Page 1 of 3 123 LastLast
Results 1 to 10 of 24

Thread: Virtumonde problems

  1. 2009-01-12, 02:45 #1
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default Virtumonde problems

    Here's the log. My teatimer is off, but I don't know if I reset it right

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 8:39:54 PM, on 1/11/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
    O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: MEMonitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music Manager\MEMonitor.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/tes...enXInstall.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1201273588671
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1161277424156
    O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} (Pearson Installation Assistant 2) - http://asp.mathxl.com/books/_Players...stallAsst2.cab
    O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: tlngqm.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
  2. 2009-01-16, 16:03 #2
    Blade81
    Blade81 is offline
    Security Expert: Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,288

    Default

    Hi

    Go to C:\Program Files\Trend Micro\HijackThis folder and rename HijackThis.exe file there to something.exe. Post a fresh hjt log after renaming is done
    Microsoft Windows Insider MVP 2016-2020
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.
  3. 2009-01-16, 17:11 #3
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:10:10 AM, on 1/16/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Trend Micro\HijackThis\something.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
    O2 - BHO: (no name) - {05B1FFEC-A8F8-47AC-84BC-F06AF42EA2B9} - C:\WINDOWS\system32\awtuvULF.dll
    O2 - BHO: (no name) - {1486AAEE-C48E-4B3B-9B9D-052E2AA31439} - blank (file missing)
    O2 - BHO: (no name) - {31B6002A-E311-4373-957A-E439FC87D0D0} - blank (file missing)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {5BD5E023-A449-4446-8075-D527315E4F2F} - blank (file missing)
    O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
    O2 - BHO: (no name) - {60C0A167-FE13-4983-A14A-BE2C8EBE8B3A} - blank (file missing)
    O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\hgGabaBU.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: {e7f43058-02dc-ea49-6eb4-c44abd222709} - {907222db-a44c-4be6-94ae-cd2085034f7e} - C:\WINDOWS\system32\tlngqm.dll
    O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
    O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: MEMonitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music Manager\MEMonitor.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/tes...enXInstall.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1201273588671
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1161277424156
    O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} (Pearson Installation Assistant 2) - http://asp.mathxl.com/books/_Players...stallAsst2.cab
    O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: tlngqm.dll
    O20 - Winlogon Notify: hgGabaBU - C:\WINDOWS\SYSTEM32\hgGabaBU.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
  4. 2009-01-16, 18:25 #4
    Blade81
    Blade81 is offline
    Security Expert: Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,288

    Default

    Hi again,

    Please visit this webpage for download links, and instructions for running ComboFix tool:

    http://www.bleepingcomputer.com/comb...o-use-combofix

    Please ensure you read this guide carefully and install the Recovery Console first.

    The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

    Once installed, you should see a blue screen prompt that says:

    The Recovery Console was successfully installed.

    Please continue as follows:

    1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
      Remember to re-enable them afterwards.

    2. Click Yes to allow ComboFix to continue scanning for malware.


    When the tool is finished, it will produce a report for you.

    Please include the following reports for further review, and so we may continue cleansing the system:

    C:\ComboFix.txt
    New HijackThis log.

    A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.
    Microsoft Windows Insider MVP 2016-2020
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.
  5. 2009-01-16, 20:08 #5
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default

    I'm having a problem with disabling my Norton AntiVirus in the fact that according to combofix, I have it running but I can't open it from my start menu and there's no icon showing that it's enabled in my system tray. Any help would be greatly appreciated. I posted this in the bleepingcomputer forum that you linked me to but if you can help me before they do, that would be great. I'll let you know if they help me first though.
  6. 2009-01-16, 21:23 #6
    Blade81
    Blade81 is offline
    Security Expert: Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,288

    Default

    I posted this in the bleepingcomputer forum that you linked me to but if you can help me before they do, that would be great.
    Hi

    When did you do that? It's strongly not advisable to post multiple forums asking help. In worst case that takes valuable time from several helpers while some users are left without help. I recommend you post there telling that you're already helped.

    If you don't have a way to disable Norton then please run ComboFix despite of the warning.
    Microsoft Windows Insider MVP 2016-2020
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.
  7. 2009-01-16, 23:10 #7
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default

    Alright, here's the log

    ComboFix 09-01-15.01 - Marc-MSU 2009-01-16 16:49:32.4 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.617 [GMT -5:00]
    Running from: c:\documents and settings\Marc-MSU\Desktop\ComboFix.exe
    AV: Norton AntiVirus 2005 *On-access scanning enabled* (Updated)
    FW: Norton Internet Worm Protection *enabled*
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\awtuvULF.dll
    c:\windows\system32\chmgurid.dll
    c:\windows\system32\FLUvutwa.ini
    c:\windows\system32\FLUvutwa.ini2
    c:\windows\system32\hgGabaBU.dll
    c:\windows\system32\ikxcnm.dll
    c:\windows\system32\rapipgev.dll
    c:\windows\system32\tcbmcaeb.ini
    c:\windows\system32\tlngqm.dll
    c:\windows\system32\vegpipar.ini
    c:\windows\system32\wbdrmybv.dll
    c:\windows\system32\wpv911231601469.cpx
    c:\windows\wiaserviv.log

    .
    ((((((((((((((((((((((((( Files Created from 2008-12-16 to 2009-01-16 )))))))))))))))))))))))))))))))
    .

    2009-01-06 20:14 . 2009-01-06 20:14 <DIR> d-------- c:\program files\ConvertHelper
    2009-01-06 19:57 . 2009-01-06 20:03 <DIR> d-------- c:\documents and settings\Marc-MSU\dwhelper
    2008-12-25 19:22 . 2008-12-25 19:30 <DIR> d-------- c:\program files\CCleaner

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-01-12 01:39 --------- d-----w c:\program files\Trend Micro
    2009-01-11 19:37 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-01-08 00:14 --------- d-----w c:\program files\Starcraft
    2009-01-07 00:22 --------- d-----w c:\documents and settings\Marc-MSU\Application Data\skypePM
    2009-01-07 00:22 --------- d-----w c:\documents and settings\Marc-MSU\Application Data\Skype
    2008-12-26 00:45 --------- d-----w c:\program files\Steam
    2008-12-06 21:41 --------- d-----r c:\documents and settings\Marc-MSU\Application Data\Brother
    2008-12-02 22:44 --------- d-----w c:\program files\Common Files\Blizzard Entertainment
    2008-12-02 22:40 --------- d-----w c:\program files\Army Operations
    2008-12-02 01:55 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-12-02 01:55 --------- d-----w c:\program files\Electronic Arts
    2008-11-30 08:00 --------- d-----w c:\program files\Microsoft CAPICOM 2.1.0.2
    2008-11-30 03:16 --------- d-----w c:\program files\Microsoft Games
    2008-11-29 03:47 --------- d-----w c:\program files\Common Files\LogiShrd
    2008-11-29 03:45 --------- d-----w c:\program files\Spybot - Search & Destroy
    2008-11-29 03:33 --------- d-----w c:\program files\Logitech
    2008-11-29 03:33 --------- d-----w c:\documents and settings\All Users\Application Data\Logitech
    2008-11-29 03:33 --------- d-----w c:\documents and settings\All Users\Application Data\Logishrd
    2008-11-29 02:44 --------- d-----w c:\program files\Skype
    2008-11-29 02:44 --------- d-----w c:\program files\Common Files\Skype
    2008-11-29 02:44 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
    2008-11-27 17:13 --------- d-----w c:\documents and settings\Marc-MSU\Application Data\Dreamlords
    2008-11-25 01:26 --------- d-----w c:\documents and settings\Marc-MSU\Application Data\Ventrilo
    2008-11-20 03:21 --------- d-----w c:\documents and settings\Marc-MSU\Application Data\ATI
    2008-11-20 03:21 --------- d-----w c:\documents and settings\All Users\Application Data\ATI
    2008-11-20 03:17 --------- d-----w c:\program files\ATI Technologies
    2008-11-19 03:58 --------- d-----w c:\program files\VirtualDJ
    2007-06-28 18:00 15,505,200 ----a-w c:\program files\IE7-WindowsXP-x86-enu.exe
    2006-05-22 00:06 37,311,488 ----a-w c:\program files\iTunesSetup.exe
    2006-05-17 22:39 8,715,352 ----a-w c:\program files\Install_AIM.exe
    2005-11-08 20:04 1,145 ----a-w c:\program files\README.txt
    2008-01-25 17:52 2 --shatr c:\windows\winstart.bat
    .

