-12 03:55:38 0 d-------- C:\Documents and Settings\Mark\Application Data\fretsonfire 2008-01-12 03:55:22 0 d-------- C:\Program Files\Frets on Fire 2008-01-10 00:07:14 0 d-------- C:\Documents and Settings\Mark\Application Data\Teggo 2008-01-09 13:42:24 0 d-------- C:\Program Files\Trend Micro 2008-01-09 12:24:21 44928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS <Not Verified; Panda Software; Panda® Antivirus> 2008-01-09 12:23:05 8576 --a------ C:\WINDOWS\system32\drivers\bxdhubkewvly.sys <Not Verified; Panda Software International; RKPavProc Driver> 2008-01-09 12:01:40 0 d-------- C:\WINDOWS\system32\ActiveScan 2008-01-09 09:11:28 0 d-------- C:\Documents and Settings\Mark\Application Data\Grisoft 2008-01-09 08:32:51 0 d-------- C:\Program Files\XoftSpySE 2008-01-09 03:20:18 0 d-------- C:\Documents and Settings\Mark\Saved Games 2008-01-09 03:19:01 0 d-------- C:\Program Files\Oberon Media 2008-01-08 04:45:44 0 d-------- C:\Program Files\MP3 Player Utilities 5.10 2008-01-08 04:44:43 0 d-------- C:\mmp8585 2008-01-05 15:38:03 0 d-------- C:\Program Files\Super Granny 4 2008-01-05 15:27:26 0 d-------- C:\Documents and Settings\Chuck\Application Data\Teggo 2008-01-05 15:27:10 0 d-------- C:\Program Files\Champion Chef 2008-01-03 01:23:08 0 d-------- C:\WINDOWS\system32\LogFiles 2008-01-03 00:59:47 0 d-------- C:\Program Files\WarRock 2008-01-01 21:04:06 0 d-------- C:\Program Files\McAfee.com 2008-01-01 21:03:54 0 d-------- C:\Program Files\Common Files\McAfee 2008-01-01 21:03:45 0 d-------- C:\Program Files\McAfee 2008-01-01 20:57:31 0 d-------- C:\Documents and Settings\Chuck\Application Data\Sony Corporation 2008-01-01 14:09:25 0 d-------- C:\Documents and Settings\Mom\Application Data\Grisoft 2007-12-30 02:35:55 0 d-------- C:\Fraps 2007-12-30 01:10:11 0 d-------- C:\Documents and Settings\Mark\Application Data\Sony Corporation 2007-12-30 00:18:53 3654 --a------ C:\WINDOWS\system32\drivers\Sonyhcp.dll 2007-12-30 00:18:53 0 d-------- C:\Drivers 2007-12-26 09:02:46 0 d-------- C:\Documents and Settings\Chuck\Application Data\DivX 2007-12-26 09:02:45 0 d-------- C:\Documents and Settings\Chuck\Application Data\Media Player Classic 2007-12-22 13:34:52 0 d-------- C:\Documents and Settings\Mark\Application Data\Configuration 2007-12-22 13:31:08 0 d-------- C:\Program Files\DriverGuide Toolkit 2007-12-22 13:24:51 0 d-------- C:\Documents and Settings\Mark\Application Data\Uniblue 2007-12-22 13:04:41 0 d-------- C:\WINDOWS\system32\bits 2007-12-22 13:01:04 0 d-------- C:\WINDOWS\ServicePackFiles 2007-12-18 16:04:46 0 d-------- C:\Program Files\VideoLAN 2007-12-17 17:16:50 0 d-------- C:\Documents and Settings\All Users\Application Data\Trymedia 2007-12-17 17:16:39 0 d-------- C:\Program Files\iWin.com 2007-12-13 15:37:07 0 d-------- C:\Program Files\Mystery Case Files - Madame Fate -- Find3M Report --------------------------------------------------------------- 2008-01-13 02:17:41 0 d-------- C:\Documents and Settings\Mark\Application Data\Xfire 2008-01-13 02:16:59 0 d-------- C:\Documents and Settings\Mark\Application Data\.purple 2008-01-13 02:16:55 0 d-------- C:\Documents and Settings\Mark\Application Data\uTorrent 2008-01-10 15:40:19 0 d-------- C:\Program Files\Google 2008-01-10 15:28:21 0 d-------- C:\Program Files\Common Files 2008-01-09 15:41:02 0 d-------- C:\Documents and Settings\Mark\Application Data\Real 2008-01-09 14:00:11 0 d-------- C:\Program Files\SUPERAntiSpyware 2008-01-09 13:08:10 0 d-------- C:\Program Files\Microsoft ActiveSync 2008-01-09 13:04:02 0 d-------- C:\Program Files\AOL 9.0 2008-01-09 10:10:16 0 d-------- C:\Documents and Settings\Mark\Application Data\SUPERAntiSpyware.com 2008-01-09 10:09:59 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-01-09 03:19:33 0 d-------- C:\Documents and Settings\Mark\Application Data\iWin 2008-01-05 05:31:24 0 d-------- C:\Program Files\AIM Music Link 2008-01-05 05:30:45 0 d-------- C:\Program Files\Common Files\Nullsoft 2008-01-04 21:13:07 0 d-------- C:\Program Files\Paradise Pet Salon 2008-01-03 00:59:41 0 d--h----- C:\Program Files\InstallShield Installation Information 2007-12-30 03:24:04 0 d-------- C:\Program Files\UrbanTerror 2007-12-30 03:13:34 0 d-------- C:\Program Files\America's Army 2007-12-22 13:35:37 0 d-------- C:\Program Files\Common Files\InstallShield 2007-12-22 13:05:31 0 d-------- C:\Program Files\Messenger 2007-12-22 13:04:41 0 d-------- C:\Program Files\Movie Maker 2007-12-22 13:00:28 0 d-------- C:\Program Files\Windows NT 2007-12-19 20:43:59 0 d-------- C:\Program Files\Xfire 2007-12-19 16:52:34 0 d-------- C:\Documents and Settings\Mark\Application Data\Vso 2007-12-18 16:08:31 0 d-------- C:\Documents and Settings\Mark\Application Data\vlc 2007-12-16 17:41:07 0 d-------- C:\Program Files\Nanny Mania 2007-12-14 08:29:56 0 d-------- C:\Documents and Settings\Mark\Application Data\Adobe 2007-12-14 08:28:25 0 d-------- C:\Program Files\Common Files\Adobe 2007-12-12 11:36:37 0 d-------- C:\Program Files\Enigma Software Group 2007-12-10 07:29:10 0 d--h----- C:\Documents and Settings\Mark\Application Data\ijjigame 2007-12-10 07:25:10 0 d-------- C:\Program Files\MySpace 2007-12-10 07:24:41 0 d-------- C:\Program Files\P-Soft 2007-12-10 07:10:19 0 d-------- C:\Program Files\BraveTree 2007-12-10 06:07:09 0 d-------- C:\Documents and Settings\Mark\Application Data\MSNInstaller 2007-12-10 05:16:07 0 d-------- C:\Program Files\SiteAdvisor 2007-12-09 18:04:57 0 d-------- C:\Documents and Settings\Mark\Application Data\Help 2007-12-09 10:52:29 0 d-------- C:\Program Files\CONEXANT 2007-12-08 03:07:39 0 d-------- C:\Program Files\MSXML 6.0 2007-12-08 03:01:52 0 d-------- C:\Program Files\MSXML 4.0 2007-12-06 03:42:33 76800 --a------ C:\WINDOWS\system32\unrar.dll 2007-12-06 02:56:14 0 d-------- C:\Program Files\microsoft frontpage 2007-12-06 02:53:10 23332 --a------ C:\WINDOWS\system32\emptyregdb.dat 2007-12-04 09:45:33 0 d-------- C:\Program Files\Common Files\aol 2007-12-04 04:45:28 50176 --a------ C:\WinSock.dll 2007-12-02 05:43:29 0 d-------- C:\Documents and Settings\Mark\Application Data\LimeWire 2007-11-30 21:20:49 0 d-------- C:\Documents and Settings\Mark\Application Data\AdobeUM 2007-11-27 20:48:25 0 d-------- C:\Documents and Settings\Mark\Application Data\Gamelab 2007-11-26 03:29:00 0 d-------- C:\Documents and Settings\Mark\Application Data\mIRC 2007-11-26 02:19:56 0 d-------- C:\Program Files\Miranda IM 2007-11-26 02:13:47 0 d-------- C:\Documents and Settings\Mark\Application Data\gtk-2.0 2007-11-26 02:01:05 0 d-------- C:\Program Files\Pidgin 2007-11-26 02:01:04 0 d-------- C:\Program Files\Aspell 2007-11-26 01:59:51 0 d-------- C:\Program Files\Common Files\GTK 2007-11-25 09:41:47 0 d-------- C:\Documents and Settings\Mark\Application Data\Miranda 2007-11-22 14:58:43 0 d-------- C:\Program Files\Ahoihoi 2007-11-21 13:23:54 81920 --a------ C:\WINDOWS\system32\frapsvid.dll <Not Verified; Beepa P/L; FRAPS> 2007-11-17 16:58:00 0 d-------- C:\Documents and Settings\Mark\Application Data\PlayFirst 2007-11-17 16:57:30 0 d-------- C:\Program Files\Diner Dash Hometown Hero 2007-11-14 04:30:00 0 d-------- C:\Documents and Settings\Mark\Application Data\SecondLife 2007-11-14 04:29:44 0 d-------- C:\Documents and Settings\Mark\Application Data\Mozilla -- Registry Dump --------------------------------------------------------------- Note empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{28BDDBBC-6DD5-4B1D-BC5E-777EAFF726CC}] 2004-08-04 07:00 84992 --a------ C:\WINDOWS\system32\cnetcf.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{60D99F17-5890-4D53-9949-A1442EB655F8}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CEADB2EC-7AEA-4374-A769-5A78817A6107}] 2007-12-18 01:37 523776 --a------ C:\WINDOWS\system32\tdlRMS.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 04:25] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 13:39] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2007-10-30 14:02] "AOL Fast Start"="C:\Program Files\AOL 9.0\AOL.exe" [2007-04-18 01:49] "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-02-27 11:39] [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "nltide_3"=rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N "ShowDeskFix"=regsvr32 /s /n /i:u shell32 "tscuninstall"=%systemroot%\system32\tscupgrd.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableCAD"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "ForceClassicControlPanel"=1 (0x1) "NoLowDiskSpaceChecks"=1 (0x1) "NoStartBanner"=1 (0x1) "NoSMConfigurePrograms"=1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "ForceClassicControlPanel"=1 (0x1) "NoLowDiskSpaceChecks"=1 (0x1) "NoStartBanner"=1 (0x1) "NoSMConfigurePrograms"=1 (0x1) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-02-27 11:39 282624 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy] C:\WINDOWS\System32\dimsntfy.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll 2007-09-23 09:10 229376 C:\Program Files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=wbsys.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Mark^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk] path=C:\Documents and Settings\Mark\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk backup=C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Mark^Start Menu^Programs^Startup^Picture Motion Browser Media Check Tool.lnk] path=C:\Documents and Settings\Mark\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk backup=C:\WINDOWS\pss\Picture Motion Browser Media Check Tool.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmona] C:\WINDOWS\system32\ctfmona.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager] C:\Program Files\Common Files\AOL\1185149318\ee\AOLSoftware.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers] C:\WINDOWS\system32\igfxpers.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray] C:\WINDOWS\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MonAppli] C:\windows\system32\msnmsg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pidgin] C:\Program Files\Pidgin\pidgin.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiteAdvisor] C:\Program Files\SiteAdvisor\6172\SiteAdv.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SystemSv12] C:\WINDOWS\system32\newmaxxsv234.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VistaDrive] C:\WINDOWS\VistaDrive\VistaDrive.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\wianmpa.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] eapsvcs eaphost dot3svc dot3svc HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs napagent hkmsvc -- End of Deckard's System Scanner: finished at 2008-01-13 22:14:18 ------------

BTMark View Member Profile	Jan 13 2008, 09:15 PM Post #6
Member Posts: 23 OS: Windows XP SP2	Extra.txt: Deckard's System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) SP 3.0 Architecture: X86; Language: English CPU 0: Intel® Pentium® 4 CPU 3.06GHz Percentage of Memory in Use: 41% Physical Memory (total/avail): 1014.07 MiB / 589.67 MiB Pagefile Memory (total/avail): 2440.57 MiB / 1948.29 MiB Virtual Memory (total/avail): 2047.88 MiB / 1874.68 MiB C: is Fixed (NTFS) - 108.59 GiB total, 16.73 GiB free. D: is Fixed (NTFS) - 37.24 GiB total, 19.41 GiB free. E: is CDROM (No Media) F: is CDROM (No Media) \\.\PHYSICALDRIVE0 - SAMSUNG HD160JJ/P - 149.01 GiB - 4 partitions \PARTITION0 - Unknown - 39.19 MiB \PARTITION1 - Extended w/Extended Int 13 - 108.59 GiB - C: \PARTITION2 (bootable) - Installable File System - 37.24 GiB - D: \PARTITION3 - Unknown - 3.15 GiB -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install. -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Mark\Application Data CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=22NDSTRE-C3EA21 ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Mark LOGONSERVER=\\22NDSTRE-C3EA21 NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\WBEM PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 9, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0409 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\Mark\LOCALS~1\Temp TMP=C:\DOCUME~1\Mark\LOCALS~1\Temp USERDOMAIN=22NDSTRE-C3EA21 USERNAME=Mark USERPROFILE=C:\Documents and Settings\Mark windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Owner (admin) Mom (admin) Mark (admin) Chuck (admin) -- Add/Remove Programs --------------------------------------------------------- --> C:\Program Files\Codecs\DivX\ConverterUninstall.exe /CONVERTER --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL AC3Filter (remove only) --> C:\Program Files\Codecs\AC3Filter\uninstall.exe Adobe AIR 1.0 Beta 1 --> MsiExec.exe /X{BB8B979E-E336-47E7-96BC-1031C1B94561} Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 6.0 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7646-000000000001} Adobe Reader 8.1.1 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81100000003} Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Ahoihoi --> "C:\Program Files\Ahoihoi\UninstallAhoihoi.exe" AOL Uninstaller (Choose which Products to Remove) --> C:\Program Files\Common Files\AOL\uninstaller.exe Aspell English Dictionary-0.50-2 --> "C:\Program Files\Aspell\unins001.exe" AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe Big Fish Games Client --> C:\Program Files\bfgclient\Uninstall.exe Burger Shop (remove only) --> "C:\Program Files\Burger Shop\Uninstall.exe" Cake Mania 2 (remove only) --> "C:\Program Files\Cake Mania 2\Uninstall.exe" Champion Chef (remove only) --> "C:\Program Files\Champion Chef\Uninstall.exe" Client Mod v13 for SWAT 4 v1.1 --> "C:\Program Files\Sierra\SWAT 4\Content\System\AMClient Backup\unins000.exe" Conexant D850 56K V.9x DFVc Modem --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf ConvertXtoDVD 2.2.3.258 --> "C:\Program Files\VSO\ConvertXtoDVD\unins000.exe" CopyToDVD 4 --> "C:\Program Files\VSO\unins000.exe" CPL All-in-One --> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\CPLBonus.inf,CPLuninstall Diner Dash: Hometown Hero (remove only) --> "C:\Program Files\Diner Dash Hometown Hero\Uninstall.exe" DING! --> MsiExec.exe /X{84031A18-BA9A-4156-A74F-E05B52DDFCE2} DivX Codec --> C:\Program Files\Codecs\DivX\DivXCodecUninstall.exe /CODEC DivX Content Uploader --> C:\Program Files\Codecs\DivX\DivXContentUploaderUninstall.exe /CUPLOADER DivX Converter --> C:\Program Files\Codecs\DivX\ConverterUninstall.exe /CONVERTER DivX Player --> C:\Program Files\Codecs\DivX\DivXPlayerUninstall.exe /PLAYER DivX Web Player --> C:\Program Files\Codecs\DivX\DivXWebPlayerUninstall.exe /PLUGIN Dr. Daisy Pet Vet (remove only) --> "C:\Program Files\Dr. Daisy Pet Vet\Uninstall.exe" EA SPORTS online 2008 --> C:\Program Files\EA SPORTS\EA SPORTS online\EASOUNInstaller.exe ebgcInfra --> MsiExec.exe /X{39B1BD87-561E-4762-AED9-7C5213B06C24} ebgcRes --> MsiExec.exe /X{2DE65DF3-E614-4D5C-B5F9-BF3464DBEBD5} ebgcRes --> MsiExec.exe /X{41F8316B-D73A-44CE-98A3-A43CDED14857} ebgcRes --> MsiExec.exe /X{91746221-0B6A-4572-BEE3-A4D587FF98EA} ebgcSDK --> MsiExec.exe /X{13AD768A-9E04-499D-AE80-967A65DCCBA5} ebgcSDK --> MsiExec.exe /X{28E7B64D-150F-4A9E-B7A3-5A6AC8C2F822} Fraps (remove only) --> "C:\Fraps\uninstall.exe" Frets On Fire --> "C:\Program Files\Frets on Fire\Uninstall.exe" Futuremark SystemInfo --> C:\Program Files\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe -runfromtemp -l0x0009 -removeonly GNU Aspell 0.50-3 --> "C:\Program Files\Aspell\unins000.exe" GTK+ Runtime 2.12.1 rev a (remove only) --> C:\Program Files\Common Files\GTK\2.0\uninst.exe H.S.M Custom Maps Expansion v5.0 --> C:\Program Files\Sierra\SWAT 4\Uninstall HSM Pack v5.0.exe HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall Intel® Graphics Media Accelerator Driver --> RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2782 PCI\VEN_8086&DEV_2582 Intel® PRO Network Connections Drivers --> Prounstl.exe Java™ 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java™ 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Jewel Quest (remove only) --> "C:\Program Files\iWin.com\Jewel Quest\Uninstall.exe" Jewel Quest 2 --> "C:\Program Files\Oberon Media\Jewel Quest 2\Uninstall.exe" "C:\Program Files\Oberon Media\Jewel Quest 2\install.log" K-Lite Mega Codec Pack 2.01 --> "C:\Program Files\K-Lite Codec Pack\unins000.exe" LimeWire 4.14.8 --> "C:\Program Files\LimeWire\uninstall.exe" McAfee SecurityCenter --> C:\Program Files\McAfee\MSC\mcuninst.exe MetaFrame Presentation Server Web Client for Win32 --> C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf Microsoft ActiveSync --> MsiExec.exe /I{99052DB7-9592-4522-A558-5417BBAD48EE} Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Silverlight --> MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Visual C++ 2005 SP1 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual J# 1.1 Redistributable Package --> MsiExec.exe /X{1A655D51-1423-48A3-B748-8F5A0BE294C8} Microsoft Visual J# 2.0 Redistributable Package --> C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft Visual J# 2.0 Redistributable\install.exe mIRC --> C:\mIRC\uninstall.exe _?=C:\mIRC Moffsoft FreeCalc --> "C:\Program Files\Moffsoft FreeCalc\unins000.exe" Mozilla Firefox (2.0.0.11) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe MP3 Player Utilities 5.10 --> MsiExec.exe /I{8E79F5DD-4A0A-452B-B3F8-0651E4D24854} Mpeg Layer3 Codec FHG-Radium v1.263 --> C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\Codecs\mp3\INSTALL.LOG MSN --> D:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E} Mystery Case Files: Madame Fate (remove only) --> "C:\Program Files\Mystery Case Files - Madame Fate\Uninstall.exe" Nanny Mania (remove only) --> "C:\Program Files\Nanny Mania\Uninstall.exe" Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan Paradise Pet Salon (remove only) --> "C:\Program Files\Paradise Pet Salon\Uninstall.exe" PHM Registry Editor --> MsiExec.exe /I{DE4A7830-7480-425C-8330-699C30FD8C66} Picture Package Music Transfer --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE2121C6-C94D-4A73-8EA4-6943F33EE335}\setup.exe" -l0x9 -removeonly Pidgin --> C:\Program Files\Pidgin\pidgin-uninst.exe PowerISO --> "C:\Program Files\PowerISO\uninstall.exe" Pownce --> MsiExec.exe /I{EB16707B-3110-3CA5-8DCA-7D2026CC282C} PunkBuster Services --> C:\WINDOWS\system32\pbsvc.exe -u RealArcade --> C:\Program Files\Real\RealArcade\Update\rnuninst.exe RealNetworks\|RealArcade\|1.2 SigmaTel Audio --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x9 -remove -removeonly Sony USB Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\setup.exe" -l0x9 UNINSTALL -removeonly Styler --> MsiExec.exe /I{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941} Super Granny 4 (remove only) --> "C:\Program Files\Super Granny 4\Uninstall.exe" SUPERAntiSpyware Free Edition --> MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} SWAT 4 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8} uninstall TeamSpeak 2 RC2 --> "C:\Program Files\Sierra\Teamspeak2_RC2\unins000.exe" ThinkTanks Demo (remove only) --> "C:\Program Files\BraveTree\ThinkTanks Demo\uninst-tt.exe" ThumbView_Lite 1.0 --> "C:\Program Files\ThumbView_Lite 1.0\uninstall.exe" Undelete Plus 2.8 --> "C:\Program Files\FDRLab\Undelete Plus\unins000.exe" VideoLAN VLC media player 0.8.6d --> C:\Program Files\VideoLAN\VLC\uninstall.exe Vista Drive Indicator! --> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\Vdrive.inf,uninstall Wedding Dash (remove only) --> "C:\Program Files\Wedding Dash\Uninstall.exe" Winamp --> "C:\Program Files\Winamp\UninstWA.exe" WindowBlinds --> C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\UNWISE.EXE C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\INSTALL.LOG Windows Vista Sounds Pack --> MsiExec.exe /I{E1230694-33DA-4E74-82E1-06CC9D545E9B} Windows XP Service Pack 3 --> "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinRAR archiver --> C:\Program Files\WinRar\uninstall.exe Xfire (remove only) --> "C:\Program Files\Xfire\uninst.exe" XoftSpySE --> C:\Program Files\XoftSpySE\uninstall.exe Xvid 1.1.2 final uninstall --> "C:\Program Files\Codecs\Xvid\unins000.exe" -- Application Event Log ------------------------------------------------------- No Errors/Warnings found. -- Security Event Log ---------------------------------------------------------- No Errors/Warnings found. -- System Event Log ------------------------------------------------------------ No Errors/Warnings found. -- End of Deckard's System Scanner: finished at 2008-01-13 22:14:18 ------------

andrewuk View Member Profile	Jan 14 2008, 03:20 PM Post #7
Trusted Helper Posts: 4,530 From: London, UK OS: XP	Hi BTMark it looks as if you have (or have had) the IEDefender infection and some other malware. so, in this post we will remove the IEDefender infection and the other malware and also do an online scan to see what else is lurking in there. i can see at least one suspicious file but i suspect there may be others. firstly, you have 2 antispyware programs running (AVG and SUPERantispyware). could you disable one of them, running two means they will conflict with each other, slow down your machine and may provide less protection. could you let me know which one you decided to disable. now to the fix...... ====STEP 1==== NOTE: You will need to temporarily disable any programs you have running that will block attempts to edit the registry. As FixIEDef calls REGEDIT to delete registry keys added by Zlob, Trojan.Downloader.Delf, AntiSpyPro, and IE Defender. Download FixIEDef.exe by ShadowPuterDude to the Desktop. Note: FixIEDef now supports Non-English Language Systems Double-click FixIEDef.exe: That will open the About FixIEDef screen. Click OK to continue: Next, press the Scan! button: FixIEDef needs to run as Administrator to perform correctly. This message simply confirms it was able to run with admin privileges. Click OK to continue: Wait for the scan to finish. It shouldn't take very long: After the !!! All Finished !!! message is displayed, click Exit: That's it! You're done, and the infection should be removed. Note: process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. See: http://www.beyondlogic.org/consulting/proc...processutil.htm Mirrors: Alternate official download locations for FixIEDef.exe http://it-mate.co.uk/downloads/fixiedef/fixiedef.exe http://hosts-file.net/download/fixiedef/fixiedef.exe http://avant.it-mate.co.uk/?c=Download&f=Tools/FixIEDef http://archives.mysteryfcm.co.uk/?f=Securi...pyware/FixIEDef ====STEP 2==== Please download the OTMoveIt2 by OldTimer and Save it to your desktop. DO NOT run it yet Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below (if present). O2 - BHO: (no name) - {28BDDBBC-6DD5-4B1D-BC5E-777EAFF726CC} - C:\WINDOWS\system32\cnetcf.dll O2 - BHO: (no name) - {60D99F17-5890-4D53-9949-A1442EB655F8} - C:\WINDOWS\system32\cnetcf.dll Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Please double-click OTMoveIt2.exe to run it. Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy): CODE C:\WINDOWS\system32\cnetcf.dll Return to OTMoveIt2, right click in the "Paste List of Files/Folders to be Moved" window (under the light blue bar) and choose Paste. Click the red Moveit! button. Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply. Close OTMoveIt2 If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. ====STEP 3==== Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner if that link does not work, try Kaspersky WebScanner alternate link You will be promted to install an ActiveX component from Kaspersky, Click Yes. If asked, click accept The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make that the following are selected: Scan using the following Anti-Virus database: Extended (if available otherwise Standard) Scan Options: Scan Archives Scan Mail Bases Click OK Now under select a target to scan: Select My Computer This will program will start and scan your system. The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected. Now click on the Save as Text button: Save the file to your desktop. Copy and paste that information in your next post. In your next reply could i see: 1. the OTMoveIT log 2. the kaspersky scan log 3. a new Hijackthis log andrewuk

BTMark View Member Profile	Jan 14 2008, 09:48 PM Post #8
Member Posts: 23 OS: Windows XP SP2	Hello, thanks for the instructions. Only problem I had is OTMoveIT stated the cnetcf.dll would be moved upon reboot, and it was not. I ran another scan the same way on OTMoveIT, and it asked me to reboot again, still the same issue. Here are the logs: OTMoveIT: C:\WINDOWS\system32\cnetcf.dll unregistered successfully. File move failed. C:\WINDOWS\system32\cnetcf.dll scheduled to be moved on reboot. OTMoveIt2 v1.0.6 log created on 01142008_224555 Kaspersky: ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT 2008-01-14 22:44 Operating System: Microsoft Windows XP Professional, Service Pack 3, v.3244 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 15/01/2008 Kaspersky Anti-Virus database records: 511600 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ E:\ F:\ Scan Statistics: Total number of scanned objects: 110172 Number of viruses found: 9 Number of infected objects: 31 Number of suspicious objects: 6 Duration of the scan process: 01:14:49 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\ph Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\variable Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\APP9760.LST Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\ddo9130\MyDB.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\ddo9130\toolbar.lst Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\SNMaster.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\CACHE\ddo9100 Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\ddo9130 Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\ddo9130.abi Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\ddo9130.aby Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\aolstderr.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\aolstdout.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\cache.db Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\ncoc Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\server.lock Object is locked skipped C:\Documents and Settings\All Users\Application Data\McAfee\MNA\NAData Object is locked skipped C:\Documents and Settings\All Users\Application Data\McAfee\MSC\McUsers.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinMurloff.zip/startdrv.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinMurloff.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinMurloff2.zip/startdrv.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinMurloff2.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinMurloff4.zip/startdrv.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinMurloff4.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\Chuck\Desktop\setup(2).exe/data0001 Infected: Trojan-Downloader.Win32.Zlob.fjc skipped C:\Documents and Settings\Chuck\Desktop\setup(2).exe/data0007 Infected: Trojan-Downloader.Win32.Zlob.eml skipped C:\Documents and Settings\Chuck\Desktop\setup(2).exe NSIS: infected - 2 skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Mark\Application Data\$_hpcst$.hpc Object is locked skipped C:\Documents and Settings\Mark\Application Data\AOL\C_AOL 9.0\IDB\Apps.Lst Object is locked skipped C:\Documents and Settings\Mark\Application Data\AOL\C_AOL 9.0\IDB\art.idx Object is locked skipped C:\Documents and Settings\Mark\Application Data\AOL\C_AOL 9.0\IDB\sap.dat Object is locked skipped C:\Documents and Settings\Mark\Application Data\AOL\C_AOL 9.0\IDB\spool.lst Object is locked skipped C:\Documents and Settings\Mark\Application Data\AOL\C_AOL 9.0\IDB\sysnews.lst Object is locked skipped C:\Documents and Settings\Mark\Application Data\Microsoft\Internet Explorer\UserData\index.dat Object is locked skipped C:\Documents and Settings\Mark\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERANTISPYWARE.LOG Object is locked skipped C:\Documents and Settings\Mark\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Mark\Desktop\Root\Windows Vista Ultimate Inspirat By Rubenernesto\Explorer\Explorer Mod English\LSPatch.zip/LSPatch.exe/WISE0004.BIN Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped C:\Documents and Settings\Mark\Desktop\Root\Windows Vista Ultimate Inspirat By Rubenernesto\Explorer\Explorer Mod English\LSPatch.zip/LSPatch.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped C:\Documents and Settings\Mark\Desktop\Root\Windows Vista Ultimate Inspirat By Rubenernesto\Explorer\Explorer Mod English\LSPatch.zip ZIP: infected - 2 skipped C:\Documents and Settings\Mark\Desktop\Root\WindowVista_Ultimate_Inspirat_by_Rubenernesto.7z/Windows Vista Ultimate Inspirat By Rubenernesto/Explorer/Explorer Mod English/LSPatch.zip/LSPatch.exe/WISE0004.BIN Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped C:\Documents and Settings\Mark\Desktop\Root\WindowVista_Ultimate_Inspirat_by_Rubenernesto.7z/Windows Vista Ultimate Inspirat By Rubenernesto/Explorer/Explorer Mod English/LSPatch.zip/LSPatch.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped C:\Documents and Settings\Mark\Desktop\Root\WindowVista_Ultimate_Inspirat_by_Rubenernesto.7z/Windows Vista Ultimate Inspirat By Rubenernesto/Explorer/Explorer Mod English/LSPatch.zip Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped C:\Documents and Settings\Mark\Desktop\Root\WindowVista_Ultimate_Inspirat_by_Rubenernesto.7z 7-Zip: infected - 3 skipped C:\Documents and Settings\Mark\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Mark\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Mark\Local Settings\History\History.IE5\MSHist012008011420080115\index.dat Object is locked skipped C:\Documents and Settings\Mark\Local Settings\Temp\WCESLog.log Object is locked skipped C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0\crack\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0\mirc631.exe/stream/data0001/stream/data0014 Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0\mirc631.exe/stream/data0001/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0\mirc631.exe/stream/data0001 Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0\mirc631.exe/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0\mirc631.exe NSIS: infected - 4 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0.part1.rar/crack/mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01\Linezer0.part1.rar RAR: infected - 1 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01.zip/Linezer0.part1.rar/crack/mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01.zip/Linezer0.part1.rar Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Documents and Settings\Mark\My Documents\Downloads\MIRC.v6.31-Lz0\lz079o01.zip ZIP: infected - 2 skipped C:\Documents and Settings\Mark\My Documents\Downloads\Winamp.Pro.final.v.5.35+keygen\winamp535_full_bundle_emusic-7plus.exe/data.rar/bda.exe Infected: Trojan-Downloader.Win32.Agent.dmj skipped C:\Documents and Settings\Mark\My Documents\Downloads\Winamp.Pro.final.v.5.35+keygen\winamp535_full_bundle_emusic-7plus.exe/data.rar Infected: Trojan-Downloader.Win32.Agent.dmj skipped C:\Documents and Settings\Mark\My Documents\Downloads\Winamp.Pro.final.v.5.35+keygen\winamp535_full_bundle_emusic-7plus.exe RarSFX: infected - 2 skipped C:\Documents and Settings\Mark\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Mark\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped C:\Program Files\Trend Micro\HijackThis\backups\backup-20080114-193517-290.dll Infected: Trojan.Win32.BHO.abo skipped C:\Program Files\Trend Micro\HijackThis\backups\backup-20080114-193517-979.dll Infected: Trojan.Win32.BHO.abo skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{B98A64D3-BBA9-4F2A-BC86-D6D9462892B2}\RP49\A0012623.dll Infected: not-a-virus:Porn-Downloader.Win32.Shoter.l skipped C:\System Volume Information\_restore{B98A64D3-BBA9-4F2A-BC86-D6D9462892B2}\RP62\change.log Object is locked skipped C:\WINDOWS\CSC\00000001 Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\CloseApp.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped C:\WINDOWS\system32\cnetcf.dll Infected: Trojan.Win32.BHO.abo skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped C:\WINDOWS\system32\config\sam Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\security Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\TEMP\mcmsc_wV63ajAVHrWHbN6 Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped C:\WinSock.dll Infected: Trojan-Downloader.Win32.Delf.dfm skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed. HJT Log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:46, on 2008-01-14 Platform: Windows XP SP3, v.3244 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\program files\common files\mcafee\mna\mcnasvc.exe c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\PROGRA~1\MICROS~2\rapimgr.exe C:\Program Files\McAfee\MSC\mcuimgr.exe C:\Program Files\Common Files\AOL\1185149318\ee\aolsoftware.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {60D99F17-5890-4D53-9949-A1442EB655F8} - C:\WINDOWS\system32\cnetcf.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {CEADB2EC-7AEA-4374-A769-5A78817A6107} - C:\WINDOWS\system32\tdlRMS.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://ca.com/us/securityadvisor/pestscan/pestscan.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/ghbabeld...zylomplayer.cab O16 - DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} (CPlayFirstWeddingDashControl Object) - http://games.bigfishgames.com/en_wedding-d...sh.1.0.0.47.cab O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 5553 bytes Also, the two files you requested I select and click "Fix Selected" were fixed, and a secondary scan did not show them, however in the latest scan you asked me to do (after Kaspersky), they are now back. Also, SUPERAntiSpyware was disabled, and is being uninstalled now. So the only AntiSpyware will be AVG. This post has been edited by BTMark: Jan 14 2008, 09:50 PM

andrewuk View Member Profile	Jan 15 2008, 02:54 AM Post #9
Trusted Helper Posts: 4,530 From: London, UK OS: XP	Hi BTMark yep, not too much of an advance there. the kaspersky scan revealed a number some false positives but also a few suspicious files, but i suspect there is more, so we will deploy another scan and fix. Please download ComboFix from Here or Here to your Desktop. Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop Close any open browsers. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. ----------------------------------------------------------- Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". Click on this link* to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.* ----------------------------------------------------------- Close any open browsers. WARNING: Combofix will disconnect your machine from the Internet as soon as it starts Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished. If there is no internet connection after running Combofix, then restart your computer to restore back your connection. ----------------------------------------------------------- Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review. Note: Do not mouseclick combofix's window while it's running. That may cause it to stall andrewuk

