Windows has detected spyware infection [RESOLVED], spyware? ALso Windows Security update message |
![]() ![]() |
Windows has detected spyware infection [RESOLVED], spyware? ALso Windows Security update message |
Aug 23 2008, 01:55 AM
Post
#1
|
|
|
Member ![]() ![]() Posts: 18 OS: XP |
I have recently been infected by a number of popups with the above message. (main one is a Windows security alert box which i think is a hoax).Other symptoms include a red boxwith a white cross in the bottom bar (that emanates balloon popups, etc) and also it takes over the browser when trying to browse the web. I have found this problem on your forums before and tried removing but unfortunately it reappeared staright after rebooting, so I must have missed a part of the spyware install. Am having serious problems trying to get rid of this and hope you can help. Have posted the Hijack This log below: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:40:30, on 23/08/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\Windows Defender\MSASCui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\wbmfaxil.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [syswincfg] C:\WINDOWS\system32\wbmfaxil.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1219444241657 O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 3005 bytes Hope you can help, thanks. |
|
|
Aug 26 2008, 05:23 AM
Post
#2
|
|
|
Trusted Helper Posts: 1,990 OS: Windows XP |
Hi LittleDot,
Welcome to Geeks to Go! My name is Stamper19 and I will be helping you with your Malware problem. During the course of our interactions please be sure to follow all instructions carefully, and ask questions if you are unsure of how to proceed at any point. ---------------------------------------------------------------- Download OTViewIt to your desktop.
---------------------------------------------------------------- Information to include in your next post:
|
|
|
Aug 26 2008, 06:44 AM
Post
#3
|
|
|
Member ![]() ![]() Posts: 18 OS: XP |
OTViewIt.Txt ( 105.71K )
Number of downloads: 8Hi thank you for your responseand time. I have attached the two text files as requested
Attached File(s)
|
|
|
Aug 27 2008, 04:48 PM
Post
#4
|
|
|
Trusted Helper Posts: 1,990 OS: Windows XP |
Hi LittleDot,
Apologies for the delay. As a note, in the future please copy and paste all logs directly into the thread. It makes it easier for me to keep track of whats going on ---------------------------------------------------------------- Download ComboFix from Here or Here to your Desktop.
Note: Do not mouseclick combofix's window while its running. That may cause it to stall ---------------------------------------------------------------- Information to include in your next post:
|
|
|
Aug 28 2008, 12:58 AM
Post
#5
|
|
|
Member ![]() ![]() Posts: 18 OS: XP |
Hi Stamper19,
Thanks again. Copy of Combofix log: ComboFix 08-08-27.05 - Julie 2008-08-28 7:46:16.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.252 [GMT 1:00] Running from: C:\Documents and Settings\Julie\Desktop\ComboFix.exe * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\akl C:\Program Files\akl\akl.dll C:\Program Files\akl\akl.exe C:\Program Files\akl\uninstall.exe C:\Program Files\akl\unsetup.exe C:\Program Files\Inet Delivery C:\Program Files\Inet Delivery\inetdl.exe C:\Program Files\Inet Delivery\intdel.exe C:\WINDOWS\a.bat C:\WINDOWS\base64.tmp C:\WINDOWS\bdn.com C:\WINDOWS\FVProtect.exe C:\WINDOWS\iTunesMusic.exe C:\WINDOWS\mslagent C:\WINDOWS\mslagent\2_mslagent.dll C:\WINDOWS\mslagent\mslagent.exe C:\WINDOWS\mslagent\uninstall.exe C:\WINDOWS\mssecu.exe C:\WINDOWS\system32\akttzn.exe C:\WINDOWS\system32\anticipator.dll C:\WINDOWS\system32\awtoolb.dll C:\WINDOWS\system32\bdn.com C:\WINDOWS\system32\bsva-egihsg52.exe C:\WINDOWS\system32\dpcproxy.exe C:\WINDOWS\system32\emesx.dll C:\WINDOWS\system32\h@tkeysh@@k.dll C:\WINDOWS\system32\hoproxy.dll C:\WINDOWS\system32\hxiwlgpm.dat C:\WINDOWS\system32\hxiwlgpm.exe C:\WINDOWS\system32\medup012.dll C:\WINDOWS\system32\medup020.dll C:\WINDOWS\system32\msgp.exe C:\WINDOWS\system32\msnbho.dll C:\WINDOWS\system32\mssecu.exe C:\WINDOWS\system32\msvchost.exe C:\WINDOWS\system32\mtr2.exe C:\WINDOWS\system32\mwin32.exe C:\WINDOWS\system32\netode.exe C:\WINDOWS\system32\newsd32.exe C:\WINDOWS\system32\ps1.exe C:\WINDOWS\system32\psof1.exe C:\WINDOWS\system32\psoft1.exe C:\WINDOWS\system32\regc64.dll C:\WINDOWS\system32\regm64.dll C:\WINDOWS\system32\Rundl1.exe C:\WINDOWS\system32\smp C:\WINDOWS\system32\smp\msrc.exe C:\WINDOWS\system32\sncntr.exe C:\WINDOWS\system32\ssurf022.dll C:\WINDOWS\system32\ssvchost.com C:\WINDOWS\system32\ssvchost.exe C:\WINDOWS\system32\sysreq.exe C:\WINDOWS\system32\taack.dat C:\WINDOWS\system32\taack.exe C:\WINDOWS\system32\temp#01.exe C:\WINDOWS\system32\thun.dll C:\WINDOWS\system32\thun32.dll C:\WINDOWS\system32\VBIEWER.OCX C:\WINDOWS\system32\vbsys2.dll C:\WINDOWS\system32\vcatchpi.dll C:\WINDOWS\system32\winlogonpc.exe C:\WINDOWS\system32\winsystem.exe C:\WINDOWS\system32\WINWGPX.EXE C:\WINDOWS\userconfig9x.dll C:\WINDOWS\winsystem.exe C:\WINDOWS\zip1.tmp C:\WINDOWS\zip2.tmp C:\WINDOWS\zip3.tmp C:\WINDOWS\zipped.tmp . ((((((((((((((((((((((((( Files Created from 2008-07-28 to 2008-08-28 ))))))))))))))))))))))))))))))) . 2008-08-24 18:11 . 2008-08-28 07:39 11,289 --a------ C:\WINDOWS\system32\nvModes.001 2008-08-24 18:10 . 2008-08-24 23:07 11,289 --a------ C:\WINDOWS\system32\nvModes.dat 2008-08-24 09:59 . 2008-08-24 18:10 <DIR> d-------- C:\WINDOWS\nview 2008-08-24 09:59 . 2004-10-26 12:01 176,128 --a------ C:\WINDOWS\system32\nvudisp.exe 2008-08-24 09:59 . 2004-10-26 12:01 13,866 --a------ C:\WINDOWS\system32\nvdisp.nvu 2008-08-23 20:54 . 2008-04-11 19:50 683,520 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll 2008-08-23 20:54 . 2008-05-01 15:30 331,776 -----c--- C:\WINDOWS\system32\dllcache\msadce.dll 2008-08-23 20:54 . 2008-06-13 14:10 272,128 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-08-23 08:39 . 2008-08-23 08:39 <DIR> d-------- C:\Program Files\Trend Micro 2008-08-23 00:58 . 2008-08-23 00:58 <DIR> d-------- C:\Program Files\Windows Defender 2008-08-23 00:42 . 2008-08-23 00:55 316,640 --a------ C:\WINDOWS\WMSysPr9.prx 2008-08-23 00:35 . 2008-08-23 00:35 <DIR> d-------- C:\WINDOWS\ServicePackFiles 2008-08-23 00:26 . 2004-07-17 11:40 19,528 --a------ C:\WINDOWS\002470_.tmp 2008-08-23 00:14 . 2008-08-23 00:14 <DIR> d-------- C:\WINDOWS\EHome 2008-08-22 23:47 . 2008-08-22 23:49 <DIR> d-------- C:\Program Files\SpywareBlaster 2008-08-22 23:47 . 2008-08-23 00:55 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2008-08-22 23:47 . 2005-08-25 19:18 118,784 --a------ C:\WINDOWS\system32\MSSTDFMT.DLL 2008-08-22 23:46 . 2008-08-25 21:11 <DIR> d-------- C:\Documents and Settings\LocalService\Application Data\SACore 2008-08-22 23:45 . 