    ((((((((((((((((((((((((((((( snapshot@2008-01-24_23.04.19.00 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2005-02-25 00:35:06 14,048 ----a-w c:\windows\$hf_mig$\KB890046\spmsg.dll
    + 2005-02-25 01:35:06 14,048 ----a-w c:\windows\$hf_mig$\KB890046\spmsg.dll
    - 2005-02-25 00:35:06 209,632 ----a-w c:\windows\$hf_mig$\KB890046\spuninst.exe
    + 2005-02-25 01:35:06 209,632 ----a-w c:\windows\$hf_mig$\KB890046\spuninst.exe
    - 2005-02-25 00:35:06 22,240 ----a-w c:\windows\$hf_mig$\KB890046\update\spcustom.dll
    + 2005-02-25 01:35:06 22,240 ----a-w c:\windows\$hf_mig$\KB890046\update\spcustom.dll
    - 2005-02-25 00:35:06 718,048 ----a-w c:\windows\$hf_mig$\KB890046\update\update.exe
    + 2005-02-25 01:35:06 718,048 ----a-w c:\windows\$hf_mig$\KB890046\update\update.exe
    - 2005-02-25 00:35:08 371,936 ----a-w c:\windows\$hf_mig$\KB890046\update\updspapi.dll
    + 2005-02-25 01:35:08 371,936 ----a-w c:\windows\$hf_mig$\KB890046\update\updspapi.dll
    + 2007-05-17 11:25:21 549,888 ----a-w c:\windows\$hf_mig$\KB921503\SP2QFE\oleaut32.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB921503\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB921503\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB921503\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB921503\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB921503\update\updspapi.dll
    + 2007-03-08 15:48:36 282,112 ----a-w c:\windows\$hf_mig$\KB925902\SP2QFE\gdi32.dll
    + 2007-03-08 15:48:36 40,960 ----a-w c:\windows\$hf_mig$\KB925902\SP2QFE\mf3216.dll
    + 2007-03-08 15:48:36 578,048 ----a-w c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
    + 2007-03-08 13:49:49 1,843,968 ----a-w c:\windows\$hf_mig$\KB925902\SP2QFE\win32k.sys
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB925902\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB925902\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB925902\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB925902\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB925902\update\updspapi.dll
    + 2007-04-18 16:14:43 2,854,400 ----a-w c:\windows\$hf_mig$\KB927891\SP2QFE\msi31.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB927891\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB927891\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB927891\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB927891\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB927891\update\updspapi.dll
    + 2007-05-16 15:32:55 86,528 ----a-w c:\windows\$hf_mig$\KB929123\SP2QFE\directdb.dll
    + 2007-05-16 15:32:55 683,520 ----a-w c:\windows\$hf_mig$\KB929123\SP2QFE\inetcomm.dll
    + 2007-05-16 15:32:56 1,314,816 ----a-w c:\windows\$hf_mig$\KB929123\SP2QFE\msoe.dll
    + 2007-05-16 15:32:56 510,976 ----a-w c:\windows\$hf_mig$\KB929123\SP2QFE\wab32.dll
    + 2007-05-16 15:32:56 85,504 ----a-w c:\windows\$hf_mig$\KB929123\SP2QFE\wabimp.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB929123\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB929123\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB929123\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB929123\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB929123\update\updspapi.dll
    + 2007-03-17 13:45:03 292,864 ----a-w c:\windows\$hf_mig$\KB930178\SP2QFE\winsrv.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB930178\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB930178\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB930178\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB930178\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB930178\update\updspapi.dll
    + 2007-02-09 11:23:36 574,976 ----a-w c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB930916\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB930916\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB930916\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB930916\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB930916\update\updspapi.dll
    + 2007-02-05 20:19:14 185,344 ----a-w c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB931261\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB931261\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB931261\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB931261\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB931261\update\updspapi.dll
    + 2007-02-28 09:53:04 2,137,600 ----a-w c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlmp.exe
    + 2007-02-28 09:15:56 2,059,392 ----a-w c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
    + 2007-02-28 09:15:59 2,017,280 ----a-w c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrpamp.exe
    + 2007-02-28 09:55:14 2,182,144 ----a-w c:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB931784\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB931784\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB931784\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB931784\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB931784\update\updspapi.dll
    + 2007-03-09 13:58:57 57,344 ----a-w c:\windows\$hf_mig$\KB932168\SP2QFE\agentdpv.dll
    + 2007-03-09 11:28:00 248,320 ----a-w c:\windows\$hf_mig$\KB932168\SP2QFE\xpsp3res.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB932168\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB932168\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB932168\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB932168\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB932168\update\updspapi.dll
    + 2008-02-26 11:48:44 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll
    + 2007-07-09 13:16:16 582,656 ----a-w c:\windows\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
    + 2007-06-19 07:24:36 350,720 ----a-w c:\windows\$hf_mig$\KB933729\SP2QFE\xpsp3res.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB933729\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB933729\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB933729\update\spcustom.dll
    + 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB933729\update\update.exe
    + 2005-10-12 23:12:33 371,424 ----a-w c:\windows\$hf_mig$\KB933729\update\updspapi.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB935448\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB935448\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB935448\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB935448\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB935448\update\updspapi.dll
    + 2007-04-16 16:07:27 986,112 ----a-w c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB935839\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB935839\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB935839\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB935839\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB935839\update\updspapi.dll
    + 2007-04-25 20:32:22 144,896 ----a-w c:\windows\$hf_mig$\KB935840\SP2QFE\schannel.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB935840\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB935840\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB935840\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB935840\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB935840\update\updspapi.dll
    + 2007-06-26 06:06:12 1,104,896 ----a-w c:\windows\$hf_mig$\KB936021\SP2QFE\msxml3.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB936021\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB936021\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB936021\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB936021\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB936021\update\updspapi.dll
    + 2007-04-23 10:14:23 364,160 ----a-w c:\windows\$hf_mig$\KB936357\SP2QFE\update.sys
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB936357\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB936357\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB936357\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB936357\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB936357\update\updspapi.dll
    + 2007-07-06 09:52:38 72,960 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqac.sys
    + 2007-07-06 13:08:11 138,240 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqad.dll
    + 2007-07-06 13:08:11 47,104 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqdscli.dll
    + 2007-07-06 13:08:11 16,896 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqise.dll
    + 2007-07-06 13:08:11 660,992 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqqm.dll
    + 2007-07-06 13:08:11 177,152 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqrt.dll
    + 2007-07-06 13:08:11 95,744 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqsec.dll
    + 2007-07-06 13:08:11 48,640 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll
    + 2007-07-06 13:08:11 471,552 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqutil.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB937894\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB937894\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB937894\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB937894\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB937894\update\updspapi.dll
    + 2007-07-12 23:28:55 765,952 ----a-w c:\windows\$hf_mig$\KB938127-IE7\SP2QFE\vgx.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB938127-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB938127-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2007-06-13 11:26:03 1,033,216 ----a-w c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB938828\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB938828\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB938828\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB938828\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB938828\update\updspapi.dll
    + 2007-06-19 13:37:21 282,112 ----a-w c:\windows\$hf_mig$\KB938829\SP2QFE\gdi32.dll
    + 2006-01-19 19:29:19 14,048 ----a-w c:\windows\$hf_mig$\KB938829\spmsg.dll
    + 2006-01-19 19:29:19 213,216 ----a-w c:\windows\$hf_mig$\KB938829\spuninst.exe
    + 2006-01-19 19:29:19 22,752 ----a-w c:\windows\$hf_mig$\KB938829\update\spcustom.dll
    + 2006-01-19 19:29:19 716,000 ----a-w c:\windows\$hf_mig$\KB938829\update\update.exe
    + 2006-01-19 19:29:19 371,424 ----a-w c:\windows\$hf_mig$\KB938829\update\updspapi.dll
    + 2007-08-21 06:25:02 683,520 ----a-w c:\windows\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941202\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941202\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941202\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941202\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941202\update\updspapi.dll
    + 2007-10-29 22:35:13 1,287,680 ----a-w c:\windows\$hf_mig$\KB941568\SP2QFE\quartz.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941568\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941568\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941568\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941568\update\updspapi.dll
    + 2007-10-30 16:53:32 360,832 ----a-w c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941644\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941644\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941644\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941644\update\updspapi.dll
    + 2008-03-19 09:40:27 1,845,888 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll
    + 2007-10-10 23:47:27 124,928 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll
    + 2007-10-10 23:47:27 214,528 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll
    + 2007-10-10 23:47:27 132,608 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll
    + 2007-10-10 23:47:27 63,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll
    + 2007-10-10 08:16:47 70,656 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe
    + 2007-10-10 23:47:27 153,088 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll
    + 2007-10-10 23:47:27 230,400 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll
    + 2007-10-10 05:47:20 161,792 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll
    + 2007-07-01 03:31:33 2,455,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat
    + 2007-10-10 23:47:27 383,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll
    + 2007-10-10 23:47:27 388,096 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll
    + 2007-10-10 23:47:27 6,067,200 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll
    + 2007-10-10 23:47:27 44,544 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll
    + 2007-10-10 23:47:27 267,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll
    + 2007-10-10 08:16:47 13,824 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe
    + 2007-10-10 08:16:56 625,664 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
    + 2007-10-10 23:47:28 27,648 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll
    + 2007-10-10 23:47:28 459,264 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll
    + 2007-10-10 23:47:28 52,224 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll
    + 2007-10-30 23:48:49 3,593,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
    + 2007-10-10 23:47:28 478,208 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll
    + 2007-10-10 23:47:28 193,024 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll
    + 2007-10-10 23:47:28 671,232 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll
    + 2007-10-10 23:47:28 102,912 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll
    + 2007-10-10 23:47:28 105,984 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\url.dll
    + 2007-10-10 23:47:29 1,162,240 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll
    + 2007-10-10 23:47:29 233,472 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll
    + 2007-10-10 23:47:29 825,344 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\updspapi.dll
    + 2007-11-13 11:02:46 60,416 ----a-w c:\windows\$hf_mig$\KB942763\SP2QFE\tzchange.exe
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB942763\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB942763\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB942763\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB942763\update\updspapi.dll
    + 2007-12-04 18:29:10 551,936 ----a-w c:\windows\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB943055\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB943055\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB943055\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB943055\update\updspapi.dll
    + 2007-10-26 03:34:01 8,460,288 ----a-w c:\windows\$hf_mig$\KB943460\SP2QFE\shell32.dll
    + 2007-10-29 10:04:03 350,720 ----a-w c:\windows\$hf_mig$\KB943460\SP2QFE\xpsp3res.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB943460\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB943460\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB943460\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB943460\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB943460\update\updspapi.dll
    + 2007-11-07 09:50:47 727,040 ----a-w c:\windows\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB943485\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB943485\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB943485\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB943485\update\updspapi.dll
    + 2007-12-07 02:01:07 124,928 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
    + 2007-12-19 22:57:52 347,136 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
    + 2007-12-07 02:01:07 214,528 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
    + 2007-12-07 02:01:07 133,120 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
    + 2007-12-07 02:01:07 63,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
    + 2007-12-06 08:34:28 70,656 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
    + 2007-12-07 02:01:08 153,088 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
    + 2007-12-07 02:01:08 230,400 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
    + 2007-12-06 05:00:02 161,792 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