BTMark View Member Profile	Jan 15 2008, 03:29 AM Post #10
Member Posts: 23 OS: Windows XP SP2	Thanks for the quick reply, have to post multiple replies to fit all these logs in ComboFix 08-01-15.4 - Mark 2008-01-15 4:10:49.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.630 [GMT -5:00] Running from: C:\Documents and Settings\Mark\Desktop\ComboFix.exe * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\cnetcf.dll C:\WINDOWS\system32\drivers\mouqxwdw.dat . ---- Previous Run ------- . C:\Documents and Settings\All Users.\documents\settings C:\Documents and Settings\All Users.\documents\settings\desktop.ini C:\Documents and Settings\Mark\Application Data\inst.exe C:\Program Files\Temporary C:\Program Files\Temporary\wininstall.exe C:\Program Files\WinAble C:\Program Files\WinAble\winable.exe C:\WINDOWS\13366.exe C:\WINDOWS\70007.exe C:\WINDOWS\noskrnl.config C:\WINDOWS\noskrnl.exe C:\WINDOWS\system32\1_exception.nls C:\WINDOWS\system32\9465145341.dll C:\WINDOWS\system32\config\42335436.Evt C:\WINDOWS\system32\ctfmona.exe C:\WINDOWS\system32\drivers\ctl_w32.sys C:\WINDOWS\system32\drivers\Gmb39.sys C:\WINDOWS\system32\drivers\ip6fw.sys C:\WINDOWS\system32\drivers\MQF41.sys C:\WINDOWS\system32\drivers\symavc32.sys C:\WINDOWS\system32\kernelw.sys C:\WINDOWS\system32\newmaxxsv234.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_ASC3550P -------\LEGACY_CTL_W32 -------\LEGACY_DRIVER -------\LEGACY_MQF41 -------\LEGACY_RUNTIME -------\LEGACY_SYSLIBRARY -------\asc3550p -------\Driver -------\LEGACY_AHEPMVIY -------\ahepmviy ((((((((((((((((((((((((( Files Created from 2007-12-15 to 2008-01-15 ))))))))))))))))))))))))))))))) . 2008-01-14 19:42 . 2008-01-14 19:42 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab 2008-01-14 19:42 . 2008-01-14 19:42 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2008-01-13 02:16 . 2008-01-13 02:16 <DIR> d-------- C:\Deckard 2008-01-12 03:55 . 2008-01-12 03:55 <DIR> d-------- C:\Program Files\Frets on Fire 2008-01-12 03:55 . 2008-01-12 03:55 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\fretsonfire 2008-01-10 19:29 . 2008-01-10 19:29 54,608 --a------ C:\WINDOWS\system32\xfcodec.dll 2008-01-10 00:07 . 2008-01-10 00:07 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Teggo 2008-01-09 13:42 . 2008-01-09 13:42 <DIR> d-------- C:\Program Files\Trend Micro 2008-01-09 12:24 . 2007-06-05 10:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS 2008-01-09 12:23 . 2007-06-08 09:44 8,576 --a------ C:\WINDOWS\system32\drivers\bxdhubkewvly.sys 2008-01-09 12:01 . 2008-01-09 13:27 <DIR> d-------- C:\WINDOWS\system32\ActiveScan 2008-01-09 12:01 . 2008-01-09 12:21 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2008-01-09 12:01 . 2008-01-09 12:21 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico 2008-01-09 12:01 . 2008-01-09 12:21 1,406 --a------ C:\WINDOWS\system32\Help.ico 2008-01-09 09:11 . 2008-01-09 09:11 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Grisoft 2008-01-09 09:11 . 2007-05-30 07:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-01-09 08:32 . 2008-01-09 08:48 <DIR> d-------- C:\Program Files\XoftSpySE 2008-01-09 03:20 . 2008-01-09 03:20 <DIR> d-------- C:\Documents and Settings\Mark\Saved Games 2008-01-09 03:19 . 2008-01-09 03:19 <DIR> d-------- C:\Program Files\Oberon Media 2008-01-08 05:06 . 2007-04-10 10:31 332,672 --a------ C:\WINDOWS\system32\wgatray.exe.bak 2008-01-08 05:06 . 2007-04-10 10:30 200,064 --a------ C:\WINDOWS\system32\wgalogon.dll.bak 2008-01-08 04:45 . 2008-01-08 04:45 <DIR> d-------- C:\Program Files\MP3 Player Utilities 5.10 2008-01-08 04:44 . 2008-01-08 04:44 <DIR> d-------- C:\mmp8585 2008-01-05 15:38 . 2008-01-05 15:38 <DIR> d-------- C:\Program Files\Super Granny 4 2008-01-05 15:27 . 2008-01-05 15:27 <DIR> d-------- C:\Program Files\Champion Chef 2008-01-05 15:27 . 2008-01-05 15:27 <DIR> d-------- C:\Documents and Settings\Chuck\Application Data\Teggo 2008-01-03 01:23 . 2008-01-03 01:23 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-01-03 00:59 . 2008-01-07 07:11 <DIR> d-------- C:\Program Files\WarRock 2008-01-01 21:04 . 2008-01-01 21:04 <DIR> d-------- C:\Program Files\McAfee.com 2008-01-01 21:03 . 2008-01-05 05:34 <DIR> d-------- C:\Program Files\McAfee 2008-01-01 21:03 . 2008-01-01 21:05 <DIR> d-------- C:\Program Files\Common Files\McAfee 2008-01-01 20:57 . 2008-01-01 20:57 <DIR> d-------- C:\Documents and Settings\Chuck\Application Data\Sony Corporation 2008-01-01 14:09 . 2008-01-01 14:09 <DIR> d-------- C:\Documents and Settings\Mom\Application Data\Grisoft 2007-12-30 02:35 . 2008-01-09 00:04 <DIR> d-------- C:\Fraps 2007-12-30 01:10 . 2007-12-30 01:10 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Sony Corporation 2007-12-30 00:18 . 2007-12-30 00:18 <DIR> d-------- C:\Drivers 2007-12-30 00:18 . 2006-10-30 13:46 299,923 --a------ C:\WINDOWS\system32\drivers\sonyhcs.sys 2007-12-30 00:18 . 2006-10-30 13:46 102,220 --a------ C:\WINDOWS\system32\drivers\sonypvs1.sys 2007-12-30 00:18 . 2006-10-30 13:46 53,248 --a------ C:\WINDOWS\system32\SONYHCY.DLL 2007-12-30 00:18 . 2006-10-30 13:46 38,739 --a------ C:\WINDOWS\system32\drivers\sonyhcc.sys 2007-12-30 00:18 . 2006-10-30 13:46 6,097 --a------ C:\WINDOWS\system32\drivers\sonyhcb.sys 2007-12-30 00:18 . 2006-10-30 13:46 3,654 --a------ C:\WINDOWS\system32\drivers\Sonyhcp.dll 2007-12-26 09:02 . 2007-12-26 09:02 <DIR> d-------- C:\Documents and Settings\Chuck\Application Data\Media Player Classic 2007-12-26 09:02 . 2007-12-26 09:02 <DIR> d-------- C:\Documents and Settings\Chuck\Application Data\DivX 2007-12-22 13:34 . 2007-12-22 13:34 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Configuration 2007-12-22 13:31 . 2007-12-22 13:35 <DIR> d-------- C:\Program Files\DriverGuide Toolkit 2007-12-22 13:24 . 2007-12-22 13:24 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Uniblue 2007-12-22 13:04 . 2007-12-22 13:04 <DIR> d-------- C:\WINDOWS\system32\bits 2007-12-22 13:01 . 2007-12-22 13:01 <DIR> d-------- C:\WINDOWS\ServicePackFiles 2007-12-18 16:04 . 2007-12-18 16:04 <DIR> d-------- C:\Program Files\VideoLAN 2007-12-18 14:41 . 2008-01-15 04:04 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2007-12-18 14:41 . 2007-12-18 14:41 1,409 --a------ C:\WINDOWS\QTFont.for 2007-12-18 14:38 . 2007-10-30 08:16 60,032 --a------ C:\WINDOWS\system32\drivers\usbaudio.sys 2007-12-18 14:38 . 2007-10-30 08:17 32,128 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-12-18 14:38 . 2007-10-30 14:01 21,504 --a------ C:\WINDOWS\system32\hidserv.dll 2007-12-17 17:16 . 2007-12-17 17:16 <DIR> d-------- C:\Program Files\iWin.com 2007-12-17 17:16 . 2007-12-17 17:16 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Trymedia 2007-12-16 13:15 . 2007-10-30 14:01 4,274,816 --------- C:\WINDOWS\system32\nv4_disp.dll 2007-12-16 13:14 . 2007-10-30 14:01 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-15 09:11 --------- d-----w C:\Documents and Settings\Mark\Application Data\uTorrent 2008-01-15 06:22 --------- d-----w C:\Documents and Settings\Mark\Application Data\Xfire 2008-01-15 06:13 --------- d-----w C:\Program Files\Xfire 2008-01-15 00:08 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-01-13 07:16 --------- d-----w C:\Documents and Settings\Mark\Application Data\.purple 2008-01-10 20:40 --------- d-----w C:\Program Files\Google 2008-01-10 20:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-01-09 19:00 --------- d-----w C:\Program Files\SUPERAntiSpyware 2008-01-09 18:08 --------- d-----w C:\Program Files\Microsoft ActiveSync 2008-01-09 18:04 --------- d-----w C:\Program Files\AOL 9.0 2008-01-09 15:10 --------- d-----w C:\Documents and Settings\Mark\Application Data\SUPERAntiSpyware.com 2008-01-09 15:09 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-01-09 08:19 --------- d-----w C:\Documents and Settings\Mark\Application Data\iWin 2008-01-07 07:45 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2008-01-05 20:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games 2008-01-05 10:31 --------- d-----w C:\Program Files\AIM Music Link 2008-01-05 10:30 --------- d-----w C:\Program Files\Common Files\Nullsoft 2008-01-05 10:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL 2008-01-05 02:13 --------- d-----w C:\Program Files\Paradise Pet Salon 2008-01-03 05:59 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-01-02 02:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee 2007-12-30 08:24 --------- d-----w C:\Program Files\UrbanTerror 2007-12-30 08:13 --------- d-----w C:\Program Files\America's Army 2007-12-25 02:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zylom 2007-12-25 00:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL Downloads 2007-12-22 18:35 --------- d-----w C:\Program Files\Common Files\InstallShield 2007-12-19 21:52 --------- d-----w C:\Documents and Settings\Mark\Application Data\Vso 2007-12-18 21:08 --------- d-----w C:\Documents and Settings\Mark\Application Data\vlc 2007-12-16 22:41 --------- d-----w C:\Program Files\Nanny Mania 2007-12-14 13:28 --------- d-----w C:\Program Files\Common Files\Adobe 2007-12-13 20:44 --------- d-----w C:\Program Files\Mystery Case Files - Madame Fate 2007-12-12 21:03 --------- d-----w C:\Documents and Settings\Chuck\Application Data\Grisoft 2007-12-12 18:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-12 16:36 --------- d-----w C:\Program Files\Enigma Software Group 2007-12-10 12:29 --------- d--h--w C:\Documents and Settings\Mark\Application Data\ijjigame 2007-12-10 12:25 --------- d-----w C:\Program Files\MySpace 2007-12-10 12:24 --------- d-----w C:\Program Files\P-Soft 2007-12-10 12:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-10 12:10 --------- d-----w C:\Program Files\BraveTree 2007-12-10 11:07 --------- d-----w C:\Documents and Settings\Mark\Application Data\MSNInstaller 2007-12-10 11:01 --------- d-----w C:\Documents and Settings\Chuck\Application Data\MSNInstaller 2007-12-10 10:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\ESET 2007-12-10 10:16 --------- d-----w C:\Program Files\SiteAdvisor 2007-12-10 10:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\SiteAdvisor 2007-12-09 15:52 --------- d-----w C:\Program Files\CONEXANT 2007-12-08 08:07 --------- d-----w C:\Program Files\MSXML 6.0 2007-12-08 08:01 --------- d-----w C:\Program Files\MSXML 4.0 2007-12-07 02:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-12-06 08:18 102,664 ----a-w C:\WINDOWS\system32\drivers\tmcomm.sys 2007-12-06 07:56 --------- d-----w C:\Program Files\microsoft frontpage 2007-12-04 14:45 --------- d-----w C:\Program Files\Common Files\aol 2007-12-04 14:37 --------- d-----w C:\Documents and Settings\Chuck\Application Data\mIRC 2007-12-04 10:16 --------- d-----w C:\Documents and Settings\Owner\Application Data\MySpace 2007-12-04 09:45 50,176 ----a-w C:\WinSock.dll 2007-12-02 10:43 --------- d-----w C:\Documents and Settings\Mark\Application Data\LimeWire 2007-12-01 02:20 --------- d-----w C:\Documents and Settings\Mark\Application Data\AdobeUM 2007-11-29 00:45 --------- d-----w C:\Documents and Settings\Chuck\Application Data\Anti-Virus-Pro.com 2007-11-28 01:48 --------- d-----w C:\Documents and Settings\Mark\Application Data\Gamelab 2007-11-26 08:29 --------- d-----w C:\Documents and Settings\Mark\Application Data\mIRC 2007-11-26 07:19 --------- d-----w C:\Program Files\Miranda IM 2007-11-26 07:13 --------- d-----w C:\Documents and Settings\Mark\Application Data\gtk-2.0 2007-11-26 07:01 --------- d-----w C:\Program Files\Pidgin 2007-11-26 07:01 --------- d-----w C:\Program Files\Aspell 2007-11-26 06:59 --------- d-----w C:\Program Files\Common Files\GTK 2007-11-25 14:41 --------- d-----w C:\Documents and Settings\Mark\Application Data\Miranda 2007-11-22 19:58 --------- d-----w C:\Program Files\Ahoihoi 2007-11-20 19:10 --------- d-----w C:\Documents and Settings\Chuck\Application Data\PlayFirst 2007-11-17 21:58 --------- d-----w C:\Documents and Settings\Mark\Application Data\PlayFirst 2007-11-17 21:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst 2007-11-17 21:57 --------- d-----w C:\Program Files\Diner Dash Hometown Hero 2007-11-13 10:23 22,328 ----a-w C:\Documents and Settings\Mark\Application Data\PnkBstrK.sys 2007-10-30 19:03 283,648 ----a-w C:\WINDOWS\winhlp32.exe 2007-10-30 19:02 69,120 ----a-w C:\WINDOWS\notepad.exe 2007-10-30 19:02 50,688 ----a-w C:\WINDOWS\twain_32.dll 2007-10-30 19:02 32,866 ------w C:\WINDOWS\slrundll.exe 2007-10-30 19:02 146,432 ----a-w C:\WINDOWS\regedit.exe 2007-10-30 19:02 10,752 ----a-w C:\WINDOWS\hh.exe 2007-10-30 19:02 1,033,728 ----a-w C:\WINDOWS\explorer.exe 2007-10-30 19:01 450,048 ----a-w C:\WINDOWS\AppPatch\aclayers.dll 2007-10-30 19:01 39,424 ----a-w C:\WINDOWS\AppPatch\acadproc.dll 2007-10-30 19:01 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll 2007-10-30 19:01 141,312 ----a-w C:\WINDOWS\AppPatch\aclua.dll 2007-10-30 19:01 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.dll 2007-10-30 19:01 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.dll 2007-08-14 01:57 47,360 ----a-w C:\Documents and Settings\Mark\Application Data\pcouffin.sys 2007-07-24 20:20 774,144 ----a-w C:\Program Files\RngInterstitial.dll . ((((((((((((((((((((((((((((( snapshot@2007-12-06_ 3.43.34.17 ))))))))))))))))))))))))))))))))))))))))) . + 2004-11-17 17:31:32 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll + 2004-10-14 15:34:52 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll + 2004-10-14 15:36:18 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe + 2004-10-14 15:36:16 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll + 2004-10-14 15:34:54 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe + 2004-10-28 01:28:18 721,920 ----a-w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll + 2004-10-28 01:15:16 448,128 ----a-w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys + 2004-10-28 01:14:56 174,592 ----a-w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys + 2004-10-14 16:34:52 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll + 2004-10-14 16:36:18 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe + 2004-10-14 16:36:16 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll + 2004-10-14 16:34:54 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe + 2004-10-14 16:34:52 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll + 2004-10-14 16:36:18 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe + 2004-10-14 16:36:16 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll + 2004-10-14 16:34:54 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe + 2004-09-29 22:31:17 134,912 ----a-w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys + 2004-10-14 18:34:51 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll + 2004-10-14 18:36:16 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe + 2004-10-14 18:36:15 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll + 2004-10-14 18:34:52 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe + 2004-10-13 16:21:24 1,694,208 ----a-w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe + 2004-10-14 16:34:52 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll + 2004-10-14 16:36:18 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe + 2004-10-14 16:36:16 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll + 2004-10-14 16:34:54 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe + 2004-12-07 19:29:19 96,768 ----a-w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll + 2004-11-30 19:46:38 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll + 2004-12-01 01:22:42 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe + 2004-12-01 01:22:40 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll + 2004-11-30 19:46:40 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe + 2005-04-22 05:18:52 57,344 ----a-w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll + 2005-05-17 00:26:30 17,920 ----a-w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\xpsp3res.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll + 2005-03-02 18:19:56 62,464 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll + 2005-03-02 01:02:13 2,135,552 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe + 2005-03-02 00:36:40 2,056,832 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe + 2005-03-02 00:36:41 2,015,232 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe + 2005-03-02 01:04:22 2,179,456 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe + 2005-03-02 18:19:56 577,024 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll + 2005-03-02 01:11:25 1,836,160 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys + 2005-03-02 18:19:56 291,328 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll + 2005-02-25 00:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll + 2005-02-25 00:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe + 2005-02-25 00:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll + 2005-02-25 00:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe + 2005-02-25 00:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll + 2004-11-30 19:46:38 7,168 ----a-w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll + 2004-12-01 01:22:42 169,984 ----a-w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe + 2004-12-01 01:22:40 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll + 2004-11-30 19:46:40 654,848 ----a-w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe + 2005-07-08 16:28:58 249,344 ----a-w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe + 2005-07-08 00:27:08 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll + 2005-04-28 19:35:02 1,286,144 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll + 2005-04-28 19:35:01 74,752 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll + 2005-04-28 19:35:01 37,376 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll + 2005-04-28 19:35:01 396,288 ----a-w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll + 2005-05-26 23:26:50 10,752 ----a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe + 2005-05-27 02:08:59 41,472 ----a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll + 2005-05-27 02:08:59 155,136 ----a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll + 2005-05-27 02:08:59 137,216 ----a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll + 2005-06-11 00:17:13 57,856 ----a-w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe + 2005-06-29 21:54:32 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll + 2005-05-10 23:51:10 75,776 ----a-w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll + 2005-06-15 17:42:35 297,984 ----a-w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe + 2005-06-29 21:54:32 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll + 2005-06-10 04:06:01 139,528 ----a-w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe + 2005-06-29 21:54:32 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll + 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll + 2005-09-01 01:44:04 19,968 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll + 2005-09-23 03:18:20 8,452,608 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll + 2005-09-02 23:53:41 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll + 2005-09-01 01:44:05 291,840 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll + 2005-09-27 00:29:45 21,504 ----a-w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\xpsp3res.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe + 2005-09-26 22:36:24 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll + 2005-09-10 01:48:47 2,068,480 ----a-w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe + 2005-09-09 21:26:26 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll + 2005-06-29 01:49:55 254,976 ----a-w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll + 2005-06-29 01:49:55 73,728 ----a-w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll + 2005-07-26 04:20:23 225,792 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll + 2005-07-26 04:20:23 625,152 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll + 2005-07-26 04:20:23 110,080 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll + 2005-07-26 04:20:24 498,688 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll + 2005-07-26 04:20:24 60,416 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll + 2005-07-26 04:20:24 195,072 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll + 2005-07-26 04:20:25 97,792 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll + 2005-07-26 04:20:27 1,267,200 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll + 2005-07-26 04:20:28 540,160 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll + 2005-07-26 04:20:28 243,200 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll + 2005-07-25 23:42:35 8,704 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe + 2005-07-26 04:20:29 425,472 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll + 2005-07-26 04:20:31 945,152 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll + 2005-07-26 04:20:31 161,280 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll + 2005-07-26 04:20:39 66,560 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll + 2005-07-26 04:20:40 91,136 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll + 2005-07-26 04:20:40 1,285,632 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll + 2005-07-26 04:20:40 74,752 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll + 2005-07-26 04:20:40 37,376 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll + 2005-07-26 04:20:40 398,336 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll + 2005-07-26 04:20:40 101,376 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll + 2005-07-26 04:20:40 11,776 ----a-w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe + 2005-07-26 00:21:18 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll + 2005-08-30 04:13:42 1,287,680 ----a-w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll + 2006-03-24 04:47:44 49,152 ----a-w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll + 2005-08-22 18:24:55 197,632 ----a-w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll + 2005-02-25 03:35:05 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll + 2005-02-25 03:35:05 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe + 2005-08-19 23:50:31 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe + 2005-02-25 03:35:05 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll + 2005-02-25 03:35:05 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe + 2005-02-25 03:35:06 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll + 2005-08-23 03:39:54 123,392 ----a-w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll + 2005-02-25 01:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll + 2005-02-25 01:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe + 2005-08-22 23:01:30 30,720 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe + 2005-02-25 01:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll + 2005-02-25 01:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe + 2005-02-25 01:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll + 2005-10-17 21:21:19 80,896 ----a-w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll + 2005-10-17 21:21:19 117,760 ----a-w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll + 2006-03-17 04:46:31 8,454,656 ----a-w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll + 2006-03-17 01:05:35 28,672 ----a-w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe + 2006-03-22 01:29:43 23,040 ----a-w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe + 2006-01-19 19:29:19 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll + 2005-10-20 22:26:39 1,082,368 ----a-w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll + 2006-06-22 10:36:52 180,736 ----a-w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll + 2006-03-23 05:53:08 143,360 ----a-w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll + 2006-01-04 04:18:34 68,096 ----a-w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll + 2006-03-01 19:34:20 426,496 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll + 2006-03-01 19:34:20 956,416 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll + 2006-03-01 19:34:20 161,280 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll + 2006-03-01 19:34:20 66,560 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll + 2006-03-01 19:34:20 91,136 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll + 2006-03-01 19:34:20 11,776 ----a-w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll + 2006-05-19 13:46:40 112,128 ----a-w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll + 2006-05-19 13:46:40 147,456 ----a-w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll + 2006-05-19 13:46:40 94,720 ----a-w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll + 2006-05-05 10:16:39 454,400 ----a-w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys + 2006-05-05 10:22:52 174,592 ----a-w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll + 2006-07-14 15:52:22 121,856 ----a-w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll + 2006-03-17 01:08:10 262,656 ----a-w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll + 2006-05-18 05:37:43 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll + 2006-04-20 12:18:35 360,576 ----a-w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll + 2006-11-27 15:17:10 539,136 ----a-w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll + 2006-11-27 15:17:10 433,664 ----a-w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll + 2006-06-01 19:39:42 163,840 ----a-w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll + 2006-06-01 19:39:42 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll + 2006-07-13 11:43:08 202,496 ----a-w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll + 2006-10-12 13:54:18 42,496 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll + 2006-10-12 13:54:18 57,344 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll + 2006-10-12 11:54:07 256,512 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe + 2006-10-16 10:29:15 248,320 ----a-w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\xpsp3res.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll + 2006-07-21 08:26:49 72,704 ----a-w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll + 2006-06-26 17:45:19 147,456 ----a-w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll + 2006-06-26 17:45:19 7,680 ----a-w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll + 2006-06-22 05:22:04 69,120 ----a-w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll + 2006-06-22 05:22:05 1,435,648 ----a-w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll + 2006-06-14 08:50:19 172,416 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys + 2006-06-14 08:50:19 6,272 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys + 2006-06-14 09:17:04 82,944 ----a-w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll + 2007-05-17 11:25:21 549,888 ----a-w C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB921503\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll + 2006-08-21 12:26:44 16,896 ----a-w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltlib.dll + 2006-08-21 09:43:32 23,040 ----a-w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe + 2006-08-21 09:43:32 128,768 ----a-w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB922582\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB922582\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB922582\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB922582\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB922582\update\updspapi.dll + 2006-08-16 12:08:32 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\6to4svc.dll + 2006-08-16 10:13:39 225,664 ----a-w C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\tcpip6.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB922819\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB922819\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB922819\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB922819\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB922819\update\updspapi.dll + 2006-08-14 12:00:42 332,928 ----a-w C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB923414\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB923414\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB923414\update\updspapi.dll + 2006-10-13 12:41:38 64,000 ----a-w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwapi32.dll + 2006-10-13 12:41:38 142,336 ----a-w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwprovau.dll + 2006-10-13 10:39:12 163,456 ----a-w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwrdr.sys + 2006-10-13 12:41:38 65,536 ----a-w C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwwks.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB923980\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB923980\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB923980\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB923980\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB923980\update\updspapi.dll + 2006-08-17 12:37:49 726,528 ----a-w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\lsasrv.dll + 2006-08-17 12:37:49 337,408 ----a-w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\netapi32.dll + 2006-08-17 12:37:49 132,096 ----a-w C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\wkssvc.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB924270\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB924270\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB924270\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB924270\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB924270\update\updspapi.dll + 2006-09-04 06:12:56 1,497,088 ----a-w C:\WINDOWS\$hf_mig$\KB924496\SP2QFE\shdocvw.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB924496\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB924496\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB924496\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\