2008-08-22 23:45 <DIR> d-------- C:\Program Files\Common Files\McAfee 2008-08-22 23:45 . 2008-08-22 23:45 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SiteAdvisor 2008-08-22 23:43 . 2008-08-23 00:51 <DIR> d-------- C:\Program Files\McAfee 2008-08-22 23:43 . 2008-08-22 23:43 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\McAfee 2008-08-22 23:36 . 2008-08-24 10:02 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2008-08-22 23:36 . 2005-02-25 04:35 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-08-22 23:35 . 2008-08-22 23:35 <DIR> d-------- C:\WINDOWS\system32\bits 2008-08-22 23:35 . 2008-08-24 10:01 1,374 --a------ C:\WINDOWS\imsins.BAK 2008-08-22 23:34 . 2004-08-04 00:56 438,784 --------- C:\WINDOWS\system32\xpob2res.dll 2008-08-22 23:34 . 2004-08-04 00:56 351,232 --a------ C:\WINDOWS\system32\winhttp.dll 2008-08-22 23:34 . 2004-08-04 00:56 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2008-08-22 23:34 . 2004-08-04 00:56 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll 2008-08-22 23:34 . 2004-08-04 00:56 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll 2008-08-22 23:04 . 2008-08-22 23:04 <DIR> d-------- C:\Program Files\CCleaner 2008-08-22 22:58 . 2008-08-22 22:58 <DIR> d-------- C:\!KillBox 2008-08-22 22:06 . 2008-08-22 22:16 <DIR> d-------- C:\Program Files\ewido anti-spyware 4.0 2008-08-22 18:05 . 2008-08-22 18:05 15,413 --a------ C:\Documents and Settings\All Users\Application Data\sapucunosy.dat 2008-08-22 18:05 . 2008-08-22 18:05 10,792 --a------ C:\Documents and Settings\Julie\Application Data\ukohu.bin 2008-08-22 18:03 . 2008-08-22 18:03 <DIR> d-------- C:\Program Files\wxnbojf 2008-08-22 18:03 . 2008-08-22 18:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\olwjmfyd 2008-08-22 18:03 . 2008-08-22 18:03 86,016 --a------ C:\WINDOWS\system32\wbmfaxil.exe 2008-08-22 18:03 . 2008-08-22 18:03 41,472 --a------ C:\WINDOWS\system32\uryfsxyz.exe . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-22 22:22 1,680 ----a-w C:\WINDOWS\system32\tmp.reg 2008-08-22 17:05 19,944 ----a-w C:\WINDOWS\owamycu.pif 2008-08-22 17:05 17,141 ----a-w C:\WINDOWS\itajeraza.dll 2008-08-22 17:05 17,005 ----a-w C:\WINDOWS\apupiwap.bin 2008-08-22 17:05 14,940 ----a-w C:\WINDOWS\puzojywex.vbs 2008-08-22 17:05 13,714 ----a-w C:\WINDOWS\qecidy.sys 2008-08-22 17:05 10,334 ----a-w C:\WINDOWS\system32\ihyvanohyp.bin 2008-08-21 22:41 87,552 ----a-w C:\WINDOWS\system32\AntiXPVSTFix.exe 2008-08-18 11:19 82,432 ----a-w C:\WINDOWS\system32\404Fix.exe 2008-08-14 20:52 82,432 ----a-w C:\WINDOWS\system32\IEDFix.C.exe 2008-07-20 21:01 50,176 ----a-w C:\WINDOWS\system32\dcrick.dll 2008-07-20 20:42 50,176 ----a-w C:\WINDOWS\system32\ritz8.dll 2008-07-18 21:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 21:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 21:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 21:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 21:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 21:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 21:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 21:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-23 15:38 659,456 ----a-w C:\WINDOWS\system32\wininet.dll 2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-05-29 08:35 86,528 ----a-w C:\WINDOWS\system32\VACFix.exe . ((((((((((((((((((((((((((((( snapshot@2008-08-22_23.13.46.77 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-02 18:19:56 62,464 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll + 2005-03-02 01:02:13 2,135,552 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe + 2005-03-02 00:36:40 2,056,832 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe + 2005-03-02 00:36:41 2,015,232 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe + 2005-03-02 01:04:22 2,179,456 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe + 2005-03-02 18:19:56 577,024 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll + 2005-03-02 01:11:25 1,836,160 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys + 2005-03-02 18:19:56 291,328 ----a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll + 2005-02-24 18:35:06 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll + 2005-02-24 18:35:06 209,632 ----a-w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe + 2005-02-24 18:35:06 22,240 ----a-w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll + 2005-02-24 18:35:06 718,048 ----a-w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe + 2005-02-24 18:35:08 371,936 ----a-w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll + 2007-12-18 14:32:13 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\SP2QFE\jscript.dll + 2007-12-18 14:32:13 417,792 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\SP2QFE\vbscript.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\updspapi.dll + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-27 07:39:13 151,583 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-12-10 12:41:14 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll + 2008-07-07 20:06:43 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll + 2008-07-07 20:26:58 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll + 2008-07-07 20:23:18 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll + 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\update.exe + 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll + 2008-07-14 11:03:00 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe + 2008-07-11 12:42:28 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe + 2008-07-11 12:51:51 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe + 2007-11-30 11:18:51 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll + 2007-11-30 11:18:51 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe + 2007-11-30 11:18:51 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll + 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe + 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll + 2008-05-07 04:55:40 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll + 2008-05-07 05:12:40 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:15 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:18:51 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:18:51 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:18:51 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll + 2006-08-16 12:08:32 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll + 2008-06-20 10:44:08 138,368 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys + 2008-06-20 17:36:11 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll + 2008-06-20 17:36:11 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll + 2008-06-20 10:44:42 360,960 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys + 2008-06-20 09:32:39 225,920 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys + 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys + 2008-06-20 17:46:57 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll + 2008-06-20 17:46:57 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll + 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys + 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys + 2008-06-20 17:43:05 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll + 2008-06-20 17:43:05 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll + 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe + 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll + 2008-06-24 16:28:00 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP2QFE\mscms.dll + 2008-06-24 16:43:16 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3GDR\mscms.dll + 2008-06-24 16:53:10 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll + 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\update.exe + 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll + 2008-06-23 16:11:40 1,024,000 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\browseui.dll + 2008-06-23 16:11:40 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\cdfview.dll + 2008-06-23 16:11:42 1,054,208 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\danim.dll + 2008-06-23 16:11:43 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtmsft.dll + 2008-06-23 16:11:43 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtrans.dll + 2008-06-23 16:11:43 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\extmgr.dll + 2008-06-23 09:53:58 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iedw.exe + 2008-06-23 16:11:52 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iepeers.dll + 2008-06-23 16:11:52 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\inseng.dll + 2008-06-23 16:11:52 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\jsproxy.dll + 2008-06-23 16:11:58 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtml.dll + 2008-06-23 16:12:00 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtmled.dll + 2008-06-23 16:12:02 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\msrating.dll + 2008-06-23 16:12:02 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mstime.dll + 2008-06-23 16:12:02 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\pngfilt.dll + 2008-06-23 16:12:05 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shdocvw.dll + 2008-06-23 16:12:05 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shlwapi.dll + 2008-06-23 16:12:06 618,496 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\urlmon.dll + 2008-06-23 16:12:08 667,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\wininet.dll + 2008-07-03 09:14:02 351,744 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\xpsp3res.dll + 2008-06-23 15:09:27 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\mshtml.dll + 2008-06-26 08:15:29 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\shdocvw.dll + 2008-06-26 08:15:30 619,520 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\urlmon.dll + 2008-06-23 15:09:27 666,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll + 2008-06-25 04:24:48 3,067,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll + 2008-06-26 08:00:52 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\shdocvw.dll + 2008-06-26 08:00:52 619,520 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\urlmon.dll + 2008-06-23 14:54:47 666,624 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\spcustom.dll + 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\update.exe + 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\updspapi.dll - 2003-07-16 16:17:48 1,818,624 ----a-w C:\WINDOWS\AppPatch\AcGenral.dll + 2004-08-03 23:56:42 1,852,416 ----a-w C:\WINDOWS\AppPatch\acgenral.dll - 2003-07-16 16:17:48 406,528 ----a-w C:\WINDOWS\AppPatch\AcLayers.dll + 2004-08-03 23:56:42 450,048 ----a-w C:\WINDOWS\AppPatch\aclayers.dll - 2003-07-16 16:17:48 125,440 ----a-w C:\WINDOWS\AppPatch\AcLua.dll + 2004-08-03 23:56:42 137,728 ----a-w C:\WINDOWS\AppPatch\aclua.dll - 2003-07-16 16:17:50 219,136 ----a-w C:\WINDOWS\AppPatch\AcSpecfc.dll + 2004-08-03 23:56:42 244,736 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll - 2003-07-16 16:17:53 107,520 ----a-w C:\WINDOWS\AppPatch\AcXtrnal.dll + 2004-08-03 23:56:42 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.dll + 2008-06-13 13:10:50 272,128 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys + 2005-03-02 00:57:44 2,135,552 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe + 2005-03-02 00:34:40 2,056,832 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe + 2005-03-02 00:34:42 2,015,232 ------w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe + 2005-03-02 00:59:53 2,179,328 ------w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe - 2003-07-16 16:22:20 1,004,032 ----a-w C:\WINDOWS\explorer.exe + 2004-08-03 23:56:50 1,032,192 ----a-w C:\WINDOWS\explorer.exe - 2003-07-16 16:39:27 32,256 ----a-w C:\WINDOWS\Help\sniffpol.dll + 2004-08-03 23:56:46 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll - 2003-07-16 16:40:53 30,720 ----a-w C:\WINDOWS\Help\sstub.dll + 2004-08-03 23:56:46 33,280 ----a-w C:\WINDOWS\Help\sstub.dll - 2003-07-16 16:42:27 262,656 ----a-w C:\WINDOWS\Help\tshoot.dll + 2004-08-03 23:56:48 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll - 2002-12-17 16:43:00 10,752 ----a-w C:\WINDOWS\hh.exe + 2004-08-03 23:56:52 10,752 ----a-w C:\WINDOWS\hh.exe - 2003-07-16 16:29:51 203,776 ----a-w C:\WINDOWS\ime\mscandui.dll + 2004-08-03 23:56:44 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll - 2003-07-16 16:39:34 121,344 ----a-w C:\WINDOWS\ime\SOFTKBD.DLL + 2004-08-03 23:56:46 130,048 ----a-w C:\WINDOWS\ime\softkbd.dll - 2003-07-16 16:40:09 62,464 ----a-w C:\WINDOWS\ime\SPGRMR.dll + 2004-08-03 23:56:30 62,976 ----a-w C:\WINDOWS\ime\spgrmr.dll - 2003-07-16 16:40:26 235,520 ----a-w C:\WINDOWS\ime\SPTIP.dll + 2004-08-03 23:56:46 250,880 ----a-w C:\WINDOWS\ime\sptip.dll - 2003-07-16 16:42:45 249,856 ----a-w C:\WINDOWS\inf\unregmp2.exe + 2004-08-03 23:56:58 208,896 ----a-w C:\WINDOWS\inf\unregmp2.exe - 2003-07-16 16:17:59 22,016 ----a-w C:\WINDOWS\msagent\agentanm.dll + 2004-08-03 23:56:42 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll - 2003-07-16 16:18:00 204,288 ----a-w C:\WINDOWS\msagent\agentctl.dll + 2004-08-03 23:56:42 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll - 2003-07-16 16:18:00 35,840 ----a-w C:\WINDOWS\msagent\agentdp2.dll + 2004-08-03 23:56:42 41,984 ----a-w C:\WINDOWS\msagent\agentdp2.dll - 2003-07-16 16:18:00 50,688 ----a-w C:\WINDOWS\msagent\agentdpv.dll + 2004-08-03 23:56:42 58,880 ----a-w C:\WINDOWS\msagent\agentdpv.dll - 2003-07-16 16:18:00 44,032 ----a-w C:\WINDOWS\msagent\agentmpx.dll + 2004-08-03 23:56:42 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll - 2003-07-16 16:18:00 21,504 ----a-w C:\WINDOWS\msagent\agentpsh.dll + 2004-08-03 23:56:42 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll - 2003-07-16 16:18:01 39,936 ----a-w C:\WINDOWS\msagent\agentsr.dll + 2004-08-03 23:56:42 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll - 2003-07-16 16:18:01 235,008 ----a-w C:\WINDOWS\msagent\agentsvr.exe + 2004-08-03 23:56:48 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe - 2003-07-16 16:18:11 21,504 ----a-w C:\WINDOWS\msagent\agtintl.dll + 2004-08-03 23:56:42 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll - 2003-07-16 16:30:35 36,352 ----a-w C:\WINDOWS\msagent\mslwvtts.dll + 2004-08-03 23:56:44 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll - 2003-07-16 16:31:35 84,992 ----a-w C:\WINDOWS\mui\muisetup.exe + 2004-08-03 23:56:54 90,624 ----a-w C:\WINDOWS\mui\muisetup.exe - 2003-07-16 16:33:22 66,048 ----a-w C:\WINDOWS\NOTEPAD.EXE + 2004-08-03 23:56:56 69,120 ----a-w C:\WINDOWS\notepad.exe - 2003-07-16 16:23:31 742,400 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe + 2004-08-03 23:56:50 768,512 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe - 2003-07-16 16:23:32 703,488 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe + 2004-08-03 23:56:52 743,936 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpsvc.exe - 2003-07-16 16:23:56 8,704 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\HscUpd.exe + 2004-08-03 23:56:52 18,944 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\hscupd.exe - 2003-07-16 16:29:53 145,408 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe + 2004-08-03 23:56:54 158,208 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe - 2003-07-16 16:30:28 348,160 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msinfo.dll + 2004-08-03 23:56:44 376,320 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msinfo.dll - 2003-07-16 16:34:52 97,792 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll + 2004-08-03 23:56:46 102,400 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll - 2003-07-16 16:34:52 29,696 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll + 2004-08-03 23:56:46 38,912 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll - 2007-10-24 20:12:34 9,258 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin + 2008-08-22 23:43:10 9,492 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin - 2007-10-24 20:12:54 80,943 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat + 2008-08-22 23:47:22 87,263 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat - 2007-10-24 20:12:54 3,518 ----a-w C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin + 2008-08-22 23:47:23 4,128 ----a-w C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin - 2003-07-16 16:42:59 138,752 ----a-w C:\WINDOWS\PCHealth\UploadLB\Binaries\UploadM.exe + 2004-08-03 23:56:58 150,528 ----a-w C:\WINDOWS\PCHealth\UploadLB\Binaries\uploadm.exe + 2004-08-03 23:56:46 151,552 ------w C:\WINDOWS\peernet\sqldb20.dll + 2004-08-03 23:56:46 462,848 ------w C:\WINDOWS\peernet\sqlqp20.dll + 2004-08-03 23:56:46 110,592 ------w C:\WINDOWS\peernet\sqlse20.dll - 2003-07-16 16:36:45 134,144 ----a-w C:\WINDOWS\regedit.exe + 2004-08-03 23:56:56 146,432 ----a-w C:\WINDOWS\regedit.exe + 2004-08-03 22:10:08 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\1394bus.sys + 2004-08-03 22:00:04 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys + 2004-08-03 22:10:12 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\61883.sys + 2004-08-03 23:56:42 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll + 2004-08-03 21:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys + 2004-08-03 21:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\ac97via.sys + 2004-08-03 23:56:48 183,808 ------w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe + 2004-08-03 23:56:42 1,852,416 ------w C:\WINDOWS\ServicePackFiles\i386\acgenral.dll + 2004-08-03 23:56:42 450,048 ------w C:\WINDOWS\ServicePackFiles\i386\aclayers.dll + 2004-08-03 23:56:42 137,728 ------w C:\WINDOWS\ServicePackFiles\i386\aclua.dll + 2004-08-03 23:56:42 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\aclui.dll + 2004-08-03 22:07:38 187,776 ------w C:\WINDOWS\ServicePackFiles\i386\acpi.sys + 2004-08-03 23:56:42 244,736 ------w C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll + 2004-08-03 23:56:42 194,048 ------w C:\WINDOWS\ServicePackFiles\i386\activeds.dll + 2004-08-03 23:56:48 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\actmovie.exe + 2004-08-03 23:56:42 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll + 2004-08-03 23:56:42 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll + 2004-08-03 23:56:42 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\admexs.dll + 2004-08-03 23:56:42 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\admin.dll + 2004-08-03 23:56:48 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\admin.exe + 2004-08-03 21:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\admjoy.sys + 2004-08-03 23:56:42 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\admparse.dll + 2004-08-03 23:56:42 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\admwprox.dll + 2004-08-03 23:56:42 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\adsiis51.dll + 2004-08-03 23:56:42 175,616 ------w C:\WINDOWS\ServicePackFiles\i386\adsldp.dll + 2004-08-03 23:56:42 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll + 2004-08-03 23:56:42 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll + 2004-08-03 23:56:42 263,680 ------w C:\WINDOWS\ServicePackFiles\i386\adsnt.dll + 2004-07-17 10:35:20 85,813 ------w C:\WINDOWS\ServicePackFiles\i386\adsutil.vbs + 2004-08-03 23:56:42 4,255 ------w C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll + 2004-08-03 23:56:42 3,967 ------w C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll + 2004-08-03 23:56:42 3,615 ------w C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll + 2004-08-03 23:56:42 3,647 ------w C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll + 2004-08-03 23:56:42 3,135 ------w C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll + 2004-08-03 23:56:42 3,711 ------w C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll + 2004-08-03 23:56:42 3,775 ------w C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll + 2004-08-03 23:56:42 616,960 ------w C:\WINDOWS\ServicePackFiles\i386\advapi32.dll + 2004-08-03 23:56:42 99,840 ------w C:\WINDOWS\ServicePackFiles\i386\advpack.dll + 2004-08-03 21:39:38 142,464 ------w C:\WINDOWS\ServicePackFiles\i386\aec.sys + 2004-08-03 22:14:16 138,496 ------w C:\WINDOWS\ServicePackFiles\i386\afd.sys + 2004-08-03 23:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentanm.dll + 2004-08-03 23:56:42 214,016 ------w C:\WINDOWS\ServicePackFiles\i386\agentctl.dll + 2004-08-03 23:56:42 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll + 2004-08-03 23:56:42 