    + 2007-07-01 03:31:33 2,455,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
    + 2007-12-07 02:01:08 383,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
    + 2007-12-07 02:01:08 388,096 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
    + 2007-12-07 02:01:10 6,067,200 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
    + 2007-12-07 02:01:10 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
    + 2007-12-07 02:01:11 267,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
    + 2007-12-06 08:34:29 13,824 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
    + 2007-12-06 08:34:45 625,664 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
    + 2007-12-07 02:01:11 27,648 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
    + 2007-12-07 02:01:11 459,264 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
    + 2007-12-07 02:01:11 52,224 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
    + 2007-12-07 02:01:12 3,593,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
    + 2007-12-07 02:01:12 478,208 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
    + 2007-12-07 02:01:13 193,024 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
    + 2007-12-07 02:01:13 671,232 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
    + 2007-12-07 02:01:13 102,912 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
    + 2008-01-11 05:57:26 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
    + 2007-12-07 02:01:13 105,984 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
    + 2007-12-07 02:01:13 1,162,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
    + 2007-12-07 02:01:13 233,472 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
    + 2007-12-07 02:01:13 825,344 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\updspapi.dll
    + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\$hf_mig$\KB944653\SP2QFE\secdrv.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB944653\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB944653\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB944653\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944653\update\updspapi.dll
    + 2008-02-20 05:19:35 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
    + 2008-02-20 18:49:36 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll
    + 2007-12-18 09:38:59 179,712 ----a-w c:\windows\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB946026\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB946026\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB946026\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB946026\update\updspapi.dll
    + 2008-05-02 13:30:08 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:49 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:42:10 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-03-01 13:03:00 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
    + 2008-03-01 13:03:00 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
    + 2008-03-01 13:03:00 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
    + 2008-03-01 13:03:00 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
    + 2008-03-01 13:03:00 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
    + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
    + 2008-03-01 13:03:00 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
    + 2008-03-01 13:03:00 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
    + 2008-03-01 13:03:00 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
    + 2008-03-01 13:03:00 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
    + 2008-03-01 13:03:01 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
    + 2008-03-01 13:03:01 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
    + 2008-03-01 13:03:01 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
    + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
    + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
    + 2008-03-01 13:03:01 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
    + 2008-03-01 13:03:01 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
    + 2008-03-01 13:03:01 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
    + 2008-03-01 13:03:01 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    + 2008-03-01 13:03:01 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
    + 2008-03-01 13:03:01 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
    + 2008-03-01 13:03:01 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
    + 2008-03-01 13:03:01 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
    + 2008-03-01 13:03:01 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
    + 2008-03-01 13:03:02 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
    + 2008-03-01 13:03:02 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
    + 2008-03-01 13:03:02 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
    + 2008-03-01 13:03:02 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll
    + 2008-02-20 06:52:43 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll
    + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-27 07:39:13 151,583 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-12-10 12:41:14 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-23 03:35:35 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
    + 2008-04-23 03:35:35 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
    + 2008-04-23 03:35:35 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
    + 2008-04-23 03:35:35 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
    + 2008-04-23 03:35:35 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
    + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
    + 2008-04-23 03:35:35 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
    + 2008-04-23 03:35:35 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
    + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
    + 2008-04-23 03:35:35 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
    + 2008-04-23 03:35:35 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
    + 2008-04-23 03:35:36 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
    + 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
    + 2008-04-23 03:35:36 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
    + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
    + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
    + 2008-04-23 03:35:36 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
    + 2008-04-23 03:35:36 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
    + 2008-04-23 03:35:36 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
    + 2008-04-23 03:35:36 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    + 2008-04-23 03:35:36 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
    + 2008-04-23 03:35:36 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
    + 2008-04-23 03:35:36 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
    + 2008-04-23 03:35:36 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
    + 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
    + 2008-04-23 03:35:36 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
    + 2008-04-23 03:35:36 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
    + 2008-04-23 03:35:36 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
    + 2008-04-23 03:35:36 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-07-07 20:06:43 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    + 2008-07-07 20:26:58 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:23:18 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:39:39 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:04:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-12 04:22:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:31 755,576 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-06-13 09:52:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-13 11:05:51 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-13 11:27:43 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-05-07 04:55:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll
    + 2008-05-07 05:12:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:15 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:08:32 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:36:11 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:36:11 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
    + 2008-06-20 17:46:57 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:46:57 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:43:05 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:43:05 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:45:15 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:45:16 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:45:16 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:45:16 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:45:17 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 15:04:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:33:02 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:38:05 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:28:00 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:43:16 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:10 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2008-06-23 16:01:38 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 16:01:38 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 16:01:39 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 16:01:39 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 16:01:39 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 16:01:39 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 16:01:39 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 16:01:40 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 16:01:40 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 16:01:43 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 16:01:43 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 16:01:44 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 16:01:46 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 16:01:46 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 16:01:46 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 16:01:49 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 16:01:49 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 16:01:49 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 16:01:50 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 16:01:50 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 16:01:50 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 16:01:50 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 16:01:51 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 16:01:51 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 16:01:51 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 12:25:27 1,846,912 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-09-10 01:10:56 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
    + 2008-10-03 09:49:31 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
    + 2008-09-04 17:12:27 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
    + 2008-07-09 18:08:38 382,840 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
    + 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
    + 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:08:36 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:08:36 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:08:36 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:08:36 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:08:36 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:08:36 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-07-01 03:31:33 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:08:36 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:08:37 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 17:26:50 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:08:39 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:08:39 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:08:40 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:08:40 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:08:40 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:08:43 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:08:43 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:08:44 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:08:44 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:08:44 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:08:44 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:08:44 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:08:45 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:08:45 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:08:45 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-10-23 12:43:42 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
    + 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
    + 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
    + 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 10:39:28 2,145,280 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 20:39:46 2,066,048 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 10:09:44 2,023,936 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 21:11:10 2,189,184 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
    + 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
    + 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
    + 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
    + 2008-07-08 13:02:04 755,576 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
    + 2008-07-08 13:02:12 382,840 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
    + 2008-10-16 20:24:09 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
    + 2008-10-16 20:24:09 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
    + 2008-10-16 20:24:09 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
    + 2008-10-16 20:24:09 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
    + 2008-10-16 20:24:09 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
    + 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
    + 2008-10-16 20:24:09 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
    + 2008-10-16 20:24:09 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
    + 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
    + 2008-10-16 20:24:09 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
    + 2008-10-16 20:24:09 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-16 20:24:09 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
    + 2008-10-16 20:24:09 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
    + 2008-10-16 20:24:09 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
    + 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
    + 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
    + 2008-10-16 20:24:10 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
    + 2008-10-16 20:24:10 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
    + 2008-10-16 20:24:10 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
    + 2008-10-16 20:24:10 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
    + 2008-10-16 20:24:10 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
    + 2008-10-16 20:24:10 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
    + 2008-10-16 20:24:10 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
    + 2008-10-16 20:24:10 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
    + 2008-10-16 20:24:10 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
    + 2008-10-16 20:24:10 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
    + 2008-10-16 20:24:11 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
    + 2008-10-16 20:24:11 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
    + 2008-10-16 20:24:11 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
    + 2008-10-15 16:25:53 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
  8. 2009-01-16, 23:12 #8
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default