BTMark View Member Profile	Jan 15 2008, 03:29 AM Post #11
Member Posts: 23 OS: Windows XP SP2	+ 2007-10-30 19:03:07 610,304 ------w C:\WINDOWS\ServicePackFiles\i386\sspipes.scr + 2007-10-30 19:03:07 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\ssstars.scr + 2007-10-30 19:03:08 679,936 ------w C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr + 2007-10-30 19:02:08 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\sstub.dll + 2007-10-30 19:02:08 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\staxmem.dll + 2007-10-30 19:02:08 59,392 ------w C:\WINDOWS\ServicePackFiles\i386\stclient.dll + 2007-10-30 19:02:08 86,528 ------w C:\WINDOWS\ServicePackFiles\i386\stdprov.dll + 2007-10-30 19:02:08 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\sti.dll + 2007-10-30 19:02:08 136,704 ------w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll + 2007-10-30 19:02:56 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\stimon.exe + 2007-10-30 19:02:08 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\stobject.dll + 2007-10-30 19:02:08 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\storprop.dll + 2007-10-30 13:16:50 49,280 ------w C:\WINDOWS\ServicePackFiles\i386\stream.sys + 2007-10-30 13:18:07 15,232 ------w C:\WINDOWS\ServicePackFiles\i386\streamip.sys + 2007-10-30 19:02:08 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\strmfilt.dll + 2007-10-30 19:02:56 16,449 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe + 2007-10-30 19:02:56 65,601 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe + 2007-10-30 19:02:08 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\svcext51.dll + 2007-10-30 19:02:56 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\svchost.exe + 2007-10-30 13:10:30 4,352 ------w C:\WINDOWS\ServicePackFiles\i386\swenum.sys + 2007-10-30 13:16:33 56,576 ------w C:\WINDOWS\ServicePackFiles\i386\swmidi.sys + 2007-10-30 19:02:08 713,216 ------w C:\WINDOWS\ServicePackFiles\i386\sxs.dll + 2007-06-27 12:57:55 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\sy52106.dll + 2007-10-30 19:02:08 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\synceng.dll + 2007-10-30 19:02:08 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\syncui.dll + 2007-10-30 13:58:11 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys + 2007-10-30 19:02:56 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\sysinfo.exe + 2007-10-30 19:02:08 193,024 ------w C:\WINDOWS\ServicePackFiles\i386\sysmod.dll + 2007-10-30 19:02:08 173,568 ------w C:\WINDOWS\ServicePackFiles\i386\sysmoda.dll + 2007-10-30 19:02:56 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe + 2007-10-30 19:02:08 990,208 ------w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll + 2007-06-27 12:57:55 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\system.configuration.install.dll + 2007-06-27 12:58:00 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\system.data.dll + 2007-06-27 12:58:10 1,695,744 ------w C:\WINDOWS\ServicePackFiles\i386\system.design.dll + 2007-06-27 12:58:18 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\system.directoryservices.dll + 2007-06-27 12:58:21 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\system.drawing.design.dll + 2007-06-27 12:58:26 462,848 ------w C:\WINDOWS\ServicePackFiles\i386\system.drawing.dll + 2007-06-27 12:58:31 212,992 ------w C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.dll + 2007-10-30 10:38:00 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.thunk.dll + 2007-06-27 12:58:39 352,256 ------w C:\WINDOWS\ServicePackFiles\i386\system.management.dll + 2007-06-27 12:58:43 241,664 ------w C:\WINDOWS\ServicePackFiles\i386\system.messaging.dll + 2007-06-27 12:58:55 311,296 ------w C:\WINDOWS\ServicePackFiles\i386\system.runtime.remoting.dll + 2007-06-27 12:59:02 131,072 ------w C:\WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll + 2007-06-27 12:59:05 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\system.security.dll + 2007-06-27 12:59:10 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\system.serviceprocess.dll + 2007-06-27 12:59:17 1,200,128 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.dll + 2007-06-27 12:59:21 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.regularexpressions.dll + 2007-06-27 12:59:25 507,904 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.services.dll + 2007-06-27 12:59:34 2,002,944 ------w C:\WINDOWS\ServicePackFiles\i386\system.windows.forms.dll + 2007-06-27 12:59:48 1,302,528 ------w C:\WINDOWS\ServicePackFiles\i386\system.xml.dll + 2007-10-30 19:02:08 117,760 ------w C:\WINDOWS\ServicePackFiles\i386\t2embed.dll + 2007-10-30 19:02:56 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\tabcal.exe + 2007-10-30 19:02:08 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\tabletoc.dll + 2007-10-30 13:11:31 14,976 ------w C:\WINDOWS\ServicePackFiles\i386\tape.sys + 2007-10-30 19:02:08 858,624 ------w C:\WINDOWS\ServicePackFiles\i386\tapi3.dll + 2007-10-30 19:02:08 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\tapi32.dll + 2007-10-30 19:02:08 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll + 2007-10-30 19:02:56 76,288 ------w C:\WINDOWS\ServicePackFiles\i386\taskkill.exe + 2007-10-30 19:02:56 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\tasklist.exe + 2007-10-30 19:02:57 135,680 ------w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe + 2007-10-30 14:03:13 361,088 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip.sys + 2007-10-30 13:18:55 225,664 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys + 2007-10-30 19:02:08 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmib.dll + 2007-10-30 19:02:08 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmon.dll + 2007-10-30 19:02:08 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll + 2007-10-30 19:02:57 32,827 ------w C:\WINDOWS\ServicePackFiles\i386\tcptest.exe + 2007-04-02 16:36:07 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\tcptsat.dll + 2007-10-30 13:18:59 19,072 ------w C:\WINDOWS\ServicePackFiles\i386\tdi.sys + 2007-10-30 19:03:44 12,040 ------w C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys + 2007-10-30 19:03:44 21,896 ------w C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys + 2007-10-30 19:02:57 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\telnet.exe + 2007-10-30 19:03:43 40,840 ------w C:\WINDOWS\ServicePackFiles\i386\termdd.sys + 2007-10-30 19:02:08 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\termmgr.dll + 2007-10-30 19:02:08 295,424 ------w C:\WINDOWS\ServicePackFiles\i386\termsrv.dll + 2007-10-30 13:11:32 149,376 ------w C:\WINDOWS\ServicePackFiles\i386\tffsport.sys + 2007-10-30 19:02:08 385,536 ------w C:\WINDOWS\ServicePackFiles\i386\themeui.dll + 2007-10-30 19:02:57 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\tlntadmn.exe + 2007-10-30 19:02:57 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsess.exe + 2007-10-30 19:02:57 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsvr.exe + 2007-10-30 19:02:09 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsvrp.dll + 2007-10-30 10:38:11 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\togac.exe + 2007-10-30 19:02:09 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\tools.dll + 2007-10-30 19:02:58 347,136 ------w C:\WINDOWS\ServicePackFiles\i386\tourstrt.exe + 2007-10-30 19:02:58 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\tp4mon.exe + 2007-10-30 19:02:58 259,584 ------w C:\WINDOWS\ServicePackFiles\i386\tracerpt.exe + 2007-10-30 19:02:58 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\tracert.exe + 2007-10-30 19:03:04 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\tree.com + 2007-10-30 19:02:09 153,088 ------w C:\WINDOWS\ServicePackFiles\i386\triedit.dll + 2007-10-30 19:02:09 90,112 ------w C:\WINDOWS\ServicePackFiles\i386\trkwks.dll + 2007-10-30 19:02:09 93,696 ------w C:\WINDOWS\ServicePackFiles\i386\tscfgwmi.dll + 2007-10-30 10:06:46 18,359 ------w C:\WINDOWS\ServicePackFiles\i386\tscinst.vbs + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\ServicePackFiles\i386\tscuinst.vbs + 2007-10-30 19:01:18 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\tscupdc.dll + 2007-10-30 19:03:45 12,168 ------w C:\WINDOWS\ServicePackFiles\i386\tsddd.dll + 2007-10-30 19:02:09 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\tsgqec.dll + 2007-10-30 19:02:09 279,040 ------w C:\WINDOWS\ServicePackFiles\i386\tshoot.dll + 2007-10-30 19:02:09 130,048 ------w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll + 2007-10-30 19:02:09 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\tspkg.dll + 2007-10-30 19:02:09 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\tty.dll + 2007-04-02 15:31:00 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\ttyres.dll + 2007-10-30 19:02:09 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\ttyui.dll + 2007-10-30 13:14:25 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\tunmp.sys + 2007-10-30 19:02:09 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\twain_32.dll + 2007-10-30 19:02:09 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\twext.dll + 2007-10-30 19:02:09 101,376 ------w C:\WINDOWS\ServicePackFiles\i386\txflog.dll + 2007-10-30 19:02:58 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\tzchange.exe + 2007-10-30 13:16:46 44,672 ------w C:\WINDOWS\ServicePackFiles\i386\uagp35.sys + 2007-10-30 13:12:05 66,048 ------w C:\WINDOWS\ServicePackFiles\i386\udfs.sys + 2007-10-30 19:02:09 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll + 2007-10-30 19:02:09 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\uihelper.dll + 2007-10-30 19:02:09 275,456 ------w C:\WINDOWS\ServicePackFiles\i386\ulib.dll + 2007-10-30 19:02:09 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\umandlg.dll + 2007-10-30 19:02:09 123,392 ------w C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll + 2007-10-30 19:02:09 372,736 ------w C:\WINDOWS\ServicePackFiles\i386\unidrv.dll + 2007-10-30 19:02:09 740,864 ------w C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll + 2007-10-30 19:02:09 74,240 ------w C:\WINDOWS\ServicePackFiles\i386\unimdmat.dll + 2007-10-30 19:02:09 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\uniplat.dll + 2007-05-15 08:08:53 761,344 ------w C:\WINDOWS\ServicePackFiles\i386\unires.dll + 2007-10-30 19:02:09 316,416 ------w C:\WINDOWS\ServicePackFiles\i386\untfs.dll + 2007-10-30 13:10:21 364,160 ------w C:\WINDOWS\ServicePackFiles\i386\update.sys + 2007-10-30 19:02:59 150,528 ------w C:\WINDOWS\ServicePackFiles\i386\uploadm.exe + 2007-10-30 19:02:09 133,632 ------w C:\WINDOWS\ServicePackFiles\i386\upnp.dll + 2007-10-30 19:02:59 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\upnpcont.exe + 2007-10-30 19:02:09 185,856 ------w C:\WINDOWS\ServicePackFiles\i386\upnphost.dll + 2007-10-30 19:02:09 239,616 ------w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll + 2007-10-30 19:02:59 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\ups.exe + 2007-10-30 19:02:09 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\url.dll + 2007-10-30 19:02:09 619,008 ------w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll + 2004-08-04 03:31:26 32,384 ------w C:\WINDOWS\ServicePackFiles\i386\usb101et.sys + 2007-10-30 13:15:19 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023.sys + 2007-10-30 13:15:19 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023x.sys + 2007-10-30 13:16:49 60,032 ------w C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys + 2007-10-30 13:17:22 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys + 2007-10-30 13:17:23 25,728 ------w C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys + 2007-10-30 13:17:19 32,128 ------w C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys + 2007-10-30 13:17:13 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\usbehci.sys + 2007-10-30 13:17:16 59,520 ------w C:\WINDOWS\ServicePackFiles\i386\usbhub.sys + 2007-10-30 13:17:25 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\usbintel.sys + 2007-10-30 19:02:10 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\usbmon.dll + 2007-10-30 13:17:12 17,152 ------w C:\WINDOWS\ServicePackFiles\i386\usbohci.sys + 2007-10-30 13:17:15 143,872 ------w C:\WINDOWS\ServicePackFiles\i386\usbport.sys + 2007-10-30 13:32:34 25,856 ------w C:\WINDOWS\ServicePackFiles\i386\usbprint.sys + 2007-10-30 13:30:12 15,104 ------w C:\WINDOWS\ServicePackFiles\i386\usbscan.sys + 2007-10-30 13:17:15 25,728 ------w C:\WINDOWS\ServicePackFiles\i386\usbser.sys + 2007-10-30 13:17:18 26,368 ------w C:\WINDOWS\ServicePackFiles\i386\usbstor.sys + 2007-10-30 13:17:13 20,608 ------w C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys + 2007-10-30 19:02:10 74,240 ------w C:\WINDOWS\ServicePackFiles\i386\usbui.dll + 2007-10-30 13:18:05 121,984 ------w C:\WINDOWS\ServicePackFiles\i386\usbvideo.sys + 2007-10-30 19:02:10 578,560 ------w C:\WINDOWS\ServicePackFiles\i386\user32.dll + 2007-10-30 19:02:10 727,040 ------w C:\WINDOWS\ServicePackFiles\i386\userenv.dll + 2007-10-30 19:02:59 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\userinit.exe + 2007-10-30 19:02:10 406,016 ------w C:\WINDOWS\ServicePackFiles\i386\usp10.dll + 2007-10-30 19:02:59 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\utilman.exe + 2007-10-30 19:02:10 218,624 ------w C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll + 2007-10-30 19:02:10 30,749 ------w C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll + 2007-06-27 12:59:58 716,800 ------w C:\WINDOWS\ServicePackFiles\i386\vbc.exe + 2007-10-30 10:38:12 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.chs.dll + 2007-10-30 10:38:12 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.cht.dll + 2007-10-30 10:38:12 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.dll + 2007-10-30 10:38:12 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.es.dll + 2007-10-30 10:38:12 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.fr.dll + 2007-10-30 10:38:12 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ger.dll + 2007-10-30 10:38:13 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.it.dll + 2007-10-30 10:38:13 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ja.dll + 2007-10-30 10:38:13 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.kor.dll + 2007-10-30 19:02:10 413,696 ------w C:\WINDOWS\ServicePackFiles\i386\vbscript.dll + 2007-10-30 19:02:10 11,325 ------w C:\WINDOWS\ServicePackFiles\i386\vchnt5.dll + 2007-10-30 19:02:10 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\vdmdbg.dll + 2007-10-30 19:02:10 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll + 2007-10-30 19:02:59 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\verclsid.exe + 2007-10-30 19:02:10 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\verifier.dll + 2007-10-30 19:02:10 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\version.dll + 2007-10-30 19:02:10 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll + 2007-10-30 13:15:54 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\vga.sys + 2007-10-30 19:02:10 851,968 ------w C:\WINDOWS\ServicePackFiles\i386\vgx.dll + 2007-10-30 13:16:46 42,240 ------w C:\WINDOWS\ServicePackFiles\i386\viaagp.sys + 2007-10-30 13:11:11 5,376 ------w C:\WINDOWS\ServicePackFiles\i386\viaide.sys + 2007-10-30 13:15:54 81,664 ------w C:\WINDOWS\ServicePackFiles\i386\videoprt.sys + 2007-10-30 19:02:10 131,584 ------w C:\WINDOWS\ServicePackFiles\i386\viewprov.dll + 2007-10-30 13:11:43 52,352 ------w C:\WINDOWS\ServicePackFiles\i386\volsnap.sys + 2007-10-30 10:38:17 999,424 ------w C:\WINDOWS\ServicePackFiles\i386\vsavb7rt.dll + 2007-10-30 19:02:10 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\vssapi.dll + 2007-10-30 19:03:00 289,792 ------w C:\WINDOWS\ServicePackFiles\i386\vssvc.exe + 2007-10-30 19:02:10 175,104 ------w C:\WINDOWS\ServicePackFiles\i386\w32time.dll + 2007-10-30 19:02:10 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\w3ssl.dll + 2007-10-30 19:02:10 364,032 ------w C:\WINDOWS\ServicePackFiles\i386\w3svc.dll + 2007-10-30 19:02:10 483,840 ------w C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll + 2007-10-30 19:03:00 46,080 ------w C:\WINDOWS\ServicePackFiles\i386\wab.exe + 2007-10-30 19:02:10 510,976 ------w C:\WINDOWS\ServicePackFiles\i386\wab32.dll + 2007-10-30 10:38:09 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll + 2007-10-30 19:02:10 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll + 2007-10-30 19:02:10 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll + 2007-10-30 19:03:00 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe + 2007-10-30 13:14:55 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\wacompen.sys + 2004-08-04 03:29:38 12,415 ------w C:\WINDOWS\ServicePackFiles\i386\wadv01nt.sys + 2004-08-04 03:29:38 12,127 ------w C:\WINDOWS\ServicePackFiles\i386\wadv02nt.sys + 2004-08-04 03:29:38 11,775 ------w C:\WINDOWS\ServicePackFiles\i386\wadv05nt.sys + 2004-08-04 03:29:40 11,807 ------w C:\WINDOWS\ServicePackFiles\i386\wadv07nt.sys + 2004-08-04 03:29:40 11,295 ------w C:\WINDOWS\ServicePackFiles\i386\wadv08nt.sys + 2004-08-04 03:29:42 11,871 ------w C:\WINDOWS\ServicePackFiles\i386\wadv09nt.sys + 2004-08-04 03:29:42 11,935 ------w C:\WINDOWS\ServicePackFiles\i386\wadv11nt.sys + 2007-10-30 19:02:10 76,800 ------w C:\WINDOWS\ServicePackFiles\i386\wam51.dll + 2007-10-30 19:02:10 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\wamreg51.dll + 2007-10-30 13:16:03 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\wanarp.sys + 2007-10-30 13:16:21 17,664 ------w C:\WINDOWS\ServicePackFiles\i386\watchdog.sys + 2004-08-04 03:29:42 29,311 ------w C:\WINDOWS\ServicePackFiles\i386\watv01nt.sys + 2004-08-04 03:29:44 19,551 ------w C:\WINDOWS\ServicePackFiles\i386\watv02nt.sys + 2004-08-04 03:29:44 33,599 ------w C:\WINDOWS\ServicePackFiles\i386\watv04nt.sys + 2004-08-04 03:29:46 22,271 ------w C:\WINDOWS\ServicePackFiles\i386\watv06nt.sys + 2004-08-04 03:29:46 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\watv10nt.sys + 2007-10-30 19:02:10 215,552 ------w C:\WINDOWS\ServicePackFiles\i386\wavemsp.dll + 2007-10-30 19:02:10 196,608 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll + 2007-10-30 19:02:10 214,528 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll + 2007-10-30 19:02:10 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcons.dll + 2007-10-30 19:02:10 531,456 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll + 2007-10-30 19:02:10 178,176 ------w C:\WINDOWS\ServicePackFiles\i386\wbemdisp.dll + 2007-10-30 19:02:10 273,920 ------w C:\WINDOWS\ServicePackFiles\i386\wbemess.dll + 2007-10-30 19:02:10 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\wbemperf.dll + 2007-10-30 19:02:10 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll + 2007-10-30 19:02:10 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\wbemsvc.dll + 2007-10-30 19:03:00 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\wbemtest.exe + 2007-10-30 19:02:10 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll + 2007-10-30 13:17:19 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\wceusbsh.sys + 2004-08-04 03:29:46 23,615 ------w C:\WINDOWS\ServicePackFiles\i386\wch7xxnt.sys + 2007-10-30 19:02:10 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\wdigest.dll + 2007-10-30 13:59:29 83,072 ------w C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys + 2007-10-30 19:02:10 276,480 ------w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll + 2007-10-30 19:02:10 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\webclnt.dll + 2007-10-30 19:02:10 135,680 ------w C:\WINDOWS\ServicePackFiles\i386\webvw.dll + 2007-10-30 19:03:00 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\wextract.exe + 2007-10-30 19:03:00 433,664 ------w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe + 2007-10-30 19:02:10 463,360 ------w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll + 2007-10-30 19:02:10 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\wiadss.dll + 2007-10-30 19:02:10 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\wiascr.dll + 2007-10-30 19:02:10 333,824 ------w C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll + 2007-10-30 19:02:10 589,312 ------w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll + 2007-10-30 19:02:10 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\wiavideo.dll + 2007-10-30 19:02:10 712,704 ------w C:\WINDOWS\ServicePackFiles\i386\wic.dll + 2007-10-30 19:02:10 346,112 ------w C:\WINDOWS\ServicePackFiles\i386\wicext.dll + 2007-10-30 14:13:20 1,843,968 ------w C:\WINDOWS\ServicePackFiles\i386\win32k.sys + 2007-10-30 19:02:10 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\win32spl.dll + 2007-10-30 11:10:46 1,647,616 ------w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll + 2007-10-30 19:03:01 283,648 ------w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe + 2007-10-30 19:02:10 354,304 ------w C:\WINDOWS\ServicePackFiles\i386\winhttp.dll + 2007-10-30 19:02:10 666,112 ------w C:\WINDOWS\ServicePackFiles\i386\wininet.dll + 2007-10-30 19:02:10 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\winipsec.dll + 2007-10-30 19:03:01 507,904 ------w C:\WINDOWS\ServicePackFiles\i386\winlogon.exe + 2007-10-30 19:02:10 176,128 ------w C:\WINDOWS\ServicePackFiles\i386\winmm.dll + 2004-08-04 12:00:00 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\winnls.dll + 2007-10-30 19:00:40 756,224 ------w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll + 2007-10-30 19:02:10 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\winrnr.dll + 2007-10-30 19:02:10 99,328 ------w C:\WINDOWS\ServicePackFiles\i386\winscard.dll + 2007-10-30 19:02:10 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\winshfhc.dll + 2007-10-30 19:02:10 293,376 ------w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll + 2007-10-30 19:02:10 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\winsta.dll + 2007-10-30 19:02:10 176,640 ------w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll + 2007-10-30 19:03:02 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\winver.exe + 2007-10-30 19:02:10 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll + 2007-10-30 19:02:10 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\wlanapi.dll + 2007-10-30 19:02:10 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\wldap32.dll + 2004-08-04 03:31:28 154,624 ------w C:\WINDOWS\ServicePackFiles\i386\wlluc48.sys + 2007-10-30 19:02:10 92,672 ------w C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll + 2007-10-30 19:00:44 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmi.dll + 2007-10-30 13:16:45 8,832 ------w C:\WINDOWS\ServicePackFiles\i386\wmiacpi.sys + 2007-10-30 19:03:02 196,608 ------w C:\WINDOWS\ServicePackFiles\i386\wmiadap.exe + 2007-10-30 11:40:21 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapres.dll + 2007-10-30 19:02:10 88,576 ------w C:\WINDOWS\ServicePackFiles\i386\wmiaprpl.dll + 2007-10-30 19:03:02 126,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapsrv.exe + 2007-10-30 19:03:02 358,912 ------w C:\WINDOWS\ServicePackFiles\i386\wmic.exe + 2007-10-30 19:02:10 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll + 2007-10-30 19:02:10 140,800 ------w C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll + 2007-10-30 19:02:10 156,672 ------w C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll + 2007-10-30 19:02:10 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmipdskq.dll + 2007-10-30 19:02:10 61,952 ------w C:\WINDOWS\ServicePackFiles\i386\wmipiprt.dll + 2007-10-30 19:02:10 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmipjobj.dll + 2007-10-30 19:02:10 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll + 2007-10-30 19:02:10 437,248 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll + 2007-10-30 19:03:02 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe + 2007-10-30 19:02:10 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll + 2007-10-30 19:02:10 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll + 2007-10-30 19:02:10 95,232 ------w C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll + 2007-10-30 19:02:10 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ae.dll + 2007-10-30 19:02:10 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2eres.dll + 2007-10-30 19:02:10 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ext.dll + 2007-10-30 19:02:10 402,432 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2filt.dll + 2007-10-30 19:02:11 502,272 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxa.dll + 2007-10-30 19:02:11 325,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxb.dll + 2007-10-30 19:02:11 4,256,768 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll + 2007-10-30 19:02:11 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res2.dll + 2007-10-30 19:02:11 276,992 ------w C:\WINDOWS\ServicePackFiles\i386\wmphoto.dll + 2007-10-30 19:03:03 214,528 ------w C:\WINDOWS\ServicePackFiles\i386\wordpad.exe + 2007-10-30 19:02:11 264,192 ------w C:\WINDOWS\ServicePackFiles\i386\wow32.dll + 2007-10-30 19:03:03 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe + 2007-10-30 19:03:03 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wpnpinst.exe + 2007-10-30 19:02:11 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll + 2007-10-30 19:02:11 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\ws2help.dll + 2007-10-30 19:03:03 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe + 2007-10-30 19:03:03 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\wscript.exe + 2007-10-30 19:02:11 80,896 ------w C:\WINDOWS\ServicePackFiles\i386\wscsvc.dll + 2007-10-30 19:02:11 604,160 ------w C:\WINDOWS\ServicePackFiles\i386\wsecedit.dll + 2007-10-30 19:02:11 108,032 ------w C:\WINDOWS\ServicePackFiles\i386\wshbth.dll + 2007-10-30 19:02:11 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\wshcon.dll + 2007-10-30 19:02:11 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\wshext.dll + 2007-10-30 19:02:11 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\wship6.dll + 2007-10-30 19:02:11 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\wshirda.dll + 2007-10-30 19:02:11 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\wshrm.dll + 2007-10-30 19:02:11 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll + 2004-08-04 03:29:48 12,063 ------w C:\WINDOWS\ServicePackFiles\i386\wsiintxx.sys + 2007-10-30 19:02:11 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll + 2007-10-30 19:02:11 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\wsock32.dll + 2007-10-30 13:18:18 19,200 ------w C:\WINDOWS\ServicePackFiles\i386\wstcodec.sys + 2007-10-30 19:02:11 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\wstdecod.dll + 2007-10-30 19:02:11 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll + 2007-10-30 19:02:12 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\wuapi.dll + 2007-10-30 19:03:03 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe + 2007-10-30 19:03:03 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe + 2007-10-30 19:02:12 1,135,616 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll + 2007-10-30 19:02:12 183,296 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng1.dll + 2007-10-30 19:02:12 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll + 2007-10-30 19:02:12 112,640 ------w C:\WINDOWS\ServicePackFiles\i386\wucltui.dll + 2007-10-30 19:02:12 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\wups.dll + 2007-10-30 19:02:12 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\wuweb.dll + 2004-08-04 03:29:50 19,455 ------w C:\WINDOWS\ServicePackFiles\i386\wvchntxx.sys + 2007-10-30 19:02:12 383,488 ------w C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll + 2007-10-30 19:02:12 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll + 2007-10-30 19:02:12 483,840 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll + 2007-10-30 19:02:12 91,648 ------w C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll + 2007-10-30 19:03:03 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\xcopy.exe + 2004-08-04 12:00:00 174,200 ------w C:\WINDOWS\ServicePackFiles\i386\xenroll.dll + 2007-10-30 19:02:12 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\xmllite.dll + 2007-10-30 19:02:12 129,024 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll + 2007-10-30 19:02:12 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprovi.dll + 2007-10-30 19:02:12 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\xolehlp.dll + 2007-10-30 13:11:19 558,080 ------w C:\WINDOWS\ServicePackFiles\i386\xpnetdg.exe + 2007-10-30 11:56:53 438,784 ------w C:\WINDOWS\ServicePackFiles\i386\xpob2res.dll + 2007-10-30 11:56:47 187,392 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll + 2007-10-30 11:56:49 2,897,920 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll + 2007-10-30 11:56:51 675,328 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp3res.dll + 2007-10-30 19:02:13 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\xrxscnui.dll + 2007-10-30 19:02:13 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\xrxwiadr.dll + 2007-10-30 19:02:13 338,432 ------w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll + 2007-10-30 19:01:38 33,792 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\custsat.dll + 2007-10-30 19:01:50 82,944 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msgsc.dll + 2007-10-30 12:55:57 180,224 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msgslang.dll + 2007-10-30 19:02:44 1,695,232 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msmsgs.exe - 2004-08-04 12:00:00 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dll + 2007-10-30 19:01:50 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dll - 2004-08-04 12:00:00 58,434 ----a-w C:\WINDOWS\srchasst\srchctls.dll + 2007-10-30 19:02:08 58,434 ----a-w C:\WINDOWS\srchasst\srchctls.dll - 2004-08-04 12:00:00 725,566 ----a-w C:\WINDOWS\srchasst\srchui.dll + 2007-10-30 19:02:08 726,078 ----a-w C:\WINDOWS\srchasst\srchui.dll - 2004-08-04 12:00:00 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll + 2007-10-30 19:01:32 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll - 2007-05-03 11:34:07 116,736 ----a-w C:\WINDOWS\system32\aaclient.dll + 2007-10-30 19:01:32 136,192 ----a-w C:\WINDOWS\system32\aaclient.dll - 2004-08-12 06:00:00 183,808 ----a-w C:\WINDOWS\system32\accwiz.exe + 2007-10-30 19:02:13 184,320 ----a-w C:\WINDOWS\system32\accwiz.exe - 2004-08-04 12:00:00 114,688 ----a-w C:\WINDOWS\system32\aclui.dll + 2007-10-30 19:01:32 115,712 ----a-w C:\WINDOWS\system32\aclui.dll - 2004-08-04 12:00:00 194,048 ----a-w C:\WINDOWS\system32\activeds.dll + 2007-10-30 19:01:32 193,536 ----a-w C:\WINDOWS\system32\activeds.dll + 2007-03-29 14:20:50 110,592 ----a-w C:\WINDOWS\system32\ActiveScan\as.dll + 2006-10-05 21:15:26 233,472 ----a-w C:\WINDOWS\system32\ActiveScan\ascontrol.dll + 2005-06-03 19:03:18 96,256 ----a-w C:\WINDOWS\system32\ActiveScan\asmdat.dll + 2003-08-01 16:00:16 36,864 ----a-w C:\WINDOWS\system32\ActiveScan\certdll.dll + 2005-05-20 18:42:44 86,016 ----a-w C:\WINDOWS\system32\ActiveScan\instlsp.dll + 2007-11-12 14:46:18 26,112 ----a-w C:\WINDOWS\system32\ActiveScan\JID.dll + 2006-02-16 23:20:20 4,608 ----a-w C:\WINDOWS\system32\ActiveScan\memvfile.dll + 2005-10-25 23:08:32 348,160 ----a-w C:\WINDOWS\system32\ActiveScan\msvcr71.dll + 2007-11-26 16:10:36 61,440 ----a-w C:\WINDOWS\system32\ActiveScan\NanoWrapper.dll + 2004-05-04 20:01:02 139,264 ----a-w C:\WINDOWS\system32\ActiveScan\pavaleas.dll + 2006-07-14 18:04:10 45,056 ----a-w C:\WINDOWS\system32\ActiveScan\pavdr.exe + 2006-04-10 15:50:02 159,832 ----a-w C:\WINDOWS\system32\ActiveScan\pavexcom.dll + 2006-02-14 18:05:38 94,208 ----a-w C:\WINDOWS\system32\ActiveScan\pavinas.dll + 2006-02-16 23:35:38 180,224 ----a-w C:\WINDOWS\system32\ActiveScan\pavoe.dll + 2006-10-05 21:15:38 122,880 ----a-w C:\WINDOWS\system32\ActiveScan\pavpz.dll + 2007-06-04 16:31:52 57,344 ----a-w C:\WINDOWS\system32\ActiveScan\pavsddl.dll + 2006-06-30 19:13:38 8,704 ----a-w C:\WINDOWS\system32\ActiveScan\pfdnnt.exe + 2004-02-04 19:08:42 49,152 ----a-w C:\WINDOWS\system32\ActiveScan\port32.dll + 2007-10-30 15:04:14 36,864 ----a-w C:\WINDOWS\system32\ActiveScan\Prescan.dll + 2006-08-01 18:23:10 69,632 ----a-w C:\WINDOWS\system32\ActiveScan\pscpu.dll + 2007-11-21 15:00:06 376,832 ----a-w C:\WINDOWS\system32\ActiveScan\pskahk.dll + 2007-10-31 18:05:06 32,768 ----a-w C:\WINDOWS\system32\ActiveScan\PSKAHKPRESCAN.dll + 2006-08-17 16:38:14 10,752 ----a-w C:\WINDOWS\system32\ActiveScan\pskalloc.dll + 2006-09-04 16:49:54 61,440 ----a-w C:\WINDOWS\system32\ActiveScan\pskas.dll + 2006-08-18 13:46:18 779,264 ----a-w C:\WINDOWS\system32\ActiveScan\pskavs.dll + 2007-03-26 19:25:34 417,792 ----a-w C:\WINDOWS\system32\ActiveScan\pskcmp.dll + 2006-08-09 15:42:24 90,112 ----a-w C:\WINDOWS\system32\ActiveScan\pskfss.dll + 2006-07-19 15:55:58 208,896 ----a-w C:\WINDOWS\system32\ActiveScan\pskhtml.dll + 2006-01-20 21:57:00 9,728 ----a-w C:\WINDOWS\system32\ActiveScan\pskmas.dll + 2006-05-17 14:50:12 14,336 ----a-w C:\WINDOWS\system32\ActiveScan\pskmdfs.dll + 2006-08-16 15:58:12 33,280 ----a-w C:\WINDOWS\system32\ActiveScan\pskpack.dll + 2006-06-30 19:42:36 266,240 ----a-w C:\WINDOWS\system32\ActiveScan\pskscs.dll + 2006-08-17 19:33:14 62,976 ----a-w C:\WINDOWS\system32\ActiveScan\pskutil.dll + 2006-08-08 18:13:10 13,312 ----a-w C:\WINDOWS\system32\ActiveScan\pskvfile.dll + 2006-08-18 13:53:08 69,632 ----a-w C:\WINDOWS\system32\ActiveScan\pskvfs.dll + 2006-08-18 13:49:50 167,936 ----a-w C:\WINDOWS\system32\ActiveScan\pskvm.dll + 2007-10-18 14:30:16 105,472 ----a-w C:\WINDOWS\system32\ActiveScan\psnahk.dll + 2007-11-23 19:29:08 10,752 ----a-w C:\WINDOWS\system32\ActiveScan\psndsk.dll + 2007-10-18 14:30:38 42,496 ----a-w C:\WINDOWS\system32\ActiveScan\psnflg.dll + 2007-10-30 16:19:22 98,304 ----a-w C:\WINDOWS\system32\ActiveScan\psnglknt.dll + 2007-08-22 13:52:00 20,272 ----a-w C:\WINDOWS\system32\ActiveScan\psnhsh.dll + 2007-11-12 20:49:34 11,776 ----a-w C:\WINDOWS\system32\ActiveScan\psnjidsign.dll + 2007-08-22 13:52:04 76,080 ----a-w C:\WINDOWS\system32\ActiveScan\psnkrnl.dll + 2007-08-22 13:52:06 21,296 ----a-w C:\WINDOWS\system32\ActiveScan\psnmem.dll + 2007-10-04 20:26:28 28,672 ----a-w C:\WINDOWS\system32\ActiveScan\PsnPen.dll + 2007-10-23 16:40:10 86,016 ----a-w C:\WINDOWS\system32\ActiveScan\psntuc.dll + 2007-05-24 16:27:36 27,136 ----a-w C:\WINDOWS\system32\ActiveScan\PSNXprs.dll + 2007-04-18 22:16:04 353,840 ----a-w C:\WINDOWS\system32\ActiveScan\psscan.dll + 2007-01-22 19:42:48 35,328 ----a-w C:\WINDOWS\system32\ActiveScan\rawvfile.dll + 2007-06-08 14:44:36 8,576 ----a-w C:\WINDOWS\system32\ActiveScan\RKPavProc.sys + 2007-06-05 15:56:40 44,928 ----a-w C:\WINDOWS\system32\ActiveScan\sdthook.sys + 1997-09-18 11:12:32 9,488 ----a-w C:\WINDOWS\system32\ActiveScan\sporder.dll + 2006-02-28 22:23:40 69,632 ----a-w C:\WINDOWS\system32\ActiveScan\tcpvfile.dll + 2007-09-17 14:14:08 126,976 ----a-w C:\WINDOWS\system32\ActiveScan\Tucan.dll - 2004-08-04 12:00:00 4,096 ----a-w C:\WINDOWS\system32\actmovie.exe + 2007-10-30 19:02:13 4,096 ----a-w C:\WINDOWS\system32\actmovie.exe - 2004-08-04 12:00:00 101,888 ----a-w C:\WINDOWS\system32\actxprxy.dll + 2007-10-30 19:01:32 98,304 ----a-w C:\WINDOWS\system32\actxprxy.dll - 2004-08-04 12:00:00 61,440 ----a-w C:\WINDOWS\system32\admparse.dll + 2007-08-13 23:39:20 71,680 ----a-w C:\WINDOWS\system32\admparse.dll - 2004-08-04 12:00:00 175,616 ----a-w C:\WINDOWS\system32\adsldp.dll + 2007-10-30 19:01:32 175,616 ----a-w C:\WINDOWS\system32\adsldp.dll - 2004-08-04 12:00:00 143,360 ----a-w C:\WINDOWS\system32\adsldpc.dll + 2007-10-30 19:01:32 143,360 ----a-w C:\WINDOWS\system32\adsldpc.dll - 2004-08-04 12:00:00 68,096 ----a-w C:\WINDOWS\system32\adsmsext.dll + 2007-10-30 19:01:32 68,096 ----a-w C:\WINDOWS\system32\adsmsext.dll - 2004-08-04 12:00:00 263,680 ----a-w C:\WINDOWS\system32\adsnt.dll + 2007-10-30 19:01:32 263,680 ----a-w C:\WINDOWS\system32\adsnt.dll - 2004-08-04 12:00:00 109,568 ----a-w C:\WINDOWS\system32\adsnw.dll + 2007-10-30 19:01:32 123,392 ----a-w C:\WINDOWS\system32\adsnw.dll - 2004-08-04 12:00:00 616,960 ----a-w C:\WINDOWS\system32\advapi32.dll + 2007-10-30 19:01:33 617,472 ----a-w C:\WINDOWS\system32\advapi32.dll - 2004-08-04 12:00:00 99,840 ----a-w C:\WINDOWS\system32\advpack.dll + 2007-10-10 23:55:51 124,928 ----a-w C:\WINDOWS\system32\advpack.dll - 2004-08-04 12:00:00 98,304 ----a-w C:\WINDOWS\system32\ahui.exe + 2007-10-30 19:02:13 98,304 ----a-w C:\WINDOWS\system32\ahui.exe - 2004-08-04 12:00:00 44,544 ----a-w C:\WINDOWS\system32\alg.exe + 2007-10-30 19:02:13 44,544 ----a-w C:\WINDOWS\system32\alg.exe - 2004-08-04 12:00:00 17,408 ----a-w C:\WINDOWS\system32\alrsvc.dll + 2007-10-30 19:01:34 17,408 ----a-w C:\WINDOWS\system32\alrsvc.dll - 2004-08-04 12:00:00 70,656 ----a-w C:\WINDOWS\system32\amstream.dll + 2007-10-30 19:01:34 70,656 ----a-w C:\WINDOWS\system32\amstream.dll + 2006-03-06 15:41:02 73,728 ----a-w C:\WINDOWS\system32\AMV_DecDLL.dll - 2004-08-04 12:00:00 126,976 ----a-w C:\WINDOWS\system32\apphelp.dll + 2007-10-30 19:01:34 125,952 ----a-w C:\WINDOWS\system32\apphelp.dll - 2004-08-04 12:00:00 167,936 ----a-w C:\WINDOWS\system32\appmgmts.dll + 2007-10-30 19:01:34 167,936 ----a-w C:\WINDOWS\system32\appmgmts.dll - 2004-08-04 12:00:00 295,936 ----a-w C:\WINDOWS\system32\appmgr.dll + 2007-10-30 19:01:34 295,936 ----a-w C:\WINDOWS\system32\appmgr.dll - 2004-08-04 12:00:00 8,192 ----a-w C:\WINDOWS\system32\asferror.dll + 2006-10-19 02:47:08 7,168 ----a-w C:\WINDOWS\system32\asferror.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\asr_fmt.exe + 2007-10-30 19:02:13 30,208 ----a-w C:\WINDOWS\system32\asr_fmt.exe - 2004-08-04 12:00:00 32,768 ----a-w C:\WINDOWS\system32\asr_pfu.exe + 2007-10-30 19:02:14 32,768 ----a-w C:\WINDOWS\system32\asr_pfu.exe + 2006-08-02 17:39:06 73,728 ----a-w C:\WINDOWS\system32\asuninst.exe - 2004-08-04 12:00:00 65,024 ----a-w C:\WINDOWS\system32\asycfilt.dll + 2007-10-30 19:01:34 65,024 ----a-w C:\WINDOWS\system32\asycfilt.dll - 2004-08-04 12:00:00 25,088 ----a-w C:\WINDOWS\system32\at.exe + 2007-10-30 19:02:14 25,088 ----a-w C:\WINDOWS\system32\at.exe + 2007-10-30 19:01:34 229,376 ------w C:\WINDOWS\system32\ati2cqag.dll + 2007-10-30 19:01:34 377,984 ------w C:\WINDOWS\system32\ati2dvaa.dll + 2007-10-30 19:01:34 201,728 ------w C:\WINDOWS\system32\ati2dvag.dll + 2007-10-30 19:01:34 870,784 ------w C:\WINDOWS\system32\ati3d1ag.dll + 2007-10-30 19:01:34 32,768 ------w C:\WINDOWS\system32\ativtmxx.dll + 2007-10-30 19:01:34 516,768 ------w C:\WINDOWS\system32\ativvaxx.dll - 2004-08-04 12:00:00 58,880 ----a-w C:\WINDOWS\system32\atl.dll + 2007-10-30 19:01:34 58,880 ----a-w C:\WINDOWS\system32\atl.dll - 2004-08-04 12:00:00 11,264 ----a-w C:\WINDOWS\system32\atmadm.exe + 2007-10-30 19:02:14 11,264 ----a-w C:\WINDOWS\system32\atmadm.exe - 2004-08-04 12:00:00 285,696 ----a-w C:\WINDOWS\system32\atmfd.dll + 2007-10-30 18:57:25 285,696 ----a-w C:\WINDOWS\system32\atmfd.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\atmlib.dll + 2007-10-30 19:01:34 30,208 ----a-w C:\WINDOWS\system32\atmlib.dll - 2004-08-04 12:00:00 11,264 ----a-w C:\WINDOWS\system32\attrib.exe + 2007-10-30 19:02:14 12,288 ----a-w C:\WINDOWS\system32\attrib.exe - 2004-08-04 12:00:00 42,496 ----a-w C:\WINDOWS\system32\audiosrv.dll + 2007-10-30 19:01:34 42,496 ----a-w C:\WINDOWS\system32\audiosrv.dll - 2004-08-04 12:00:00 14,336 ----a-w C:\WINDOWS\system32\auditusr.exe + 2007-10-30 19:02:14 14,336 ----a-w C:\WINDOWS\system32\auditusr.exe - 2004-08-04 12:00:00 56,832 ----a-w C:\WINDOWS\system32\authz.dll + 2007-10-30 19:01:35 62,464 ----a-w C:\WINDOWS\system32\authz.dll - 2004-08-04 12:00:00 588,800 ----a-w C:\WINDOWS\system32\autochk.exe + 2007-10-30 19:02:14 588,800 ----a-w C:\WINDOWS\system32\autochk.exe - 2004-08-04 12:00:00 602,624 ----a-w C:\WINDOWS\system32\autoconv.exe + 2007-10-30 19:02:15 602,624 ----a-w C:\WINDOWS\system32\autoconv.exe - 2004-08-04 12:00:00 580,608 ----a-w C:\WINDOWS\system32\autofmt.exe + 2007-10-30 19:02:15 580,608 ----a-w C:\WINDOWS\system32\autofmt.exe - 2004-08-04 12:00:00 11,264 ----a-w C:\WINDOWS\system32\autolfn.exe + 2007-10-30 19:02:15 11,264 ----a-w C:\WINDOWS\system32\autolfn.exe - 2004-08-04 12:00:00 84,992 ----a-w C:\WINDOWS\system32\avifil32.dll + 2007-10-30 19:01:35 84,992 ----a-w C:\WINDOWS\system32\avifil32.dll + 2007-10-30 19:01:35 233,472 ------w C:\WINDOWS\system32\azroles.dll - 2004-08-04 12:00:00 52,736 ----a-w C:\WINDOWS\system32\basesrv.dll + 2007-10-30 19:01:35 52,736 ----a-w C:\WINDOWS\system32\basesrv.dll - 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\batmeter.dll + 2007-10-30 19:01:35 29,184 ----a-w C:\WINDOWS\system32\batmeter.dll - 2004-08-04 12:00:00 8,704 ----a-w C:\WINDOWS\system32\batt.dll + 2007-10-30 19:01:35 8,704 ----a-w C:\WINDOWS\system32\batt.dll - 2004-08-04 12:00:00 17,408 ----a-w C:\WINDOWS\system32\bidispl.dll + 2007-10-30 19:01:35 17,408 ----a-w C:\WINDOWS\system32\bidispl.dll + 2007-10-30 19:01:59 409,088 ------w C:\WINDOWS\system32\bits\qmgr.dll - 2004-08-12 06:00:00 8,192 ----a-w C:\WINDOWS\system32\bitsprx2.dll + 2007-10-30 19:01:35 8,192 ----a-w C:\WINDOWS\system32\bitsprx2.dll - 2004-08-12 06:00:00 7,168 ----a-w C:\WINDOWS\system32\bitsprx3.dll + 2007-10-30 19:01:35 7,168 ----a-w C:\WINDOWS\system32\bitsprx3.dll + 2007-10-30 19:01:35 7,168 ------w C:\WINDOWS\system32\bitsprx4.dll - 2004-08-04 12:00:00 286,208 ----a-w C:\WINDOWS\system32\blackbox.dll + 2006-10-19 02:47:10 542,720 ----a-w C:\WINDOWS\system32\blackbox.dll - 2004-08-04 12:00:00 71,680 ----a-w C:\WINDOWS\system32\blastcln.exe + 2007-10-30 19:02:16 71,680 ----a-w C:\WINDOWS\system32\blastcln.exe - 2004-08-04 12:00:00 136,704 ----a-w C:\WINDOWS\system32\bootcfg.exe + 2007-10-30 19:02:16 142,848 ----a-w C:\WINDOWS\system32\bootcfg.exe - 2004-08-04 12:00:00 63,488 ----a-w C:\WINDOWS\system32\browselc.dll + 2007-10-30 11:28:38 63,488 ----a-w C:\WINDOWS\system32\browselc.dll - 2004-08-04 12:00:00 77,312 ----a-w C:\WINDOWS\system32\browser.dll + 2007-10-30 19:01:35 77,824 ----a-w C:\WINDOWS\system32\browser.dll - 2004-08-04 12:00:00 1,016,832 ----a-w C:\WINDOWS\system32\browseui.dll + 2007-10-30 19:01:35 1,024,512 ----a-w C:\WINDOWS\system32\browseui.dll - 2004-08-04 12:00:00 78,336 ----a-w C:\WINDOWS\system32\browsewm.dll + 2007-10-30 19:01:35 78,336 ----a-w C:\WINDOWS\system32\browsewm.dll - 2004-08-04 12:00:00 20,992 ----a-w C:\WINDOWS\system32\bthci.dll + 2007-10-30 19:01:35 20,992 ----a-w C:\WINDOWS\system32\bthci.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\bthserv.dll + 2007-10-30 19:01:35 30,208 ----a-w C:\WINDOWS\system32\bthserv.dll - 2004-08-04 12:00:00 50,688 ----a-w C:\WINDOWS\system32\btpanui.dll + 2007-10-30 19:01:35 50,688 ----a-w C:\WINDOWS\system32\btpanui.dll - 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\system32\cabinet.dll + 2007-10-30 19:01:35 60,416 ----a-w C:\WINDOWS\system32\cabinet.dll - 2004-08-04 12:00:00 84,480 ----a-w C:\WINDOWS\system32\cabview.dll + 2007-10-30 19:01:35 84,480 ----a-w C:\WINDOWS\system32\cabview.dll - 2004-08-04 12:00:00 18,432 ----a-w C:\WINDOWS\system32\cacls.exe + 2007-10-30 19:02:16 19,968 ----a-w C:\WINDOWS\system32\cacls.exe - 2004-08-04 12:00:00 50,688 ----a-w C:\WINDOWS\system32\camocx.dll + 2007-10-30 19:01:35 50,688 ----a-w C:\WINDOWS\system32\camocx.dll - 2004-08-04 12:00:00 142,848 ----a-w C:\WINDOWS\system32\capesnpn.dll + 2007-10-30 19:01:36 150,016 ----a-w C:\WINDOWS\system32\capesnpn.dll - 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\catsrv.dll + 2007-10-30 19:01:36 226,304 ----a-w C:\WINDOWS\system32\catsrv.dll - 2004-08-12 06:00:00 85,504 ----a-w C:\WINDOWS\system32\catsrvps.dll + 2007-10-30 19:01:36 85,504 ----a-w C:\WINDOWS\system32\catsrvps.dll - 2004-08-04 12:00:00 628,224 ----a-w C:\WINDOWS\system32\catsrvut.dll + 2007-10-30 19:01:36 625,664 ----a-w C:\WINDOWS\system32\catsrvut.dll - 2004-08-04 12:00:00 150,528 ----a-w C:\WINDOWS\system32\cdfview.dll + 2007-10-30 19:01:36 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll - 2004-08-04 12:00:00 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll + 2007-10-30 19:01:36 2,091,520 ----a-w C:\WINDOWS\system32\cdosys.dll - 2004-08-04 12:00:00 194,560 ----a-w C:\WINDOWS\system32\certcli.dll + 2007-10-30 19:01:36 194,560 ----a-w C:\WINDOWS\system32\certcli.dll - 2004-08-04 12:00:00 457,728 ----a-w C:\WINDOWS\system32\certmgr.dll + 2007-10-30 19:01:36 457,728 ----a-w C:\WINDOWS\system32\certmgr.dll - 2004-08-04 12:00:00 159,232 ----a-w C:\WINDOWS\system32\cewmdm.dll + 2006-10-19 02:47:10 229,376 ----a-w C:\WINDOWS\system32\cewmdm.dll - 2004-08-12 06:00:00 38,912 ----a-w C:\WINDOWS\system32\cfgbkend.dll + 2007-10-30 19:01:36 38,912 ----a-w C:\WINDOWS\system32\cfgbkend.dll - 2004-08-04 12:00:00 16,896 ----a-w C:\WINDOWS\system32\cfgmgr32.dll + 2007-10-30 18:57:31 16,896 ----a-w C:\WINDOWS\system32\cfgmgr32.dll - 2004-08-04 12:00:00 109,568 ----a-w C:\WINDOWS\system32\cic.dll + 2007-10-30 19:01:36 148,480 ----a-w C:\WINDOWS\system32\cic.dll - 2004-08-04 12:00:00 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll + 2007-10-30 19:01:36 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll - 2004-08-04 12:00:00 56,320 ----a-w C:\WINDOWS\system32\cipher.exe + 2007-10-30 19:02:17 56,832 ----a-w C:\WINDOWS\system32\cipher.exe - 2004-08-04 12:00:00 5,632 ----a-w C:\WINDOWS\system32\cisvc.exe + 2007-10-30 19:02:17 5,632 ----a-w C:\WINDOWS\system32\cisvc.exe - 2004-08-04 12:00:00 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll + 2007-10-30 19:01:37 110,592 ----a-w C:\WINDOWS\system32\clbcatex.dll - 2004-08-04 12:00:00 501,248 ----a-w C:\WINDOWS\system32\clbcatq.dll + 2007-10-30 19:01:37 498,688 ----a-w C:\WINDOWS\system32\clbcatq.dll - 2004-08-04 12:00:00 64,000 ----a-w C:\WINDOWS\system32\cleanmgr.exe + 2007-10-30 19:02:17 64,000 ----a-w C:\WINDOWS\system32\cleanmgr.exe - 2004-08-04 12:00:00 77,824 ----a-w C:\WINDOWS\system32\cliconfg.dll + 2007-10-30 19:01:37 77,824 ----a-w C:\WINDOWS\system32\cliconfg.dll - 2004-08-04 12:00:00 20,480 ----a-w C:\WINDOWS\system32\cliconfg.exe + 2007-10-30 19:02:17 20,480 ----a-w C:\WINDOWS\system32\cliconfg.exe - 2004-08-12 06:00:00 102,912 ----a-w C:\WINDOWS\system32\clipbrd.exe + 2007-10-30 19:02:17 102,912 ----a-w C:\WINDOWS\system32\clipbrd.exe - 2004-08-04 12:00:00 33,280 ----a-w C:\WINDOWS\system32\clipsrv.exe + 2007-10-30 19:02:17 33,280 ----a-w C:\WINDOWS\system32\clipsrv.exe - 2004-08-04 12:00:00 57,856 ----a-w C:\WINDOWS\system32\clusapi.dll + 2007-10-30 19:01:37 58,368 ----a-w C:\WINDOWS\system32\clusapi.dll - 2004-08-04 12:00:00 15,872 ----a-w C:\WINDOWS\system32\cmcfg32.dll + 2007-10-30 19:01:37 15,872 ----a-w C:\WINDOWS\system32\cmcfg32.dll - 2004-08-04 12:00:00 388,608 ----a-w C:\WINDOWS\system32\cmd.exe + 2007-10-30 19:02:18 389,120 ----a-w C:\WINDOWS\system32\cmd.exe - 2004-08-04 12:00:00 343,040 ----a-w C:\WINDOWS\system32\cmdial32.dll + 2007-10-30 19:01:37 344,064 ----a-w C:\WINDOWS\system32\cmdial32.dll - 2004-08-04 12:00:00 47,104 ----a-w C:\WINDOWS\system32\cmdl32.exe + 2007-10-30 19:02:18 25,600 ----a-w C:\WINDOWS\system32\cmdl32.exe - 2004-08-04 12:00:00 39,936 ----a-w C:\WINDOWS\system32\cmmon32.exe + 2007-10-30 19:02:18 39,936 ----a-w C:\WINDOWS\system32\cmmon32.exe - 2004-08-12 06:00:00 185,344 ----a-w C:\WINDOWS\system32\cmprops.dll + 2007-10-30 19:01:37 185,344 ----a-w C:\WINDOWS\system32\cmprops.dll - 2004-08-04 12:00:00 13,824 ----a-w C:\WINDOWS\system32\cmsetACL.dll + 2007-10-30 19:01:37 13,312 ----a-w C:\WINDOWS\system32\cmsetacl.dll - 2004-08-04 12:00:00 63,488 ----a-w C:\WINDOWS\system32\cmstp.exe + 2007-10-30 19:02:18 63,488 ----a-w C:\WINDOWS\system32\cmstp.exe - 2004-08-04 12:00:00 39,936 ----a-w C:\WINDOWS\system32\cmutil.dll + 2007-10-30 19:01:37 39,424 ----a-w C:\WINDOWS\system32\cmutil.dll - 2004-08-04 12:00:00 47,104 ----a-w C:\WINDOWS\system32\cnbjmon.dll + 2007-10-30 19:01:37 47,104 ----a-w C:\WINDOWS\system32\cnbjmon.dll - 2004-08-04 12:00:00 62,464 ----a-w C:\WINDOWS\system32\colbact.dll + 2007-10-30 19:01:37 60,416 ----a-w C:\WINDOWS\system32\colbact.dll - 2004-08-04 12:00:00 195,584 ----a-w C:\WINDOWS\system32\Com\comadmin.dll + 2007-10-30 19:01:37 195,072 ----a-w C:\WINDOWS\system32\Com\comadmin.dll - 2004-08-12 06:00:00 9,728 ----a-w C:\WINDOWS\system32\Com\comrepl.exe + 2007-10-30 19:02:18 9,728 ----a-w C:\WINDOWS\system32\Com\comrepl.exe - 2004-08-12 06:00:00 5,120 ----a-w C:\WINDOWS\system32\Com\comrereg.exe + 2007-10-30 19:02:18 6,144 ----a-w C:\WINDOWS\system32\Com\comrereg.exe - 2004-08-12 06:00:00 25,600 ----a-w C:\WINDOWS\system32\comaddin.dll + 2007-10-30 19:01:37 28,160 ----a-w C:\WINDOWS\system32\comaddin.dll - 2004-08-04 12:00:00 611,328 ----a-w C:\WINDOWS\system32\comctl32.dll + 2007-10-30 19:01:37 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll - 2004-08-04 12:00:00 276,992 ----a-w C:\WINDOWS\system32\comdlg32.dll + 2007-10-30 19:01:37 276,992 ----a-w C:\WINDOWS\system32\comdlg32.dll - 2004-08-04 12:00:00 252,928 ----a-w C:\WINDOWS\system32\compatUI.dll + 2007-10-30 19:01:37 252,928 ----a-w C:\WINDOWS\system32\compatui.dll - 2004-08-04 12:00:00 229,376 ----a-w C:\WINDOWS\system32\compstui.dll + 2007-10-30 19:01:37 229,376 ----a-w C:\WINDOWS\system32\compstui.dll - 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\comrepl.dll + 2007-10-30 19:01:37 97,792 ----a-w C:\WINDOWS\system32\comrepl.dll - 2004-08-04 12:00:00 792,064 ----a-w C:\WINDOWS\system32\comres.dll + 2007-10-30 19:01:37 792,064 ----a-w C:\WINDOWS\system32\comres.dll + 2007-10-30 13:41:23 9,728 ------w C:\WINDOWS\system32\comsdupd.exe - 2004-08-12 06:00:00 147,456 ----a-w C:\WINDOWS\system32\comsnap.dll + 2007-10-30 19:01:37 167,424 ----a-w C:\WINDOWS\system32\comsnap.dll - 2004-08-04 12:00:00 1,251,840 ----a-w C:\WINDOWS\system32\comsvcs.dll + 2007-10-30 19:01:37 1,266,688 ----a-w C:\WINDOWS\system32\comsvcs.dll - 2004-08-04 12:00:00 540,160 ----a-w C:\WINDOWS\system32\comuid.dll + 2007-10-30 19:01:37 539,648 ----a-w C:\WINDOWS\system32\comuid.dll - 2007-12-06 08:01:52 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2008-01-15 09:05:13 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2007-12-06 08:01:52 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-01-15 09:05:13 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2007-12-22 18:12:56 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012007120320071210\index.dat + 2007-12-22 18:12:56 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012007122220071223\index.dat - 2004-08-04 12:00:00 345,600 ----a-w C:\WINDOWS\system32\confmsp.dll + 2007-10-30 19:01:37 357,888 ----a-w C:\WINDOWS\system32\confmsp.dll - 2004-08-04 12:00:00 27,648 ----a-w C:\WINDOWS\system32\conime.exe + 2007-10-30 19:02:19 27,648 ----a-w C:\WINDOWS\system32\conime.exe - 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\corpol.dll + 2007-10-30 19:01:37 35,328 ------w C:\WINDOWS\system32\corpol.dll + 2007-10-30 19:01:37 12,800 ------w C:\WINDOWS\system32\credssp.dll - 2004-08-04 12:00:00 163,840 ----a-w C:\WINDOWS\system32\credui.d