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll + 2004-08-03 23:56:42 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll + 2004-08-03 23:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll + 2004-08-03 23:56:42 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\agentsr.dll + 2004-08-03 23:56:48 256,512 ------w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe + 2004-08-03 22:07:42 42,368 ------w C:\WINDOWS\ServicePackFiles\i386\agp440.sys + 2004-08-03 22:07:44 44,928 ------w C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys + 2004-08-03 23:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agtintl.dll + 2004-08-03 23:56:48 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\ahui.exe + 2004-08-03 23:56:48 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\alg.exe + 2004-08-03 22:07:42 42,752 ------w C:\WINDOWS\ServicePackFiles\i386\alim1541.sys + 2004-08-03 23:56:42 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll + 2004-08-03 22:07:44 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\amdagp.sys + 2004-08-03 21:59:20 36,992 ------w C:\WINDOWS\ServicePackFiles\i386\amdk6.sys + 2004-08-03 21:59:22 37,376 ------w C:\WINDOWS\ServicePackFiles\i386\amdk7.sys + 2004-08-03 23:56:42 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\amstream.dll + 2004-08-03 21:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\an983.sys + 2004-08-03 23:56:42 108,544 ------w C:\WINDOWS\ServicePackFiles\i386\appconf.dll + 2004-08-03 23:56:42 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\apphelp.dll + 2004-08-03 23:56:42 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll + 2004-08-03 23:56:42 295,936 ------w C:\WINDOWS\ServicePackFiles\i386\appmgr.dll + 2004-08-03 23:56:42 331,264 ------w C:\WINDOWS\ServicePackFiles\i386\aqueue.dll + 2004-08-03 21:58:30 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\arp1394.sys + 2004-08-03 23:56:00 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\asferror.dll + 2004-08-03 23:56:42 369,664 ------w C:\WINDOWS\ServicePackFiles\i386\asp51.dll + 2004-08-03 21:11:02 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\aspnet_isapi.dll + 2004-08-03 21:11:06 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\aspnet_regiis.exe + 2004-08-03 21:11:06 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\aspnet_wp.exe + 2004-08-03 23:56:48 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\asr_fmt.exe + 2004-08-03 23:56:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\asr_pfu.exe + 2004-08-03 23:56:42 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll + 2004-08-03 22:05:04 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys + 2004-08-03 23:56:48 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\at.exe + 2004-08-03 21:59:44 95,360 ------w C:\WINDOWS\ServicePackFiles\i386\atapi.sys + 2004-08-03 21:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys + 2004-08-03 21:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys + 2004-08-03 21:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys + 2004-08-03 21:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys + 2004-08-03 21:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys + 2004-08-03 21:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys + 2004-08-03 21:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys + 2004-08-03 21:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys + 2004-08-03 21:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys + 2004-08-03 21:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys + 2004-08-03 23:56:42 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll + 2004-08-03 23:56:42 377,984 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll + 2004-08-03 23:56:42 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll + 2004-08-03 21:29:28 327,040 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys + 2004-08-03 21:29:28 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys + 2004-08-03 23:56:42 870,784 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll + 2004-08-03 23:56:42 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll + 2004-08-03 23:56:42 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll + 2004-08-03 21:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys + 2004-08-03 21:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys + 2004-08-03 21:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys + 2004-08-03 21:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys + 2004-08-03 21:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys + 2004-08-03 21:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys + 2004-08-03 21:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys + 2004-08-03 21:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys + 2004-08-03 21:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys + 2004-08-03 21:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys + 2004-08-03 23:56:42 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll + 2004-08-03 23:56:42 516,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll + 2004-08-03 23:56:42 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\atl.dll + 2004-08-03 23:56:48 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\atmadm.exe + 2004-08-03 21:58:32 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys + 2004-08-03 23:56:00 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\atmfd.dll + 2004-08-03 21:58:36 55,936 ------w C:\WINDOWS\ServicePackFiles\i386\atmlane.sys + 2004-08-03 23:56:42 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\atmlib.dll + 2004-08-03 23:56:42 21,183 ------w C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll + 2004-08-03 23:56:42 11,359 ------w C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll + 2004-08-03 23:56:42 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll + 2004-08-03 23:56:42 14,143 ------w C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll + 2004-08-03 23:56:42 17,279 ------w C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll + 2004-08-03 23:56:42 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll + 2004-08-03 23:56:48 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\auditusr.exe + 2004-08-03 23:56:42 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\author.dll + 2004-08-03 23:56:48 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\author.exe + 2004-08-03 23:56:42 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\authz.dll + 2004-08-03 23:56:48 588,800 ------w C:\WINDOWS\ServicePackFiles\i386\autochk.exe + 2004-08-03 23:56:48 602,624 ------w C:\WINDOWS\ServicePackFiles\i386\autoconv.exe + 2004-08-03 23:56:48 580,608 ------w C:\WINDOWS\ServicePackFiles\i386\autofmt.exe + 2004-08-03 23:56:48 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\autolfn.exe + 2004-08-03 22:10:12 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\avc.sys + 2004-08-03 22:10:00 13,696 ------w C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys + 2004-08-03 23:56:42 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\avifil32.dll + 2004-08-03 23:56:42 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\basesrv.dll + 2004-08-03 23:56:42 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll + 2004-08-03 23:56:42 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\batt.dll + 2004-08-03 22:10:14 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\bdasup.sys + 2004-08-03 23:56:42 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\bidispl.dll + 2004-08-03 23:56:42 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll + 2004-08-03 23:56:42 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll + 2004-08-03 23:56:42 286,208 ------w C:\WINDOWS\ServicePackFiles\i386\blackbox.dll + 2004-08-03 23:56:48 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\blastcln.exe + 2004-08-03 21:59:58 71,552 ------w C:\WINDOWS\ServicePackFiles\i386\bridge.sys + 2004-08-03 23:56:00 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\browselc.dll + 2004-08-03 23:56:42 77,312 ------w C:\WINDOWS\ServicePackFiles\i386\browser.dll + 2004-08-03 23:56:42 1,016,832 ------w C:\WINDOWS\ServicePackFiles\i386\browseui.dll + 2004-08-03 23:56:42 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\browsewm.dll + 2004-08-03 23:56:42 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthci.dll + 2004-08-03 22:10:40 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\bthenum.sys + 2004-08-03 22:10:40 38,016 ------w C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys + 2004-08-03 21:58:40 100,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthpan.sys + 2004-08-03 22:10:38 274,304 ------w C:\WINDOWS\ServicePackFiles\i386\bthport.sys + 2004-08-03 22:10:38 35,456 ------w C:\WINDOWS\ServicePackFiles\i386\bthprint.sys + 2004-08-03 23:56:42 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\bthserv.dll + 2004-08-03 22:10:36 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthusb.sys + 2004-08-03 23:56:42 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\btpanui.dll + 2004-08-03 23:56:42 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\cabinet.dll + 2004-08-03 23:56:42 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\cabview.dll + 2004-08-03 23:56:42 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\callcont.dll + 2004-08-03 23:56:42 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\camocx.dll + 2004-07-19 17:54:04 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\caspol.exe + 2004-08-03 23:56:42 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\catsrv.dll + 2004-08-03 23:56:42 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll + 2004-08-03 23:56:42 628,224 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll + 2004-08-03 22:10:18 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys + 2004-08-03 22:14:12 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\cdfs.sys + 2004-08-03 23:56:42 150,528 ------w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll + 2004-08-03 23:56:42 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\cdm.dll + 2004-08-03 23:56:42 2,067,968 ------w C:\WINDOWS\ServicePackFiles\i386\cdosys.dll + 2004-08-03 21:59:54 49,536 ------w C:\WINDOWS\ServicePackFiles\i386\cdrom.sys + 2004-08-03 23:56:42 194,560 ------w C:\WINDOWS\ServicePackFiles\i386\certcli.dll + 2004-08-03 23:56:42 457,728 ------w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll + 2004-08-03 23:56:42 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\cewmdm.dll + 2004-08-03 23:56:42 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll + 2004-08-03 23:56:02 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll + 2004-08-03 23:56:48 188,480 ------w C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe + 2004-08-03 23:56:42 15,423 ------w C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll + 2004-08-03 22:00:14 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\changer.sys + 2004-08-03 23:56:42 1,352,192 ------w C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll + 2004-08-03 23:56:42 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\ciodm.dll + 2004-08-03 23:56:48 56,320 ------w C:\WINDOWS\ServicePackFiles\i386\cipher.exe + 2004-08-03 23:56:48 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\cisvc.exe + 2004-08-03 22:14:28 49,664 ------w C:\WINDOWS\ServicePackFiles\i386\classpnp.sys + 2004-08-03 23:56:42 110,080 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll + 2004-08-03 23:56:42 501,248 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll + 2004-08-03 23:56:48 64,000 ------w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe + 2004-08-03 23:56:42 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll + 2004-08-03 23:56:48 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe + 2004-08-03 23:56:48 102,912 ------w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe + 2004-08-03 23:56:48 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe + 2004-08-03 23:56:42 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\clusapi.dll + 2004-08-03 22:07:40 14,080 ------w C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys + 2004-08-03 23:56:42 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll + 2004-08-03 23:56:50 388,608 ------w C:\WINDOWS\ServicePackFiles\i386\cmd.exe + 2004-08-03 23:56:42 343,040 ------w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll + 2004-08-03 23:56:50 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe + 2004-08-03 23:56:50 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe + 2004-08-03 23:56:42 185,344 ------w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll + 2004-08-03 23:56:42 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll + 2004-08-03 23:56:50 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe + 2004-08-03 23:56:42 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\cmutil.dll + 2004-08-03 23:56:42 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll + 2004-08-03 23:56:42 79,360 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll + 2004-08-03 23:56:42 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\coadmin.dll + 2004-08-03 23:56:42 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\colbact.dll + 2004-08-03 23:56:42 195,584 ------w C:\WINDOWS\ServicePackFiles\i386\comadmin.dll + 2004-08-03 23:56:42 611,328 ------w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll + 2004-08-03 23:56:42 276,992 ------w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll + 2004-08-03 23:56:42 252,928 ------w C:\WINDOWS\ServicePackFiles\i386\compatui.dll + 2004-08-03 23:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\compfilt.dll + 2004-08-03 23:56:42 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\compstui.dll + 2004-08-03 