    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
    + 2006-08-16 11:58:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2004-08-11 02:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-11 02:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-11 02:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-11 02:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-11 02:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-11 02:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-11 02:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-11 02:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-11 02:00:00 187,776 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-11 02:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-11 02:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-11 02:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-11 02:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-11 02:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-11 02:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2004-08-11 02:00:00 29,696 -c----w c:\windows\$NtServicePackUninstall$\admexs.dll
    + 2003-03-25 17:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
    + 2003-03-25 17:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
    + 2004-08-11 02:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\admwprox.dll
    + 2004-08-11 02:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\adsiis51.dll
    + 2004-08-11 02:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-11 02:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-11 02:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-11 02:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-11 02:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
    + 2004-08-11 02:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-11 02:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-11 02:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 14:02:52 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 13:46:24 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-11 02:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-11 02:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-11 02:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:09:53 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0401.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0404.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-11 02:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-11 02:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-11 02:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040d.dll
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0411.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0412.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0804.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-11 02:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-11 02:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-11 02:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-11 02:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 12:59:20 36,992 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-04 12:59:22 37,376 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-11 02:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-11 02:00:00 108,544 -c----w c:\windows\$NtServicePackUninstall$\appconf.dll
    + 2004-08-11 02:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-11 02:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
    + 2004-08-11 02:00:00 295,936 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
    + 2004-08-11 02:00:00 331,264 -c----w c:\windows\$NtServicePackUninstall$\aqueue.dll
    + 2004-08-04 12:58:30 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 1999-12-20 17:16:40 15,360 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
    + 2004-08-11 02:00:00 369,664 -c----w c:\windows\$NtServicePackUninstall$\asp51.dll
    + 2002-06-22 18:31:20 20,480 -c----w c:\windows\$NtServicePackUninstall$\aspnet_filter.dll
    + 2007-01-02 21:34:04 200,704 -c----w c:\windows\$NtServicePackUninstall$\aspnet_isapi.dll
    + 2004-08-04 23:11:06 24,576 -c----w c:\windows\$NtServicePackUninstall$\aspnet_regiis.exe
    + 2002-06-22 18:31:22 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_state.exe
    + 2007-01-02 21:34:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_wp.exe
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
    + 2004-08-11 02:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-11 02:00:00 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-11 02:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-11 02:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-11 02:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-11 02:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-11 02:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2003-03-25 17:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
    + 2003-03-25 17:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
    + 2005-03-02 18:09:29 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-11 02:00:00 588,800 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-11 02:00:00 602,624 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-11 02:00:00 580,608 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-11 02:00:00 84,992 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-11 02:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-11 02:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-11 02:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-11 02:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-11 02:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
    + 2004-08-11 02:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-11 02:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-11 02:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2006-09-23 16:12:50 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-11 02:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-11 02:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-11 02:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\c_g18030.dll
    + 2004-08-11 02:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-11 02:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-11 02:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-11 02:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-11 02:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-11 02:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:39:42 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-11 02:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:39:43 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-04 13:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
    + 2004-08-11 02:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2004-08-11 02:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:53:41 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-11 02:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-11 02:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-11 02:00:00 457,728 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-11 02:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-11 02:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2003-03-25 17:52:04 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-11 02:00:00 97,792 -c----w c:\windows\$NtServicePackUninstall$\chtmbx.dll
    + 2004-08-11 02:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\chtskdic.dll
    + 2004-08-11 02:00:00 173,568 -c----w c:\windows\$NtServicePackUninstall$\chtskf.dll
    + 2004-08-11 02:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-11 02:00:00 1,352,192 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2004-08-11 02:00:00 198,656 -c----w c:\windows\$NtServicePackUninstall$\cintime.dll
    + 2006-06-22 05:06:29 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-11 02:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
    + 2004-08-11 02:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-11 02:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:39:43 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:43 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-11 02:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-11 02:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-11 02:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-11 02:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-11 02:00:00 388,608 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-11 02:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
    + 2004-08-11 02:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-11 02:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-11 02:00:00 185,344 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-11 02:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-11 02:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-04 14:56:42 47,104 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2004-08-11 02:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\coadmin.dll
    + 2005-07-26 04:39:43 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-11 02:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:39:44 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:45:58 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-11 02:00:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-11 02:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-11 02:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\compfilt.dll
    + 2004-08-11 02:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:44 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2004-08-11 02:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-11 02:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-11 02:00:00 792,064 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-11 02:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-11 02:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:39:44 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:45 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-11 02:00:00 1,032,192 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-11 02:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-11 02:00:00 345,600 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-11 02:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2006-10-17 16:03:56 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-11 02:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-04 12:59:22 36,480 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-11 02:00:00 597,504 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-11 02:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-11 02:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-11 02:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-11 02:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-11 02:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-11 02:00:00 512,512 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-11 02:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-11 02:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-11 02:00:00 326,656 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-11 02:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-11 02:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-11 02:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-11 02:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2004-08-11 02:00:00 1,053,696 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-11 02:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-11 02:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-11 02:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\davcdata.exe
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-11 02:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-11 02:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-11 02:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-11 02:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-11 02:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-11 02:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-11 02:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-11 02:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-11 02:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-11 02:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-11 02:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-11 02:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-11 02:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-11 02:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-11 02:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 12:59:41 111,616 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-11 02:00:00 370,176 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-11 02:00:00 539,136 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-11 02:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-11 02:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-11 02:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-11 02:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:12:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-11 02:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-11 02:00:00 1,501,696 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-11 02:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-11 02:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-11 02:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-11 02:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-11 02:00:00 224,768 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-11 02:00:00 799,744 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-11 02:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-11 02:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-11 02:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-11 02:00:00 153,344 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-11 02:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-11 02:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-11 02:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-11 02:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-11 02:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 13:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-04 14:56:44 52,224 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:10 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:32:43 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-11 02:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-11 02:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-11 02:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-11 02:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-11 02:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-11 02:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-11 02:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-11 02:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-11 02:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-11 02:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-11 02:00:00 212,480 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-11 02:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-11 02:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-11 02:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
    + 2004-08-04 13:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 13:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-11 02:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\drvqry.exe
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-11 02:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-11 02:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-11 02:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-11 02:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    + 2004-08-11 02:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-11 02:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-11 02:00:00 142,336 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-11 02:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-11 02:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-11 02:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-11 02:00:00 113,152 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-11 02:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-11 02:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-11 02:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-11 02:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-11 02:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-11 02:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-11 02:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-11 02:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-11 02:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2006-08-22 09:05:26 498,742 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2004-08-11 02:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
    + 2004-08-11 02:00:00 183,296 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-11 02:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2008-07-07 20:32:22 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2005-10-20 22:20:03 1,082,368 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2004-08-11 02:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-11 02:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-11 02:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\evcreate.exe
    + 2004-08-11 02:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
    + 2004-08-11 02:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
    + 2004-08-11 02:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\evntagnt.dll
    + 2004-08-11 02:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\evntcmd.exe
    + 2004-08-11 02:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2004-08-11 02:00:00 92,160 -c----w c:\windows\$NtServicePackUninstall$\evntwin.exe
    + 2004-08-11 02:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\evtgprov.dll
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
    + 2007-06-13 10:23:07 1,033,216 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2004-08-11 02:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\exstrace.dll
    + 2004-08-11 02:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-11 02:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\f3ahvoas.dll
    + 2004-08-11 02:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-11 02:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-11 02:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-11 02:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-11 02:00:00 117,760 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
    + 2004-08-11 02:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
    + 2004-08-11 02:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-11 02:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-11 02:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-11 02:00:00 34,944 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    + 2004-08-11 02:00:00 87,552 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:21:06 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    + 2004-08-11 02:00:00 382,976 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:14:45 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2004-08-11 02:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    + 2004-08-11 02:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2004-05-14 01:39:48 184,435 -c----w c:\windows\$NtServicePackUninstall$\fp4amsft.dll
    + 2003-03-25 17:52:04 82,035 -c----w c:\windows\$NtServicePackUninstall$\fp4anscp.dll
    + 2003-03-25 17:52:04 147,513 -c----w c:\windows\$NtServicePackUninstall$\fp4apws.dll
    + 2003-03-25 17:52:04 49,210 -c----w c:\windows\$NtServicePackUninstall$\fp4areg.dll
    + 2003-03-25 17:52:04 102,509 -c----w c:\windows\$NtServicePackUninstall$\fp4atxt.dll
    + 2003-03-25 17:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2003-03-25 17:52:04 41,020 -c----w c:\windows\$NtServicePackUninstall$\fp4avnb.dll
    + 2003-03-25 17:52:04 32,826 -c----w c:\windows\$NtServicePackUninstall$\fp4avss.dll
    + 2003-03-25 17:52:04 49,212 -c----w c:\windows\$NtServicePackUninstall$\fp4awebs.dll
    + 2004-05-14 01:39:48 876,653 -c----w c:\windows\$NtServicePackUninstall$\fp4awel.dll
    + 2003-03-25 17:52:04 14,608 -c----w c:\windows\$NtServicePackUninstall$\fp98sadm.exe
    + 2003-03-25 17:52:04 109,328 -c----w c:\windows\$NtServicePackUninstall$\fp98swin.exe
    + 2003-03-25 17:52:04 24,632 -c----w c:\windows\$NtServicePackUninstall$\fpadmcgi.exe
    + 2003-03-25 17:52:04 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpadmdll.dll
    + 2003-03-25 17:52:04 188,494 -c----w c:\windows\$NtServicePackUninstall$\fpcount.exe
    + 2003-03-25 17:52:04 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
    + 2003-03-25 17:52:04 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpexedll.dll
    + 2004-05-14 01:39:48 598,071 -c----w c:\windows\$NtServicePackUninstall$\fpmmc.dll
    + 2003-03-25 17:52:06 208,896 -c----w c:\windows\$NtServicePackUninstall$\fpmmcsat.dll
    + 2003-03-25 17:52:04 20,538 -c----w c:\windows\$NtServicePackUninstall$\fpremadm.exe
    + 2004-08-11 02:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-11 02:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-11 02:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    + 2004-08-11 02:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\ftpmib.dll
    + 2004-08-11 02:00:00 125,952 -c----w c:\windows\$NtServicePackUninstall$\ftpsv251.dll
    + 2004-08-11 02:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    + 2004-08-11 02:00:00 452,096 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
    + 2004-08-11 02:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
    + 2004-08-11 02:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
    + 2004-08-11 02:00:00 285,184 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
    + 2004-08-11 02:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
    + 2004-08-11 02:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
    + 2004-08-11 02:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
    + 2004-08-11 02:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2004-08-11 02:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
    + 2004-08-11 02:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
    + 2004-08-11 02:00:00 267,776 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
    + 2004-08-11 02:00:00 246,272 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
    + 2004-08-11 02:00:00 397,312 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
    + 2004-08-11 02:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
    + 2004-08-11 02:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
    + 2004-08-11 02:00:00 400,384 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-09-29 22:04:48 61,440 -c----w c:\windows\$NtServicePackUninstall$\gacutil.exe
    + 2008-02-20 06:51:05 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2004-08-11 02:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
    + 2004-08-11 02:00:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-11 02:00:00 566,784 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
    + 2004-08-11 02:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-11 02:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
    + 2004-08-11 02:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
    + 2004-08-11 02:00:00 198,656 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
    + 2004-08-11 02:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-11 02:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-11 02:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\gzip.dll
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-11 02:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2004-08-11 09:00:00 131,968 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2004-03-18 16:12:12 135,168 -c----w c:\windows\$NtServicePackUninstall$\hdaudbus.sys
    + 2004-08-11 02:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    + 2004-08-11 02:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-11 02:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-27 02:04:27 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2004-08-04 14:56:44 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-11 02:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-10 07:47:52 17,024 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
    + 2004-08-11 02:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2004-08-04 04:56:44 21,504 -c----w c:\windows\$NtServicePackUninstall$\hidserv.dll
    + 2004-08-10 09:00:00 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
    + 2006-07-21 08:24:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    + 2004-08-11 02:00:00 344,064 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-11 02:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\hostmib.dll
    + 2004-08-11 02:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2004-08-11 02:00:00 32,285 -c----w c:\windows\$NtServicePackUninstall$\hsfcisp2.dll
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    + 2004-08-11 02:00:00 268,288 -c----w c:\windows\$NtServicePackUninstall$\httpext.dll
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\httpmb51.dll
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\httpod51.dll
    + 2004-08-11 02:00:00 41,984 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-08-11 02:00:00 13,463,552 -c----w c:\windows\$NtServicePackUninstall$\hwxjpn.dll
    + 2004-11-17 17:41:24 347,136 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-11 02:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-11 02:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-11 02:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2005-06-29 01:46:00 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2004-08-11 02:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-11 02:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-11 02:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-11 02:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-11 02:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-11 02:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2006-10-17 16:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    + 2004-08-11 02:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-11 02:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-11 02:00:00 505,344 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\iisadmin.dll
    + 2004-08-11 02:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\iische51.dll
    + 2004-08-11 02:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\iisext51.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\iisfecnv.dll
    + 2004-08-11 02:00:00 79,872 -c----w c:\windows\$NtServicePackUninstall$\iislog51.dll
    + 2004-08-11 02:00:00 64,512 -c----w c:\windows\$NtServicePackUninstall$\iismap.dll
    + 2004-08-11 02:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\iisrstas.exe
    + 2004-08-11 02:00:00 133,632 -c----w c:\windows\$NtServicePackUninstall$\iisrtl.dll
    + 2004-08-11 02:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-11 02:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-11 02:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-11 02:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-11 02:00:00 106,496 -c----w c:\windows\$NtServicePackUninstall$\imekrcic.dll
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\imekrmbx.dll
    + 2004-08-11 02:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-11 02:00:00 811,064 -c----w c:\windows\$NtServicePackUninstall$\imjp81k.dll
    + 2004-08-11 02:00:00 368,696 -c----w c:\windows\$NtServicePackUninstall$\imjpcic.dll
    + 2004-08-11 02:00:00 716,856 -c----w c:\windows\$NtServicePackUninstall$\imjpcus.dll
    + 2004-08-11 02:00:00 81,976 -c----w c:\windows\$NtServicePackUninstall$\imjpdct.dll
    + 2004-08-11 02:00:00 274,489 -c----w c:\windows\$NtServicePackUninstall$\imjputyc.dll
    + 2004-08-11 02:00:00 102,456 -c----w c:\windows\$NtServicePackUninstall$\imlang.dll
    + 2004-08-11 02:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-11 02:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2004-08-11 02:00:00 315,452 -c----w c:\windows\$NtServicePackUninstall$\imskf.dll
    + 2004-08-11 02:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2008-04-11 18:50:43 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetin51.exe
    + 2004-08-11 02:00:00 829,440 -c----w c:\windows\$NtServicePackUninstall$\inetmgr.dll
    + 2004-08-11 02:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-11 02:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-11 02:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\infoadmn.dll
    + 2004-08-11 02:00:00 257,024 -c----w c:\windows\$NtServicePackUninstall$\infocomm.dll
    + 2004-08-11 02:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-11 02:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-11 02:00:00 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-11 02:00:00 36,096 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-11 02:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    + 2004-08-11 02:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2006-05-19 12:59:41 94,720 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-11 02:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-08-11 02:00:00 331,264 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-11 02:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-11 02:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\iprip.dll
    + 2004-08-11 02:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    + 2004-08-11 02:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-11 02:00:00 349,696 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-11 02:00:00 182,784 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-11 02:00:00 384,000 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-11 02:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
  9. 2009-01-16, 23:13 #9
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default