BTMark View Member Profile	Jan 15 2008, 03:30 AM Post #12
Member Posts: 23 OS: Windows XP SP2	+ 2007-10-30 19:01:37 163,840 ----a-w C:\WINDOWS\system32\credui.dll - 2004-08-04 12:00:00 597,504 ----a-w C:\WINDOWS\system32\crypt32.dll + 2007-10-30 19:01:37 599,552 ----a-w C:\WINDOWS\system32\crypt32.dll - 2004-08-04 12:00:00 74,752 ----a-w C:\WINDOWS\system32\cryptdlg.dll + 2007-10-30 19:01:37 74,752 ----a-w C:\WINDOWS\system32\cryptdlg.dll - 2004-08-04 12:00:00 33,280 ----a-w C:\WINDOWS\system32\cryptdll.dll + 2007-10-30 19:01:37 33,280 ----a-w C:\WINDOWS\system32\cryptdll.dll - 2004-08-04 12:00:00 53,760 ----a-w C:\WINDOWS\system32\cryptext.dll + 2007-10-30 19:01:37 53,760 ----a-w C:\WINDOWS\system32\cryptext.dll - 2004-08-04 12:00:00 63,488 ----a-w C:\WINDOWS\system32\cryptnet.dll + 2007-10-30 19:01:37 64,512 ----a-w C:\WINDOWS\system32\cryptnet.dll - 2004-08-04 12:00:00 60,416 ----a-w C:\WINDOWS\system32\cryptsvc.dll + 2007-10-30 19:01:37 62,464 ----a-w C:\WINDOWS\system32\cryptsvc.dll - 2004-08-04 12:00:00 512,512 ----a-w C:\WINDOWS\system32\cryptui.dll + 2007-10-30 19:01:38 512,512 ----a-w C:\WINDOWS\system32\cryptui.dll - 2004-08-04 12:00:00 101,888 ----a-w C:\WINDOWS\system32\cscdll.dll + 2007-10-30 19:01:38 101,888 ----a-w C:\WINDOWS\system32\cscdll.dll - 2004-08-04 12:00:00 98,304 ----a-w C:\WINDOWS\system32\cscript.exe + 2007-10-30 19:02:19 98,304 ----a-w C:\WINDOWS\system32\cscript.exe - 2004-08-04 12:00:00 326,656 ----a-w C:\WINDOWS\system32\cscui.dll + 2007-10-30 19:01:38 326,656 ----a-w C:\WINDOWS\system32\cscui.dll - 2004-08-04 12:00:00 32,768 ----a-w C:\WINDOWS\system32\csrsrv.dll + 2007-10-30 19:01:38 32,256 ----a-w C:\WINDOWS\system32\csrsrv.dll - 2004-08-04 12:00:00 6,144 ----a-w C:\WINDOWS\system32\csrss.exe + 2007-10-30 19:02:19 6,144 ----a-w C:\WINDOWS\system32\csrss.exe - 2004-08-04 12:00:00 15,360 ----a-w C:\WINDOWS\system32\ctfmon.exe + 2007-10-30 19:02:19 15,360 ----a-w C:\WINDOWS\system32\ctfmon.exe - 2004-08-04 12:00:00 1,179,648 ----a-w C:\WINDOWS\system32\d3d8.dll + 2007-10-30 19:01:38 1,179,648 ----a-w C:\WINDOWS\system32\d3d8.dll - 2004-08-04 12:00:00 8,192 ----a-w C:\WINDOWS\system32\d3d8thk.dll + 2007-10-30 19:01:38 8,192 ----a-w C:\WINDOWS\system32\d3d8thk.dll - 2004-08-04 12:00:00 1,689,088 ----a-w C:\WINDOWS\system32\d3d9.dll + 2007-10-30 19:01:38 1,689,088 ----a-w C:\WINDOWS\system32\d3d9.dll - 2004-08-04 12:00:00 825,344 ----a-w C:\WINDOWS\system32\d3dim700.dll + 2007-10-30 19:01:38 824,320 ----a-w C:\WINDOWS\system32\d3dim700.dll - 2004-08-04 12:00:00 1,053,696 ----a-w C:\WINDOWS\system32\danim.dll + 2007-10-30 19:01:38 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll - 2004-08-04 12:00:00 54,272 ----a-w C:\WINDOWS\system32\dataclen.dll + 2007-10-30 19:01:38 54,272 ----a-w C:\WINDOWS\system32\dataclen.dll - 2004-08-04 12:00:00 152,064 ----a-w C:\WINDOWS\system32\datime.dll + 2007-10-30 19:01:38 165,376 ----a-w C:\WINDOWS\system32\datime.dll - 2004-08-04 12:00:00 24,576 ----a-w C:\WINDOWS\system32\davclnt.dll + 2007-10-30 19:01:38 25,088 ----a-w C:\WINDOWS\system32\davclnt.dll - 2004-08-04 12:00:00 640,000 ----a-w C:\WINDOWS\system32\dbghelp.dll + 2007-10-30 19:01:38 640,000 ----a-w C:\WINDOWS\system32\dbghelp.dll - 2004-08-04 12:00:00 24,576 ----a-w C:\WINDOWS\system32\dbmsrpcn.dll + 2007-10-30 19:01:38 24,576 ----a-w C:\WINDOWS\system32\dbmsrpcn.dll - 2004-08-04 12:00:00 110,592 ----a-w C:\WINDOWS\system32\dbnetlib.dll + 2007-10-30 19:01:38 110,592 ----a-w C:\WINDOWS\system32\dbnetlib.dll - 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dbnmpntw.dll + 2007-10-30 19:01:38 28,672 ----a-w C:\WINDOWS\system32\dbnmpntw.dll - 2004-08-04 12:00:00 8,704 ----a-w C:\WINDOWS\system32\dciman32.dll + 2007-10-30 19:01:38 8,704 ----a-w C:\WINDOWS\system32\dciman32.dll - 2004-08-12 06:00:00 5,120 ----a-w C:\WINDOWS\system32\dcomcnfg.exe + 2007-10-30 19:02:19 6,144 ----a-w C:\WINDOWS\system32\dcomcnfg.exe - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\ddeshare.exe + 2007-10-30 19:02:19 30,208 ----a-w C:\WINDOWS\system32\ddeshare.exe - 2004-08-04 12:00:00 266,240 ----a-w C:\WINDOWS\system32\ddraw.dll + 2007-10-30 19:01:38 279,552 ----a-w C:\WINDOWS\system32\ddraw.dll - 2004-08-04 12:00:00 27,136 ----a-w C:\WINDOWS\system32\ddrawex.dll + 2007-10-30 19:01:38 27,136 ----a-w C:\WINDOWS\system32\ddrawex.dll - 2004-08-04 12:00:00 25,088 ----a-w C:\WINDOWS\system32\defrag.exe + 2007-10-30 19:02:19 25,088 ----a-w C:\WINDOWS\system32\defrag.exe - 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\system32\devenum.dll + 2007-10-30 19:01:38 59,904 ----a-w C:\WINDOWS\system32\devenum.dll - 2004-08-04 12:00:00 282,624 ----a-w C:\WINDOWS\system32\devmgr.dll + 2007-10-30 19:01:38 282,624 ----a-w C:\WINDOWS\system32\devmgr.dll + 2003-09-03 15:59:52 49,152 ----a-w C:\WINDOWS\system32\DEVTYPE.dll - 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\dfrgfat.exe + 2007-10-30 19:02:20 82,944 ----a-w C:\WINDOWS\system32\dfrgfat.exe - 2004-08-04 12:00:00 104,960 ----a-w C:\WINDOWS\system32\dfrgntfs.exe + 2007-10-30 19:02:20 105,472 ----a-w C:\WINDOWS\system32\dfrgntfs.exe - 2004-08-04 12:00:00 38,912 ----a-w C:\WINDOWS\system32\dfrgsnap.dll + 2007-10-30 19:01:38 39,424 ----a-w C:\WINDOWS\system32\dfrgsnap.dll - 2004-08-04 12:00:00 123,904 ----a-w C:\WINDOWS\system32\dfrgui.dll + 2007-10-30 19:01:38 124,416 ----a-w C:\WINDOWS\system32\dfrgui.dll - 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dfsshlex.dll + 2007-10-30 19:01:38 28,672 ----a-w C:\WINDOWS\system32\dfsshlex.dll - 2004-08-04 12:00:00 111,104 ----a-w C:\WINDOWS\system32\dgnet.dll + 2007-10-30 19:01:38 111,104 ----a-w C:\WINDOWS\system32\dgnet.dll - 2004-08-04 12:00:00 111,104 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll + 2007-10-30 19:01:38 126,976 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll - 2004-08-04 12:00:00 370,176 ----a-w C:\WINDOWS\system32\dhcpmon.dll + 2007-10-30 19:01:38 379,904 ----a-w C:\WINDOWS\system32\dhcpmon.dll + 2007-10-30 19:01:38 48,640 ------w C:\WINDOWS\system32\dhcpqec.dll - 2004-08-04 12:00:00 85,504 ----a-w C:\WINDOWS\system32\diantz.exe + 2007-10-30 19:02:20 87,040 ----a-w C:\WINDOWS\system32\diantz.exe - 2004-08-04 12:00:00 68,608 ----a-w C:\WINDOWS\system32\digest.dll + 2007-10-30 19:01:39 68,608 ----a-w C:\WINDOWS\system32\digest.dll + 2007-10-30 19:01:39 19,456 ------w C:\WINDOWS\system32\dimsntfy.dll + 2007-10-30 19:01:39 39,936 ------w C:\WINDOWS\system32\dimsroam.dll - 2004-08-04 12:00:00 159,232 ----a-w C:\WINDOWS\system32\dinput.dll + 2007-10-30 19:01:39 158,720 ----a-w C:\WINDOWS\system32\dinput.dll - 2004-08-04 12:00:00 181,760 ----a-w C:\WINDOWS\system32\dinput8.dll + 2007-10-30 19:01:39 181,760 ----a-w C:\WINDOWS\system32\dinput8.dll - 2004-08-04 12:00:00 1,501,696 ----a-w C:\WINDOWS\system32\diskcopy.dll + 2007-10-30 19:01:39 1,504,256 ----a-w C:\WINDOWS\system32\diskcopy.dll - 2004-08-04 12:00:00 163,840 ----a-w C:\WINDOWS\system32\diskpart.exe + 2007-10-30 19:02:21 163,840 ----a-w C:\WINDOWS\system32\diskpart.exe - 2004-08-04 12:00:00 45,083 ----a-w C:\WINDOWS\system32\dispex.dll + 2007-10-30 19:01:39 28,672 ----a-w C:\WINDOWS\system32\dispex.dll - 2004-08-04 12:00:00 61,440 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll + 2007-08-13 23:39:20 71,680 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll - 2004-08-04 12:00:00 99,840 -c--a-w C:\WINDOWS\system32\dllcache\advpack.dll + 2007-10-10 23:55:51 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll - 2004-08-04 12:00:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\asferror.dll + 2006-10-19 02:47:08 7,168 -c--a-w C:\WINDOWS\system32\dllcache\asferror.dll - 2004-08-04 12:00:00 286,208 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll + 2006-10-19 02:47:10 542,720 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll - 2004-08-04 12:00:00 159,232 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll + 2006-10-19 02:47:10 229,376 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll - 2004-08-04 12:00:00 28,672 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll + 2007-08-13 23:54:10 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll + 2007-10-30 19:02:21 294,912 -c----w C:\WINDOWS\system32\dllcache\dlimport.exe - 2004-08-04 12:00:00 299,520 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll + 2007-10-30 19:03:24 299,520 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll - 2004-08-04 12:00:00 87,040 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll + 2007-10-30 19:01:39 87,040 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll - 2004-08-04 12:00:00 695,296 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll + 2006-10-19 02:47:10 991,744 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll - 2004-08-04 12:00:00 498,205 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll + 2006-08-22 09:05:26 498,742 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll - 2004-08-04 12:00:00 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll + 2007-08-13 23:35:46 346,624 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll - 2004-08-04 12:00:00 201,728 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll + 2007-10-10 23:55:51 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll - 2004-08-04 12:00:00 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll + 2007-10-10 23:55:51 132,608 -c----w C:\WINDOWS\system32\dllcache\extmgr.dll - 2004-08-04 12:00:00 38,912 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll + 2007-08-13 23:18:02 60,416 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll + 2007-10-10 23:55:51 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll - 2004-08-04 12:00:00 34,304 -c--a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe + 2007-10-10 10:59:40 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe - 2004-08-04 12:00:00 139,264 -c--a-w C:\WINDOWS\system32\dllcache\ieakeng.dll + 2007-10-10 23:55:51 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll - 2004-08-04 12:00:00 216,576 -c--a-w C:\WINDOWS\system32\dllcache\ieaksie.dll + 2007-10-10 23:55:51 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll - 2004-08-04 12:00:00 221,184 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll + 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll + 2007-07-01 03:31:33 2,455,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dat + 2007-10-10 23:55:52 383,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dll - 2004-08-04 12:00:00 323,584 -c--a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll + 2007-10-10 23:55:52 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll - 2004-08-04 12:00:00 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe + 2007-08-13 23:44:02 69,120 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe - 2004-08-04 12:00:00 81,920 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll + 2007-08-13 23:45:18 78,336 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll + 2007-10-10 23:55:54 6,065,664 -c----w C:\WINDOWS\system32\dllcache\ieframe.dll - 2004-08-04 12:00:00 249,344 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll + 2007-08-13 23:54:10 191,488 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll - 2004-08-04 12:00:00 48,640 -c--a-w C:\WINDOWS\system32\dllcache\iernonce.dll + 2007-10-10 23:55:55 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll + 2007-10-10 23:55:55 267,776 -c----w C:\WINDOWS\system32\dllcache\iertutil.dll - 2004-08-04 12:00:00 62,976 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll + 2007-08-13 23:39:12 55,296 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll + 2007-10-10 10:59:40 13,824 -c----w C:\WINDOWS\system32\dllcache\ieudinit.exe - 2004-08-04 12:00:00 93,184 -c--a-w C:\WINDOWS\system32\dllcache\iexplore.exe + 2007-10-10 10:59:52 625,152 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe - 2004-08-04 12:00:00 35,840 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll + 2007-08-13 23:36:06 36,352 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll - 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll + 2007-08-13 23:39:02 92,672 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll - 2004-08-04 12:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll + 2007-10-10 23:55:56 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll - 2004-08-04 12:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\laprxy.dll + 2006-10-19 02:47:14 11,264 -c--a-w C:\WINDOWS\system32\dllcache\LAPRXY.dll - 2004-08-04 12:00:00 22,016 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll + 2007-08-13 23:44:18 40,960 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll - 2004-08-04 12:00:00 103,936 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe + 2006-10-19 01:03:58 100,864 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe - 2004-08-04 12:00:00 1,024,000 -c--a-w C:\WINDOWS\system32\dllcache\mfc42u.dll + 2006-12-14 13:45:53 981,760 -c--a-w C:\WINDOWS\system32\dllcache\mfc42u.dll - 2004-08-12 06:00:00 786,432 -c--a-w C:\WINDOWS\system32\dllcache\migrate.exe + 2007-10-30 19:02:36 786,432 -c--a-w C:\WINDOWS\system32\dllcache\migrate.exe + 2001-08-17 18:57:38 16,128 -c--a-w C:\WINDOWS\system32\dllcache\modemcsa.sys - 2004-08-04 12:00:00 310,272 -c--a-w C:\WINDOWS\system32\dllcache\mp43dmod.dll + 2006-10-19 02:47:14 4,096 -c--a-w C:\WINDOWS\system32\dllcache\MP43DMOD.dll - 2004-08-04 12:00:00 384,512 -c--a-w C:\WINDOWS\system32\dllcache\mp4sdmod.dll + 2006-10-19 02:47:14 4,096 -c--a-w C:\WINDOWS\system32\dllcache\MP4SDMOD.dll - 2004-08-04 12:00:00 240,640 -c--a-w C:\WINDOWS\system32\dllcache\mpg4dmod.dll + 2006-10-19 02:47:14 4,096 -c--a-w C:\WINDOWS\system32\dllcache\MPG4DMOD.dll - 2004-08-12 06:00:00 123,392 -c--a-w C:\WINDOWS\system32\dllcache\mplay32.exe + 2007-10-30 19:02:41 123,392 -c--a-w C:\WINDOWS\system32\dllcache\mplay32.exe - 2004-08-12 06:00:00 4,639 -c--a-w C:\WINDOWS\system32\dllcache\mplayer2.exe + 2007-10-30 19:02:41 4,639 -c--a-w C:\WINDOWS\system32\dllcache\mplayer2.exe - 2004-08-04 12:00:00 368,640 -c--a-w C:\WINDOWS\system32\dllcache\mpvis.dll + 2006-10-19 02:47:14 243,712 -c--a-w C:\WINDOWS\system32\dllcache\mpvis.dll - 2004-08-04 12:00:00 4,126 -c--a-w C:\WINDOWS\system32\dllcache\msdxmlc.dll + 2007-10-30 18:58:59 4,126 -c--a-w C:\WINDOWS\system32\dllcache\msdxmlc.dll + 2007-10-10 23:55:56 459,264 -c----w C:\WINDOWS\system32\dllcache\msfeeds.dll + 2007-10-10 23:55:56 52,224 -c----w C:\WINDOWS\system32\dllcache\msfeedsbs.dll - 2004-08-04 12:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe + 2007-08-13 23:32:30 45,568 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe - 2004-08-04 12:00:00 3,003,392 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll + 2007-10-31 10:12:30 3,590,656 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll - 2004-08-04 12:00:00 448,512 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll + 2007-10-10 23:55:58 478,208 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll - 2004-08-04 12:00:00 56,832 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll + 2007-08-13 23:01:12 48,128 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll - 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll + 2007-08-13 23:54:10 156,160 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll - 2004-08-04 12:00:00 259,072 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll + 2006-10-19 02:47:16 179,712 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll - 2004-08-04 12:00:00 52,224 -c--a-w C:\WINDOWS\system32\dllcache\mspmsnsv.dll + 2006-10-19 02:47:16 27,136 -c--a-w C:\WINDOWS\system32\dllcache\mspmsnsv.dll - 2004-08-04 12:00:00 201,728 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll + 2006-10-19 02:47:16 175,616 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll - 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll + 2007-10-10 23:55:58 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll - 2004-08-04 12:00:00 356,352 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll + 2006-10-19 02:47:16 414,208 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll - 2004-08-04 12:00:00 530,432 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll + 2007-10-10 23:55:59 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll - 2004-08-04 12:00:00 245,760 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll + 2006-10-19 02:47:16 321,536 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll - 2004-08-12 06:00:00 226,816 -c--a-w C:\WINDOWS\system32\dllcache\npdrmv2.dll + 2007-10-30 19:03:20 226,816 -c--a-w C:\WINDOWS\system32\dllcache\npdrmv2.dll - 2004-08-04 12:00:00 364,544 -c--a-w C:\WINDOWS\system32\dllcache\npdsplay.dll + 2007-10-30 19:01:55 364,544 -c--a-w C:\WINDOWS\system32\dllcache\npdsplay.dll - 2004-08-12 06:00:00 10,240 -c--a-w C:\WINDOWS\system32\dllcache\npwmsdrm.dll + 2007-10-30 19:01:55 10,240 -c--a-w C:\WINDOWS\system32\dllcache\npwmsdrm.dll - 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\system32\dllcache\occache.dll + 2007-10-10 23:55:59 102,400 -c----w C:\WINDOWS\system32\dllcache\occache.dll - 2004-08-04 12:00:00 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2007-08-13 23:36:12 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll - 2004-08-04 12:00:00 774,144 -c--a-w C:\WINDOWS\system32\dllcache\setup_wm.exe + 2006-11-01 23:31:38 1,669,120 -c--a-w C:\WINDOWS\system32\dllcache\setup_wm.exe - 2004-08-04 12:00:00 151,552 -c--a-w C:\WINDOWS\system32\dllcache\shmedia.dll + 2007-10-30 19:02:01 152,064 -c--a-w C:\WINDOWS\system32\dllcache\shmedia.dll - 2004-08-04 12:00:00 246,302 -c--a-w C:\WINDOWS\system32\dllcache\strmdll.dll + 2006-08-21 14:52:08 246,814 -c--a-w C:\WINDOWS\system32\dllcache\strmdll.dll - 2004-08-04 12:00:00 208,896 -c--a-w C:\WINDOWS\system32\dllcache\unregmp2.exe + 2006-11-01 23:31:34 315,904 -c--a-w C:\WINDOWS\system32\dllcache\unregmp2.exe - 2004-08-04 12:00:00 37,888 -c--a-w C:\WINDOWS\system32\dllcache\url.dll + 2007-10-10 23:55:59 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll - 2004-08-04 12:00:00 601,088 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll + 2007-10-10 23:56:00 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll - 2004-08-04 12:00:00 848,384 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll + 2007-07-12 23:31:54 765,952 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll - 2004-08-04 12:00:00 276,480 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll + 2007-10-10 23:56:00 232,960 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll - 2004-08-04 12:00:00 656,384 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll + 2007-10-10 23:56:00 824,832 -c----w C:\WINDOWS\system32\dllcache\wininet.dll - 2004-08-04 12:00:00 408,064 -c--a-w C:\WINDOWS\system32\dllcache\wmadmod.dll + 2006-10-19 02:47:18 757,248 -c--a-w C:\WINDOWS\system32\dllcache\WMADMOD.dll - 2004-08-04 12:00:00 670,720 -c--a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll + 2006-10-19 02:47:18 1,117,696 -c--a-w C:\WINDOWS\system32\dllcache\WMADMOE.dll - 2004-08-04 12:00:00 230,400 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll + 2007-10-27 22:40:30 222,720 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll - 2004-08-04 12:00:00 27,136 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll + 2006-10-19 02:47:18 33,792 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll - 2004-08-04 12:00:00 23,552 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll + 2006-10-19 02:47:18 37,376 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll - 2004-08-04 12:00:00 168,448 -c--a-w C:\WINDOWS\system32\dllcache\wmerror.dll + 2006-10-19 02:47:20 227,328 -c--a-w C:\WINDOWS\system32\dllcache\wmerror.dll - 2004-08-04 12:00:00 151,552 -c--a-w C:\WINDOWS\system32\dllcache\wmidx.dll + 2006-10-19 02:47:20 157,184 -c--a-w C:\WINDOWS\system32\dllcache\wmidx.dll - 2004-08-04 12:00:00 1,050,624 -c--a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll + 2006-10-19 02:47:20 937,984 -c--a-w C:\WINDOWS\system32\dllcache\WMNetMgr.dll - 2004-08-04 12:00:00 4,874,240 -c--a-w C:\WINDOWS\system32\dllcache\wmp.dll + 2006-10-19 02:47:20 10,834,432 -c--a-w C:\WINDOWS\system32\dllcache\wmp.dll - 2004-08-04 12:00:00 114,688 -c--a-w C:\WINDOWS\system32\dllcache\wmpasf.dll + 2006-10-19 02:47:20 242,688 -c--a-w C:\WINDOWS\system32\dllcache\wmpasf.dll - 2004-08-04 12:00:00 98,304 -c--a-w C:\WINDOWS\system32\dllcache\wmpband.dll + 2006-10-19 02:47:20 96,256 -c--a-w C:\WINDOWS\system32\dllcache\wmpband.dll - 2004-08-04 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcd.dll + 2007-10-30 19:02:11 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcd.dll - 2004-08-04 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcore.dll + 2007-10-30 19:02:11 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcore.dll - 2004-08-04 12:00:00 233,472 -c--a-w C:\WINDOWS\system32\dllcache\wmpdxm.dll + 2006-10-19 02:47:20 314,880 -c--a-w C:\WINDOWS\system32\dllcache\wmpdxm.dll - 2004-08-04 12:00:00 73,728 -c--a-w C:\WINDOWS\system32\dllcache\wmplayer.exe + 2006-10-19 02:46:20 64,000 -c--a-w C:\WINDOWS\system32\dllcache\wmplayer.exe - 2004-08-04 12:00:00 2,940,928 -c--a-w C:\WINDOWS\system32\dllcache\wmploc.dll + 2006-10-19 02:47:20 8,231,936 -c--a-w C:\WINDOWS\system32\dllcache\wmploc.dll - 2004-08-12 06:00:00 221,184 -c--a-w C:\WINDOWS\system32\dllcache\wmpns.dll + 2007-10-30 19:02:11 221,184 -c--a-w C:\WINDOWS\system32\dllcache\wmpns.dll - 2004-08-04 12:00:00 102,400 -c--a-w C:\WINDOWS\system32\dllcache\wmpshell.dll + 2006-10-19 02:47:20 99,840 -c--a-w C:\WINDOWS\system32\dllcache\wmpshell.dll - 2004-08-04 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpui.dll + 2007-10-30 19:02:11 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpui.dll - 2004-08-04 12:00:00 759,296 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll + 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll - 2004-08-04 12:00:00 115,200 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe.dll + 2007-10-30 19:02:11 115,200 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe.dll - 2004-08-04 12:00:00 1,119,744 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe2.dll + 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe2.dll - 2004-08-04 12:00:00 484,864 -c--a-w C:\WINDOWS\system32\dllcache\wmspdmod.dll + 2006-10-19 02:47:22 603,648 -c--a-w C:\WINDOWS\system32\dllcache\WMSPDMOD.dll - 2004-08-04 12:00:00 896,512 -c--a-w C:\WINDOWS\system32\dllcache\wmspdmoe.dll + 2006-10-19 02:47:22 1,329,152 -c--a-w C:\WINDOWS\system32\dllcache\WMSPDMOE.dll - 2004-08-04 12:00:00 303,616 -c--a-w C:\WINDOWS\system32\dllcache\wmstream.dll + 2007-10-30 19:02:11 303,616 -c--a-w C:\WINDOWS\system32\dllcache\wmstream.dll - 2004-08-04 12:00:00 2,105,344 -c--a-w C:\WINDOWS\system32\dllcache\wmvcore.dll + 2006-10-19 02:47:22 2,450,944 -c--a-w C:\WINDOWS\system32\dllcache\wmvcore.dll - 2004-08-04 12:00:00 809,984 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll + 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll - 2004-08-04 12:00:00 1,001,472 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmoe2.dll + 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmoe2.dll - 2004-08-04 12:00:00 5,120 ----a-w C:\WINDOWS\system32\dllhost.exe + 2007-10-30 19:02:21 5,120 ----a-w C:\WINDOWS\system32\dllhost.exe - 2004-08-04 12:00:00 224,768 ----a-w C:\WINDOWS\system32\dmadmin.exe + 2007-10-30 19:02:21 224,768 ----a-w C:\WINDOWS\system32\dmadmin.exe - 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dmband.dll + 2007-10-30 19:01:39 28,672 ----a-w C:\WINDOWS\system32\dmband.dll - 2004-08-04 12:00:00 61,440 ----a-w C:\WINDOWS\system32\dmcompos.dll + 2007-10-30 19:01:39 61,440 ----a-w C:\WINDOWS\system32\dmcompos.dll - 2004-08-04 12:00:00 273,920 ----a-w C:\WINDOWS\system32\dmdlgs.dll + 2007-10-30 19:01:39 285,184 ----a-w C:\WINDOWS\system32\dmdlgs.dll - 2004-08-04 12:00:00 200,704 ----a-w C:\WINDOWS\system32\dmdskmgr.dll + 2007-10-30 19:01:39 200,704 ----a-w C:\WINDOWS\system32\dmdskmgr.dll - 2004-08-04 12:00:00 181,248 ----a-w C:\WINDOWS\system32\dmime.dll + 2007-10-30 19:01:39 181,248 ----a-w C:\WINDOWS\system32\dmime.dll - 2004-08-04 12:00:00 35,840 ----a-w C:\WINDOWS\system32\dmloader.dll + 2007-10-30 19:01:39 35,840 ----a-w C:\WINDOWS\system32\dmloader.dll - 2004-08-04 12:00:00 15,872 ----a-w C:\WINDOWS\system32\dmremote.exe + 2007-10-30 19:02:21 15,872 ----a-w C:\WINDOWS\system32\dmremote.exe - 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\dmscript.dll + 2007-10-30 19:01:39 82,432 ----a-w C:\WINDOWS\system32\dmscript.dll - 2004-08-04 12:00:00 23,552 ----a-w C:\WINDOWS\system32\dmserver.dll + 2007-10-30 19:01:39 23,552 ----a-w C:\WINDOWS\system32\dmserver.dll - 2004-08-04 12:00:00 105,984 ----a-w C:\WINDOWS\system32\dmstyle.dll + 2007-10-30 19:01:39 105,984 ----a-w C:\WINDOWS\system32\dmstyle.dll - 2004-08-04 12:00:00 103,424 ----a-w C:\WINDOWS\system32\dmsynth.dll + 2007-10-30 19:01:39 103,424 ----a-w C:\WINDOWS\system32\dmsynth.dll - 2004-08-04 12:00:00 104,448 ----a-w C:\WINDOWS\system32\dmusic.dll + 2007-10-30 19:01:39 104,448 ----a-w C:\WINDOWS\system32\dmusic.dll - 2004-08-04 12:00:00 52,224 ----a-w C:\WINDOWS\system32\dmutil.dll + 2007-10-30 19:01:39 52,224 ----a-w C:\WINDOWS\system32\dmutil.dll - 2004-08-04 12:00:00 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll + 2007-10-30 19:01:39 147,456 ----a-w C:\WINDOWS\system32\dnsapi.dll - 2004-08-04 12:00:00 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll + 2007-10-30 19:01:39 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll - 2004-08-04 12:00:00 48,128 ----a-w C:\WINDOWS\system32\docprop2.dll + 2007-10-30 19:01:39 48,128 ----a-w C:\WINDOWS\system32\docprop2.dll + 2007-10-30 19:01:39 26,112 ------w C:\WINDOWS\system32\dot3api.dll + 2007-10-30 19:01:39 57,856 ------w C:\WINDOWS\system32\dot3cfg.dll + 2007-10-30 19:01:39 9,216 ------w C:\WINDOWS\system32\dot3dlg.dll + 2007-10-30 19:01:39 39,936 ------w C:\WINDOWS\system32\dot3gpclnt.dll + 2007-10-30 19:01:39 56,320 ------w C:\WINDOWS\system32\dot3msm.dll + 2007-10-30 19:01:39 132,096 ------w C:\WINDOWS\system32\dot3svc.dll + 2007-10-30 19:01:39 650,752 ------w C:\WINDOWS\system32\dot3ui.dll - 2004-08-04 12:00:00 96,768 ----a-w C:\WINDOWS\system32\dpcdll.dll + 2007-10-30 19:01:39 101,376 ----a-w C:\WINDOWS\system32\dpcdll.