23:56:50 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.exe + 2004-08-03 23:56:42 792,064 ------w C:\WINDOWS\ServicePackFiles\i386\comres.dll + 2004-08-03 21:59:36 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comsdupd.exe + 2004-08-03 23:56:42 1,251,840 ------w C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll + 2004-08-03 23:56:42 540,160 ------w C:\WINDOWS\ServicePackFiles\i386\comuid.dll + 2004-08-03 23:56:50 1,032,192 ------w C:\WINDOWS\ServicePackFiles\i386\conf.exe + 2004-08-03 23:56:42 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll + 2004-08-03 23:56:50 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\conime.exe + 2004-08-03 21:11:12 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\corperfmonext.dll + 2004-08-03 23:56:42 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\corpol.dll + 2004-08-03 23:56:42 163,840 ------w C:\WINDOWS\ServicePackFiles\i386\credui.dll + 2004-08-03 21:59:22 36,480 ------w C:\WINDOWS\ServicePackFiles\i386\crusoe.sys + 2004-08-03 23:56:42 597,504 ------w C:\WINDOWS\ServicePackFiles\i386\crypt32.dll + 2004-08-03 23:56:42 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll + 2004-08-03 23:56:42 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll + 2004-08-03 23:56:42 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\cryptext.dll + 2004-08-03 23:56:42 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll + 2004-08-03 23:56:42 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll + 2004-08-03 23:56:42 512,512 ------w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll + 2004-08-03 21:11:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\csc.exe + 2004-08-03 23:56:42 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll + 2004-07-19 17:54:04 589,824 ------w C:\WINDOWS\ServicePackFiles\i386\cscomp.dll + 2004-08-03 23:56:50 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\cscript.exe + 2004-08-03 23:56:42 326,656 ------w C:\WINDOWS\ServicePackFiles\i386\cscui.dll + 2004-08-03 23:56:42 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll + 2004-08-03 23:56:50 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\csrss.exe + 2004-08-03 23:56:50 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe + 2004-08-03 23:56:42 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll + 2004-08-03 23:56:42 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\custsat.dll + 2004-08-03 21:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys + 2004-08-03 23:56:42 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8.dll + 2004-08-03 23:56:42 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll + 2004-08-03 23:56:42 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i386\d3d9.dll + 2004-08-03 23:56:42 825,344 ------w C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll + 2004-08-03 23:56:42 1,053,696 ------w C:\WINDOWS\ServicePackFiles\i386\danim.dll + 2004-08-03 23:56:44 561,179 ------w C:\WINDOWS\ServicePackFiles\i386\dao360.dll + 2004-08-03 23:56:44 54,272 ------w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll + 2004-08-03 23:56:50 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\davcdata.exe + 2004-08-03 23:56:44 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\davclnt.dll + 2004-08-03 23:56:44 640,000 ------w C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll + 2004-08-03 23:56:44 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll + 2004-08-03 23:56:44 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll + 2004-08-03 23:56:44 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll + 2004-08-04 00:07:22 1,788 ------w C:\WINDOWS\ServicePackFiles\i386\dcache.bin + 2004-08-03 23:56:44 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\dcap32.dll + 2004-08-03 23:56:44 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\dciman32.dll + 2004-08-03 23:56:50 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe + 2004-08-03 23:56:44 266,240 ------w C:\WINDOWS\ServicePackFiles\i386\ddraw.dll + 2004-08-03 23:56:44 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll + 2004-08-03 23:56:50 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\defrag.exe + 2004-08-03 23:56:44 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\devenum.dll + 2004-08-03 23:56:44 282,624 ------w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll + 2004-08-03 23:56:50 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe + 2004-08-03 23:56:50 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe + 2004-08-03 23:56:44 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll + 2004-08-03 23:56:44 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll + 2004-08-03 23:56:44 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll + 2004-08-03 23:56:44 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\dgnet.dll + 2004-08-03 23:56:44 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll + 2004-08-03 23:56:50 539,136 ------w C:\WINDOWS\ServicePackFiles\i386\dialer.exe + 2004-08-03 23:56:50 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\diantz.exe + 2004-08-03 23:56:44 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\digest.dll + 2004-08-03 23:56:44 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\dinput.dll + 2004-08-03 23:56:44 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\dinput8.dll + 2004-08-03 23:56:44 81,408 ------w C:\WINDOWS\ServicePackFiles\i386\directdb.dll + 2004-08-03 21:59:56 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\disk.sys + 2004-08-03 21:59:54 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\diskdump.sys + 2004-08-03 23:56:50 163,840 ------w C:\WINDOWS\ServicePackFiles\i386\diskpart.exe + 2004-08-03 23:56:50 294,912 ------w C:\WINDOWS\ServicePackFiles\i386\dlimport.exe + 2004-08-03 23:56:50 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\dllhost.exe + 2004-08-03 22:00:06 8,320 ------w C:\WINDOWS\ServicePackFiles\i386\dlttape.sys + 2004-08-03 23:56:50 224,768 ------w C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe + 2004-08-03 23:56:44 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dmband.dll + 2004-08-03 22:07:18 799,744 ------w C:\WINDOWS\ServicePackFiles\i386\dmboot.sys + 2004-08-03 23:56:44 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll + 2004-08-03 23:56:44 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll + 2004-08-03 23:56:44 181,248 ------w C:\ |
|
|
Aug 28 2008, 01:15 AM
Post
#6
|
|
|
Member ![]() ![]() Posts: 18 OS: XP |