    + 2004-08-11 02:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 2004-08-11 02:00:00 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 2004-08-11 02:00:00 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 2004-08-11 02:00:00 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
    + 2004-08-11 02:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 2004-08-11 02:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2004-08-10 07:47:50 46,208 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2004-08-11 02:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    + 2004-08-11 02:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\isatq.dll
    + 2004-08-11 02:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\iscomlog.dll
    + 2004-08-11 02:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2005-05-27 02:04:27 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:04:27 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-11 02:00:00 192,000 -c----w c:\windows\$NtServicePackUninstall$\iuengine.dll
    + 2004-08-11 02:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-04 18:56:44 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:47:07 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:47:07 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    + 2006-10-17 16:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd101.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd106n.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdax2.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-04 02:58:36 14,848 -c----w c:\windows\$NtServicePackUninstall$\kbdhid.sys
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdibm02.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41a.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41j.dll
    + 2004-08-11 02:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-11 02:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-11 02:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsno.dll
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdukx.dll
    + 2004-08-11 02:00:00 7,424 -c----w c:\windows\$NtServicePackUninstall$\kd1394.dll
    + 2005-06-15 17:49:30 295,936 -c----w c:\windows\$NtServicePackUninstall$\kerberos.dll
    + 2007-04-16 15:52:53 984,576 -c----w c:\windows\$NtServicePackUninstall$\kernel32.dll
    + 2004-08-11 02:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys.000
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
    + 2004-08-04 17:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
    + 2004-08-11 02:00:00 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
    + 2004-08-04 14:56:44 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-11 02:00:00 423,936 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
    + 2004-08-11 02:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
    + 2005-09-01 01:41:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
    + 2004-08-11 02:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
    + 2004-08-11 02:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
    + 2004-08-11 02:00:00 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
    + 2004-08-11 02:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
    + 2004-08-11 02:00:00 221,696 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
    + 2004-08-11 02:00:00 341,504 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
    + 2004-08-11 02:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
    + 2004-08-11 02:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
    + 2004-08-11 02:00:00 59,392 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
    + 2004-08-11 02:00:00 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
    + 2004-08-11 02:00:00 514,560 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\lonsint.dll
    + 2004-08-11 02:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
    + 2004-08-11 02:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
    + 2004-08-11 02:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
    + 2007-11-07 09:26:56 721,920 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
    + 2004-08-11 02:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
    + 2004-08-11 02:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
    + 2004-08-11 02:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
    + 2004-08-11 02:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
    + 2004-08-11 02:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
    + 2004-08-11 02:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
    + 2004-08-11 02:00:00 37,888 -c----w c:\windows\$NtServicePackUninstall$\md5filt.dll
    + 2004-08-11 02:00:00 118,272 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\mdmxsdk.dll
    + 2004-08-11 02:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\metada51.dll
    + 2004-08-04 13:07:46 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
    + 2007-03-08 15:36:28 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
    + 2006-11-01 19:17:45 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
    + 2004-08-11 02:00:00 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
    + 2004-08-11 02:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
    + 2004-08-11 02:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
    + 2004-08-11 02:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
    + 2004-08-11 02:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
    + 2004-08-11 02:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
    + 2005-07-25 23:46:57 7,680 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
    + 2004-08-11 02:00:00 240,128 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
    + 2004-08-11 02:00:00 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
    + 2004-08-11 02:00:00 815,104 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
    + 2004-08-11 02:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
    + 2004-08-11 02:00:00 1,192,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
    + 2004-08-11 02:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
    + 2004-08-11 02:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
    + 2004-08-11 02:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
    + 2004-08-11 02:00:00 207,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
    + 2004-08-11 02:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
    + 2004-08-04 13:08:06 30,080 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
    + 2004-08-11 02:00:00 153,600 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
    + 2004-08-11 02:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
    + 2004-08-11 02:00:00 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
    + 2004-08-04 12:58:34 23,040 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
    + 2004-08-11 02:00:00 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
    + 2004-08-11 02:00:00 3,555,328 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
    + 2004-08-11 02:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\mpg4dmod.dll
    + 2004-08-11 02:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
    + 2004-08-11 02:00:00 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
    + 2004-08-11 02:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
    + 2004-08-11 02:00:00 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
    + 2004-08-11 02:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
    + 2007-07-06 10:05:47 72,960 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
    + 2007-07-06 12:46:59 138,240 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
    + 2007-07-06 12:46:59 47,104 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
    + 2007-07-06 12:46:59 16,896 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
    + 2004-08-11 02:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
    + 2004-08-11 02:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
    + 2007-07-06 12:46:59 660,992 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
    + 2007-07-06 12:46:59 177,152 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
    + 2004-08-11 02:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
    + 2007-07-06 12:46:59 95,744 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
    + 2004-08-11 02:00:00 517,632 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
    + 2004-08-11 02:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
    + 2004-08-11 02:00:00 117,248 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
    + 2004-08-11 02:00:00 186,880 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
    + 2007-07-06 12:46:59 48,640 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
    + 2007-07-06 12:46:59 471,552 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
    + 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.000
    + 2004-08-11 02:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
    + 2006-03-23 05:44:21 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
    + 2004-08-11 02:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
    + 2004-08-11 02:00:00 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
    + 2006-12-26 13:07:23 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
    + 2006-12-26 13:07:23 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
    + 2006-12-26 13:07:23 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
    + 2004-08-11 02:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
    + 2004-08-11 02:00:00 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
    + 2008-06-24 16:23:05 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
    + 2004-08-11 02:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
    + 2004-08-11 02:00:00 158,208 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
    + 2007-01-02 21:28:28 2,273,280 -c----w c:\windows\$NtServicePackUninstall$\mscorsvr.dll
    + 2007-01-02 21:28:46 2,281,472 -c----w c:\windows\$NtServicePackUninstall$\mscorwks.dll
    + 2004-08-11 02:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
    + 2004-08-11 02:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
    + 2008-02-26 11:59:50 294,912 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
    + 2004-08-11 02:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-11 02:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
    + 2002-05-25 13:22:16 532,480 -c----w c:\windows\$NtServicePackUninstall$\msdaipp.dll
    + 2004-08-11 02:00:00 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
    + 2004-08-11 02:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
    + 2004-08-11 02:00:00 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
    + 2004-08-11 02:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
    + 2004-08-11 02:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
    + 2004-08-11 02:00:00 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
    + 2004-08-11 02:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
    + 2004-08-11 02:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
    + 2004-08-11 02:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
    + 2006-03-01 19:42:42 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
    + 2004-08-11 02:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
    + 2006-03-01 19:42:42 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
    + 2006-03-01 19:42:42 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
    + 2004-08-11 02:00:00 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
    + 2004-08-11 02:00:00 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
    + 2006-11-27 14:54:06 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
    + 2004-08-11 02:00:00 994,304 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
    + 2004-08-11 02:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
    + 2004-08-11 02:00:00 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
    + 2004-08-11 02:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
    + 2004-08-05 02:06:34 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
    + 2004-08-11 02:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-11 02:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
    + 2004-08-04 18:56:58 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
    + 2007-04-18 16:12:23 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
    + 2004-08-11 02:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
    + 2004-08-11 02:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
    + 2005-05-04 18:45:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
    + 2005-05-04 18:45:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
    + 2004-08-11 02:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
    + 2004-08-11 02:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
    + 2005-05-04 18:45:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
    + 2004-08-11 02:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
    + 2004-08-11 02:00:00 376,320 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
    + 2004-08-11 02:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
    + 2005-05-04 18:45:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
    + 2008-03-27 08:12:54 151,583 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
    + 2006-12-26 13:07:23 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
    + 2004-08-04 12:58:42 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
    + 2004-08-11 02:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
    + 2004-10-13 16:24:37 1,694,208 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
    + 2004-08-11 02:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
    + 2004-08-11 02:00:00 122,368 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
    + 2004-08-11 02:00:00 561,664 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
    + 2004-08-11 02:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
    + 2007-05-16 15:12:08 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
    + 2004-08-11 02:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
    + 2004-08-11 02:00:00 2,479,616 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
    + 2004-08-11 02:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
    + 2004-08-11 02:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
    + 2004-08-11 02:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
    + 2004-08-11 02:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
    + 2004-08-04 12:58:40 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
    + 2004-08-04 12:58:42 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
    + 2004-08-11 02:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
    + 2004-08-11 02:00:00 134,656 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 13:07:48 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
    + 2004-08-11 02:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
    + 2004-08-11 02:00:00 274,944 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
    + 2004-08-04 12:58:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\mstee.sys
    + 2004-08-11 02:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
    + 2004-08-11 02:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
    + 2004-08-11 02:00:00 407,552 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
    + 2004-08-11 02:00:00 655,360 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
    + 2004-08-11 02:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
    + 2004-08-11 02:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
    + 2004-08-11 02:00:00 1,392,671 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
    + 2004-08-11 02:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
    + 2004-08-11 02:00:00 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
    + 2004-08-11 02:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
    + 2004-08-11 02:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
    + 2004-08-11 02:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
    + 2004-08-11 02:00:00 204,288 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
    + 2008-06-20 17:41:10 245,248 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
    + 2004-08-11 02:00:00 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
    + 2004-08-11 02:00:00 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
    + 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
    + 2007-05-15 20:43:10 1,320,800 -c----w c:\windows\$NtServicePackUninstall$\msxml6.dll
    + 2006-07-19 14:55:18 86,728 -c----w c:\windows\$NtServicePackUninstall$\msxml6r.dll
    + 2004-08-04 18:56:46 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
    + 2004-08-11 02:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\mtstocom.exe
    + 2006-03-01 19:42:42 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
    + 2006-03-01 19:42:42 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
    + 2004-08-11 02:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
    + 2004-08-11 02:00:00 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
    + 2004-08-11 02:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-04 13:10:30 85,376 -c----w c:\windows\$NtServicePackUninstall$\nabtsfec.sys
    + 2004-08-11 02:00:00 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
    + 2004-08-11 02:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
    + 2004-08-11 02:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
    + 2004-08-11 02:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-11 02:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
    + 2004-08-11 02:00:00 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
    + 2004-08-04 13:10:14 10,880 -c----w c:\windows\$NtServicePackUninstall$\ndisip.sys
    + 2004-08-11 02:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
    + 2004-08-11 02:00:00 9,600 -c----w c:\windows\$NtServicePackUninstall$\ndistapi.sys
    + 2004-08-04 13:03:14 12,928 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
    + 2004-08-11 02:00:00 91,776 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
    + 2004-08-11 02:00:00 38,016 -c----w c:\windows\$NtServicePackUninstall$\ndproxy.sys
    + 2004-08-11 02:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\net.exe
    + 2004-08-11 02:00:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
    + 2006-08-17 12:28:27 332,288 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
    + 2004-08-11 02:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
    + 2004-08-11 02:00:00 162,816 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
    + 2004-08-11 02:00:00 622,080 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
    + 2004-08-11 02:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
    + 2007-01-15 21:11:26 73,728 -c----w c:\windows\$NtServicePackUninstall$\netfxupdate.exe
    + 2004-08-11 02:00:00 139,264 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
    + 2004-08-11 02:00:00 407,040 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