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\dplaysvr.exe + 2007-10-30 19:02:21 29,696 ----a-w C:\WINDOWS\system32\dplaysvr.exe - 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\dplayx.dll + 2007-10-30 19:01:39 229,888 ----a-w C:\WINDOWS\system32\dplayx.dll - 2004-08-04 12:00:00 23,552 ----a-w C:\WINDOWS\system32\dpmodemx.dll + 2007-10-30 19:01:39 23,552 ----a-w C:\WINDOWS\system32\dpmodemx.dll - 2004-08-04 12:00:00 3,584 ----a-w C:\WINDOWS\system32\dpnaddr.dll + 2007-10-30 18:57:51 3,072 ----a-w C:\WINDOWS\system32\dpnaddr.dll - 2004-08-04 12:00:00 375,296 ----a-w C:\WINDOWS\system32\dpnet.dll + 2007-10-30 19:01:39 375,296 ----a-w C:\WINDOWS\system32\dpnet.dll - 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\dpnhpast.dll + 2007-10-30 19:01:39 35,328 ----a-w C:\WINDOWS\system32\dpnhpast.dll - 2004-08-04 12:00:00 60,928 ----a-w C:\WINDOWS\system32\dpnhupnp.dll + 2007-10-30 19:01:39 60,928 ----a-w C:\WINDOWS\system32\dpnhupnp.dll - 2004-08-04 12:00:00 3,584 ----a-w C:\WINDOWS\system32\dpnlobby.dll + 2007-10-30 18:57:51 3,072 ----a-w C:\WINDOWS\system32\dpnlobby.dll - 2004-08-04 12:00:00 18,432 ----a-w C:\WINDOWS\system32\dpnsvr.exe + 2007-10-30 19:02:21 17,920 ----a-w C:\WINDOWS\system32\dpnsvr.exe - 2004-08-04 12:00:00 21,504 ----a-w C:\WINDOWS\system32\dpvacm.dll + 2007-10-30 19:01:39 21,504 ----a-w C:\WINDOWS\system32\dpvacm.dll - 2004-08-04 12:00:00 212,480 ----a-w C:\WINDOWS\system32\dpvoice.dll + 2007-10-30 19:01:39 212,480 ----a-w C:\WINDOWS\system32\dpvoice.dll - 2004-08-04 12:00:00 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe + 2007-10-30 19:02:21 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe - 2004-08-04 12:00:00 116,736 ----a-w C:\WINDOWS\system32\dpvvox.dll + 2007-10-30 19:01:39 116,736 ----a-w C:\WINDOWS\system32\dpvvox.dll - 2004-08-04 12:00:00 57,344 ----a-w C:\WINDOWS\system32\dpwsockx.dll + 2007-10-30 19:01:39 57,344 ----a-w C:\WINDOWS\system32\dpwsockx.dll - 2004-08-04 12:00:00 58,368 ----a-w C:\WINDOWS\system32\driverquery.exe + 2007-10-30 19:02:21 62,976 ----a-w C:\WINDOWS\system32\driverquery.exe - 2004-08-04 12:00:00 187,776 ----a-w C:\WINDOWS\system32\drivers\acpi.sys + 2007-10-30 13:16:43 187,776 ----a-w C:\WINDOWS\system32\drivers\acpi.sys + 2004-09-16 18:26:40 12,634 ----a-w C:\WINDOWS\system32\drivers\ADFUUD.SYS + 2007-10-30 19:01:33 4,255 ------w C:\WINDOWS\system32\drivers\adv01nt5.dll + 2007-10-30 19:01:33 3,967 ------w C:\WINDOWS\system32\drivers\adv02nt5.dll + 2007-10-30 19:01:33 3,615 ------w C:\WINDOWS\system32\drivers\adv05nt5.dll + 2007-10-30 19:01:33 3,647 ------w C:\WINDOWS\system32\drivers\adv07nt5.dll + 2007-10-30 19:01:33 3,135 ------w C:\WINDOWS\system32\drivers\adv08nt5.dll + 2007-10-30 19:01:33 3,711 ------w C:\WINDOWS\system32\drivers\adv09nt5.dll + 2007-10-30 19:01:33 3,775 ------w C:\WINDOWS\system32\drivers\adv11nt5.dll - 2004-08-04 12:00:00 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys + 2007-10-30 11:07:09 142,592 ----a-w C:\WINDOWS\system32\drivers\aec.sys - 2004-08-04 12:00:00 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys + 2007-10-30 14:02:17 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys - 2004-08-04 12:00:00 42,368 ----a-w C:\WINDOWS\system32\drivers\agp440.sys + 2007-10-30 13:16:45 42,368 ----a-w C:\WINDOWS\system32\drivers\agp440.sys - 2004-08-04 12:00:00 44,928 ----a-w C:\WINDOWS\system32\drivers\agpcpq.sys + 2007-10-30 13:16:45 44,928 ----a-w C:\WINDOWS\system32\drivers\agpcpq.sys - 2004-08-04 12:00:00 42,752 ----a-w C:\WINDOWS\system32\drivers\alim1541.sys + 2007-10-30 13:16:45 42,752 ----a-w C:\WINDOWS\system32\drivers\alim1541.sys - 2004-08-04 12:00:00 43,008 ----a-w C:\WINDOWS\system32\drivers\amdagp.sys + 2007-10-30 13:16:46 43,008 ----a-w C:\WINDOWS\system32\drivers\amdagp.sys - 2004-08-04 12:00:00 36,992 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys + 2007-10-30 13:10:46 37,376 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys - 2004-08-04 12:00:00 37,376 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys + 2007-10-30 13:10:46 37,760 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys - 2004-08-04 12:00:00 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys + 2007-10-30 13:08:46 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys - 2004-08-04 12:00:00 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys + 2007-10-30 13:16:12 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys - 2004-08-04 12:00:00 95,360 ----a-w C:\WINDOWS\system32\drivers\atapi.sys + 2007-10-30 13:11:10 96,384 ----a-w C:\WINDOWS\system32\drivers\atapi.sys + 2004-08-04 03:29:30 56,623 ------w C:\WINDOWS\system32\drivers\ati1btxx.sys + 2004-08-04 03:29:30 11,615 ------w C:\WINDOWS\system32\drivers\ati1mdxx.sys + 2004-08-04 03:29:30 12,047 ------w C:\WINDOWS\system32\drivers\ati1pdxx.sys + 2004-08-04 03:29:32 30,671 ------w C:\WINDOWS\system32\drivers\ati1raxx.sys + 2004-08-04 03:29:32 63,663 ------w C:\WINDOWS\system32\drivers\ati1rvxx.sys + 2004-08-04 03:29:32 26,367 ------w C:\WINDOWS\system32\drivers\ati1snxx.sys + 2004-08-04 03:29:32 21,343 ------w C:\WINDOWS\system32\drivers\ati1ttxx.sys + 2004-08-04 03:29:32 36,463 ------w C:\WINDOWS\system32\drivers\ati1tuxx.sys + 2004-08-04 03:29:32 29,455 ------w C:\WINDOWS\system32\drivers\ati1xbxx.sys + 2004-08-04 03:29:32 34,735 ------w C:\WINDOWS\system32\drivers\ati1xsxx.sys + 2004-08-04 03:29:28 327,040 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys + 2004-08-04 03:29:28 701,440 ------w C:\WINDOWS\system32\drivers\ati2mtag.sys + 2004-08-04 03:29:28 57,856 ------w C:\WINDOWS\system32\drivers\atinbtxx.sys + 2004-08-04 03:29:30 13,824 ------w C:\WINDOWS\system32\drivers\atinmdxx.sys + 2004-08-04 03:29:30 14,336 ------w C:\WINDOWS\system32\drivers\atinpdxx.sys + 2004-08-04 03:29:30 52,224 ------w C:\WINDOWS\system32\drivers\atinraxx.sys + 2004-08-04 03:29:32 104,960 ------w C:\WINDOWS\system32\drivers\atinrvxx.sys + 2004-08-04 03:29:32 28,672 ------w C:\WINDOWS\system32\drivers\atinsnxx.sys + 2004-08-04 03:29:32 13,824 ------w C:\WINDOWS\system32\drivers\atinttxx.sys + 2004-08-04 03:29:32 73,216 ------w C:\WINDOWS\system32\drivers\atintuxx.sys + 2004-08-04 03:29:32 31,744 ------w C:\WINDOWS\system32\drivers\atinxbxx.sys + 2004-08-04 03:29:32 63,488 ------w C:\WINDOWS\system32\drivers\atinxsxx.sys - 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\system32\drivers\atmarpc.sys + 2007-10-30 13:08:48 59,904 ----a-w C:\WINDOWS\system32\drivers\atmarpc.sys - 2004-08-04 12:00:00 55,936 ----a-w C:\WINDOWS\system32\drivers\atmlane.sys + 2007-10-30 13:08:52 55,808 ----a-w C:\WINDOWS\system32\drivers\atmlane.sys + 2007-10-30 19:01:34 21,183 ------w C:\WINDOWS\system32\drivers\atv01nt5.dll + 2007-10-30 19:01:34 11,359 ------w C:\WINDOWS\system32\drivers\atv02nt5.dll + 2007-10-30 19:01:34 25,471 ------w C:\WINDOWS\system32\drivers\atv04nt5.dll + 2007-10-30 19:01:34 14,143 ------w C:\WINDOWS\system32\drivers\atv06nt5.dll + 2007-10-30 19:01:34 17,279 ------w C:\WINDOWS\system32\drivers\atv10nt5.dll - 2004-08-04 12:00:00 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys + 2007-10-30 13:10:49 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys + 2007-10-30 13:18:28 17,024 ------w C:\WINDOWS\system32\drivers\bthenum.sys + 2007-10-30 13:18:27 37,888 ------w C:\WINDOWS\system32\drivers\bthmodem.sys + 2007-10-30 13:08:56 101,120 ------w C:\WINDOWS\system32\drivers\bthpan.sys + 2007-10-30 13:18:27 273,024 ------w C:\WINDOWS\system32\drivers\bthport.sys + 2007-10-30 13:18:24 36,480 ------w C:\WINDOWS\system32\drivers\bthprint.sys + 2007-10-30 13:18:22 18,944 ------w C:\WINDOWS\system32\drivers\bthusb.sys - 2004-08-04 12:00:00 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys + 2007-10-30 13:56:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys - 2004-08-04 12:00:00 49,536 ----a-w C:\WINDOWS\system32\drivers\cdrom.sys + 2007-10-30 13:11:28 62,976 ----a-w C:\WINDOWS\system32\drivers\cdrom.sys + 2007-10-30 19:01:36 15,423 ------w C:\WINDOWS\system32\drivers\ch7xxnt5.dll - 2004-08-04 12:00:00 49,664 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys + 2007-10-30 13:58:37 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys - 2004-08-04 12:00:00 36,480 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys + 2007-10-30 13:10:46 36,736 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys - 2004-08-04 12:00:00 36,352 ----a-w C:\WINDOWS\system32\drivers\disk.sys + 2007-10-30 13:11:28 36,352 ----a-w C:\WINDOWS\system32\drivers\disk.sys - 2004-08-04 12:00:00 14,208 ----a-w C:\WINDOWS\system32\drivers\diskdump.sys + 2007-10-30 13:11:21 14,208 ----a-w C:\WINDOWS\system32\drivers\diskdump.sys - 2004-08-04 12:00:00 799,744 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys + 2007-10-30 13:16:05 799,744 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys - 2004-08-04 12:00:00 153,344 ----a-w C:\WINDOWS\system32\drivers\dmio.sys + 2007-10-30 13:16:02 153,344 ----a-w C:\WINDOWS\system32\drivers\dmio.sys - 2004-08-04 03:07:40 52,864 ----a-w C:\WINDOWS\system32\drivers\DMusic.sys + 2007-10-30 13:16:24 52,864 ----a-w C:\WINDOWS\system32\drivers\dmusic.sys - 2004-08-04 12:00:00 60,288 ----a-w C:\WINDOWS\system32\drivers\drmk.sys + 2007-10-30 13:16:50 60,160 ----a-w C:\WINDOWS\system32\drivers\drmk.sys + 2007-10-30 13:11:21 9,472 ------w C:\WINDOWS\system32\drivers\dumpdrv.sys - 2004-08-04 12:00:00 71,040 ----a-w C:\WINDOWS\system32\drivers\dxg.sys + 2007-10-30 13:14:31 71,168 ----a-w C:\WINDOWS\system32\drivers\dxg.sys - 2004-08-04 12:00:00 143,360 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys + 2007-10-30 13:56:22 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys - 2004-08-04 12:00:00 27,392 ----a-w C:\WINDOWS\system32\drivers\fdc.sys + 2007-10-30 13:11:03 27,392 ----a-w C:\WINDOWS\system32\drivers\fdc.sys - 2004-08-04 12:00:00 34,944 ----a-w C:\WINDOWS\system32\drivers\fips.sys + 2007-10-30 13:12:22 44,544 ----a-w C:\WINDOWS\system32\drivers\fips.sys - 2004-08-04 12:00:00 20,480 ----a-w C:\WINDOWS\system32\drivers\flpydisk.sys + 2007-10-30 13:11:03 20,480 ----a-w C:\WINDOWS\system32\drivers\flpydisk.sys - 2004-08-04 12:00:00 124,800 ----a-w C:\WINDOWS\system32\drivers\fltMgr.sys + 2007-10-30 13:12:25 129,792 ----a-w C:\WINDOWS\system32\drivers\fltmgr.sys - 2004-08-04 12:00:00 46,464 ----a-w C:\WINDOWS\system32\drivers\gagp30kx.sys + 2007-10-30 13:16:47 46,464 ----a-w C:\WINDOWS\system32\drivers\gagp30kx.sys + 2007-10-30 13:18:24 25,600 ------w C:\WINDOWS\system32\drivers\hidbth.sys - 2004-08-04 12:00:00 36,224 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys + 2007-10-30 13:17:03 36,864 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys + 2007-10-30 13:17:04 19,200 ------w C:\WINDOWS\system32\drivers\hidir.sys - 2004-08-04 12:00:00 24,960 ----a-w C:\WINDOWS\system32\drivers\hidparse.sys + 2007-10-30 13:17:01 24,960 ----a-w C:\WINDOWS\system32\drivers\hidparse.sys - 2004-08-04 12:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys + 2007-10-30 13:17:05 10,368 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys + 2003-10-02 17:35:32 678,784 ----a-w C:\WINDOWS\system32\drivers\HSF_CNXT.sys + 2003-10-02 17:33:58 1,043,072 ----a-w C:\WINDOWS\system32\drivers\HSF_DP.sys + 2004-08-04 03:41:48 220,032 ------w C:\WINDOWS\system32\drivers\hsfbs2s2.sys + 2004-08-04 03:41:50 685,056 ------w C:\WINDOWS\system32\drivers\hsfcxts2.sys + 2004-08-04 03:41:56 1,041,536 ------w C:\WINDOWS\system32\drivers\hsfdpsp2.sys + 2003-10-02 17:36:40 210,816 ----a-w C:\WINDOWS\system32\drivers\HSFHWBS2.sys - 2004-08-04 12:00:00 263,040 ----a-w C:\WINDOWS\system32\drivers\http.sys + 2007-10-30 13:11:48 264,832 ----a-w C:\WINDOWS\system32\drivers\http.sys - 2004-08-04 12:00:00 52,736 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys + 2007-10-30 14:00:13 52,480 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys - 2004-08-04 12:00:00 41,856 ----a-w C:\WINDOWS\system32\drivers\imapi.sys + 2007-10-30 13:11:40 42,112 ----a-w C:\WINDOWS\system32\drivers\imapi.sys - 2004-08-04 12:00:00 5,504 ----a-w C:\WINDOWS\system32\drivers\intelide.sys + 2007-10-30 13:11:09 5,504 ----a-w C:\WINDOWS\system32\drivers\intelide.sys - 2004-08-04 12:00:00 36,096 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys + 2007-10-30 13:10:46 36,352 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys - 2004-08-04 12:00:00 20,992 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys + 2007-10-30 13:15:46 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys - 2004-08-04 12:00:00 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys + 2007-10-30 13:15:53 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys - 2004-08-04 12:00:00 74,752 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys + 2007-10-30 14:02:39 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys + 2007-10-30 13:17:11 46,592 ------w C:\WINDOWS\system32\drivers\irbus.sys - 2004-08-12 06:00:00 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys + 2007-10-30 13:12:15 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys - 2004-08-04 12:00:00 35,840 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys + 2007-10-30 13:16:48 37,248 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys - 2004-08-04 12:00:00 24,576 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys + 2007-10-30 13:10:21 24,576 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys - 2004-08-04 12:00:00 14,848 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys + 2007-10-30 13:10:22 14,592 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys - 2004-08-04 12:00:00 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys + 2007-10-30 13:16:34 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys - 2004-08-04 12:00:00 140,928 ----a-w C:\WINDOWS\system32\drivers\ks.sys + 2007-10-30 13:58:49 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys - 2004-08-04 12:00:00 92,032 ----a-w C:\WINDOWS\system32\drivers\ksecdd.sys + 2007-10-30 13:10:25 92,288 ----a-w C:\WINDOWS\system32\drivers\ksecdd.sys + 2003-04-09 18:48:08 11,043 ----a-w C:\WINDOWS\system32\drivers\mdmxsdk.sys - 2004-08-04 12:00:00 63,744 ----a-w C:\WINDOWS\system32\drivers\mf.sys + 2007-10-30 13:16:49 63,744 ----a-w C:\WINDOWS\system32\drivers\mf.sys - 2004-08-04 12:00:00 30,080 ----a-w C:\WINDOWS\system32\drivers\modem.sys + 2007-10-30 13:19:16 30,080 ----a-w C:\WINDOWS\system32\drivers\modem.sys + 2001-08-17 18:57:38 16,128 ----a-w C:\WINDOWS\system32\drivers\MODEMCSA.sys - 2004-08-04 12:00:00 23,040 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys + 2007-10-30 13:10:22 23,040 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys - 2004-08-04 12:00:00 42,240 ----a-w C:\WINDOWS\system32\drivers\mountmgr.sys + 2007-10-30 13:10:20 42,368 ----a-w C:\WINDOWS\system32\drivers\mountmgr.sys - 2004-08-04 12:00:00 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys + 2007-10-30 13:36:25 92,544 ----a-w C:\WINDOWS\system32\drivers\mqac.sys - 2004-08-04 12:00:00 181,248 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys + 2007-10-30 13:12:14 180,480 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys - 2004-08-04 12:00:00 451,456 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys + 2007-10-30 13:58:49 456,448 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys - 2004-08-04 12:00:00 19,072 ----a-w C:\WINDOWS\system32\drivers\msfs.sys + 2007-10-30 13:12:09 19,072 ----a-w C:\WINDOWS\system32\drivers\msfs.sys - 2004-08-04 12:00:00 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys + 2007-10-30 13:14:55 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys - 2004-08-04 12:00:00 7,552 ----a-w C:\WINDOWS\system32\drivers\mskssrv.sys + 2007-10-30 13:10:29 7,552 ----a-w C:\WINDOWS\system32\drivers\mskssrv.sys - 2004-08-04 12:00:00 5,376 ----a-w C:\WINDOWS\system32\drivers\mspclock.sys + 2007-10-30 13:10:28 5,376 ----a-w C:\WINDOWS\system32\drivers\mspclock.sys - 2004-08-04 12:00:00 4,992 ----a-w C:\WINDOWS\system32\drivers\mspqm.sys + 2007-10-30 13:10:29 4,992 ----a-w C:\WINDOWS\system32\drivers\mspqm.sys - 2004-08-04 12:00:00 15,488 ----a-w C:\WINDOWS\system32\drivers\mssmbios.sys + 2007-10-30 13:16:52 15,488 ----a-w C:\WINDOWS\system32\drivers\mssmbios.sys + 2004-08-04 03:41:40 126,686 ------w C:\WINDOWS\system32\drivers\mtlmnt5.sys + 2004-08-04 03:41:38 1,309,184 ------w C:\WINDOWS\system32\drivers\mtlstrm.sys + 2004-08-04 03:29:38 452,736 ------w C:\WINDOWS\system32\drivers\mtxparhm.sys - 2004-08-04 12:00:00 107,904 ----a-w C:\WINDOWS\system32\drivers\mup.sys + 2007-10-30 13:58:52 105,216 ----a-w C:\WINDOWS\system32\drivers\mup.sys + 2007-10-30 13:14:55 12,672 ------w C:\WINDOWS\system32\drivers\mutohpen.sys - 2004-08-04 12:00:00 182,912 ----a-w C:\WINDOWS\system32\drivers\ndis.sys + 2007-10-30 14:03:33 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys - 2004-08-04 12:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys + 2007-10-30 13:16:12 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys - 2004-08-04 12:00:00 12,928 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys + 2007-10-30 13:14:24 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys - 2004-08-04 12:00:00 91,776 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys + 2007-10-30 14:03:36 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys - 2004-08-04 12:00:00 38,016 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys + 2007-10-30 13:16:14 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys - 2004-08-04 12:00:00 34,560 ----a-w C:\WINDOWS\system32\drivers\netbios.sys + 2007-10-30 13:14:27 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys - 2004-08-04 12:00:00 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys + 2007-10-30 14:03:52 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys - 2004-08-04 12:00:00 61,824 ----a-w C:\WINDOWS\system32\drivers\nic1394.sys + 2007-10-30 13:08:46 61,824 ----a-w C:\WINDOWS\system32\drivers\nic1394.sys - 2004-08-04 12:00:00 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys + 2007-10-30 13:10:31 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys - 2004-08-04 12:00:00 30,848 ----a-w C:\WINDOWS\system32\drivers\npfs.sys + 2007-10-30 13:12:09 30,848 ----a-w C:\WINDOWS\system32\drivers\npfs.sys - 2004-08-04 12:00:00 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys + 2007-10-30 13:57:43 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys + 2004-08-04 03:41:40 180,360 ------w C:\WINDOWS\system32\drivers\ntmtlfax.sys + 2004-08-04 03:29:56 1,897,408 ------w C:\WINDOWS\system32\drivers\nv4_mini.sys - 2004-08-04 12:00:00 88,448 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys + 2007-10-30 13:14:34 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys - 2004-08-04 12:00:00 163,584 ----a-w C:\WINDOWS\system32\drivers\nwrdr.sys + 2007-10-30 13:13:03 163,584 ----a-w C:\WINDOWS\system32\drivers\nwrdr.sys - 2004-08-04 12:00:00 42,496 ----a-w C:\WINDOWS\system32\drivers\p3.sys + 2007-10-30 13:10:45 42,752 ----a-w C:\WINDOWS\system32\drivers\p3.sys - 2004-08-04 12:00:00 80,128 ----a-w C:\WINDOWS\system32\drivers\parport.sys + 2007-10-30 13:10:48 80,128 ----a-w C:\WINDOWS\system32\drivers\parport.sys - 2004-08-04 12:00:00 18,688 ----a-w C:\WINDOWS\system32\drivers\partmgr.sys + 2007-10-30 13:11:30 19,712 ----a-w C:\WINDOWS\system32\drivers\partmgr.sys - 2004-08-04 12:00:00 68,224 ----a-w C:\WINDOWS\system32\drivers\pci.sys + 2007-10-30 13:16:52 68,224 ----a-w C:\WINDOWS\system32\drivers\pci.sys - 2004-08-04 12:00:00 25,088 ----a-w C:\WINDOWS\system32\drivers\pciidex.sys + 2007-10-30 13:11:08 24,960 ----a-w C:\WINDOWS\system32\drivers\pciidex.sys - 2004-08-04 12:00:00 119,936 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys + 2007-10-30 13:16:50 120,192 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys - 2004-08-04 12:00:00 145,792 ----a-w C:\WINDOWS\system32\drivers\portcls.sys + 2007-10-30 14:01:50 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys - 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\drivers\processr.sys + 2007-10-30 13:10:44 35,840 ----a-w C:\WINDOWS\system32\drivers\processr.sys - 2004-08-04 12:00:00 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys + 2007-10-30 13:15:03 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys - 2004-08-04 12:00:00 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys + 2007-10-30 14:02:50 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys - 2004-08-04 12:00:00 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys + 2007-10-30 13:16:17 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys - 2004-08-04 12:00:00 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys + 2007-10-30 14:02:55 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys - 2004-08-04 12:00:00 176,512 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys + 2007-10-30 14:10:22 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys - 2004-08-04 03:01:16 196,864 ----a-w C:\WINDOWS\system32\drivers\rdpdr.sys + 2007-10-30 13:12:22 196,224 ----a-w C:\WINDOWS\system32\drivers\rdpdr.sys - 2004-08-04 12:00:00 139,400 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys + 2007-10-30 19:03:45 139,656 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys + 2004-08-04 03:41:40 13,776 ------w C:\WINDOWS\system32\drivers\recagent.sys - 2004-08-03 22:59:38 57,472 ----a-w C:\WINDOWS\system32\drivers\redbook.sys + 2007-10-30 13:11:06 57,600 ----a-w C:\WINDOWS\system32\drivers\redbook.sys + 2007-10-30 13:18:27 59,136 ------w C:\WINDOWS\system32\drivers\rfcomm.sys - 2004-08-04 12:00:00 200,064 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys + 2007-10-30 13:12:58 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys - 2004-08-04 12:00:00 30,080 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys + 2007-10-30 13:15:19 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys - 2004-08-04 04:04:32 30,080 ----a-w C:\WINDOWS\system32\drivers\rndismpx.sys + 2007-10-30 13:15:19 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismpx.sys + 2004-08-04 03:29:52 166,912 ------w C:\WINDOWS\system32\drivers\s3gnbm.sys - 2004-08-04 12:00:00 96,256 ----a-w C:\WINDOWS\system32\drivers\scsiport.sys + 2007-10-30 13:11:09 96,384 ----a-w C:\WINDOWS\system32\drivers\scsiport.sys - 2004-08-04 12:00:00 67,584 ----a-w C:\WINDOWS\system32\drivers\sdbus.sys + 2007-10-30 13:16:52 79,232 ----a-w C:\WINDOWS\system32\drivers\sdbus.sys - 2004-08-04 12:00:00 15,488 ----a-w C:\WINDOWS\system32\drivers\serenum.sys + 2007-10-30 13:10:50 15,744 ----a-w C:\WINDOWS\system32\drivers\serenum.sys - 2004-08-04 12:00:00 64,896 ----a-w C:\WINDOWS\system32\drivers\serial.sys + 2007-10-30 13:58:00 64,512 ----a-w C:\WINDOWS\system32\drivers\serial.sys + 2005-08-10 12:44:04 50,688 ----a-w C:\WINDOWS\system32\drivers\sfdrv01.sys - 2004-08-04 12:00:00 11,136 ----a-w C:\WINDOWS\system32\drivers\sffdisk.sys + 2007-10-30 13:11:28 11,904 ----a-w C:\WINDOWS\system32\drivers\sffdisk.sys - 2007-05-03 11:34:32 10,240 ----a-w C:\WINDOWS\system32\drivers\sffp_mmc.sys + 2007-10-30 13:11:29 10,240 ----a-w C:\WINDOWS\system32\drivers\sffp_mmc.sys - 2004-08-04 12:00:00 10,240 ----a-w C:\WINDOWS\system32\drivers\sffp_sd.sys + 2007-10-30 13:11:28 11,008 ----a-w C:\WINDOWS\system32\drivers\sffp_sd.sys + 2005-05-16 13:20:39 6,656 ----a-w C:\WINDOWS\system32\drivers\sfhlp02.sys - 2004-08-04 12:00:00 11,392 ----a-w C:\WINDOWS\system32\drivers\sfloppy.sys + 2007-10-30 13:11:29 11,392 ----a-w C:\WINDOWS\system32\drivers\sfloppy.sys + 2005-11-03 14:40:07 63,488 ----a-w C:\WINDOWS\system32\drivers\sfvfs02.sys + 2007-10-30 19:02:01 3,901 ------w C:\WINDOWS\system32\drivers\siint5.dll - 2004-08-04 12:00:00 41,088 ----a-w C:\WINDOWS\system32\drivers\sisagp.sys + 2007-10-30 13:16:46 40,960 ----a-w C:\WINDOWS\system32\drivers\sisagp.sys + 2004-08-04 03:41:42 129,535 ------w C:\WINDOWS\system32\drivers\slnt7554.sys + 2004-08-04 03:41:44 404,990 ------w C:\WINDOWS\system32\drivers\slntamr.sys + 2004-08-04 03:41:46 95,424 ------w C:\WINDOWS\system32\drivers\slnthal.sys + 2004-08-04 03:41:46 13,240 ------w C:\WINDOWS\system32\drivers\slwdmsup.sys + 2007-10-30 13:16:41 5,888 ------w C:\WINDOWS\system32\drivers\smbali.sys - 2004-08-04 12:00:00 25,472 ----a-w C:\WINDOWS\system32\drivers\sonydcam.sys + 2007-10-30 13:17:58 25,344 ----a-w C:\WINDOWS\system32\drivers\sonydcam.sys - 2004-08-04 04:07:48 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys + 2007-10-30 13:16:32 6,272 ----a-w C:\WINDOWS\system32\drivers\splitter.sys - 2004-08-12 06:00:00 73,472 ----a-w C:\WINDOWS\system32\drivers\sr.sys + 2007-10-30 13:25:16 73,472 ----a-w C:\WINDOWS\system32\drivers\sr.sys This post has been edited by BTMark: Jan 15 2008, 03:31 AM