+ 2004-08-03 23:56:44 200,704 ----a-w C:\WINDOWS\system32\dmdskmgr.dll - 2004-07-09 04:27:28 181,248 ----a-w C:\WINDOWS\system32\dmime.dll + 2004-08-03 23:56:44 181,248 ----a-w C:\WINDOWS\system32\dmime.dll - 2002-12-12 00:14:32 33,280 ----a-w C:\WINDOWS\system32\dmloader.dll + 2004-08-03 23:56:44 35,840 ----a-w C:\WINDOWS\system32\dmloader.dll - 2003-07-16 16:21:15 14,336 ----a-w C:\WINDOWS\system32\dmremote.exe + 2004-08-03 23:56:50 15,872 ----a-w C:\WINDOWS\system32\dmremote.exe - 2002-12-12 00:14:32 76,800 ----a-w C:\WINDOWS\system32\dmscript.dll + 2004-08-03 23:56:44 82,432 ----a-w C:\WINDOWS\system32\dmscript.dll - 2003-07-16 16:21:15 21,504 ----a-w C:\WINDOWS\system32\dmserver.dll + 2004-08-03 23:56:44 23,552 ----a-w C:\WINDOWS\system32\dmserver.dll - 2002-12-12 00:14:32 98,816 ----a-w C:\WINDOWS\system32\dmstyle.dll + 2004-08-03 23:56:44 105,984 ----a-w C:\WINDOWS\system32\dmstyle.dll - 2002-12-12 00:14:32 100,864 ----a-w C:\WINDOWS\system32\dmsynth.dll + 2004-08-03 23:56:44 103,424 ----a-w C:\WINDOWS\system32\dmsynth.dll - 2004-07-09 04:27:28 122,880 ----a-w C:\WINDOWS\system32\dmusic.dll + 2004-08-03 23:56:44 104,448 ----a-w C:\WINDOWS\system32\dmusic.dll - 2003-07-16 16:21:40 50,688 ----a-w C:\WINDOWS\system32\dmutil.dll + 2004-08-03 23:56:44 52,224 ----a-w C:\WINDOWS\system32\dmutil.dll - 2003-07-16 16:21:17 139,264 ----a-w C:\WINDOWS\system32\dnsapi.dll + 2008-06-20 17:41:10 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll - 2003-07-16 16:21:17 44,032 ----a-w C:\WINDOWS\system32\dnsrslvr.dll + 2004-08-03 23:56:44 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll - 2003-07-16 16:21:18 45,568 ----a-w C:\WINDOWS\system32\docprop2.dll + 2004-08-03 23:56:44 48,128 ----a-w C:\WINDOWS\system32\docprop2.dll - 2003-07-16 16:21:20 53,840 ----a-w C:\WINDOWS\system32\dosx.exe + 2004-08-03 21:51:22 53,840 ----a-w C:\WINDOWS\system32\dosx.exe - 2003-07-16 16:21:20 115,200 ----a-w C:\WINDOWS\system32\dpcdll.dll + 2004-08-03 23:56:44 96,768 ----a-w C:\WINDOWS\system32\dpcdll.dll - 2002-12-12 00:14:32 28,160 ----a-w C:\WINDOWS\system32\dplaysvr.exe + 2004-08-03 23:56:50 30,208 ----a-w C:\WINDOWS\system32\dplaysvr.exe - 2004-07-09 04:27:28 230,400 ----a-w C:\WINDOWS\system32\dplayx.dll + 2004-08-03 23:56:44 229,888 ----a-w C:\WINDOWS\system32\dplayx.dll - 2002-12-12 00:14:32 77,824 ----a-w C:\WINDOWS\system32\dpmodemx.dll + 2004-08-03 23:56:44 23,552 ----a-w C:\WINDOWS\system32\dpmodemx.dll - 2002-12-12 00:14:32 3,072 ----a-w C:\WINDOWS\system32\dpnaddr.dll + 2004-08-03 23:56:04 3,584 ----a-w C:\WINDOWS\system32\dpnaddr.dll - 2002-12-12 00:14:32 723,968 ----a-w C:\WINDOWS\system32\dpnet.dll + 2004-08-03 23:56:44 375,296 ----a-w C:\WINDOWS\system32\dpnet.dll - 2003-03-24 09:00:02 32,768 ----a-w C:\WINDOWS\system32\dpnhpast.dll + 2004-08-03 23:56:44 35,328 ----a-w C:\WINDOWS\system32\dpnhpast.dll - 2003-03-24 09:00:02 68,096 ----a-w C:\WINDOWS\system32\dpnhupnp.dll + 2004-08-03 23:56:44 60,928 ----a-w C:\WINDOWS\system32\dpnhupnp.dll - 2002-12-12 00:14:32 3,072 ----a-w C:\WINDOWS\system32\dpnlobby.dll + 2004-08-03 23:56:04 3,584 ----a-w C:\WINDOWS\system32\dpnlobby.dll - 2002-12-12 00:14:32 16,896 ----a-w C:\WINDOWS\system32\dpnsvr.exe + 2004-08-03 23:56:50 18,432 ----a-w C:\WINDOWS\system32\dpnsvr.exe - 2002-12-12 00:14:32 19,968 ----a-w C:\WINDOWS\system32\dpvacm.dll + 2004-08-03 23:56:44 21,504 ----a-w C:\WINDOWS\system32\dpvacm.dll - 2002-12-12 00:14:32 381,952 ----a-w C:\WINDOWS\system32\dpvoice.dll + 2004-08-03 23:56:44 212,480 ----a-w C:\WINDOWS\system32\dpvoice.dll - 2002-12-12 00:14:32 80,896 ----a-w C:\WINDOWS\system32\dpvsetup.exe + 2004-08-03 23:56:50 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe - 2002-12-12 00:14:32 112,128 ----a-w C:\WINDOWS\system32\dpvvox.dll + 2004-08-03 23:56:44 116,736 ----a-w C:\WINDOWS\system32\dpvvox.dll - 2004-07-09 04:27:28 79,360 ----a-w C:\WINDOWS\system32\dpwsockx.dll + 2004-08-03 23:56:44 57,344 ----a-w C:\WINDOWS\system32\dpwsockx.dll - 2003-01-13 15:53:24 50,816 ----a-w C:\WINDOWS\system32\drivers\1394bus.sys + 2004-08-03 22:10:08 53,248 ----a-w C:\WINDOWS\system32\drivers\1394bus.sys - 2003-07-16 16:17:49 179,328 ----a-w C:\WINDOWS\system32\drivers\acpi.sys + 2004-08-03 22:07:38 187,776 ----a-w C:\WINDOWS\system32\drivers\acpi.sys + 2004-08-03 23:56:42 4,255 ------w C:\WINDOWS\system32\drivers\adv01nt5.dll + 2004-08-03 23:56:42 3,967 ------w C:\WINDOWS\system32\drivers\adv02nt5.dll + 2004-08-03 23:56:42 3,615 ------w C:\WINDOWS\system32\drivers\adv05nt5.dll + 2004-08-03 23:56:42 3,647 ------w C:\WINDOWS\system32\drivers\adv07nt5.dll + 2004-08-03 23:56:42 3,135 ------w C:\WINDOWS\system32\drivers\adv08nt5.dll + 2004-08-03 23:56:42 3,711 ------w C:\WINDOWS\system32\drivers\adv09nt5.dll + 2004-08-03 23:56:42 3,775 ------w C:\WINDOWS\system32\drivers\adv11nt5.dll - 2003-07-16 16:17:59 131,968 ----a-w C:\WINDOWS\system32\drivers\afd.sys + 2008-06-20 10:44:38 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys + 2004-08-03 22:07:42 42,368 ------w C:\WINDOWS\system32\drivers\agp440.sys + 2004-08-03 22:07:44 44,928 ------w C:\WINDOWS\system32\drivers\agpcpq.sys + 2004-08-03 22:07:42 42,752 ------w C:\WINDOWS\system32\drivers\alim1541.sys + 2004-08-03 22:07:44 43,008 ------w C:\WINDOWS\system32\drivers\amdagp.sys - 2002-11-09 01:16:54 32,000 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys + 2004-08-03 21:59:20 36,992 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys - 2002-11-09 01:16:54 32,512 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys + 2004-08-03 21:59:22 37,376 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys - 2003-07-16 16:40:05 57,344 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys + 2004-08-03 21:58:30 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys - 2003-07-16 16:18:30 13,568 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys + 2004-08-03 22:05:04 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys - 2003-07-16 16:18:31 86,912 ----a-w C:\WINDOWS\system32\drivers\atapi.sys + 2004-08-03 21:59:44 95,360 ----a-w C:\WINDOWS\system32\drivers\atapi.sys + 2004-08-03 21:29:30 56,623 ------w C:\WINDOWS\system32\drivers\ati1btxx.sys + 2004-08-03 21:29:30 11,615 ------w C:\WINDOWS\system32\drivers\ati1mdxx.sys + 2004-08-03 21:29:30 12,047 ------w C:\WINDOWS\system32\drivers\ati1pdxx.sys + 2004-08-03 21:29:32 30,671 ------w C:\WINDOWS\system32\drivers\ati1raxx.sys + 2004-08-03 21:29:32 63,663 ------w C:\WINDOWS\system32\drivers\ati1rvxx.sys + 2004-08-03 21:29:32 26,367 ------w C:\WINDOWS\system32\drivers\ati1snxx.sys + 2004-08-03 21:29:32 21,343 ------w C:\WINDOWS\system32\drivers\ati1ttxx.sys + 2004-08-03 21:29:32 36,463 ------w C:\WINDOWS\system32\drivers\ati1tuxx.sys + 2004-08-03 21:29:32 29,455 ------w C:\WINDOWS\system32\drivers\ati1xbxx.sys + 2004-08-03 21:29:32 34,735 ------w C:\WINDOWS\system32\drivers\ati1xsxx.sys + 2004-08-03 21:29:28 327,040 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys + 2004-08-03 21:29:28 701,440 ------w C:\WINDOWS\system32\drivers\ati2mtag.sys + 2004-08-03 21:29:28 57,856 ------w C:\WINDOWS\system32\drivers\atinbtxx.sys + 2004-08-03 21:29:30 13,824 ------w C:\WINDOWS\system32\drivers\atinmdxx.sys + 2004-08-03 21:29:30 14,336 ------w C:\WINDOWS\system32\drivers\atinpdxx.sys |