    + 2005-08-22 18:29:46 197,632 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
    + 2004-08-11 02:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
    + 2004-08-11 02:00:00 875,008 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
    + 2004-08-11 02:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
    + 2004-08-11 02:00:00 329,728 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
    + 2004-08-11 02:00:00 1,708,032 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
    + 2004-08-11 02:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
    + 2004-08-11 02:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
    + 2004-08-11 02:00:00 245,760 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
    + 2004-08-11 02:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
    + 2004-08-04 12:58:30 61,824 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
    + 2004-08-11 02:00:00 103,936 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
    + 2004-08-11 02:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
    + 2004-08-11 02:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
    + 2004-08-11 02:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
    + 2004-08-11 02:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
    + 2004-08-11 02:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
    + 2004-08-11 02:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
    + 2004-08-11 02:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
    + 2004-08-11 02:00:00 226,816 -c----w c:\windows\$NtServicePackUninstall$\npdrmv2.dll
    + 2004-08-11 02:00:00 364,544 -c----w c:\windows\$NtServicePackUninstall$\npdsplay.dll
    + 2004-08-11 02:00:00 30,848 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
    + 2004-08-11 02:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
    + 2004-08-11 02:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
    + 2004-08-11 02:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\npwmsdrm.dll
    + 2004-08-11 02:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\nsepm.dll
    + 2004-08-11 02:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
    + 2004-08-11 02:00:00 1,200,128 -c----w c:\windows\$NtServicePackUninstall$\ntbackup.exe
    + 2004-08-11 02:00:00 708,096 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
    + 2004-08-11 02:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
    + 2004-08-11 02:00:00 212,992 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
    + 2007-02-09 11:10:35 574,464 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe.000
    + 2007-02-28 08:38:55 2,057,600 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2007-02-28 08:38:55 2,057,600 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe.000
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe.000
    + 2004-08-11 02:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
    + 2004-08-11 02:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
    + 2004-08-11 02:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
    + 2004-08-11 02:00:00 179,712 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
    + 2004-08-11 02:00:00 488,448 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
    + 2004-08-11 02:00:00 435,200 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    + 2004-08-11 02:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
    + 2007-02-28 09:10:57 2,180,352 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    + 2007-02-28 09:10:57 2,180,352 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe.000
    + 2004-08-11 02:00:00 91,136 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
    + 2004-08-11 02:00:00 143,872 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
    + 2004-08-11 02:00:00 419,840 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\ntvdmd.dll
    + 2006-10-13 12:35:12 64,000 -c----w c:\windows\$NtServicePackUninstall$\nwapi32.dll
    + 2004-08-11 02:00:00 88,448 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
    + 2006-10-13 12:35:12 142,336 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
    + 2006-10-13 10:23:15 163,584 -c----w c:\windows\$NtServicePackUninstall$\nwrdr.sys
    + 2006-10-13 12:35:12 65,536 -c----w c:\windows\$NtServicePackUninstall$\nwwks.dll
    + 2004-08-11 02:00:00 266,752 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
    + 2004-08-11 02:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\obelog.dll
    + 2004-08-11 02:00:00 966,656 -c----w c:\windows\$NtServicePackUninstall$\obemetal.dll
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\obemtllc.dll
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\obepopc.dll
    + 2004-08-11 02:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
    + 2004-08-11 02:00:00 393,728 -c----w c:\windows\$NtServicePackUninstall$\obrb0401.dll
    + 2004-08-11 02:00:00 212,480 -c----w c:\windows\$NtServicePackUninstall$\obrb0404.dll
    + 2004-08-11 02:00:00 428,032 -c----w c:\windows\$NtServicePackUninstall$\obrb0405.dll
    + 2004-08-11 02:00:00 418,816 -c----w c:\windows\$NtServicePackUninstall$\obrb0406.dll
    + 2004-08-11 02:00:00 403,456 -c----w c:\windows\$NtServicePackUninstall$\obrb0407.dll
    + 2004-08-11 02:00:00 419,328 -c----w c:\windows\$NtServicePackUninstall$\obrb0408.dll
    + 2004-08-11 02:00:00 405,504 -c----w c:\windows\$NtServicePackUninstall$\obrb040b.dll
    + 2004-08-11 02:00:00 410,624 -c----w c:\windows\$NtServicePackUninstall$\obrb040c.dll
    + 2004-08-11 02:00:00 384,000 -c----w c:\windows\$NtServicePackUninstall$\obrb040d.dll
    + 2004-08-11 02:00:00 434,176 -c----w c:\windows\$NtServicePackUninstall$\obrb040e.dll
    + 2004-08-11 02:00:00 413,696 -c----w c:\windows\$NtServicePackUninstall$\obrb0410.dll
    + 2004-08-11 02:00:00 275,456 -c----w c:\windows\$NtServicePackUninstall$\obrb0411.dll
    + 2004-08-11 02:00:00 306,688 -c----w c:\windows\$NtServicePackUninstall$\obrb0412.dll
    + 2004-08-11 02:00:00 401,920 -c----w c:\windows\$NtServicePackUninstall$\obrb0413.dll
    + 2004-08-11 02:00:00 353,792 -c----w c:\windows\$NtServicePackUninstall$\obrb0414.dll
    + 2004-08-11 02:00:00 391,680 -c----w c:\windows\$NtServicePackUninstall$\obrb0415.dll
    + 2004-08-11 02:00:00 409,600 -c----w c:\windows\$NtServicePackUninstall$\obrb0416.dll
    + 2004-08-11 02:00:00 427,008 -c----w c:\windows\$NtServicePackUninstall$\obrb0419.dll
    + 2004-08-11 02:00:00 405,504 -c----w c:\windows\$NtServicePackUninstall$\obrb041b.dll
    + 2004-08-11 02:00:00 363,520 -c----w c:\windows\$NtServicePackUninstall$\obrb041d.dll
    + 2004-08-11 02:00:00 390,144 -c----w c:\windows\$NtServicePackUninstall$\obrb041f.dll
    + 2004-08-11 02:00:00 408,576 -c----w c:\windows\$NtServicePackUninstall$\obrb0424.dll
    + 2004-08-11 02:00:00 270,336 -c----w c:\windows\$NtServicePackUninstall$\obrb0804.dll
    + 2004-08-11 02:00:00 435,200 -c----w c:\windows\$NtServicePackUninstall$\obrb0816.dll
    + 2004-08-11 02:00:00 446,464 -c----w c:\windows\$NtServicePackUninstall$\obrb0c0a.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
    + 2004-08-11 02:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\ocmanage.dll
    + 2004-08-11 02:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
    + 2004-08-11 02:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
    + 2004-08-11 02:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
    + 2004-08-11 02:00:00 135,168 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
    + 2004-08-11 02:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
    + 2004-08-11 02:00:00 106,496 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
    + 2004-08-11 02:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
    + 2004-08-11 02:00:00 53,279 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
    + 2004-08-11 02:00:00 278,559 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
    + 2004-08-11 02:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
    + 2004-08-11 02:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
    + 2004-08-11 02:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
    + 2004-08-11 02:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
    + 2004-08-11 02:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
    + 2004-08-11 02:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
    + 2004-08-11 02:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
    + 2004-08-11 02:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
    + 2004-08-11 02:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
    + 2004-08-11 02:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
    + 2004-08-11 02:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
    + 2005-07-26 04:39:48 1,285,120 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
    + 2007-12-04 18:38:13 550,912 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
    + 2005-07-26 04:39:48 74,752 -c----w c:\windows\$NtServicePackUninstall$\olecli32.dll
    + 2005-07-26 04:39:49 37,888 -c----w c:\windows\$NtServicePackUninstall$\olecnv32.dll
    + 2004-08-11 02:00:00 487,424 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
    + 2006-10-16 16:15:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\oledlg.dll
    + 2004-08-11 02:00:00 107,008 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
    + 2004-08-11 02:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
    + 2004-08-11 02:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\openfiles.exe
    + 2004-08-11 02:00:00 713,728 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\opnfiles.exe
    + 2004-08-11 02:00:00 215,552 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-11 02:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\p2p.dll
    + 2004-08-11 02:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\p2pgasvc.dll
    + 2004-08-11 02:00:00 312,320 -c----w c:\windows\$NtServicePackUninstall$\p2pgraph.dll
    + 2004-08-11 02:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\p2pnetsh.dll
    + 2004-08-11 02:00:00 526,848 -c----w c:\windows\$NtServicePackUninstall$\p2psvc.dll
    + 2004-08-04 12:59:20 42,496 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
    + 2004-08-11 02:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\padrs404.dll
    + 2004-08-11 02:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\padrs804.dll
    + 2004-08-04 12:59:08 80,128 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
    + 2004-08-11 02:00:00 18,688 -c----w c:\windows\$NtServicePackUninstall$\partmgr.sys
    + 2004-08-11 02:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
    + 2004-08-11 02:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
    + 2004-08-11 02:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
    + 2004-08-11 02:00:00 68,224 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-11 02:00:00 119,936 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
    + 2004-08-11 02:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
    + 2004-08-11 02:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
    + 2004-08-11 02:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\perfnet.dll
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
    + 2004-08-11 02:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
    + 2006-10-24 16:30:20 412,160 -c----w c:\windows\$NtServicePackUninstall$\photometadatahandler.dll
    + 2004-08-11 02:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
    + 2004-08-04 14:56:46 35,328 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
    + 2004-08-11 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
    + 2004-08-11 02:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
    + 2004-08-11 02:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
    + 2004-08-11 02:00:00 175,104 -c----w c:\windows\$NtServicePackUninstall$\pintlcsa.dll
    + 2004-08-11 02:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\pintlcsd.dll
    + 2004-08-11 02:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\pintlphr.exe
    + 2004-08-04 14:56:46 15,360 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\pmigrate.dll
    + 2004-08-11 02:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\pnrpnsp.dll
    + 2004-08-11 02:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\policman.dll
    + 2004-08-11 02:00:00 105,472 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
    + 2004-03-16 18:41:52 135,040 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
    + 2004-03-16 18:41:52 135,040 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys.000
    + 2004-08-11 02:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\powercfg.exe
    + 2004-08-11 02:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-11 02:00:00 560,640 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
    + 2004-08-04 12:59:18 35,328 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
    + 2004-08-11 02:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
    + 2004-08-11 02:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
    + 2004-08-11 02:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
    + 2004-08-11 02:00:00 237,056 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-11 02:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\proxycfg.exe
    + 2006-11-06 22:55:04 106,256 -c----w c:\windows\$NtServicePackUninstall$\ps5ui.dll
    + 2004-08-11 02:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
    + 2004-08-11 02:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
    + 2004-08-11 02:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
    + 2006-11-06 22:55:05 383,248 -c----w c:\windows\$NtServicePackUninstall$\pscript5.dll
    + 2004-08-11 02:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
    + 2004-08-11 02:00:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-11 02:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\pwsdata.dll
    + 2004-08-11 02:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
    + 2004-08-11 02:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
    + 2004-08-11 02:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
    + 2004-08-11 02:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
    + 2004-08-11 02:00:00 733,696 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-11 02:00:00 382,464 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
    + 2008-05-07 05:18:48 1,287,680 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
    + 2006-06-22 05:06:30 1,435,648 -c----w c:\windows\$NtServicePackUninstall$\query.dll
    + 2004-08-11 02:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
    + 2004-08-11 02:00:00 20,736 -c----w c:\windows\$NtServicePackUninstall$\ramdisk.sys
    + 2006-06-26 17:37:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    + 2004-08-11 02:00:00 236,544 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
    + 2004-08-11 02:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
    + 2004-08-11 02:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
    + 2004-08-11 02:00:00 657,920 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
    + 2004-08-11 02:00:00 51,328 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
    + 2006-06-22 10:47:18 181,248 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
    + 2004-08-11 02:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
    + 2004-08-11 02:00:00 206,336 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
    + 2004-08-11 02:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
    + 2004-08-11 02:00:00 48,384 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
    + 2004-08-11 02:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
    + 2004-08-11 02:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
    + 2004-08-11 02:00:00 112,128 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
    + 2004-08-11 02:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
    + 2004-08-11 02:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
    + 2004-08-11 02:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
    + 2006-05-05 09:47:57 174,592 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
    + 2004-08-11 02:00:00 147,968 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
    + 2004-08-11 02:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
    + 2004-08-11 02:00:00 92,168 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
    + 2004-08-04 13:01:16 196,864 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
    + 2005-06-10 04:09:46 139,528 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
    + 2004-08-11 02:00:00 87,176 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
    + 2004-08-11 02:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
    + 2004-08-11 02:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
    + 2004-08-04 12:59:38 57,472 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
    + 2004-08-11 02:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
    + 2004-08-11 02:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
    + 2004-08-11 02:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
    + 2004-08-11 02:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
    + 2004-08-11 02:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
    + 2004-08-11 02:00:00 397,824 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
    + 2004-08-11 02:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
    + 2004-08-11 02:00:00 177,152 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
    + 2004-08-11 02:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
    + 2004-08-11 02:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
    + 2006-11-27 14:54:06 433,152 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
    + 2008-05-08 12:28:49 202,752 -c----w c:\windows\$NtServicePackUninstall$\rmcast.sys
    + 2004-08-11 02:00:00 30,080 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
    + 2004-08-11 02:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\rpcref.dll
    + 2007-07-09 13:09:42 584,192 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
    + 2005-07-26 04:39:49 397,824 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
    + 2004-08-11 02:00:00 152,576 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
    + 2004-08-11 02:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
    + 2004-08-11 02:00:00 107,520 -c----w c:\windows\$NtServicePackUninstall$\rsnotify.exe
    + 2004-08-11 02:00:00 380,416 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
    + 2004-08-11 02:00:00 90,112 -c----w c:\windows\$NtServicePackUninstall$\rsvpsp.dll
    + 2004-08-11 02:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
    + 2004-08-11 02:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
    + 2004-08-11 02:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
    + 2004-08-11 02:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
  10. 2009-01-16, 23:14 #10
    MrPositive
    MrPositive is offline
    Junior Member
    Join Date
    Jan 2009
    Posts
    26