BTMark View Member Profile	Jan 15 2008, 03:31 AM Post #13
Member Posts: 23 OS: Windows XP SP2	+ 2007-10-30 19:02:08 58,434 ------w C:\WINDOWS\ServicePackFiles\i386\srchctls.dll + 2007-10-30 19:02:08 726,078 ------w C:\WINDOWS\ServicePackFiles\i386\srchui.dll + 2007-10-30 19:02:08 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\srclient.dll + 2007-10-30 19:02:08 239,104 ------w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll + 2007-10-30 19:02:08 171,008 ------w C:\WINDOWS\ServicePackFiles\i386\srsvc.dll + 2007-10-30 13:57:03 334,848 ------w C:\WINDOWS\ServicePackFiles\i386\srv.sys + 2007-10-30 19:02:08 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\srvsvc.dll + 2007-10-30 19:03:06 704,512 ------w C:\WINDOWS\ServicePackFiles\i386\ss3dfo.scr + 2007-10-30 19:03:06 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\ssbezier.scr + 2007-10-30 19:02:08 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\ssdpapi.dll + 2007-10-30 19:02:08 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll + 2007-10-30 19:03:07 393,216 ------w C:\WINDOWS\ServicePackFiles\i386\ssflwbox.scr + 2007-10-30 19:02:08 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\ssinc51.dll + 2007-10-30 19:03:07 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\ssmarque.scr + 2007-10-30 19:03:07 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\ssmypics.scr + 2007-10-30 19:03:07 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\ssmyst.scr + 2007-10-30 19:02:08 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\sspifilt.dll + 2007-10-30 19:03:07 610,304 ------w C:\WINDOWS\ServicePackFiles\i386\sspipes.scr + 2007-10-30 19:03:07 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\ssstars.scr + 2007-10-30 19:03:08 679,936 ------w C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr + 2007-10-30 19:02:08 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\sstub.dll + 2007-10-30 19:02:08 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\staxmem.dll + 2007-10-30 19:02:08 59,392 ------w C:\WINDOWS\ServicePackFiles\i386\stclient.dll + 2007-10-30 19:02:08 86,528 ------w C:\WINDOWS\ServicePackFiles\i386\stdprov.dll + 2007-10-30 19:02:08 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\sti.dll + 2007-10-30 19:02:08 136,704 ------w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll + 2007-10-30 19:02:56 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\stimon.exe + 2007-10-30 19:02:08 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\stobject.dll + 2007-10-30 19:02:08 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\storprop.dll + 2007-10-30 13:16:50 49,280 ------w C:\WINDOWS\ServicePackFiles\i386\stream.sys + 2007-10-30 13:18:07 15,232 ------w C:\WINDOWS\ServicePackFiles\i386\streamip.sys + 2007-10-30 19:02:08 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\strmfilt.dll + 2007-10-30 19:02:56 16,449 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe + 2007-10-30 19:02:56 65,601 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe + 2007-10-30 19:02:08 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\svcext51.dll + 2007-10-30 19:02:56 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\svchost.exe + 2007-10-30 13:10:30 4,352 ------w C:\WINDOWS\ServicePackFiles\i386\swenum.sys + 2007-10-30 13:16:33 56,576 ------w C:\WINDOWS\ServicePackFiles\i386\swmidi.sys + 2007-10-30 19:02:08 713,216 ------w C:\WINDOWS\ServicePackFiles\i386\sxs.dll + 2007-06-27 12:57:55 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\sy52106.dll + 2007-10-30 19:02:08 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\synceng.dll + 2007-10-30 19:02:08 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\syncui.dll + 2007-10-30 13:58:11 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys + 2007-10-30 19:02:56 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\sysinfo.exe + 2007-10-30 19:02:08 193,024 ------w C:\WINDOWS\ServicePackFiles\i386\sysmod.dll + 2007-10-30 19:02:08 173,568 ------w C:\WINDOWS\ServicePackFiles\i386\sysmoda.dll + 2007-10-30 19:02:56 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe + 2007-10-30 19:02:08 990,208 ------w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll + 2007-06-27 12:57:55 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\system.configuration.install.dll + 2007-06-27 12:58:00 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\system.data.dll + 2007-06-27 12:58:10 1,695,744 ------w C:\WINDOWS\ServicePackFiles\i386\system.design.dll + 2007-06-27 12:58:18 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\system.directoryservices.dll + 2007-06-27 12:58:21 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\system.drawing.design.dll + 2007-06-27 12:58:26 462,848 ------w C:\WINDOWS\ServicePackFiles\i386\system.drawing.dll + 2007-06-27 12:58:31 212,992 ------w C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.dll + 2007-10-30 10:38:00 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.thunk.dll + 2007-06-27 12:58:39 352,256 ------w C:\WINDOWS\ServicePackFiles\i386\system.management.dll + 2007-06-27 12:58:43 241,664 ------w C:\WINDOWS\ServicePackFiles\i386\system.messaging.dll + 2007-06-27 12:58:55 311,296 ------w C:\WINDOWS\ServicePackFiles\i386\system.runtime.remoting.dll + 2007-06-27 12:59:02 131,072 ------w C:\WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll + 2007-06-27 12:59:05 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\system.security.dll + 2007-06-27 12:59:10 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\system.serviceprocess.dll + 2007-06-27 12:59:17 1,200,128 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.dll + 2007-06-27 12:59:21 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.regularexpressions.dll + 2007-06-27 12:59:25 507,904 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.services.dll + 2007-06-27 12:59:34 2,002,944 ------w C:\WINDOWS\ServicePackFiles\i386\system.windows.forms.dll + 2007-06-27 12:59:48 1,302,528 ------w C:\WINDOWS\ServicePackFiles\i386\system.xml.dll + 2007-10-30 19:02:08 117,760 ------w C:\WINDOWS\ServicePackFiles\i386\t2embed.dll + 2007-10-30 19:02:56 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\tabcal.exe + 2007-10-30 19:02:08 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\tabletoc.dll + 2007-10-30 13:11:31 14,976 ------w C:\WINDOWS\ServicePackFiles\i386\tape.sys + 2007-10-30 19:02:08 858,624 ------w C:\WINDOWS\ServicePackFiles\i386\tapi3.dll + 2007-10-30 19:02:08 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\tapi32.dll + 2007-10-30 19:02:08 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll + 2007-10-30 19:02:56 76,288 ------w C:\WINDOWS\ServicePackFiles\i386\taskkill.exe + 2007-10-30 19:02:56 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\tasklist.exe + 2007-10-30 19:02:57 135,680 ------w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe + 2007-10-30 14:03:13 361,088 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip.sys + 2007-10-30 13:18:55 225,664 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys + 2007-10-30 19:02:08 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmib.dll + 2007-10-30 19:02:08 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmon.dll + 2007-10-30 19:02:08 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll + 2007-10-30 19:02:57 32,827 ------w C:\WINDOWS\ServicePackFiles\i386\tcptest.exe + 2007-04-02 16:36:07 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\tcptsat.dll + 2007-10-30 13:18:59 19,072 ------w C:\WINDOWS\ServicePackFiles\i386\tdi.sys + 2007-10-30 19:03:44 12,040 ------w C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys + 2007-10-30 19:03:44 21,896 ------w C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys + 2007-10-30 19:02:57 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\telnet.exe + 2007-10-30 19:03:43 40,840 ------w C:\WINDOWS\ServicePackFiles\i386\termdd.sys + 2007-10-30 19:02:08 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\termmgr.dll + 2007-10-30 19:02:08 295,424 ------w C:\WINDOWS\ServicePackFiles\i386\termsrv.dll + 2007-10-30 13:11:32 149,376 ------w C:\WINDOWS\ServicePackFiles\i386\tffsport.sys + 2007-10-30 19:02:08 385,536 ------w C:\WINDOWS\ServicePackFiles\i386\themeui.dll + 2007-10-30 19:02:57 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\tlntadmn.exe + 2007-10-30 19:02:57 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsess.exe + 2007-10-30 19:02:57 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsvr.exe + 2007-10-30 19:02:09 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsvrp.dll + 2007-10-30 10:38:11 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\togac.exe + 2007-10-30 19:02:09 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\tools.dll + 2007-10-30 19:02:58 347,136 ------w C:\WINDOWS\ServicePackFiles\i386\tourstrt.exe + 2007-10-30 19:02:58 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\tp4mon.exe + 2007-10-30 19:02:58 259,584 ------w C:\WINDOWS\ServicePackFiles\i386\tracerpt.exe + 2007-10-30 19:02:58 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\tracert.exe + 2007-10-30 19:03:04 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\tree.com + 2007-10-30 19:02:09 153,088 ------w C:\WINDOWS\ServicePackFiles\i386\triedit.dll + 2007-10-30 19:02:09 90,112 ------w C:\WINDOWS\ServicePackFiles\i386\trkwks.dll + 2007-10-30 19:02:09 93,696 ------w C:\WINDOWS\ServicePackFiles\i386\tscfgwmi.dll + 2007-10-30 10:06:46 18,359 ------w C:\WINDOWS\ServicePackFiles\i386\tscinst.vbs + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\ServicePackFiles\i386\tscuinst.vbs + 2007-10-30 19:01:18 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\tscupdc.dll + 2007-10-30 19:03:45 12,168 ------w C:\WINDOWS\ServicePackFiles\i386\tsddd.dll + 2007-10-30 19:02:09 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\tsgqec.dll + 2007-10-30 19:02:09 279,040 ------w C:\WINDOWS\ServicePackFiles\i386\tshoot.dll + 2007-10-30 19:02:09 130,048 ------w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll + 2007-10-30 19:02:09 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\tspkg.dll + 2007-10-30 19:02:09 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\tty.dll + 2007-04-02 15:31:00 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\ttyres.dll + 2007-10-30 19:02:09 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\ttyui.dll + 2007-10-30 13:14:25 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\tunmp.sys + 2007-10-30 19:02:09 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\twain_32.dll + 2007-10-30 19:02:09 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\twext.dll + 2007-10-30 19:02:09 101,376 ------w C:\WINDOWS\ServicePackFiles\i386\txflog.dll + 2007-10-30 19:02:58 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\tzchange.exe + 2007-10-30 13:16:46 44,672 ------w C:\WINDOWS\ServicePackFiles\i386\uagp35.sys + 2007-10-30 13:12:05 66,048 ------w C:\WINDOWS\ServicePackFiles\i386\udfs.sys + 2007-10-30 19:02:09 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll + 2007-10-30 19:02:09 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\uihelper.dll + 2007-10-30 19:02:09 275,456 ------w C:\WINDOWS\ServicePackFiles\i386\ulib.dll + 2007-10-30 19:02:09 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\umandlg.dll + 2007-10-30 19:02:09 123,392 ------w C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll + 2007-10-30 19:02:09 372,736 ------w C:\WINDOWS\ServicePackFiles\i386\unidrv.dll + 2007-10-30 19:02:09 740,864 ------w C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll + 2007-10-30 19:02:09 74,240 ------w C:\WINDOWS\ServicePackFiles\i386\unimdmat.dll + 2007-10-30 19:02:09 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\uniplat.dll + 2007-05-15 08:08:53 761,344 ------w C:\WINDOWS\ServicePackFiles\i386\unires.dll + 2007-10-30 19:02:09 316,416 ------w C:\WINDOWS\ServicePackFiles\i386\untfs.dll + 2007-10-30 13:10:21 364,160 ------w C:\WINDOWS\ServicePackFiles\i386\update.sys + 2007-10-30 19:02:59 150,528 ------w C:\WINDOWS\ServicePackFiles\i386\uploadm.exe + 2007-10-30 19:02:09 133,632 ------w C:\WINDOWS\ServicePackFiles\i386\upnp.dll + 2007-10-30 19:02:59 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\upnpcont.exe + 2007-10-30 19:02:09 185,856 ------w C:\WINDOWS\ServicePackFiles\i386\upnphost.dll + 2007-10-30 19:02:09 239,616 ------w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll + 2007-10-30 19:02:59 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\ups.exe + 2007-10-30 19:02:09 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\url.dll + 2007-10-30 19:02:09 619,008 ------w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll + 2004-08-04 03:31:26 32,384 ------w C:\WINDOWS\ServicePackFiles\i386\usb101et.sys + 2007-10-30 13:15:19 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023.sys + 2007-10-30 13:15:19 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023x.sys + 2007-10-30 13:16:49 60,032 ------w C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys + 2007-10-30 13:17:22 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys + 2007-10-30 13:17:23 25,728 ------w C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys + 2007-10-30 13:17:19 32,128 ------w C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys + 2007-10-30 13:17:13 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\usbehci.sys + 2007-10-30 13:17:16 59,520 ------w C:\WINDOWS\ServicePackFiles\i386\usbhub.sys + 2007-10-30 13:17:25 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\usbintel.sys + 2007-10-30 19:02:10 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\usbmon.dll + 2007-10-30 13:17:12 17,152 ------w C:\WINDOWS\ServicePackFiles\i386\usbohci.sys + 2007-10-30 13:17:15 143,872 ------w C:\WINDOWS\ServicePackFiles\i386\usbport.sys + 2007-10-30 13:32:34 25,856 ------w C:\WINDOWS\ServicePackFiles\i386\usbprint.sys + 2007-10-30 13:30:12 15,104 ------w C:\WINDOWS\ServicePackFiles\i386\usbscan.sys + 2007-10-30 13:17:15 25,728 ------w C:\WINDOWS\ServicePackFiles\i386\usbser.sys + 2007-10-30 13:17:18 26,368 ------w C:\WINDOWS\ServicePackFiles\i386\usbstor.sys + 2007-10-30 13:17:13 20,608 ------w C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys + 2007-10-30 19:02:10 74,240 ------w C:\WINDOWS\ServicePackFiles\i386\usbui.dll + 2007-10-30 13:18:05 121,984 ------w C:\WINDOWS\ServicePackFiles\i386\usbvideo.sys + 2007-10-30 19:02:10 578,560 ------w C:\WINDOWS\ServicePackFiles\i386\user32.dll + 2007-10-30 19:02:10 727,040 ------w C:\WINDOWS\ServicePackFiles\i386\userenv.dll + 2007-10-30 19:02:59 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\userinit.exe + 2007-10-30 19:02:10 406,016 ------w C:\WINDOWS\ServicePackFiles\i386\usp10.dll + 2007-10-30 19:02:59 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\utilman.exe + 2007-10-30 19:02:10 218,624 ------w C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll + 2007-10-30 19:02:10 30,749 ------w C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll + 2007-06-27 12:59:58 716,800 ------w C:\WINDOWS\ServicePackFiles\i386\vbc.exe + 2007-10-30 10:38:12 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.chs.dll + 2007-10-30 10:38:12 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.cht.dll + 2007-10-30 10:38:12 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.dll + 2007-10-30 10:38:12 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.es.dll + 2007-10-30 10:38:12 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.fr.dll + 2007-10-30 10:38:12 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ger.dll + 2007-10-30 10:38:13 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.it.dll + 2007-10-30 10:38:13 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ja.dll + 2007-10-30 10:38:13 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.kor.dll + 2007-10-30 19:02:10 413,696 ------w C:\WINDOWS\ServicePackFiles\i386\vbscript.dll + 2007-10-30 19:02:10 11,325 ------w C:\WINDOWS\ServicePackFiles\i386\vchnt5.dll + 2007-10-30 19:02:10 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\vdmdbg.dll + 2007-10-30 19:02:10 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll + 2007-10-30 19:02:59 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\verclsid.exe + 2007-10-30 19:02:10 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\verifier.dll + 2007-10-30 19:02:10 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\version.dll + 2007-10-30 19:02:10 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll + 2007-10-30 13:15:54 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\vga.sys + 2007-10-30 19:02:10 851,968 ------w C:\WINDOWS\ServicePackFiles\i386\vgx.dll + 2007-10-30 13:16:46 42,240 ------w C:\WINDOWS\ServicePackFiles\i386\viaagp.sys + 2007-10-30 13:11:11 5,376 ------w C:\WINDOWS\ServicePackFiles\i386\viaide.sys + 2007-10-30 13:15:54 81,664 ------w C:\WINDOWS\ServicePackFiles\i386\videoprt.sys + 2007-10-30 19:02:10 131,584 ------w C:\WINDOWS\ServicePackFiles\i386\viewprov.dll + 2007-10-30 13:11:43 52,352 ------w C:\WINDOWS\ServicePackFiles\i386\volsnap.sys + 2007-10-30 10:38:17 999,424 ------w C:\WINDOWS\ServicePackFiles\i386\vsavb7rt.dll + 2007-10-30 19:02:10 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\vssapi.dll + 2007-10-30 19:03:00 289,792 ------w C:\WINDOWS\ServicePackFiles\i386\vssvc.exe + 2007-10-30 19:02:10 175,104 ------w C:\WINDOWS\ServicePackFiles\i386\w32time.dll + 2007-10-30 19:02:10 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\w3ssl.dll + 2007-10-30 19:02:10 364,032 ------w C:\WINDOWS\ServicePackFiles\i386\w3svc.dll + 2007-10-30 19:02:10 483,840 ------w C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll + 2007-10-30 19:03:00 46,080 ------w C:\WINDOWS\ServicePackFiles\i386\wab.exe + 2007-10-30 19:02:10 510,976 ------w C:\WINDOWS\ServicePackFiles\i386\wab32.dll + 2007-10-30 10:38:09 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll + 2007-10-30 19:02:10 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll + 2007-10-30 19:02:10 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll + 2007-10-30 19:03:00 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe + 2007-10-30 13:14:55 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\wacompen.sys + 2004-08-04 03:29:38 12,415 ------w C:\WINDOWS\ServicePackFiles\i386\wadv01nt.sys + 2004-08-04 03:29:38 12,127 ------w C:\WINDOWS\ServicePackFiles\i386\wadv02nt.sys + 2004-08-04 03:29:38 11,775 ------w C:\WINDOWS\ServicePackFiles\i386\wadv05nt.sys + 2004-08-04 03:29:40 11,807 ------w C:\WINDOWS\ServicePackFiles\i386\wadv07nt.sys + 2004-08-04 03:29:40 11,295 ------w C:\WINDOWS\ServicePackFiles\i386\wadv08nt.sys + 2004-08-04 03:29:42 11,871 ------w C:\WINDOWS\ServicePackFiles\i386\wadv09nt.sys + 2004-08-04 03:29:42 11,935 ------w C:\WINDOWS\ServicePackFiles\i386\wadv11nt.sys + 2007-10-30 19:02:10 76,800 ------w C:\WINDOWS\ServicePackFiles\i386\wam51.dll + 2007-10-30 19:02:10 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\wamreg51.dll + 2007-10-30 13:16:03 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\wanarp.sys + 2007-10-30 13:16:21 17,664 ------w C:\WINDOWS\ServicePackFiles\i386\watchdog.sys + 2004-08-04 03:29:42 29,311 ------w C:\WINDOWS\ServicePackFiles\i386\watv01nt.sys + 2004-08-04 03:29:44 19,551 ------w C:\WINDOWS\ServicePackFiles\i386\watv02nt.sys + 2004-08-04 03:29:44 33,599 ------w C:\WINDOWS\ServicePackFiles\i386\watv04nt.sys + 2004-08-04 03:29:46 22,271 ------w C:\WINDOWS\ServicePackFiles\i386\watv06nt.sys + 2004-08-04 03:29:46 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\watv10nt.sys + 2007-10-30 19:02:10 215,552 ------w C:\WINDOWS\ServicePackFiles\i386\wavemsp.dll + 2007-10-30 19:02:10 196,608 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll + 2007-10-30 19:02:10 214,528 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll + 2007-10-30 19:02:10 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcons.dll + 2007-10-30 19:02:10 531,456 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll + 2007-10-30 19:02:10 178,176 ------w C:\WINDOWS\ServicePackFiles\i386\wbemdisp.dll + 2007-10-30 19:02:10 273,920 ------w C:\WINDOWS\ServicePackFiles\i386\wbemess.dll + 2007-10-30 19:02:10 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\wbemperf.dll + 2007-10-30 19:02:10 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll + 2007-10-30 19:02:10 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\wbemsvc.dll + 2007-10-30 19:03:00 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\wbemtest.exe + 2007-10-30 19:02:10 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll + 2007-10-30 13:17:19 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\wceusbsh.sys + 2004-08-04 03:29:46 23,615 ------w C:\WINDOWS\ServicePackFiles\i386\wch7xxnt.sys + 2007-10-30 19:02:10 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\wdigest.dll + 2007-10-30 13:59:29 83,072 ------w C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys + 2007-10-30 19:02:10 276,480 ------w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll + 2007-10-30 19:02:10 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\webclnt.dll + 2007-10-30 19:02:10 135,680 ------w C:\WINDOWS\ServicePackFiles\i386\webvw.dll + 2007-10-30 19:03:00 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\wextract.exe + 2007-10-30 19:03:00 433,664 ------w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe + 2007-10-30 19:02:10 463,360 ------w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll + 2007-10-30 19:02:10 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\wiadss.dll + 2007-10-30 19:02:10 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\wiascr.dll + 2007-10-30 19:02:10 333,824 ------w C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll + 2007-10-30 19:02:10 589,312 ------w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll + 2007-10-30 19:02:10 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\wiavideo.dll + 2007-10-30 19:02:10 712,704 ------w C:\WINDOWS\ServicePackFiles\i386\wic.dll + 2007-10-30 19:02:10 346,112 ------w C:\WINDOWS\ServicePackFiles\i386\wicext.dll + 2007-10-30 14:13:20 1,843,968 ------w C:\WINDOWS\ServicePackFiles\i386\win32k.sys + 2007-10-30 19:02:10 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\win32spl.dll + 2007-10-30 11:10:46 1,647,616 ------w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll + 2007-10-30 19:03:01 283,648 ------w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe + 2007-10-30 19:02:10 354,304 ------w C:\WINDOWS\ServicePackFiles\i386\winhttp.dll + 2007-10-30 19:02:10 666,112 ------w C:\WINDOWS\ServicePackFiles\i386\wininet.dll + 2007-10-30 19:02:10 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\winipsec.dll + 2007-10-30 19:03:01 507,904 ------w C:\WINDOWS\ServicePackFiles\i386\winlogon.exe + 2007-10-30 19:02:10 176,128 ------w C:\WINDOWS\ServicePackFiles\i386\winmm.dll + 2004-08-04 12:00:00 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\winnls.dll + 2007-10-30 19:00:40 756,224 ------w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll + 2007-10-30 19:02:10 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\winrnr.dll + 2007-10-30 19:02:10 99,328 ------w C:\WINDOWS\ServicePackFiles\i386\winscard.dll + 2007-10-30 19:02:10 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\winshfhc.dll + 2007-10-30 19:02:10 293,376 ------w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll + 2007-10-30 19:02:10 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\winsta.dll + 2007-10-30 19:02:10 176,640 ------w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll + 2007-10-30 19:03:02 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\winver.exe + 2007-10-30 19:02:10 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll + 2007-10-30 19:02:10 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\wlanapi.dll + 2007-10-30 19:02:10 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\wldap32.dll + 2004-08-04 03:31:28 154,624 ------w C:\WINDOWS\ServicePackFiles\i386\wlluc48.sys + 2007-10-30 19:02:10 92,672 ------w C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll + 2007-10-30 19:00:44 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmi.dll + 2007-10-30 13:16:45 8,832 ------w C:\WINDOWS\ServicePackFiles\i386\wmiacpi.sys + 2007-10-30 19:03:02 196,608 ------w C:\WINDOWS\ServicePackFiles\i386\wmiadap.exe + 2007-10-30 11:40:21 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapres.dll + 2007-10-30 19:02:10 88,576 ------w C:\WINDOWS\ServicePackFiles\i386\wmiaprpl.dll + 2007-10-30 19:03:02 126,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapsrv.exe + 2007-10-30 19:03:02 358,912 ------w C:\WINDOWS\ServicePackFiles\i386\wmic.exe + 2007-10-30 19:02:10 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll + 2007-10-30 19:02:10 140,800 ------w C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll + 2007-10-30 19:02:10 156,672 ------w C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll + 2007-10-30 19:02:10 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmipdskq.dll + 2007-10-30 19:02:10 61,952 ------w C:\WINDOWS\ServicePackFiles\i386\wmipiprt.dll + 2007-10-30 19:02:10 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmipjobj.dll + 2007-10-30 19:02:10 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll + 2007-10-30 19:02:10 437,248 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll + 2007-10-30 19:03:02 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe + 2007-10-30 19:02:10 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll + 2007-10-30 19:02:10 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll + 2007-10-30 19:02:10 95,232 ------w C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll + 2007-10-30 19:02:10 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ae.dll + 2007-10-30 19:02:10 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2eres.dll + 2007-10-30 19:02:10 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ext.dll + 2007-10-30 19:02:10 402,432 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2filt.dll + 2007-10-30 19:02:11 502,272 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxa.dll + 2007-10-30 19:02:11 325,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxb.dll + 2007-10-30 19:02:11 4,256,768 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll + 2007-10-30 19:02:11 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res2.dll + 2007-10-30 19:02:11 276,992 ------w C:\WINDOWS\ServicePackFiles\i386\wmphoto.dll + 2007-10-30 19:03:03 214,528 ------w C:\WINDOWS\ServicePackFiles\i386\wordpad.exe + 2007-10-30 19:02:11 264,192 ------w C:\WINDOWS\ServicePackFiles\i386\wow32.dll + 2007-10-30 19:03:03 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe + 2007-10-30 19:03:03 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wpnpinst.exe + 2007-10-30 19:02:11 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll + 2007-10-30 19:02:11 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\ws2help.dll + 2007-10-30 19:03:03 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe + 2007-10-30 19:03:03 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\wscript.exe + 2007-10-30 19:02:11 80,896 ------w C:\WINDOWS\ServicePackFiles\i386\wscsvc.dll + 2007-10-30 19:02:11 604,160 ------w C:\WINDOWS\ServicePackFiles\i386\wsecedit.dll + 2007-10-30 19:02:11 108,032 ------w C:\WINDOWS\ServicePackFiles\i386\wshbth.dll + 2007-10-30 19:02:11 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\wshcon.dll + 2007-10-30 19:02:11 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\wshext.dll + 2007-10-30 19:02:11 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\wship6.dll + 2007-10-30 19:02:11 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\wshirda.dll + 2007-10-30 19:02:11 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\wshrm.dll + 2007-10-30 19:02:11 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll + 2004-08-04 03:29:48 12,063 ------w C:\WINDOWS\ServicePackFiles\i386\wsiintxx.sys + 2007-10-30 19:02:11 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll + 2007-10-30 19:02:11 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\wsock32.dll + 2007-10-30 13:18:18 19,200 ------w C:\WINDOWS\ServicePackFiles\i386\wstcodec.sys + 2007-10-30 19:02:11 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\wstdecod.dll + 2007-10-30 19:02:11 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll + 2007-10-30 19:02:12 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\wuapi.dll + 2007-10-30 19:03:03 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe + 2007-10-30 19:03:03 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe + 2007-10-30 19:02:12 1,135,616 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll + 2007-10-30 19:02:12 183,296 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng1.dll + 2007-10-30 19:02:12 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll + 2007-10-30 19:02:12 112,640 ------w C:\WINDOWS\ServicePackFiles\i386\wucltui.dll + 2007-10-30 19:02:12 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\wups.dll + 2007-10-30 19:02:12 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\wuweb.dll + 2004-08-04 03:29:50 19,455 ------w C:\WINDOWS\ServicePackFiles\i386\wvchntxx.sys + 2007-10-30 19:02:12 383,488 ------w C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll + 2007-10-30 19:02:12 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll + 2007-10-30 19:02:12 483,840 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll + 2007-10-30 19:02:12 91,648 ------w C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll

BTMark View Member Profile	Jan 15 2008, 03:32 AM Post #14
Member Posts: 23 OS: Windows XP SP2	+ 2007-10-30 19:03:03 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\xcopy.exe + 2004-08-04 12:00:00 174,200 ------w C:\WINDOWS\ServicePackFiles\i386\xenroll.dll + 2007-10-30 19:02:12 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\xmllite.dll + 2007-10-30 19:02:12 129,024 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll + 2007-10-30 19:02:12 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprovi.dll + 2007-10-30 19:02:12 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\xolehlp.dll + 2007-10-30 13:11:19 558,080 ------w C:\WINDOWS\ServicePackFiles\i386\xpnetdg.exe + 2007-10-30 11:56:53 438,784 ------w C:\WINDOWS\ServicePackFiles\i386\xpob2res.dll + 2007-10-30 11:56:47 187,392 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll + 2007-10-30 11:56:49 2,897,920 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll + 2007-10-30 11:56:51 675,328 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp3res.dll + 2007-10-30 19:02:13 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\xrxscnui.dll + 2007-10-30 19:02:13 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\xrxwiadr.dll + 2007-10-30 19:02:13 338,432 ------w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll + 2007-10-30 19:01:38 33,792 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\custsat.dll + 2007-10-30 19:01:50 82,944 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msgsc.dll + 2007-10-30 12:55:57 180,224 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msgslang.dll + 2007-10-30 19:02:44 1,695,232 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msmsgs.exe - 2004-08-04 12:00:00 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dll + 2007-10-30 19:01:50 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dll - 2004-08-04 12:00:00 58,434 ----a-w C:\WINDOWS\srchasst\srchctls.dll + 2007-10-30 19:02:08 58,434 ----a-w C:\WINDOWS\srchasst\srchctls.dll - 2004-08-04 12:00:00 725,566 ----a-w C:\WINDOWS\srchasst\srchui.dll + 2007-10-30 19:02:08 726,078 ----a-w C:\WINDOWS\srchasst\srchui.dll - 2004-08-04 12:00:00 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll + 2007-10-30 19:01:32 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll - 2007-05-03 11:34:07 116,736 ----a-w C:\WINDOWS\system32\aaclient.dll + 2007-10-30 19:01:32 136,192 ----a-w C:\WINDOWS\system32\aaclient.dll - 2004-08-12 06:00:00 183,808 ----a-w C:\WINDOWS\system32\accwiz.exe + 2007-10-30 19:02:13 184,320 ----a-w C:\WINDOWS\system32\accwiz.exe - 2004-08-04 12:00:00 114,688 ----a-w C:\WINDOWS\system32\aclui.dll + 2007-10-30 19:01:32 115,712 ----a-w C:\WINDOWS\system32\aclui.dll - 2004-08-04 12:00:00 194,048 ----a-w C:\WINDOWS\system32\activeds.dll + 2007-10-30 19:01:32 193,536 ----a-w C:\WINDOWS\system32\activeds.dll + 2007-03-29 14:20:50 110,592 ----a-w C:\WINDOWS\system32\ActiveScan\as.dll + 2006-10-05 21:15:26 233,472 ----a-w C:\WINDOWS\system32\ActiveScan\ascontrol.dll + 2005-06-03 19:03:18 96,256 ----a-w C:\WINDOWS\system32\ActiveScan\asmdat.dll + 2003-08-01 16:00:16 36,864 ----a-w C:\WINDOWS\system32\ActiveScan\certdll.dll + 2005-05-20 18:42:44 86,016 ----a-w C:\WINDOWS\system32\ActiveScan\instlsp.dll + 2007-11-12 14:46:18 26,112 ----a-w C:\WINDOWS\system32\ActiveScan\JID.dll + 2006-02-16 23:20:20 4,608 ----a-w C:\WINDOWS\system32\ActiveScan\memvfile.dll + 2005-10-25 23:08:32 348,160 ----a-w C:\WINDOWS\system32\ActiveScan\msvcr71.dll + 2007-11-26 16:10:36 61,440 ----a-w C:\WINDOWS\system32\ActiveScan\NanoWrapper.dll + 2004-05-04 20:01:02 139,264 ----a-w C:\WINDOWS\system32\ActiveScan\pavaleas.dll + 2006-07-14 18:04:10 45,056 ----a-w C:\WINDOWS\system32\ActiveScan\pavdr.exe + 2006-04-10 15:50:02 159,832 ----a-w C:\WINDOWS\system32\ActiveScan\pavexcom.dll + 2006-02-14 18:05:38 94,208 ----a-w C:\WINDOWS\system32\ActiveScan\pavinas.dll + 2006-02-16 23:35:38 180,224 ----a-w C:\WINDOWS\system32\ActiveScan\pavoe.dll + 2006-10-05 21:15:38 122,880 ----a-w C:\WINDOWS\system32\ActiveScan\pavpz.dll + 2007-06-04 16:31:52 57,344 ----a-w C:\WINDOWS\system32\ActiveScan\pavsddl.dll + 2006-06-30 19:13:38 8,704 ----a-w C:\WINDOWS\system32\ActiveScan\pfdnnt.exe + 2004-02-04 19:08:42 49,152 ----a-w C:\WINDOWS\system32\ActiveScan\port32.dll + 2007-10-30 15:04:14 36,864 ----a-w C:\WINDOWS\system32\ActiveScan\Prescan.dll + 2006-08-01 18:23:10 69,632 ----a-w C:\WINDOWS\system32\ActiveScan\pscpu.dll + 2007-11-21 15:00:06 376,832 ----a-w C:\WINDOWS\system32\ActiveScan\pskahk.dll + 2007-10-31 18:05:06 32,768 ----a-w C:\WINDOWS\system32\ActiveScan\PSKAHKPRESCAN.dll + 2006-08-17 16:38:14 10,752 ----a-w C:\WINDOWS\system32\ActiveScan\pskalloc.dll + 2006-09-04 16:49:54 61,440 ----a-w C:\WINDOWS\system32\ActiveScan\pskas.dll + 2006-08-18 13:46:18 779,264 ----a-w C:\WINDOWS\system32\ActiveScan\pskavs.dll + 2007-03-26 19:25:34 417,792 ----a-w C:\WINDOWS\system32\ActiveScan\pskcmp.dll + 2006-08-09 15:42:24 90,112 ----a-w C:\WINDOWS\system32\ActiveScan\pskfss.dll + 2006-07-19 15:55:58 208,896 ----a-w C:\WINDOWS\system32\ActiveScan\pskhtml.dll + 2006-01-20 21:57:00 9,728 ----a-w C:\WINDOWS\system32\ActiveScan\pskmas.dll + 2006-05-17 14:50:12 14,336 ----a-w C:\WINDOWS\system32\ActiveScan\pskmdfs.dll + 2006-08-16 15:58:12 33,280 ----a-w C:\WINDOWS\system32\ActiveScan\pskpack.dll + 2006-06-30 19:42:36 266,240 ----a-w C:\WINDOWS\system32\ActiveScan\pskscs.dll + 2006-08-17 19:33:14 62,976 ----a-w C:\WINDOWS\system32\ActiveScan\pskutil.dll + 2006-08-08 18:13:10 13,312 ----a-w C:\WINDOWS\system32\ActiveScan\pskvfile.dll + 2006-08-18 13:53:08 69,632 ----a-w C:\WINDOWS\system32\ActiveScan\pskvfs.dll + 2006-08-18 13:49:50 167,936 ----a-w C:\WINDOWS\system32\ActiveScan\pskvm.dll + 2007-10-18 14:30:16 105,472 ----a-w C:\WINDOWS\system32\ActiveScan\psnahk.dll + 2007-11-23 19:29:08 10,752 ----a-w C:\WINDOWS\system32\ActiveScan\psndsk.dll + 2007-10-18 14:30:38 42,496 ----a-w C:\WINDOWS\system32\ActiveScan\psnflg.dll + 2007-10-30 16:19:22 98,304 ----a-w C:\WINDOWS\system32\ActiveScan\psnglknt.dll + 2007-08-22 13:52:00 20,272 ----a-w C:\WINDOWS\system32\ActiveScan\psnhsh.dll + 2007-11-12 20:49:34 11,776 ----a-w C:\WINDOWS\system32\ActiveScan\psnjidsign.dll + 2007-08-22 13:52:04 76,080 ----a-w C:\WINDOWS\system32\ActiveScan\psnkrnl.dll + 2007-08-22 13:52:06 21,296 ----a-w C:\WINDOWS\system32\ActiveScan\psnmem.dll + 2007-10-04 20:26:28 28,672 ----a-w C:\WINDOWS\system32\ActiveScan\PsnPen.dll + 2007-10-23 16:40:10 86,016 ----a-w C:\WINDOWS\system32\ActiveScan\psntuc.dll + 2007-05-24 16:27:36 27,136 ----a-w C:\WINDOWS\system32\ActiveScan\PSNXprs.dll + 2007-04-18 22:16:04 353,840 ----a-w C:\WINDOWS\system32\ActiveScan\psscan.dll + 2007-01-22 19:42:48 35,328 ----a-w C:\WINDOWS\system32\ActiveScan\rawvfile.dll + 2007-06-08 14:44:36 8,576 ----a-w C:\WINDOWS\system32\ActiveScan\RKPavProc.sys + 2007-06-05 15:56:40 44,928 ----a-w C:\WINDOWS\system32\ActiveScan\sdthook.sys + 1997-09-18 11:12:32 9,488 ----a-w C:\WINDOWS\system32\ActiveScan\sporder.dll + 2006-02-28 22:23:40 69,632 ----a-w C:\WINDOWS\system32\ActiveScan\tcpvfile.dll + 2007-09-17 14:14:08 126,976 ----a-w C:\WINDOWS\system32\ActiveScan\Tucan.dll - 2004-08-04 12:00:00 4,096 ----a-w C:\WINDOWS\system32\actmovie.exe + 2007-10-30 19:02:13 4,096 ----a-w C:\WINDOWS\system32\actmovie.exe - 2004-08-04 12:00:00 101,888 ----a-w C:\WINDOWS\system32\actxprxy.dll + 2007-10-30 19:01:32 98,304 ----a-w C:\WINDOWS\system32\actxprxy.dll - 2004-08-04 12:00:00 61,440 ----a-w C:\WINDOWS\system32\admparse.dll + 2007-08-13 23:39:20 71,680 ----a-w C:\WINDOWS\system32\admparse.dll - 2004-08-04 12:00:00 175,616 ----a-w C:\WINDOWS\system32\adsldp.dll + 2007-10-30 19:01:32 175,616 ----a-w C:\WINDOWS\system32\adsldp.dll - 2004-08-04 12:00:00 143,360 ----a-w C:\WINDOWS\system32\adsldpc.dll + 2007-10-30 19:01:32 143,360 ----a-w C:\WINDOWS\system32\adsldpc.dll - 2004-08-04 12:00:00 68,096 ----a-w C:\WINDOWS\system32\adsmsext.dll + 2007-10-30 19:01:32 68,096 ----a-w C:\WINDOWS\system32\adsmsext.dll - 2004-08-04 12:00:00 263,680 ----a-w C:\WINDOWS\system32\adsnt.dll + 2007-10-30 19:01:32 263,680 ----a-w C:\WINDOWS\system32\adsnt.dll - 2004-08-04 12:00:00 109,568 ----a-w C:\WINDOWS\system32\adsnw.dll + 2007-10-30 19:01:32 123,392 ----a-w C:\WINDOWS\system32\adsnw.dll - 2004-08-04 12:00:00 616,960 ----a-w C:\WINDOWS\system32\advapi32.dll + 2007-10-30 19:01:33 617,472 ----a-w C:\WINDOWS\system32\advapi32.dll - 2004-08-04 12:00:00 99,840 ----a-w C:\WINDOWS\system32\advpack.dll + 2007-10-10 23:55:51 124,928 ----a-w C:\WINDOWS\system32\advpack.dll - 2004-08-04 12:00:00 98,304 ----a-w C:\WINDOWS\system32\ahui.exe + 2007-10-30 19:02:13 98,304 ----a-w C:\WINDOWS\system32\ahui.exe - 2004-08-04 12:00:00 44,544 ----a-w C:\WINDOWS\system32\alg.exe + 2007-10-30 19:02:13 44,544 ----a-w C:\WINDOWS\system32\alg.exe - 2004-08-04 12:00:00 17,408 ----a-w C:\WINDOWS\system32\alrsvc.dll + 2007-10-30 19:01:34 17,408 ----a-w C:\WINDOWS\system32\alrsvc.dll - 2004-08-04 12:00:00 70,656 ----a-w C:\WINDOWS\system32\amstream.dll + 2007-10-30 19:01:34 70,656 ----a-w C:\WINDOWS\system32\amstream.dll + 2006-03-06 15:41:02 73,728 ----a-w C:\WINDOWS\system32\AMV_DecDLL.dll - 2004-08-04 12:00:00 126,976 ----a-w C:\WINDOWS\system32\apphelp.dll + 2007-10-30 19:01:34 125,952 ----a-w C:\WINDOWS\system32\apphelp.dll - 2004-08-04 12:00:00 167,936 ----a-w C:\WINDOWS\system32\appmgmts.dll + 2007-10-30 19:01:34 167,936 ----a-w C:\WINDOWS\system32\appmgmts.dll - 2004-08-04 12:00:00 295,936 ----a-w C:\WINDOWS\system32\appmgr.dll + 2007-10-30 19:01:34 295,936 ----a-w C:\WINDOWS\system32\appmgr.dll - 2004-08-04 12:00:00 8,192 ----a-w C:\WINDOWS\system32\asferror.dll + 2006-10-19 02:47:08 7,168 ----a-w C:\WINDOWS\system32\asferror.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\asr_fmt.exe + 2007-10-30 19:02:13 30,208 ----a-w C:\WINDOWS\system32\asr_fmt.exe - 2004-08-04 12:00:00 32,768 ----a-w C:\WINDOWS\system32\asr_pfu.exe + 2007-10-30 19:02:14 32,768 ----a-w C:\WINDOWS\system32\asr_pfu.exe + 2006-08-02 17:39:06 73,728 ----a-w C:\WINDOWS\system32\asuninst.exe - 2004-08-04 12:00:00 65,024 ----a-w C:\WINDOWS\system32\asycfilt.dll + 2007-10-30 19:01:34 65,024 ----a-w C:\WINDOWS\system32\asycfilt.dll - 2004-08-04 12:00:00 25,088 ----a-w C:\WINDOWS\system32\at.exe + 2007-10-30 19:02:14 25,088 ----a-w C:\WINDOWS\system32\at.exe + 2007-10-30 19:01:34 229,376 ------w C:\WINDOWS\system32\ati2cqag.dll + 2007-10-30 19:01:34 377,984 ------w C:\WINDOWS\system32\ati2dvaa.dll + 2007-10-30 19:01:34 201,728 ------w C:\WINDOWS\system32\ati2dvag.dll + 2007-10-30 19:01:34 870,784 ------w C:\WINDOWS\system32\ati3d1ag.dll + 2007-10-30 19:01:34 32,768 ------w C:\WINDOWS\system32\ativtmxx.dll + 2007-10-30 19:01:34 516,768 ------w C:\WINDOWS\system32\ativvaxx.dll - 2004-08-04 12:00:00 58,880 ----a-w C:\WINDOWS\system32\atl.dll + 2007-10-30 19:01:34 58,880 ----a-w C:\WINDOWS\system32\atl.dll - 2004-08-04 12:00:00 11,264 ----a-w C:\WINDOWS\system32\atmadm.exe + 2007-10-30 19:02:14 11,264 ----a-w C:\WINDOWS\system32\atmadm.exe - 2004-08-04 12:00:00 285,696 ----a-w C:\WINDOWS\system32\atmfd.dll + 2007-10-30 18:57:25 285,696 ----a-w C:\WINDOWS\system32\atmfd.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\atmlib.dll + 2007-10-30 19:01:34 30,208 ----a-w C:\WINDOWS\system32\atmlib.dll - 2004-08-04 12:00:00 11,264 ----a-w C:\WINDOWS\system32\attrib.exe + 2007-10-30 19:02:14 12,288 ----a-w C:\WINDOWS\system32\attrib.exe - 2004-08-04 12:00:00 42,496 ----a-w C:\WINDOWS\system32\audiosrv.dll + 2007-10-30 19:01:34 42,496 ----a-w C:\WINDOWS\system32\audiosrv.dll - 2004-08-04 12:00:00 14,336 ----a-w C:\WINDOWS\system32\auditusr.exe + 2007-10-30 19:02:14 14,336 ----a-w C:\WINDOWS\system32\auditusr.exe - 2004-08-04 12:00:00 56,832 ----a-w C:\WINDOWS\system32\authz.dll + 2007-10-30 19:01:35 62,464 ----a-w C:\WINDOWS\system32\authz.dll - 2004-08-04 12:00:00 588,800 ----a-w C:\WINDOWS\system32\autochk.exe + 2007-10-30 19:02:14 588,800 ----a-w C:\WINDOWS\system32\autochk.exe - 2004-08-04 12:00:00 602,624 ----a-w C:\WINDOWS\system32\autoconv.exe + 2007-10-30 19:02:15 602,624 ----a-w C:\WINDOWS\system32\autoconv.exe - 2004-08-04 12:00:00 580,608 ----a-w C:\WINDOWS\system32\autofmt.exe + 2007-10-30 19:02:15 580,608 ----a-w C:\WINDOWS\system32\autofmt.exe - 2004-08-04 12:00:00 11,264 ----a-w C:\WINDOWS\system32\autolfn.exe + 2007-10-30 19:02:15 11,264 ----a-w C:\WINDOWS\system32\autolfn.exe - 2004-08-04 12:00:00 84,992 ----a-w C:\WINDOWS\system32\avifil32.dll + 2007-10-30 19:01:35 84,992 ----a-w C:\WINDOWS\system32\avifil32.dll + 2007-10-30 19:01:35 233,472 ------w C:\WINDOWS\system32\azroles.dll - 2004-08-04 12:00:00 52,736 ----a-w C:\WINDOWS\system32\basesrv.dll + 2007-10-30 19:01:35 52,736 ----a-w C:\WINDOWS\system32\basesrv.dll - 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\batmeter.dll + 2007-10-30 19:01:35 29,184 ----a-w C:\WINDOWS\system32\batmeter.dll - 2004-08-04 12:00:00 8,704 ----a-w C:\WINDOWS\system32\batt.dll + 2007-10-30 19:01:35 8,704 ----a-w C:\WINDOWS\system32\batt.dll - 2004-08-04 12:00:00 17,408 ----a-w C:\WINDOWS\system32\bidispl.dll + 2007-10-30 19:01:35 17,408 ----a-w C:\WINDOWS\system32\bidispl.dll + 2007-10-30 19:01:59 409,088 ------w C:\WINDOWS\system32\bits\qmgr.dll - 2004-08-12 06:00:00 8,192 ----a-w C:\WINDOWS\system32\bitsprx2.dll + 2007-10-30 19:01:35 8,192 ----a-w C:\WINDOWS\system32\bitsprx2.dll - 2004-08-12 06:00:00 7,168 ----a-w C:\WINDOWS\system32\bitsprx3.dll + 2007-10-30 19:01:35 7,168 ----a-w C:\WINDOWS\system32\bitsprx3.dll + 2007-10-30 19:01:35 7,168 ------w C:\WINDOWS\system32\bitsprx4.dll - 2004-08-04 12:00:00 286,208 ----a-w C:\WINDOWS\system32\blackbox.dll + 2006-10-19 02:47:10 542,720 ----a-w C:\WINDOWS\system32\blackbox.dll - 2004-08-04 12:00:00 71,680 ----a-w C:\WINDOWS\system32\blastcln.exe + 2007-10-30 19:02:16 71,680 ----a-w C:\WINDOWS\system32\blastcln.exe - 2004-08-04 12:00:00 136,704 ----a-w C:\WINDOWS\system32\bootcfg.exe + 2007-10-30 19:02:16 142,848 ----a-w C:\WINDOWS\system32\bootcfg.exe - 2004-08-04 12:00:00 63,488 ----a-w C:\WINDOWS\system32\browselc.dll + 2007-10-30 11:28:38 63,488 ----a-w C:\WINDOWS\system32\browselc.dll - 2004-08-04 12:00:00 77,312 ----a-w C:\WINDOWS\system32\browser.dll + 2007-10-30 19:01:35 77,824 ----a-w C:\WINDOWS\system32\browser.dll - 2004-08-04 12:00:00 1,016,832 ----a-w C:\WINDOWS\system32\browseui.dll + 2007-10-30 19:01:35 1,024,512 ----a-w C:\WINDOWS\system32\browseui.dll - 2004-08-04 12:00:00 78,336 ----a-w C:\WINDOWS\system32\browsewm.dll + 2007-10-30 19:01:35 78,336 ----a-w C:\WINDOWS\system32\browsewm.dll - 2004-08-04 12:00:00 20,992 ----a-w C:\WINDOWS\system32\bthci.dll + 2007-10-30 19:01:35 20,992 ----a-w C:\WINDOWS\system32\bthci.dll - 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\bthserv.dll + 2007-10-30 19:01:35 30,208 ----a-w C:\WINDOWS\system32\bthserv.dll - 2004-08-04 12:00:00 50,688 ----a-w C:\WINDOWS\system32\btpanui.dll + 2007-10-30 19:01:35 50,688 ----a-w C:\WINDOWS\system32\btpanui.dll - 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\system32\cabinet.dll + 2007-10-30 19:01:35 60,416 ----a-w C:\WINDOWS\system32\cabinet.dll - 2004-08-04 12:00:00 84,480 ----a-w C:\WINDOWS\system32\cabview.dll + 2007-10-30 19:01:35 84,480 ----a-w C:\WINDOWS\system32\cabview.dll - 2004-08-04 12:00:00 18,432 ----a-w C:\WINDOWS\system32\cacls.exe + 2007-10-30 19:02:16 19,968 ----a-w C:\WINDOWS\system32\cacls.exe - 2004-08-04 12:00:00 50,688 ----a-w C:\WINDOWS\system32\camocx.dll + 2007-10-30 19:01:35 50,688 ----a-w C:\WINDOWS\system32\camocx.dll - 2004-08-04 12:00:00 142,848 ----a-w C:\WINDOWS\system32\capesnpn.dll + 2007-10-30 19:01:36 150,016 ----a-w C:\WINDOWS\system32\capesnpn.dll - 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\catsrv.dll + 2007-10-30 19:01:36 226,304 ----a-w C:\WINDOWS\system32\catsrv.dll - 2004-08-12 06:00:00 85,504 ----a-w C:\WINDOWS\system32\catsrvps.dll + 2007-10-30 19:01:36 85,504 ----a-w C:\WINDOWS\system32\catsrvps.dll - 2004-08-04 12:00:00 628,224 ----a-w C:\WINDOWS\system32\catsrvut.dll + 2007-10-30 19:01:36 625,664 ----a-w C:\WINDOWS\system32\catsrvut.dll - 2004-08-04 12:00:00 150,528 ----a-w C:\WINDOWS\system32\cdfview.dll + 2007-10-30 19:01:36 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll - 2004-08-04 12:00:00 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll + 2007-10-30 19:01:36 2,091,520 ----a-w C:\WINDOWS\system32\cdosys.dll - 2004-08-04 12:00:00 194,560 ----a-w C:\WINDOWS\system32\certcli.dll + 2007-10-30 19:01:36 194,560 ----a-w C:\WINDOWS\system32\certcli.dll - 2004-08-04 12:00:00 457,728 ----a-w C:\WINDOWS\system32\certmgr.dll + 2007-10-30 19:01:36 457,728 ----a-w C:\WINDOWS\system32\certmgr.dll - 2004-08-04 12:00:00 159,232 ----a-w C:\WINDOWS\system32\cewmdm.dll + 2006-10-19 02:47:10 229,376 ----a-w C:\WINDOWS\system32\cewmdm.dll - 2004-08-12 06:00:00 38,912 ----a-w C:\WINDOWS\system32\cfgbkend.dll + 2007-10-30 19:01:36 38,912 ----a-w C:\WINDOWS\system32\cfgbkend.dll - 2004-08-04 12:00:00 16,896 ----a-w C:\WINDOWS\system32\cfgmgr32.dll + 2007-10-30 18:57:31 16,896 ----a-w C:\WINDOWS\system32\cfgmgr32.dll - 2004-08-04 12:00:00 109,568 ----a-w C:\WINDOWS\system32\cic.dll + 2007-10-30 19:01:36 148,480 ----a-w C:\WINDOWS\system32\cic.dll - 2004-08-04 12:00:00 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll + 2007-10-30 19:01:36 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll - 2004-08-04 12:00:00 56,320 ----a-w C:\WINDOWS\system32\cipher.exe + 2007-10-30 19:02:17 56,832 ----a-w C:\WINDOWS\system32\cipher.exe - 2004-08-04 12:00:00 5,632 ----a-w C:\WINDOWS\system32\cisvc.exe + 2007-10-30 19:02:17 5,632 ----a-w C:\WINDOWS\system32\cisvc.exe - 2004-08-04 12:00:00 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll + 2007-10-30 19:01:37 110,592 ----a-w C:\WINDOWS\system32\clbcatex.dll - 2004-08-04 12:00:00 501,248 ----a-w C:\WINDOWS\system32\clbcatq.dll + 2007-10-30 19:01:37 498,688 ----a-w C:\WINDOWS\system32\clbcatq.dll - 2004-08-04 12:00:00 64,000 ----a-w C:\WINDOWS\system32\cleanmgr.exe + 2007-10-30 19:02:17 64,000 ----a-w C:\WINDOWS\system32\cleanmgr.exe - 2004-08-04 12:00:00 77,824 ----a-w C:\WINDOWS\system32\cliconfg.dll + 2007-10-30 19:01:37 77,824 ----a-w C:\WINDOWS\system32\cliconfg.dll - 2004-08-04 12:00:00 20,480 ----a-w C:\WINDOWS\system32\cliconfg.exe + 2007-10-30 19:02:17 20,480 ----a-w C:\WINDOWS\system32\cliconfg.exe - 2004-08-12 06:00:00 102,912 ----a-w C:\WINDOWS\system32\clipbrd.exe + 2007-10-30 19:02:17 102,912 ----a-w C:\WINDOWS\system32\clipbrd.exe - 2004-08-04 12:00:00 33,280 ----a-w C:\WINDOWS\system32\clipsrv.exe + 2007-10-30 19:02:17 33,280 ----a-w C:\WINDOWS\system32\clipsrv.exe - 2004-08-04 12:00:00 57,856 ----a-w C:\WINDOWS\system32\clusapi.dll + 2007-10-30 19:01:37 58,368 ----a-w C:\WINDOWS\system32\clusapi.dll - 2004-08-04 12:00:00 15,872 ----a-w C:\WINDOWS\system32\cmcfg32.dll + 2007-10-30 19:01:37 15,872 ----a-w C:\WINDOWS\system32\cmcfg32.dll - 2004-08-04 12:00:00 388,608 ----a-w C:\WINDOWS\system32\cmd.exe + 2007-10-30 19:02:18 389,120 ----a-w C:\WINDOWS\system32\cmd.exe - 2004-08-04 12:00:00 343,040 ----a-w C:\WINDOWS\system32\cmdial32.dll + 2007-10-30 19:01:37 344,064 ----a-w C:\WINDOWS\system32\cmdial32.dll - 2004-08-04 12:00:00 47,104 ----a-w C:\WINDOWS\system32\cmdl32.exe + 2007-10-30 19:02:18 25,600 ----a-w C:\WINDOWS\system32\cmdl32.exe - 2004-08-04 12:00:00 39,936 ----a-w C:\WINDOWS\system32\cmmon32.exe + 2007-10-30 19:02:18 39,936 ----a-w C:\WINDOWS\system32\cmmon32.exe - 2004-08-12 06:00:00 185,344 ----a-w C:\WINDOWS\system32\cmprops.dll + 2007-10-30 19:01:37 185,344 ----a-w C:\WINDOWS\system32\cmprops.dll - 2004-08-04 12:00:00 13,824 ----a-w C:\WINDOWS\system32\cmsetACL.dll + 2007-10-30 19:01:37 13,312 ----a-w C:\WINDOWS\system32\cmsetacl.dll - 2004-08-04 12:00:00 63,488 ----a-w C:\WINDOWS\system32\cmstp.exe + 2007-10-30 19:02:18 63,488 ----a-w C:\WINDOWS\system32\cmstp.exe - 2004-08-04 12:00:00 39,936 ----a-w C:\WINDOWS\system32\cmutil.dll + 2007-10-30 19:01:37 39,424 ----a-w C:\WINDOWS\system32\cmutil.dll - 2004-08-04 12:00:00 47,104 ----a-w C:\WINDOWS\system32\cnbjmon.dll + 2007-10-30 19:01:37 47,104 ----a-w C:\WINDOWS\system32\cnbjmon.dll - 2004-08-04 12:00:00 62,464 ----a-w C:\WINDOWS\system32\colbact.dll + 2007-10-30 19:01:37 60,416 ----a-w C:\WINDOWS\system32\colbact.dll - 2004-08-04 12:00:00 195,584 ----a-w C:\WINDOWS\system32\Com\comadmin.dll + 2007-10-30 19:01:37 195,072 ----a-w C:\WINDOWS\system32\Com\comadmin.dll - 2004-08-12 06:00:00 9,728 ----a-w C:\WINDOWS\system32\Com\comrepl.exe + 2007-10-30 19:02:18 9,728 ----a-w C:\WINDOWS\system32\Com\comrepl.exe - 2004-08-12 06:00:00 5,120 ----a-w C:\WINDOWS\system32\Com\comrereg.exe + 2007-10-30 19:02:18 6,144 ----a-w C:\WINDOWS\system32\Com\comrereg.exe - 2004-08-12 06:00:00 25,600 ----a-w C:\WINDOWS\system32\comaddin.dll + 2007-10-30 19:01:37 28,160 ----a-w C:\WINDOWS\system32\comaddin.dll - 2004-08-04 12:00:00 611,328 ----a-w C:\WINDOWS\system32\comctl32.dll + 2007-10-30 19:01:37 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll - 2004-08-04 12:00:00 276,992 ----a-w C:\WINDOWS\system32\comdlg32.dll + 2007-10-30 19:01:37 276,992 ----a-w C:\WINDOWS\system32\comdlg32.dll - 2004-08-04 12:00:00 252,928 ----a-w C:\WINDOWS\system32\compatUI.dll + 2007-10-30 19:01:37 252,928 ----a-w C:\WINDOWS\system32\compatui.dll - 2004-08-04 12:00:00 229,376 ----a-w C:\WINDOWS\system32\compstui.dll + 2007-10-30 19:01:37 229,376 ----a-w C:\WINDOWS\system32\compstui.dll - 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\comrepl.dll + 2007-10-30 19:01:37 97,792 ----a-w C:\WINDOWS\system32\comrepl.dll - 2004-08-04 12:00:00 792,064 ----a-w C:\WINDOWS\system32\comres.dll + 2007-10-30 19:01:37 792,064 ----a-w C:\WINDOWS\system32\comres.dll + 2007-10-30 13:41:23 9,728 ------w C:\WINDOWS\system32\comsdupd.exe - 2004-08-12 06:00:00 147,456 ----a-w C:\WINDOWS\system32\comsnap.dll + 2007-10-30 19:01:37 167,424 ----a-w C:\WINDOWS\system32\comsnap.dll - 2004-08-04 12:00:00 1,251,840 ----a-w C:\WINDOWS\system32\comsvcs.dll + 2007-10-30 19:01:37 1,266,688 ----a-w C:\WINDOWS\system32\comsvcs.dll - 2004-08-04 12:00:00 540,160 ----a-w C:\WINDOWS\system32\comuid.dll + 2007-10-30 19:01:37 539,648 ----a-w C:\WINDOWS\system32\comuid.dll - 2007-12-06 08:01:52 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2008-01-15 09:05:13 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2007-12-06 08:01:52 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-01-15 09:05:13 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2007-12-22 18:12:56 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012007120320071210\index.dat + 2007-12-22 18:12:56 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012007122220071223\index.dat - 2004-08-04 12:00:00 345,600 ----a-w C:\WINDOWS\system32\confmsp.dll + 2007-10-30 19:01:37 357,888 ----a-w C:\WINDOWS\system32\confmsp.dll - 2004-08-04 12:00:00 27,648 ----a-w C:\WINDOWS\system32\conime.exe + 2007-10-30 19:02:19 27,648 ----a-w C:\WINDOWS\system32\conime.exe - 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\corpol.dll + 2007-10-30 19:01:37 35,328 ------w C:\WINDOWS\system32\corpol.dll + 2007-10-30 19:01:37 12,800 ------w C:\WINDOWS\system32\credssp.dll - 2004-08-04 12:00:00 163,840 ----a-w C:\WINDOWS\system32\credui.dll + 2007-10-30 19:01:37 163,840 ----a-w C:\WINDOWS\system32\credui.dll - 2004-08-04 12:00:00 597,504 ----a-w C:\WINDOWS\system32\crypt32.dll + 2007-10-30 19:01:37 599,552 ----a-w C:\WINDOWS\system32\crypt32.dll - 2004-08-04 12:00:00 74,752 ----a-w C:\WINDOWS\system32\cryptdlg.dll + 2007-10-30 19:01:37 74,752 ----a-w C:\WINDOWS\system32\cryptdlg.dll - 2004-08-04 12:00:00 33,280 ----a-w C:\WINDOWS\system32\cryptdll.dll + 2007-10-30 19:01:37 33,280 ----a-w C:\WINDOWS\system32\cryptdll.dll - 2004-08-04 12:00:00 53,760 ----a-w C:\WINDOWS\system32\cryptext.dll + 2007-10-30 19:01:37 53,760 ----a-w C:\WINDOWS\system32\cryptext.dll - 2004-08-04 12:00:00 63,488 ----a-w C:\WINDOWS\system32\cryptnet.dll + 2007-10-30 19:01:37 64,512 ----a-w C:\WINDOWS\system32\cryptnet.dll - 2004-08-04 12:00:00 60,416 ----a-w C:\WINDOWS\system32\cryptsvc.dll + 2007-10-30 19:01:37 62,464 ----a-w C:\WINDOWS\system32\cryptsvc.dll - 2004-08-04 12:00:00 512,512 ----a-w C:\WINDOWS\system32\cryptui.dll + 2007-10-30 19:01:38 512,512 ----a-w C:\WINDOWS\system32\cryptui.dll - 2004-08-04 12:00:00 101,888 ----a-w C:\WINDOWS\system32\cscdll.dll + 2007-10-30 19:01:38 101,888 ----a-w C:\WINDOWS\system32\cscdll.dll - 2004-08-04 12:00:00 98,304 ----a-w C:\WINDOWS\system32\cscript.exe + 2007-10-30 19:02:19 98,304 ----a-w C:\WINDOWS\system32\cscript.exe - 2004-08-04 12:00:00 326,656 ----a-w C:\WINDOWS\system32\cscui.dll + 2007-10-30 19:01:38 326,656 ----a-w C:\WINDOWS\system32\cscui.dll - 2004-08-04 12:00:00 32,768 ----a-w C:\WINDOWS\system32\csrsrv.dll + 2007-10-30 19:01:38 32,256 ----a-w C:\WINDOWS\system32\csrsrv.dll - 2004-08-04 12:00:00 6,144 ----a-w C:\WINDOWS\system32\csrss.exe + 2007-10-30 19:02:19 6,144 ----a-w C:\WINDOWS\system32\csrss.exe - 2004-08-04 12:00:00 15,360 ----a-w C:\WINDOWS\system32\ctfmon.exe + 2007-10-30 19:02:19 15,360 ----a-w C:\WINDOWS\system32\ctfmon.exe - 2004-08-04 12:00:00 1,179,648 ----a-w C:\WINDOWS\system32\d3d8.dll + 2007-10-30 19:01:38 1,179,648 ----a-w C:\WINDOWS\system32\d3d8.dll - 2004-08-04 12:00:00 8,192 ----a-w C:\WINDOWS\system32\d3d8thk.dll + 2007-10-30 19:01:38 8,192 ----a-w C:\WINDOWS\system32\d3d8thk.dll - 2004-08-04 12:00:00 1,689,088 ----a-w C:\WINDOWS\system32\d3d9.dll + 2007-10-30 19:01:38 1,689,088 ----a-w C:\WINDOWS\system32\d3d9.dll - 2004-08-04 12:00:00 825,344 ----a-w C:\WINDOWS\system32\d3dim700.dll + 2007-10-30 19:01:38 824,320 ----a-w C:\WINDOWS\system32\d3dim700.dll - 2004-08-04 12:00:00 1,053,696 ----a-w C:\WINDOWS\system32\danim.dll + 2007-10-30 19:01:38 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll

BTMark

Jan 15 2008, 03:32 AM

Post #15

Member

Posts: 23
OS: Windows XP SP2

- 2004-08-04 12:00:00 54,272 ----a-w C:\WINDOWS\system32\dataclen.dll
+ 2007-10-30 19:01:38 54,272 ----a-w C:\WINDOWS\system32\dataclen.dll
- 2004-08-04 12:00:00 152,064 ----a-w C:\WINDOWS\system32\datime.dll
+ 2007-10-30 19:01:38 165,376 ----a-w C:\WINDOWS\system32\datime.dll
- 2004-08-04 12:00:00 24,576 ----a-w C:\WINDOWS\system32\davclnt.dll
+ 2007-10-30 19:01:38 25,088 ----a-w C:\WINDOWS\system32\davclnt.dll
- 2004-08-04 12:00:00 640,000 ----a-w C:\WINDOWS\system32\dbghelp.dll
+ 2007-10-30 19:01:38 640,000 ----a-w C:\WINDOWS\system32\dbghelp.dll
- 2004-08-04 12:00:00 24,576 ----a-w C:\WINDOWS\system32\dbmsrpcn.dll
+ 2007-10-30 19:01:38 24,576 ----a-w C:\WINDOWS\system32\dbmsrpcn.dll
- 2004-08-04 12:00:00 110,592 ----a-w C:\WINDOWS\system32\dbnetlib.dll
+ 2007-10-30 19:01:38 110,592 ----a-w C:\WINDOWS\system32\dbnetlib.dll
- 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dbnmpntw.dll
+ 2007-10-30 19:01:38 28,672 ----a-w C:\WINDOWS\system32\dbnmpntw.dll
- 2004-08-04 12:00:00 8,704 ----a-w C:\WINDOWS\system32\dciman32.dll
+ 2007-10-30 19:01:38 8,704 ----a-w C:\WINDOWS\system32\dciman32.dll
- 2004-08-12 06:00:00 5,120 ----a-w C:\WINDOWS\system32\dcomcnfg.exe
+ 2007-10-30 19:02:19 6,144 ----a-w C:\WINDOWS\system32\dcomcnfg.exe
- 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\ddeshare.exe
+ 2007-10-30 19:02:19 30,208 ----a-w C:\WINDOWS\system32\ddeshare.exe
- 2004-08-04 12:00:00 266,240 ----a-w C:\WINDOWS\system32\ddraw.dll
+ 2007-10-30 19:01:38 279,552 ----a-w C:\WINDOWS\system32\ddraw.dll
- 2004-08-04 12:00:00 27,136 ----a-w C:\WINDOWS\system32\ddrawex.dll
+ 2007-10-30 19:01:38 27,136 ----a-w C:\WINDOWS\system32\ddrawex.dll
- 2004-08-04 12:00:00 25,088 ----a-w C:\WINDOWS\system32\defrag.exe
+ 2007-10-30 19:02:19 25,088 ----a-w C:\WINDOWS\system32\defrag.exe
- 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\system32\devenum.dll
+ 2007-10-30 19:01:38 59,904 ----a-w C:\WINDOWS\system32\devenum.dll
- 2004-08-04 12:00:00 282,624 ----a-w C:\WINDOWS\system32\devmgr.dll
+ 2007-10-30 19:01:38 282,624 ----a-w C:\WINDOWS\system32\devmgr.dll
+ 2003-09-03 15:59:52 49,152 ----a-w C:\WINDOWS\system32\DEVTYPE.dll
- 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\dfrgfat.exe
+ 2007-10-30 19:02:20 82,944 ----a-w C:\WINDOWS\system32\dfrgfat.exe
- 2004-08-04 12:00:00 104,960 ----a-w C:\WINDOWS\system32\dfrgntfs.exe
+ 2007-10-30 19:02:20 105,472 ----a-w C:\WINDOWS\system32\dfrgntfs.exe
- 2004-08-04 12:00:00 38,912 ----a-w C:\WINDOWS\system32\dfrgsnap.dll
+ 2007-10-30 19:01:38 39,424 ----a-w C:\WINDOWS\system32\dfrgsnap.dll
- 2004-08-04 12:00:00 123,904 ----a-w C:\WINDOWS\system32\dfrgui.dll
+ 2007-10-30 19:01:38 124,416 ----a-w C:\WINDOWS\system32\dfrgui.dll
- 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dfsshlex.dll
+ 2007-10-30 19:01:38 28,672 ----a-w C:\WINDOWS\system32\dfsshlex.dll
- 2004-08-04 12:00:00 111,104 ----a-w C:\WINDOWS\system32\dgnet.dll
+ 2007-10-30 19:01:38 111,104 ----a-w C:\WINDOWS\system32\dgnet.dll
- 2004-08-04 12:00:00 111,104 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll
+ 2007-10-30 19:01:38 126,976 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll
- 2004-08-04 12:00:00 370,176 ----a-w C:\WINDOWS\system32\dhcpmon.dll
+ 2007-10-30 19:01:38 379,904 ----a-w C:\WINDOWS\system32\dhcpmon.dll
+ 2007-10-30 19:01:38 48,640 ------w C:\WINDOWS\system32\dhcpqec.dll
- 2004-08-04 12:00:00 85,504 ----a-w C:\WINDOWS\system32\diantz.exe
+ 2007-10-30 19:02:20 87,040 ----a-w C:\WINDOWS\system32\diantz.exe
- 2004-08-04 12:00:00 68,608 ----a-w C:\WINDOWS\system32\digest.dll
+ 2007-10-30 19:01:39 68,608 ----a-w C:\WINDOWS\system32\digest.dll
+ 2007-10-30 19:01:39 19,456 ------w C:\WINDOWS\system32\dimsntfy.dll
+ 2007-10-30 19:01:39 39,936 ------w C:\WINDOWS\system32\dimsroam.dll
- 2004-08-04 12:00:00 159,232 ----a-w C:\WINDOWS\system32\dinput.dll
+ 2007-10-30 19:01:39 158,720 ----a-w C:\WINDOWS\system32\dinput.dll
- 2004-08-04 12:00:00 181,760 ----a-w C:\WINDOWS\system32\dinput8.dll
+ 2007-10-30 19:01:39 181,760 ----a-w C:\WINDOWS\system32\dinput8.dll
- 2004-08-04 12:00:00 1,501,696 ----a-w C:\WINDOWS\system32\diskcopy.dll
+ 2007-10-30 19:01:39 1,504,256 ----a-w C:\WINDOWS\system32\diskcopy.dll
- 2004-08-04 12:00:00 163,840 ----a-w C:\WINDOWS\system32\diskpart.exe
+ 2007-10-30 19:02:21 163,840 ----a-w C:\WINDOWS\system32\diskpart.exe
- 2004-08-04 12:00:00 45,083 ----a-w C:\WINDOWS\system32\dispex.dll
+ 2007-10-30 19:01:39 28,672 ----a-w C:\WINDOWS\system32\dispex.dll
- 2004-08-04 12:00:00 61,440 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll
+ 2007-08-13 23:39:20 71,680 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll
- 2004-08-04 12:00:00 99,840 -c--a-w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2007-10-10 23:55:51 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
- 2004-08-04 12:00:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\asferror.dll
+ 2006-10-19 02:47:08 7,168 -c--a-w C:\WINDOWS\system32\dllcache\asferror.dll
- 2004-08-04 12:00:00 286,208 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll
+ 2006-10-19 02:47:10 542,720 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll
- 2004-08-04 12:00:00 159,232 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll
+ 2006-10-19 02:47:10 229,376 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll
- 2004-08-04 12:00:00 28,672 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll
+ 2007-08-13 23:54:10 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll
+ 2007-10-30 19:02:21 294,912 -c----w C:\WINDOWS\system32\dllcache\dlimport.exe
- 2004-08-04 12:00:00 299,520 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll
+ 2007-10-30 19:03:24 299,520 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll
- 2004-08-04 12:00:00 87,040 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll
+ 2007-10-30 19:01:39 87,040 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll
- 2004-08-04 12:00:00 695,296 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll
+ 2006-10-19 02:47:10 991,744 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll
- 2004-08-04 12:00:00 498,205 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll
+ 2006-08-22 09:05:26 498,742 -c--a-w C:\WINDOWS\system32\dllcache\dxmasf.dll
- 2004-08-04 12:00:00 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2007-08-13 23:35:46 346,624 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2004-08-04 12:00:00 201,728 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2007-10-10 23:55:51 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2004-08-04 12:00:00 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2007-10-10 23:55:51 132,608 -c----w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2004-08-04 12:00:00 38,912 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
+ 2007-08-13 23:18:02 60,416 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll
+ 2007-10-10 23:55:51 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll
- 2004-08-04 12:00:00 34,304 -c--a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2007-10-10 10:59:40 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2004-08-04 12:00:00 139,264 -c--a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2007-10-10 23:55:51 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2004-08-04 12:00:00 216,576 -c--a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2007-10-10 23:55:51 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2004-08-04 12:00:00 221,184 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2007-07-01 03:31:33 2,455,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dat
+ 2007-10-10 23:55:52 383,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2004-08-04 12:00:00 323,584 -c--a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2007-10-10 23:55:52 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2004-08-04 12:00:00 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2007-08-13 23:44:02 69,120 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2004-08-04 12:00:00 81,920 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2007-08-13 23:45:18 78,336 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2007-10-10 23:55:54 6,065,664 -c----w C:\WINDOWS\system32\dllcache\ieframe.dll
- 2004-08-04 12:00:00 249,344 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2007-08-13 23:54:10 191,488 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2004-08-04 12:00:00 48,640 -c--a-w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2007-10-10 23:55:55 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2007-10-10 23:55:55 267,776 -c----w C:\WINDOWS\system32\dllcache\iertutil.dll
- 2004-08-04 12:00:00 62,976 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll
+ 2007-08-13 23:39:12 55,296 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll
+ 2007-10-10 10:59:40 13,824 -c----w C:\WINDOWS\system32\dllcache\ieudinit.exe
- 2004-08-04 12:00:00 93,184 -c--a-w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2007-10-10 10:59:52 625,152 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
- 2004-08-04 12:00:00 35,840 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll
+ 2007-08-13 23:36:06 36,352 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll
- 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2007-08-13 23:39:02 92,672 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2004-08-04 12:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2007-10-10 23:55:56 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2004-08-04 12:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\laprxy.dll
+ 2006-10-19 02:47:14 11,264 -c--a-w C:\WINDOWS\system32\dllcache\LAPRXY.dll
- 2004-08-04 12:00:00 22,016 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
+ 2007-08-13 23:44:18 40,960 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll
- 2004-08-04 12:00:00 103,936 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe
+ 2006-10-19 01:03:58 100,864 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe
- 2004-08-04 12:00:00 1,024,000 -c--a-w C:\WINDOWS\system32\dllcache\mfc42u.dll
+ 2006-12-14 13:45:53 981,760 -c--a-w C:\WINDOWS\system32\dllcache\mfc42u.dll
- 2004-08-12 06:00:00 786,432 -c--a-w C:\WINDOWS\system32\dllcache\migrate.exe
+ 2007-10-30 19:02:36 786,432 -c--a-w C:\WINDOWS\system32\dllcache\migrate.exe
+ 2001-08-17 18:57:38 16,128 -c--a-w C:\WINDOWS\system32\dllcache\modemcsa.sys
- 2004-08-04 12:00:00 310,272 -c--a-w C:\WINDOWS\system32\dllcache\mp43dmod.dll
+ 2006-10-19 02:47:14 4,096 -c--a-w C:\WINDOWS\system32\dllcache\MP43DMOD.dll
- 2004-08-04 12:00:00 384,512 -c--a-w C:\WINDOWS\system32\dllcache\mp4sdmod.dll
+ 2006-10-19 02:47:14 4,096 -c--a-w C:\WINDOWS\system32\dllcache\MP4SDMOD.dll
- 2004-08-04 12:00:00 240,640 -c--a-w C:\WINDOWS\system32\dllcache\mpg4dmod.dll
+ 2006-10-19 02:47:14 4,096 -c--a-w C:\WINDOWS\system32\dllcache\MPG4DMOD.dll
- 2004-08-12 06:00:00 123,392 -c--a-w C:\WINDOWS\system32\dllcache\mplay32.exe
+ 2007-10-30 19:02:41 123,392 -c--a-w C:\WINDOWS\system32\dllcache\mplay32.exe
- 2004-08-12 06:00:00 4,639 -c--a-w C:\WINDOWS\system32\dllcache\mplayer2.exe
+ 2007-10-30 19:02:41 4,639 -c--a-w C:\WINDOWS\system32\dllcache\mplayer2.exe
- 2004-08-04 12:00:00 368,640 -c--a-w C:\WINDOWS\system32\dllcache\mpvis.dll
+ 2006-10-19 02:47:14 243,712 -c--a-w C:\WINDOWS\system32\dllcache\mpvis.dll
- 2004-08-04 12:00:00 4,126 -c--a-w C:\WINDOWS\system32\dllcache\msdxmlc.dll
+ 2007-10-30 18:58:59 4,126 -c--a-w C:\WINDOWS\system32\dllcache\msdxmlc.dll
+ 2007-10-10 23:55:56 459,264 -c----w C:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2007-10-10 23:55:56 52,224 -c----w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
- 2004-08-04 12:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe
+ 2007-08-13 23:32:30 45,568 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe
- 2004-08-04 12:00:00 3,003,392 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2007-10-31 10:12:30 3,590,656 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2004-08-04 12:00:00 448,512 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2007-10-10 23:55:58 478,208 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2004-08-04 12:00:00 56,832 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
+ 2007-08-13 23:01:12 48,128 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll
- 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll
+ 2007-08-13 23:54:10 156,160 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll
- 2004-08-04 12:00:00 259,072 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll
+ 2006-10-19 02:47:16 179,712 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll
- 2004-08-04 12:00:00 52,224 -c--a-w C:\WINDOWS\system32\dllcache\mspmsnsv.dll
+ 2006-10-19 02:47:16 27,136 -c--a-w C:\WINDOWS\system32\dllcache\mspmsnsv.dll
- 2004-08-04 12:00:00 201,728 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll
+ 2006-10-19 02:47:16 175,616 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll
- 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2007-10-10 23:55:58 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-04 12:00:00 356,352 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll
+ 2006-10-19 02:47:16 414,208 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll
- 2004-08-04 12:00:00 530,432 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2007-10-10 23:55:59 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-04 12:00:00 245,760 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll
+ 2006-10-19 02:47:16 321,536 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll
- 2004-08-12 06:00:00 226,816 -c--a-w C:\WINDOWS\system32\dllcache\npdrmv2.dll
+ 2007-10-30 19:03:20 226,816 -c--a-w C:\WINDOWS\system32\dllcache\npdrmv2.dll
- 2004-08-04 12:00:00 364,544 -c--a-w C:\WINDOWS\system32\dllcache\npdsplay.dll
+ 2007-10-30 19:01:55 364,544 -c--a-w C:\WINDOWS\system32\dllcache\npdsplay.dll
- 2004-08-12 06:00:00 10,240 -c--a-w C:\WINDOWS\system32\dllcache\npwmsdrm.dll
+ 2007-10-30 19:01:55 10,240 -c--a-w C:\WINDOWS\system32\dllcache\npwmsdrm.dll
- 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\system32\dllcache\occache.dll
+ 2007-10-10 23:55:59 102,400 -c----w C:\WINDOWS\system32\dllcache\occache.dll
- 2004-08-04 12:00:00 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2007-08-13 23:36:12 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2004-08-04 12:00:00 774,144 -c--a-w C:\WINDOWS\system32\dllcache\setup_wm.exe
+ 2006-11-01 23:31:38 1,669,120 -c--a-w C:\WINDOWS\system32\dllcache\setup_wm.exe
- 2004-08-04 12:00:00 151,552 -c--a-w C:\WINDOWS\system32\dllcache\shmedia.dll
+ 2007-10-30 19:02:01 152,064 -c--a-w C:\WINDOWS\system32\dllcache\shmedia.dll
- 2004-08-04 12:00:00 246,302 -c--a-w C:\WINDOWS\system32\dllcache\strmdll.dll
+ 2006-08-21 14:52:08 246,814 -c--a-w C:\WINDOWS\system32\dllcache\strmdll.dll
- 2004-08-04 12:00:00 208,896 -c--a-w C:\WINDOWS\system32\dllcache\unregmp2.exe
+ 2006-11-01 23:31:34 315,904 -c--a-w C:\WINDOWS\system32\dllcache\unregmp2.exe
- 2004-08-04 12:00:00 37,888 -c--a-w C:\WINDOWS\system32\dllcache\url.dll
+ 2007-10-10 23:55:59 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
- 2004-08-04 12:00:00 601,088 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2007-10-10 23:56:00 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2004-08-04 12:00:00 848,384 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll
+ 2007-07-12 23:31:54 765,952 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll
- 2004-08-04 12:00:00 276,480 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2007-10-10 23:56:00 232,960 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
- 2004-08-04 12:00:00 656,384 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2007-10-10 23:56:00 824,832 -c----w C:\WINDOWS\system32\dllcache\wininet.dll
- 2004-08-04 12:00:00 408,064 -c--a-w C:\WINDOWS\system32\dllcache\wmadmod.dll
+ 2006-10-19 02:47:18 757,248 -c--a-w C:\WINDOWS\system32\dllcache\WMADMOD.dll
- 2004-08-04 12:00:00 670,720 -c--a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll
+ 2006-10-19 02:47:18 1,117,696 -c--a-w C:\WINDOWS\system32\dllcache\WMADMOE.dll
- 2004-08-04 12:00:00 230,400 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2007-10-27 22:40:30 222,720 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
- 2004-08-04 12:00:00 27,136 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll
+ 2006-10-19 02:47:18 33,792 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll
- 2004-08-04 12:00:00 23,552 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll
+ 2006-10-19 02:47:18 37,376 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll
- 2004-08-04 12:00:00 168,448 -c--a-w C:\WINDOWS\system32\dllcache\wmerror.dll
+ 2006-10-19 02:47:20 227,328 -c--a-w C:\WINDOWS\system32\dllcache\wmerror.dll
- 2004-08-04 12:00:00 151,552 -c--a-w C:\WINDOWS\system32\dllcache\wmidx.dll
+ 2006-10-19 02:47:20 157,184 -c--a-w C:\WINDOWS\system32\dllcache\wmidx.dll
- 2004-08-04 12:00:00 1,050,624 -c--a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll
+ 2006-10-19 02:47:20 937,984 -c--a-w C:\WINDOWS\system32\dllcache\WMNetMgr.dll
- 2004-08-04 12:00:00 4,874,240 -c--a-w C:\WINDOWS\system32\dllcache\wmp.dll
+ 2006-10-19 02:47:20 10,834,432 -c--a-w C:\WINDOWS\system32\dllcache\wmp.dll
- 2004-08-04 12:00:00 114,688 -c--a-w C:\WINDOWS\system32\dllcache\wmpasf.dll
+ 2006-10-19 02:47:20 242,688 -c--a-w C:\WINDOWS\system32\dllcache\wmpasf.dll
- 2004-08-04 12:00:00 98,304 -c--a-w C:\WINDOWS\system32\dllcache\wmpband.dll
+ 2006-10-19 02:47:20 96,256 -c--a-w C:\WINDOWS\system32\dllcache\wmpband.dll
- 2004-08-04 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcd.dll
+ 2007-10-30 19:02:11 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcd.dll
- 2004-08-04 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcore.dll
+ 2007-10-30 19:02:11 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpcore.dll
- 2004-08-04 12:00:00 233,472 -c--a-w C:\WINDOWS\system32\dllcache\wmpdxm.dll
+ 2006-10-19 02:47:20 314,880 -c--a-w C:\WINDOWS\system32\dllcache\wmpdxm.dll
- 2004-08-04 12:00:00 73,728 -c--a-w C:\WINDOWS\system32\dllcache\wmplayer.exe
+ 2006-10-19 02:46:20 64,000 -c--a-w C:\WINDOWS\system32\dllcache\wmplayer.exe
- 2004-08-04 12:00:00 2,940,928 -c--a-w C:\WINDOWS\system32\dllcache\wmploc.dll
+ 2006-10-19 02:47:20 8,231,936 -c--a-w C:\WINDOWS\system32\dllcache\wmploc.dll
- 2004-08-12 06:00:00 221,184 -c--a-w C:\WINDOWS\system32\dllcache\wmpns.dll
+ 2007-10-30 19:02:11 221,184 -c--a-w C:\WINDOWS\system32\dllcache\wmpns.dll
- 2004-08-04 12:00:00 102,400 -c--a-w C:\WINDOWS\system32\dllcache\wmpshell.dll
+ 2006-10-19 02:47:20 99,840 -c--a-w C:\WINDOWS\system32\dllcache\wmpshell.dll
- 2004-08-04 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpui.dll
+ 2007-10-30 19:02:11 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmpui.dll
- 2004-08-04 12:00:00 759,296 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll
+ 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll
- 2004-08-04 12:00:00 115,200 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe.dll
+ 2007-10-30 19:02:11 115,200 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe.dll
- 2004-08-04 12:00:00 1,119,744 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe2.dll
+ 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmoe2.dll
- 2004-08-04 12:00:00 484,864 -c--a-w C:\WINDOWS\system32\dllcache\wmspdmod.dll
+ 2006-10-19 02:47:22 603,648 -c--a-w C:\WINDOWS\system32\dllcache\WMSPDMOD.dll
- 2004-08-04 12:00:00 896,512 -c--a-w C:\WINDOWS\system32\dllcache\wmspdmoe.dll
+ 2006-10-19 02:47:22 1,329,152 -c--a-w C:\WINDOWS\system32\dllcache\WMSPDMOE.dll
- 2004-08-04 12:00:00 303,616 -c--a-w C:\WINDOWS\system32\dllcache\wmstream.dll
+ 2007-10-30 19:02:11 303,616 -c--a-w C:\WINDOWS\system32\dllcache\wmstream.dll
- 2004-08-04 12:00:00 2,105,344 -c--a-w C:\WINDOWS\system32\dllcache\wmvcore.dll
+ 2006-10-19 02:47:22 2,450,944 -c--a-w C:\WINDOWS\system32\dllcache\wmvcore.dll
- 2004-08-04 12:00:00 809,984 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll
+ 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll
- 2004-08-04 12:00:00 1,001,472 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmoe2.dll
+ 2006-10-19 02:47:22 4,096 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmoe2.dll
- 2004-08-04 12:00:00 5,120 ----a-w C:\WINDOWS\system32\dllhost.exe
+ 2007-10-30 19:02:21 5,120 ----a-w C:\WINDOWS\system32\dllhost.exe
- 2004-08-04 12:00:00 224,768 ----a-w C:\WINDOWS\system32\dmadmin.exe
+ 2007-10-30 19:02:21 224,768 ----a-w C:\WINDOWS\system32\dmadmin.exe
- 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dmband.dll
+ 2007-10-30 19:01:39 28,672 ----a-w C:\WINDOWS\system32\dmband.dll
- 2004-08-04 12:00:00 61,440 ----a-w C:\WINDOWS\system32\dmcompos.dll
+ 2007-10-30 19:01:39 61,440 ----a-w C:\WINDOWS\system32\dmcompos.dll
- 2004-08-04 12:00:00 273,920 ----a-w C:\WINDOWS\system32\dmdlgs.dll
+ 2007-10-30 19:01:39 285,184 ----a-w C:\WINDOWS\system32\dmdlgs.dll
- 2004-08-04 12:00:00 200,704 ----a-w C:\WINDOWS\system32\dmdskmgr.dll
+ 2007-10-30 19:01:39 200,704 ----a-w C:\WINDOWS\system32\dmdskmgr.dll
- 2004-08-04 12:00:00 181,248 ----a-w C:\WINDOWS\system32\dmime.dll
+ 2007-10-30 19:01:39 181,248 ----a-w C:\WINDOWS\system32\dmime.dll
- 2004-08-04 12:00:00 35,840 ----a-w C:\WINDOWS\system32\dmloader.dll
+ 2007-10-30 19:01:39 35,840 ----a-w C:\WINDOWS\system32\dmloader.dll
- 2004-08-04 12:00:00 15,872 ----a-w C:\WINDOWS\system32\dmremote.exe
+ 2007-10-30 19:02:21 15,872 ----a-w C:\WINDOWS\system32\dmremote.exe
- 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\dmscript.dll
+ 2007-10-30 19:01:39 82,432 ----a-w C:\WINDOWS\system32\dmscript.dll
- 2004-08-04 12:00:00 23,552 ----a-w C:\WINDOWS\system32\dmserver.dll
+ 2007-10-30 19:01:39 23,552 ----a-w C:\WINDOWS\system32\dmserver.dll
- 2004-08-04 12:00:00 105,984 ----a-w C:\WINDOWS\system32\dmstyle.dll
+ 2007-10-30 19:01:39 105,984 ----a-w C:\WINDOWS\system32\dmstyle.dll
- 2004-08-04 12:00:00 103,424 ----a-w C:\WINDOWS\system32\dmsynth.dll
+ 2007-10-30 19:01:39 103,424 ----a-w C:\WINDOWS\system32\dmsynth.dll
- 2004-08-04 12:00:00 104,448 ----a-w C:\WINDOWS\system32\dmusic.dll
+ 2007-10-30 19:01:39 104,448 ----a-w C:\WINDOWS\system32\dmusic.dll
- 2004-08-04 12:00:00 52,224 ----a-w C:\WINDOWS\system32\dmutil.dll
+ 2007-10-30 19:01:39 52,224 ----a-w C:\WINDOWS\system32\dmutil.dll
- 2004-08-04 12:00:00 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
+ 2007-10-30 19:01:39 147,456 ----a-w C:\WINDOWS\system32\dnsapi.dll
- 2004-08-04 12:00:00 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
+ 2007-10-30 19:01:39 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
- 2004-08-04 12:00:00 48,128 ----a-w C:\WINDOWS\system32\docprop2.dll
+ 2007-10-30 19:01:39 48,128 ----a-w C:\WINDOWS\system32\docprop2.dll
+ 2007-10-30 19:01:39 26,112 ------w C:\WINDOWS\system32\dot3api.dll
+ 2007-10-30 19:01:39 57,856 ------w C:\WINDOWS\system32\dot3cfg.dll
+ 2007-10-30 19:01:39 9,216 ------w C:\WINDOWS\system32\dot3dlg.dll
+ 2007-10-30 19:01:39 39,936 ------w C:\WINDOWS\system32\dot3gpclnt.dll
+ 2007-10-30 19:01:39 56,320 ------w C:\WINDOWS\system32\dot3msm.dll
+ 2007-10-30 19:01:39 132,096 ------w C:\WINDOWS\system32\dot3svc.dll
+ 2007-10-30 19:01:39 650,752 ------w C:\WINDOWS\system32\dot3ui.dll
- 2004-08-04 12:00:00 96,768 ----a-w C:\WINDOWS\system32\dpcdll.dll
+ 2007-10-30 19:01:39 101,376 ----a-w C:\WINDOWS\system32\dpcdll.dll
- 2004-08-04 12:00:00 30,208 ----a-w C:\WINDOWS\system32\dplaysvr.exe
+ 2007-10-30 19:02:21 29,696 ----a-w C:\WINDOWS\system32\dplaysvr.exe
- 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\dplayx.dll
+ 2007-10-30 19:01:39 229,888 ----a-w C:\WINDOWS\system32\dplayx.dll
- 2004-08-04 12:00:00 23,552 ----a-w C:\WINDOWS\system32\dpmodemx.dll
+ 2007-10-30 19:01:39 23,552 ----a-w C:\WINDOWS\system32\dpmodemx.dll
- 2004-08-04 12:00:00 3,584 ----a-w C:\WINDOWS\system32\dpnaddr.dll
+ 2007-10-30 18:57:51 3,072 ----a-w C:\WINDOWS\system32\dpnaddr.dll
- 2004-08-04 12:00:00 375,296 ----a-w C:\WINDOWS\system32\dpnet.dll
+ 2007-10-30 19:01:39 375,296 ----a-w C:\WINDOWS\system32\dpnet.dll
- 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\dpnhpast.dll
+ 2007-10-30 19:01:39 35,328 ----a-w C:\WINDOWS\system32\dpnhpast.dll
- 2004-08-04 12:00:00 60,928 ----a-w C:\WINDOWS\system32\dpnhupnp.dll
+ 2007-10-30 19:01:39 60,928 ----a-w C:\WINDOWS\system32\dpnhupnp.dll
- 2004-08-04 12:00:00 3,584 ----a-w C:\WINDOWS\system32\dpnlobby.dll
+ 2007-10-30 18:57:51 3,072 ----a-w C:\WINDOWS\system32\dpnlobby.dll
- 2004-08-04 12:00:00 18,432 ----a-w C:\WINDOWS\system32\dpnsvr.exe
+ 2007-10-30 19:02:21 17,920 ----a-w C:\WINDOWS\system32\dpnsvr.exe
- 2004-08-04 12:00:00 21,504 ----a-w C:\WINDOWS\system32\dpvacm.dll
+ 2007-10-30 19:01:39 21,504 ----a-w C:\WINDOWS\system32\dpvacm.dll
- 2004-08-04 12:00:00 212,480 ----a-w C:\WINDOWS\system32\dpvoice.dll
+ 2007-10-30 19:01:39 212,480 ----a-w C:\WINDOWS\system32\dpvoice.dll
- 2004-08-04 12:00:00 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe
+ 2007-10-30 19:02:21 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe
- 2004-08-04 12:00:00 116,736 ----a-w C:\WINDOWS\system32\dpvvox.dll
+ 2007-10-30 19:01:39 116,736 ----a-w C:\WINDOWS\system32\dpvvox.dll
- 2004-08-04 12:00:00 57,344 ----a-w C:\WINDOWS\system32\dpwsockx.dll
+ 2007-10-30 19:01:39 57,344 ----a-w C:\WINDOWS\system32\dpwsockx.dll
- 2004-08-04 12:00:00 58,368 ----a-w C:\WINDOWS\system32\driverquery.exe
+ 2007-10-30 19:02:21 62,976 ----a-w C:\WINDOWS\system32\driverquery.exe
- 2004-08-04 12:00:00 187,776 ----a-w C:\WINDOWS\system32\drivers\acpi.sys
+ 2007-10-30 13:16:43 187,776 ----a-w C:\WINDOWS\system32\drivers\acpi.sys
+ 2004-09-16 18:26:40 12,634 ----a-w C:\WINDOWS\system32\drivers\ADFUUD.SYS
+ 2007-10-30 19:01:33 4,255 ------w C:\WINDOWS\system32\drivers\adv01nt5.dll
+ 2007-10-30 19:01:33 3,967 ------w C:\WINDOWS\system32\drivers\adv02nt5.dll
+ 2007-10-30 19:01:33 3,615 ------w C:\WINDOWS\system32\drivers\adv05nt5.dll
+ 2007-10-30 19:01:33 3,647 ------w C:\WINDOWS\system32\drivers\adv07nt5.dll
+ 2007-10-30 19:01:33 3,135 ------w C:\WINDOWS\system32\drivers\adv08nt5.dll
+ 2007-10-30 19:01:33 3,711 ------w C:\WINDOWS\system32\drivers\adv09nt5.dll
+ 2007-10-30 19:01:33 3,775 ------w C:\WINDOWS\system32\drivers\adv11nt5.dll
- 2004-08-04 12:00:00 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys
+ 2007-10-30 11:07:09 142,592 ----a-w C:\WINDOWS\system32\drivers\aec.sys
- 2004-08-04 12:00:00 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
+ 2007-10-30 14:02:17 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
- 2004-08-04 12:00:00 42,368 ----a-w C:\WINDOWS\system32\drivers\agp440.sys
+ 2007-10-30 13:16:45 42,368 ----a-w C:\WINDOWS\system32\drivers\agp440.sys
- 2004-08-04 12:00:00 44,928 ----a-w C:\WINDOWS\system32\drivers\agpcpq.sys
+ 2007-10-30 13:16:45 44,928 ----a-w C:\WINDOWS\system32\drivers\agpcpq.sys
- 2004-08-04 12:00:00 42,752 ----a-w C:\WINDOWS\system32\drivers\alim1541.sys
+ 2007-10-30 13:16:45 42,752 ----a-w C:\WINDOWS\system32\drivers\alim1541.sys
- 2004-08-04 12:00:00 43,008 ----a-w C:\WINDOWS\system32\drivers\amdagp.sys
+ 2007-10-30 13:16:46 43,008 ----a-w C:\WINDOWS\system32\drivers\amdagp.sys
- 2004-08-04 12:00:00 36,992 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys
+ 2007-10-30 13:10:46 37,376 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys
- 2004-08-04 12:00:00 37,376 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys
+ 2007-10-30 13:10:46 37,760 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys
- 2004-08-04 12:00:00 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys
+ 2007-10-30 13:08:46 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys
- 2004-08-04 12:00:00 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
+ 2007-10-30 13:16:12 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
- 2004-08-04 12:00:00 95,360 ----a-w C:\WINDOWS\system32\drivers\atapi.sys
+ 2007-10-30 13:11:10 96,384 ----a-w C:\WINDOWS\system32\drivers\atapi.sys
+ 2004-08-04 03:29:30 56,623 ------w C:\WINDOWS\system32\drivers\ati1btxx.sys
+ 2004-08-04 03:29:30 11,615 ------w C:\WINDOWS\system32\drivers\ati1mdxx.sys
+ 2004-08-04 03:29:30 12,047 ------w C:\WINDOWS\system32\drivers\ati1pdxx.sys
+ 2004-08-04 03:29:32 30,671 ------w C:\WINDOWS\system32\drivers\ati1raxx.sys
+ 2004-08-04 03:29:32 63,663 ------w C:\WINDOWS\system32\drivers\ati1rvxx.sys
+ 2004-08-04 03:29:32 26,367 ------w C:\WINDOWS\system32\drivers\ati1snxx.sys
+ 2004-08-04 03:29:32 21,343 ------w C:\WINDOWS\system32\drivers\ati1ttxx.sys
+ 2004-08-04 03:29:32 36,463 ------w C:\WINDOWS\system32\drivers\ati1tuxx.sys
+ 2004-08-04 03:29:32 29,455 ------w C:\WINDOWS\system32\drivers\ati1xbxx.sys
+ 2004-08-04 03:29:32 34,735 ------w C:\WINDOWS\system32\drivers\ati1xsxx.sys
+ 2004-08-04 03:29:28 327,040 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys
+ 2004-08-04 03:29:28 701,440 ------w C:\WINDOWS\system32\drivers\ati2mtag.sys
+ 2004-08-04 03:29:28 57,856 ------w C:\WINDOWS\system32\drivers\atinbtxx.sys
+ 2004-08-04 03:29:30 13,824 ------w C:\WINDOWS\system32\drivers\atinmdxx.sys
+ 2004-08-04 03:29:30 14,336 ------w C:\WINDOWS\system32\drivers\atinpdxx.sys
+ 2004-08-04 03:29:30 52,224 ------w C:\WINDOWS\system32\drivers\atinraxx.sys
+ 2004-08-04 03:29:32 104,960 ------w C:\WINDOWS\system32\drivers\atinrvxx.sys
+ 2004-08-04 03:29:32 28,672 ------w C:\WINDOWS\system32\drivers\atinsnxx.sys
+ 2004-08-04 03:29:32 13,824 ------w C:\WINDOWS\system32\drivers\atinttxx.sys
+ 2004-08-04 03:29:32 73,216 ------w C:\WINDOWS\system32\drivers\atintuxx.sys
+ 2004-08-04 03:29:32 31,744 ------w C:\WINDOWS\system32\drivers\atinxbxx.sys
+ 2004-08-04 03:29:32 63,488 ------w C:\WINDOWS\system32\drivers\atinxsxx.sys
- 2004-08-04 12:00:00 59,904 ----a-w C:\WINDOWS\system32\drivers\atmarpc.sys
+ 2007-10-30 13:08:48 59,904 ----a-w C:\WINDOWS\system32\drivers\atmarpc.sys
- 2004-08-04 12:00:00 55,936 ----a-w C:\WINDOWS\system32\drivers\atmlane.sys
+ 2007-10-30 13:08:52 55,808 ----a-w C:\WINDOWS\system32\drivers\atmlane.sys
+ 2007-10-30 19:01:34 21,183 ------w C:\WINDOWS\system32\drivers\atv01nt5.dll
+ 2007-10-30 19:01:34 11,359 ------w C:\WINDOWS\system32\drivers\atv02nt5.dll
+ 2007-10-30 19:01:34 25,471 ------w C:\WINDOWS\system32\drivers\atv04nt5.dll
+ 2007-10-30 19:01:34 14,143 ------w C:\WINDOWS\system32\drivers\atv06nt5.dll
+ 2007-10-30 19:01:34 17,279 ------w C:\WINDOWS\system32\drivers\atv10nt5.dll
- 2004-08-04 12:00:00 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
+ 2007-10-30 13:10:49 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
+ 2007-10-30 13:18:28 17,024 ------w C:\WINDOWS\system32\drivers\bthenum.sys
+ 2007-10-30 13:18:27 37,888 ------w C:\WINDOWS\system32\drivers\bthmodem.sys
+ 2007-10-30 13:08:56 101,120 ------w C:\WINDOWS\system32\drivers\bthpan.sys
+ 2007-10-30 13:18:27 273,024 ------w C:\WINDOWS\system32\drivers\bthport.sys
+ 2007-10-30 13:18:24 36,480 ------w C:\WINDOWS\system32\drivers\bthprint.sys
+ 2007-10-30 13:18:22 18,944 ------w C:\WINDOWS\system32\drivers\bthusb.sys
- 2004-08-04 12:00:00 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
+ 2007-10-30 13:56:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
- 2004-08-04 12:00:00 49,536 ----a-w C:\WINDOWS\system32\drivers\cdrom.sys
+ 2007-10-30 13:11:28 62,976 ----a-w C:\WINDOWS\system32\drivers\cdrom.sys
+ 2007-10-30 19:01:36 15,423 ------w C:\WINDOWS\system32\drivers\ch7xxnt5.dll
- 2004-08-04 12:00:00 49,664 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
+ 2007-10-30 13:58:37 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
- 2004-08-04 12:00:00 36,480 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
+ 2007-10-30 13:10:46 36,736 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
- 2004-08-04 12:00:00 36,352 ----a-w C:\WINDOWS\system32\drivers\disk.sys
+ 2007-10-30 13:11:28 36,352 ----a-w C:\WINDOWS\system32\drivers\disk.sys
- 2004-08-04 12:00:00 14,208 ----a-w C:\WINDOWS\system32\drivers\diskdump.sys
+ 2007-10-30 13:11:21 14,208 ----a-w C:\WINDOWS\system32\drivers\diskdump.sys
- 2004-08-04 12:00:00 799,744 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
+ 2007-10-30 13:16:05 799,744 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
- 2004-08-04 12:00:00 153,344 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
+ 2007-10-30 13:16:02 153,344 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
- 2004-08-04 03:07:40 52,864 ----a-w C:\WINDOWS\system32\drivers\DMusic.sys
+ 2007-10-30 13:16:24 52,864 ----a-w C:\WINDOWS\system32\drivers\dmusic.sys
- 2004-08-04 12:00:00 60,288 ----a-w C:\WINDOWS\system32\drivers\drmk.sys
+ 2007-10-30 13:16:50 60,160 ----a-w C:\WINDOWS\system32\drivers\drmk.sys
+ 2007-10-30 13:11:21 9,472 ------w C:\WINDOWS\system32\drivers\dumpdrv.sys
- 2004-08-04 12:00:00 71,040 ----a-w C:\WINDOWS\system32\drivers\dxg.sys
+ 2007-10-30 13:14:31 71,168 ----a-w C:\WINDOWS\system32\drivers\dxg.sys
- 2004-08-04 12:00:00 143,360 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
+ 2007-10-30 13:56:22 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
- 2004-08-04 12:00:00 27,392 ----a-w C:\WINDOWS\system32\drivers\fdc.sys
+ 2007-10-30 13:11:03 27,392 ----a-w C:\WINDOWS\system32\drivers\fdc.sys
- 2004-08-04 12:00:00 34,944 ----a-w C:\WINDOWS\system32\drivers\fips.sys
+ 2007-10-30 13:12:22 44,544 ----a-w C:\WINDOWS\system32\drivers\fips.sys
- 2004-08-04 12:00:00 20,480 ----a-w C:\WINDOWS\system32\drivers\flpydisk.sys
+ 2007-10-30 13:11:03 20,480 ----a-w C:\WINDOWS\system32\drivers\flpydisk.sys
- 2004-08-04 12:00:00 124,800 ----a-w C:\WINDOWS\system32\drivers\fltMgr.sys
+ 2007-10-30 13:12:25 129,792 ----a-w C:\WINDOWS\system32\drivers\fltmgr.sys
- 2004-08-04 12:00:00 46,464 ----a-w C:\WINDOWS\system32\drivers\gagp30kx.sys
+ 2007-10-30 13:16:47 46,464 ----a-w C:\WINDOWS\system32\drivers\gagp30kx.sys
+ 2007-10-30 13:18:24 25,600 ------w C:\WINDOWS\system32\drivers\hidbth.sys
- 2004-08-04 12:00:00 36,224 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys
+ 2007-10-30 13:17:03 36,864 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys
+ 2007-10-30 13:17:04 19,200 ------w C:\WINDOWS\system32\drivers\hidir.sys
- 2004-08-04 12:00:00 24,960 ----a-w C:\WINDOWS\system32\drivers\hidparse.sys
+ 2007-10-30 13:17:01 24,960 ----a-w C:\WINDOWS\system32\drivers\hidparse.sys
- 2004-08-04 12:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys
+ 2007-10-30 13:17:05 10,368 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys
+ 2003-10-02 17:35:32 678,784 ----a-w C:\WINDOWS\system32\drivers\HSF_CNXT.sys
+ 2003-10-02 17:33:58 1,043,072 ----a-w C:\WINDOWS\system32\drivers\HSF_DP.sys
+ 2004-08-04 03:41:48 220,032 ------w C:\WINDOWS\system32\drivers\hsfbs2s2.sys
+ 2004-08-04 03:41:50 685,056 ------w C:\WINDOWS\system32\drivers\hsfcxts2.sys
+ 2004-08-04 03:41:56 1,041,536 ------w C:\WINDOWS\system32\drivers\hsfdpsp2.sys
+ 2003-10-02 17:36:40 210,816 ----a-w C:\WINDOWS\system32\drivers\HSFHWBS2.sys
- 2004-08-04 12:00:00 263,040 ----a-w C:\WINDOWS\system32\drivers\http.sys
+ 2007-10-30 13:11:48 264,832 ----a-w C:\WINDOWS\system32\drivers\http.sys
- 2004-08-04 12:00:00 52,736 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
+ 2007-10-30 14:00:13 52,480 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
- 2004-08-04 12:00:00 41,856 ----a-w C:\WINDOWS\system32\drivers\imapi.sys
+ 2007-10-30 13:11:40 42,112 ----a-w C:\WINDOWS\system32\drivers\imapi.sys
- 2004-08-04 12:00:00 5,504 ----a-w C:\WINDOWS\system32\drivers\intelide.sys
+ 2007-10-30 13:11:09 5,504 ----a-w C:\WINDOWS\system32\drivers\intelide.sys
- 2004-08-04 12:00:00 36,096 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys
+ 2007-10-30 13:10:46 36,352 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys
- 2004-08-04 12:00:00 20,992 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
+ 2007-10-30 13:15:46 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
- 2004-08-04 12:00:00 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
+ 2007-10-30 13:15:53 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
- 2004-08-04 12:00:00 74,752 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
+ 2007-10-30 14:02:39 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
+ 2007-10-30 13:17:11 46,592 ------w C:\WINDOWS\system32\drivers\irbus.sys
- 2004-08-12 06:00:00 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
+ 2007-10-30 13:12:15 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
- 2004-08-04 12:00:00 35,840 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
+ 2007-10-30 13:16:48 37,248 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
- 2004-08-04 12:00:00 24,576 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
+ 2007-10-30 13:10:21 24,576 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
- 2004-08-04 12:00:00 14,848 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys
+ 2007-10-30 13:10:22 14,592 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys
- 2004-08-04 12:00:00 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
+ 2007-10-30 13:16:34 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys
- 2004-08-04 12:00:00 140,928 ----a-w C:\WINDOWS\system32\drivers\ks.sys
+ 2007-10-30 13:58:49 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
- 2004-08-04 12:00:00 92,032 ----a-w C:\WINDOWS\system32\drivers\ksecdd.sys
+ 2007-10-30 13:10:25 92,288 ----a-w C:\WINDOWS\system32\drivers\ksecdd.sys
+ 2003-04-09 18:48:08 11,043 ----a-w C:\WINDOWS\system32\drivers\mdmxsdk.sys
- 2004-08-04 12:00:00 63,744 ----a-w C:\WINDOWS\system32\drivers\mf.sys
+ 2007-10-30 13:16:49 63,744 ----a-w C:\WINDOWS\system32\drivers\mf.sys
- 2004-08-04 12:00:00 30,080 ----a-w C:\WINDOWS\system32\drivers\modem.sys
+ 2007-10-30 13:19:16 30,080 ----a-w C:\WINDOWS\system32\drivers\modem.sys
+ 2001-08-17 18:57:38 16,128 ----a-w C:\WINDOWS\system32\drivers\MODEMCSA.sys
- 2004-08-04 12:00:00 23,040 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys
+ 2007-10-30 13:10:22 23,040 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys
- 2004-08-04 12:00:00 42,240 ----a-w C:\WINDOWS\system32\drivers\mountmgr.sys
+ 2007-10-30 13:10:20 42,368 ----a-w C:\WINDOWS\system32\drivers\mountmgr.sys
- 2004-08-04 12:00:00 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
+ 2007-10-30 13:36:25 92,544 ----a-w C:\WINDOWS\system32\drivers\mqac.sys
- 2004-08-04 12:00:00 181,248 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-10-30 13:12:14 180,480 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
- 2004-08-04 12:00:00 451,456 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
+ 2007-10-30 13:58:49 456,448 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
- 2004-08-04 12:00:00 19,072 ----a-w C:\WINDOWS\system32\drivers\msfs.sys
+ 2007-10-30 13:12:09 19,072 ----a-w C:\WINDOWS\system32\drivers\msfs.sys
- 2004-08-04 12:00:00 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
+ 2007-10-30 13:14:55 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
- 2004-08-04 12:00:00 7,552 ----a-w C:\WINDOWS\system32\drivers\mskssrv.sys
+ 2007-10-30 13:10:29 7,552 ----a-w C:\WINDOWS\system32\drivers\mskssrv.sys
- 2004-08-04 12:00:00 5,376 ----a-w C:\WINDOWS\system32\drivers\mspclock.sys
+ 2007-10-30 13:10:28 5,376 ----a-w C:\WINDOWS\system32\drivers\mspclock.sys
- 2004-08-04 12:00:00 4,992 ----a-w C:\WINDOWS\system32\drivers\mspqm.sys
+ 2007-10-30 13:10:29 4,992 ----a-w C:\WINDOWS\system32\drivers\mspqm.sys
- 2004-08-04 12:00:00 15,488 ----a-w C:\WINDOWS\system32\drivers\mssmbios.sys
+ 2007-10-30 13:16:52 15,488 ----a-w C:\WINDOWS\system32\drivers\mssmbios.sys
+ 2004-08-04 03:41:40 126,686 ------w C:\WINDOWS\system32\drivers\mtlmnt5.sys
+ 2004-08-04 03:41:38 1,309,184 ------w C:\WINDOWS\system32\drivers\mtlstrm.sys
+ 2004-08-04 03:29:38 452,736 ------w C:\WINDOWS\system32\drivers\mtxparhm.sys
- 2004-08-04 12:00:00 107,904 ----a-w C:\WINDOWS\system32\drivers\mup.sys
+ 2007-10-30 13:58:52 105,216 ----a-w C:\WINDOWS\system32\drivers\mup.sys
+ 2007-10-30 13:14:55 12,672 ------w C:\WINDOWS\system32\drivers\mutohpen.sys
- 2004-08-04 12:00:00 182,912 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
+ 2007-10-30 14:03:33 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
- 2004-08-04 12:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
+ 2007-10-30 13:16:12 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
- 2004-08-04 12:00:00 12,928 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
+ 2007-10-30 13:14:24 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
- 2004-08-04 12:00:00 91,776 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
+ 2007-10-30 14:03:36 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
- 2004-08-04 12:00:00 38,016 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
+ 2007-10-30 13:16:14 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
- 2004-08-04 12:00:00 34,560 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
+ 2007-10-30 13:14:27 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
- 2004-08-04 12:00:00 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
+ 2007-10-30 14:03:52 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
- 2004-08-04 12:00:00 61,824 ----a-w C:\WINDOWS\system32\drivers\nic1394.sys
+ 2007-10-30 13:08:46 61,824 ----a-w C:\WINDOWS\system32\drivers\nic1394.sys
- 2004-08-04 12:00:00 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
+ 2007-10-30 13:10:31 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
- 2004-08-04 12:00:00 30,848 ----a-w C:\WINDOWS\system32\drivers\npfs.sys
+ 2007-10-30 13:12:09 30,848 ----a-w C:\WINDOWS\system32\drivers\npfs.sys
- 2004-08-04 12:00:00 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
+ 2007-10-30 13:57:43 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
+ 2004-08-04 03:41:40 180,360 ------w C:\WINDOWS\system32\drivers\ntmtlfax.sys
+ 2004-08-04 03:29:56 1,897,408 ------w C:\WINDOWS\system32\drivers\nv4_mini.sys
- 2004-08-04 12:00:00 88,448 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
+ 2007-10-30 13:14:34 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
- 2004-08-04 12:00:00 163,584 ----a-w C:\WINDOWS\system32\drivers\nwrdr.sys
+ 2007-10-30 13:13:03 163,584 ----a-w C:\WINDOWS\system32\drivers\nwrdr.sys
- 2004-08-04 12:00:00 42,496 ----a-w C:\WINDOWS\system32\drivers\p3.sys
+ 2007-10-30 13:10:45 42,752 ----a-w C:\WINDOWS\system32\drivers\p3.sys
- 2004-08-04 12:00:00 80,128 ----a-w C:\WINDOWS\system32\drivers\parport.sys
+ 2007-10-30 13:10:48 80,128 ----a-w C:\WINDOWS\system32\drivers\parport.sys
- 2004-08-04 12:00:00 18,688 ----a-w C:\WINDOWS\system32\drivers\partmgr.sys
+ 2007-10-30 13:11:30 19,712 ----a-w C:\WINDOWS\system32\drivers\partmgr.sys
- 2004-08-04 12:00:00 68,224 ----a-w C:\WINDOWS\system32\drivers\pci.sys
+ 2007-10-30 13:16:52 68,224 ----a-w C:\WINDOWS\system32\drivers\pci.sys
- 2004-08-04 12:00:00 25,088 ----a-w C:\WINDOWS\system32\drivers\pciidex.sys
+ 2007-10-30 13:11:08 24,960 ----a-w C:\WINDOWS\system32\drivers\pciidex.sys
- 2004-08-04 12:00:00 119,936 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
+ 2007-10-30 13:16:50 120,192 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
- 2004-08-04 12:00:00 145,792 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
+ 2007-10-30 14:01:50 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
- 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\drivers\processr.sys
+ 2007-10-30 13:10:44 35,840 ----a-w C:\WINDOWS\system32\drivers\processr.sys
- 2004-08-04 12:00:00 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
+ 2007-10-30 13:15:03 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
- 2004-08-04 12:00:00 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
+ 2007-10-30 14:02:50 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
- 2004-08-04 12:00:00 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
+ 2007-10-30 13:16:17 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
- 2004-08-04 12:00:00 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
+ 2007-10-30 14:02:55 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
- 2004-08-04 12:00:00 176,512 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
+ 2007-10-30 14:10:22 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
- 2004-08-04 03:01:16 196,864 ----a-w C:\WINDOWS\system32\drivers\rdpdr.sys
+ 2007-10-30 13:12:22 196,224 ----a-w C:\WINDOWS\system32\drivers\rdpdr.sys
- 2004-08-04 12:00:00 139,400 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
+ 2007-10-30 19:03:45 139,656 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
+ 2004-08-04 03:41:40 13,776 ------w C:\WINDOWS\system32\drivers\recagent.sys
- 2004-08-03 22:59:38 57,472 ----a-w C:\WINDOWS\system32\drivers\redbook.sys
+ 2007-10-30 13:11:06 57,600 ----a-w C:\WINDOWS\system32\drivers\redbook.sys
+ 2007-10-30 13:18:27 59,136 ------w C:\WINDOWS\system32\drivers\rfcomm.sys
- 2004-08-04 12:00:00 200,064 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys
+ 2007-10-30 13:12:58 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
- 2004-08-04 12:00:00 30,080 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
+ 2007-10-30 13:15:19 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
- 2004-08-04 04:04:32 30,080 ----a-w C:\WINDOWS\system32\drivers\rndismpx.sys
+ 2007-10-30 13:15:19 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismpx.sys
+ 2004-08-04 03:29:52 166,912 ------w C:\WINDOWS\system32\drivers\s3gnbm.sys
- 2004-08-04 12:00:00 96,256 ----a-w C:\WINDOWS\system32\drivers\scsiport.sys
+ 2007-10-30 13:11:09 96,384 ----a-w C:\WINDOWS\system32\drivers\scsiport.sys
- 2004-08-04 12:00:00 67,584 ----a-w C:\WINDOWS\system32\drivers\sdbus.sys
+ 2007-10-30 13:16:52 79,232 ----a-w C:\WINDOWS\system32\drivers\sdbus.sys
- 2004-08-04 12:00:00 15,488 ----a-w C:\WINDOWS\system32\drivers\serenum.sys
+ 2007-10-30 13:10:50 15,744 ----a-w C:\WINDOWS\system32\drivers\serenum.sys
- 2004-08-04 12:00:00 64,896 ----a-w C:\WINDOWS\system32\drivers\serial.sys
+ 2007-10-30 13:58:00 64,512 ----a-w C:\WINDOWS\system32\drivers\serial.sys
+ 2005-08-10 12:44:04 50,688 ----a-w C:\WINDOWS\system32