    Default

    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\rw001ext.dll
    + 2004-08-11 02:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\rw330ext.dll
    + 2004-08-11 02:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\rwnh.dll
    + 2004-08-11 02:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
    + 2004-08-11 02:00:00 29,696 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
    + 2004-08-11 02:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
    + 2004-08-11 02:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
    + 2004-08-11 02:00:00 415,744 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
    + 2004-08-11 02:00:00 741,376 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
    + 2004-08-11 02:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
    + 2004-08-11 02:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
    + 2004-08-11 02:00:00 95,744 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
    + 2004-08-11 02:00:00 171,008 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
    + 2004-08-11 02:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
    + 2004-08-11 02:00:00 313,856 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
    + 2007-04-25 14:21:15 144,896 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
    + 2004-08-11 02:00:00 190,976 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
    + 2004-08-11 02:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\schtasks.exe
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
    + 2004-08-11 02:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
    + 2004-08-11 02:00:00 202,752 -c----w c:\windows\$NtServicePackUninstall$\script.dll
    + 2004-08-11 02:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
    + 2004-08-11 02:00:00 159,744 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
    + 2004-08-11 02:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
    + 2004-08-11 02:00:00 96,256 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
    + 2004-08-11 02:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\sctasks.exe
    + 2004-08-11 02:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sdbus.sys
    + 2004-08-11 02:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sdhcinst.dll
    + 2004-08-11 02:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\secedit.exe
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
    + 2004-08-11 02:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
    + 2004-08-11 02:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
    + 2004-08-11 02:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
    + 2004-08-11 02:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
    + 2004-08-11 02:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll
    + 2004-08-11 02:00:00 221,696 -c----w c:\windows\$NtServicePackUninstall$\seo.dll
    + 2004-08-11 02:00:00 15,488 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
    + 2004-08-11 02:00:00 64,896 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
    + 2004-08-11 02:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
    + 2004-08-11 02:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\services.exe
    + 2004-08-11 02:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
    + 2004-08-11 02:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
    + 2007-01-15 21:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\setregni.exe
    + 2004-08-11 02:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
    + 2004-08-11 02:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
    + 2004-08-11 02:00:00 983,552 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
    + 2004-08-11 02:00:00 101,376 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
    + 2004-08-11 02:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
    + 2004-08-11 02:00:00 140,288 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
    + 2004-08-11 02:00:00 1,580,544 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-11 02:00:00 11,136 -c----w c:\windows\$NtServicePackUninstall$\sffdisk.sys
    + 2004-08-11 02:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\sffp_sd.sys
    + 2004-08-11 02:00:00 11,392 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
    + 2004-08-11 02:00:00 549,376 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
    + 2006-09-23 16:12:50 1,497,088 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
    + 2007-10-26 03:36:51 8,454,656 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
    + 2004-08-11 02:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
    + 2004-08-11 02:00:00 438,272 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
    + 2006-09-23 16:12:50 474,112 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
    + 2004-08-11 02:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
    + 2004-08-11 02:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
    + 2004-08-11 02:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\shrpubw.exe
    + 2004-08-11 02:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\shscrap.dll
    + 2006-12-19 21:52:18 134,656 -c----w c:\windows\$NtServicePackUninstall$\shsvcs.dll
    + 2003-03-25 17:52:04 20,536 -c----w c:\windows\$NtServicePackUninstall$\shtml.dll
    + 2003-03-25 17:52:04 16,437 -c----w c:\windows\$NtServicePackUninstall$\shtml.exe
    + 2004-08-11 02:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\shutdown.exe
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\sigtab.dll
    + 2004-08-11 02:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-11 02:00:00 26,112 -c----w c:\windows\$NtServicePackUninstall$\skeys.exe
    + 2004-08-11 02:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\slayerxp.dll
    + 2004-08-11 02:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-11 02:00:00 11,136 -c----w c:\windows\$NtServicePackUninstall$\slip.sys
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\smbinst.exe
    + 2004-08-11 02:00:00 236,544 -c----w c:\windows\$NtServicePackUninstall$\smi2smir.exe
    + 2004-08-11 02:00:00 363,008 -c----w c:\windows\$NtServicePackUninstall$\smlogcfg.dll
    + 2004-08-11 02:00:00 89,600 -c----w c:\windows\$NtServicePackUninstall$\smlogsvc.exe
    + 2004-08-11 02:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\smss.exe
    + 2004-08-11 02:00:00 189,440 -c----w c:\windows\$NtServicePackUninstall$\smtpadm.dll
    + 2004-08-11 02:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\smtpapi.dll
    + 2004-08-11 02:00:00 2,134,528 -c----w c:\windows\$NtServicePackUninstall$\smtpsnap.dll
    + 2004-08-11 02:00:00 456,704 -c----w c:\windows\$NtServicePackUninstall$\smtpsvc.dll
    + 2004-08-11 02:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\sndrec32.exe
    + 2004-08-11 02:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\sniffpol.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\snmp.exe
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\snmpapi.dll
    + 2004-08-11 02:00:00 259,072 -c----w c:\windows\$NtServicePackUninstall$\snmpcl.dll
    + 2004-08-11 02:00:00 358,400 -c----w c:\windows\$NtServicePackUninstall$\snmpincl.dll
    + 2004-08-11 02:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\snmpmib.dll
    + 2004-08-11 02:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\snmpsmir.dll
    + 2004-08-11 02:00:00 182,272 -c----w c:\windows\$NtServicePackUninstall$\snmpsnap.dll
    + 2004-08-11 02:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\snmpthrd.dll
    + 2004-08-11 02:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\snmptrap.exe
    + 2004-08-11 02:00:00 130,048 -c----w c:\windows\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-04 13:09:56 25,472 -c----w c:\windows\$NtServicePackUninstall$\sonydcam.sys
    + 2004-08-11 02:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\sort.exe
    + 2004-08-11 02:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\spgrmr.dll
    + 2004-08-11 02:00:00 538,624 -c----w c:\windows\$NtServicePackUninstall$\spider.exe
    + 2004-08-11 02:00:00 12,800 -c----w c:\windows\$NtServicePackUninstall$\spiisupd.exe
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys.000
    + 2004-08-11 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\spnpinst.exe
    + 2004-08-11 02:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\spoolss.dll
    + 2005-06-10 23:53:32 57,856 -c----w c:\windows\$NtServicePackUninstall$\spoolsv.exe
    + 2004-08-11 02:00:00 186,880 -c----w c:\windows\$NtServicePackUninstall$\spra0401.dll
    + 2004-08-11 02:00:00 189,440 -c----w c:\windows\$NtServicePackUninstall$\spra0402.dll
    + 2004-08-11 02:00:00 161,280 -c----w c:\windows\$NtServicePackUninstall$\spra0404.dll
    + 2004-08-11 02:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra0405.dll
    + 2004-08-11 02:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0406.dll
    + 2004-08-11 02:00:00 199,680 -c----w c:\windows\$NtServicePackUninstall$\spra0407.dll
    + 2004-08-11 02:00:00 197,632 -c----w c:\windows\$NtServicePackUninstall$\spra0408.dll
    + 2004-08-11 02:00:00 186,368 -c----w c:\windows\$NtServicePackUninstall$\spra040b.dll
    + 2004-08-11 02:00:00 197,632 -c----w c:\windows\$NtServicePackUninstall$\spra040c.dll
    + 2004-08-11 02:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\spra040d.dll
    + 2004-08-11 02:00:00 195,584 -c----w c:\windows\$NtServicePackUninstall$\spra040e.dll
    + 2004-08-11 02:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\spra0410.dll
    + 2004-08-11 02:00:00 171,008 -c----w c:\windows\$NtServicePackUninstall$\spra0411.dll
    + 2004-08-11 02:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\spra0412.dll
    + 2004-08-11 02:00:00 196,096 -c----w c:\windows\$NtServicePackUninstall$\spra0413.dll
    + 2004-08-11 02:00:00 189,440 -c----w c:\windows\$NtServicePackUninstall$\spra0414.dll
    + 2004-08-11 02:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\spra0415.dll
    + 2004-08-11 02:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0416.dll
    + 2004-08-11 02:00:00 190,464 -c----w c:\windows\$NtServicePackUninstall$\spra0418.dll
    + 2004-08-11 02:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0419.dll
    + 2004-08-11 02:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra041a.dll
    + 2004-08-11 02:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\spra041b.dll
    + 2004-08-11 02:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra041d.dll
    + 2004-08-11 02:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\spra041e.dll
    + 2004-08-11 02:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra041f.dll
    + 2004-08-11 02:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0424.dll
    + 2004-08-11 02:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\spra0425.dll
    + 2004-08-11 02:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra0426.dll
    + 2004-08-11 02:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\spra0427.dll
    + 2004-08-11 02:00:00 161,280 -c----w c:\windows\$NtServicePackUninstall$\spra0804.dll
    + 2004-08-11 02:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\spra0816.dll
    + 2004-08-11 02:00:00 196,096 -c----w c:\windows\$NtServicePackUninstall$\spra0c0a.dll
    + 2004-08-11 02:00:00 2,869,248 -c----w c:\windows\$NtServicePackUninstall$\sprb0401.dll
    + 2004-08-11 02:00:00 477,696 -c----w c:\windows\$NtServicePackUninstall$\sprb0404.dll
    + 2004-08-11 02:00:00 734,720 -c----w c:\windows\$NtServicePackUninstall$\sprb0405.dll
    + 2004-08-11 02:00:00 742,912 -c----w c:\windows\$NtServicePackUninstall$\sprb0406.dll
    + 2004-08-11 02:00:00 788,992 -c----w c:\windows\$NtServicePackUninstall$\sprb0407.dll
    + 2004-08-11 02:00:00 801,280 -c----w c:\windows\$NtServicePackUninstall$\sprb0408.dll
    + 2004-08-11 02:00:00 729,088 -c----w c:\windows\$NtServicePackUninstall$\sprb040b.dll
    + 2004-08-11 02:00:00 793,600 -c----w c:\windows\$NtServicePackUninstall$\sprb040c.dll
    + 2004-08-11 02:00:00 2,842,112 -c----w c:\windows\$NtServicePackUninstall$\sprb040d.dll
    + 2004-08-11 02:00:00 769,536 -c----w c:\windows\$NtServicePackUninstall$\sprb040e.dll
    + 2004-08-11 02:00:00 769,536 -c----w c:\windows\$NtServicePackUninstall$\sprb0410.dll
    + 2004-08-11 02:00:00 562,688 -c----w c:\windows\$NtServicePackUninstall$\sprb0411.dll
    + 2004-08-11 02:00:00 543,744 -c----w c:\windows\$NtServicePackUninstall$\sprb0412.dll
    + 2004-08-11 02:00:00 769,024 -c----w c:\windows\$NtServicePackUninstall$\sprb0413.dll
    + 2004-08-11 02:00:00 716,288 -c----w c:\windows\$NtServicePackUninstall$\sprb0414.dll
    + 2004-08-11 02:00:00 759,808 -c----w c:\windows\$NtServicePackUninstall$\sprb0415.dll
    + 2004-08-11 02:00:00 752,128 -c----w c:\windows\$NtServicePackUninstall$\sprb0416.dll
    + 2004-08-11 02:00:00 736,768 -c----w c:\windows\$NtServicePackUninstall$\sprb0419.dll
    + 2004-08-11 02:00:00 757,248 -c----w c:\windows\$NtServicePackUninstall$\sprb041b.dll
    + 2004-08-11 02:00:00 724,992 -c----w c:\windows\$NtServicePackUninstall$\sprb041d.dll
    + 2004-08-11 02:00:00 724,480 -c----w c:\windows\$NtServicePackUninstall$\sprb041f.dll
    + 2004-08-11 02:00:00 732,160 -c----w c:\windows\$NtServicePackUninstall$\sprb0424.dll
    + 2004-08-11 02:00:00 470,016 -c----w c:\windows\$NtServicePackUninstall$\sprb0804.dll
    + 2004-08-11 02:00:00 751,616 -c----w c:\windows\$NtServicePackUninstall$\sprb0816.dll
    + 2004-08-11 02:00:00 773,632 -c----w c:\windows\$NtServicePackUninstall$\sprb0c0a.dll
    + 2004-08-11 02:00:00 250,880 -c----w c:\windows\$NtServicePackUninstall$\sptip.dll
    + 2008-04-14 09:42:08 438,272 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spcompat.dll
    + 2007-08-11 00:46:18 231,288 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 00:46:28 382,840 -c----w c:\windows\$NtServicePackUninstall$\spuninst\updspapi.dll
    + 2004-08-11 02:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\sqldb20.dll
    + 2004-08-11 02:00:00 528,384 -c----w c:\windows\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-11 02:00:00 462,848 -c----w c:\windows\$NtServicePackUninstall$\sqlqp20.dll
    + 2004-08-11 02:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\sqlse20.dll
    + 2004-08-11 02:00:00 442,368 -c----w c:\windows\$NtServicePackUninstall$\sqlsrv32.dll
    + 2004-08-11 02:00:00 180,800 -c----w c:\windows\$NtServicePackUninstall$\sqlunirl.dll
    + 2004-08-11 02:00:00 217,088 -c----w c:\windows\$NtServicePackUninstall$\sqlxmlx.dll
    + 2004-08-11 02:00:00 73,472 -c----w c:\windows\$NtServicePackUninstall$\sr.sys
    + 2004-08-11 02:00:00 58,434 -c----w c:\windows\$NtServicePackUninstall$\srchctls.dll
    + 2004-08-11 02:00:00 725,566 -c----w c:\windows\$NtServicePackUninstall$\srchui.dll
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\srclient.dll
    + 2004-08-11 02:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\srrstr.dll
    + 2004-08-11 02:00:00 170,496 -c----w c:\windows\$NtServicePackUninstall$\srsvc.dll
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtServicePackUninstall$\srv.sys
    + 2004-12-07 19:32:34 96,768 -c----w c:\windows\$NtServicePackUninstall$\srvsvc.dll
    + 2004-08-11 02:00:00 704,512 -c----w c:\windows\$NtServicePackUninstall$\ss3dfo.scr
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\ssbezier.scr
    + 2004-08-11 02:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\ssdpapi.dll
    + 2004-08-11 02:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
    + 2004-08-11 02:00:00 393,216 -c----w c:\windows\$NtServicePackUninstall$\ssflwbox.scr
    + 2004-08-11 02:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\ssinc51.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ssmarque.scr
    + 2004-08-11 02:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ssmypics.scr
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\ssmyst.scr
    + 2004-08-11 02:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\sspifilt.dll
    + 2004-08-11 02:00:00 610,304 -c----w c:\windows\$NtServicePackUninstall$\sspipes.scr
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\ssstars.scr
    + 2004-08-11 02:00:00 679,936 -c----w c:\windows\$NtServicePackUninstall$\sstext3d.scr
    + 2004-08-11 02:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\sstub.dll
    + 2004-08-11 02:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\staxmem.dll
    + 2004-08-11 02:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\stclient.dll
    + 2004-08-11 02:00:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\stdprov.dll
    + 2004-08-11 02:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sti.dll
    + 2004-08-11 02:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\sti_ci.dll
    + 2004-08-11 02:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\stimon.exe
    + 2004-08-11 02:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\stobject.dll
    + 2004-08-04 14:56:46 74,752 -c----w c:\windows\$NtServicePackUninstall$\storprop.dll
    + 2004-08-04 13:08:04 48,640 -c----w c:\windows\$NtServicePackUninstall$\stream.sys
    + 2004-08-11 02:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\streamip.sys
    + 2006-08-21 14:52:08 246,814 -c----w c:\windows\$NtServicePackUninstall$\strmdll.dll
    + 2004-08-11 02:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\strmfilt.dll
    + 2004-08-11 02:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\svcext51.dll
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\svchost.exe
    + 2004-08-04 12:58:42 4,352 -c----w c:\windows\$NtServicePackUninstall$\swenum.sys
    + 2001-08-18 04:00:52 54,272 -c----w c:\windows\$NtServicePackUninstall$\swmidi.sys
    + 2006-10-19 13:56:32 713,216 -c----w c:\windows\$NtServicePackUninstall$\sxs.dll
    + 2004-08-11 02:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\synceng.dll
    + 2004-08-11 02:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\syncui.dll
    + 2004-08-04 13:15:56 60,800 -c----w c:\windows\$NtServicePackUninstall$\sysaudio.sys
    + 2004-08-11 02:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\sysinfo.exe
    + 2004-08-11 02:00:00 168,960 -c----w c:\windows\$NtServicePackUninstall$\sysmod.dll
    + 2004-08-11 02:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\sysocmgr.exe
    + 2004-08-11 02:00:00 984,576 -c----w c:\windows\$NtServicePackUninstall$\syssetup.dll
    + 2004-07-20 19:54:18 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\system.dll
    + 2004-08-11 02:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\systeminfo.exe
    + 2005-10-17 21:14:46 118,272 -c----w c:\windows\$NtServicePackUninstall$\t2embed.dll
    + 2004-08-11 02:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\tabletoc.dll
    + 2004-08-11 02:00:00 14,976 -c----w c:\windows\$NtServicePackUninstall$\tape.sys
    + 2004-08-11 02:00:00 858,624 -c----w c:\windows\$NtServicePackUninstall$\tapi3.dll
    + 2004-08-11 02:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\tapi32.dll
    + 2005-07-08 16:27:56 249,344 -c----w c:\windows\$NtServicePackUninstall$\tapisrv.dll
    + 2004-08-11 02:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\taskkill.exe
    + 2004-08-11 02:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\tasklist.exe
    + 2004-08-11 02:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\taskmgr.exe
    + 2008-06-20 10:45:13 360,320 -c----w c:\windows\$NtServicePackUninstall$\tcpip.sys
    + 2008-06-20 09:52:06 225,920 -c----w c:\windows\$NtServicePackUninstall$\tcpip6.sys
    + 2004-08-11 02:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\tcpmib.dll
    + 2004-08-11 02:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmon.dll
    + 2004-08-11 02:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmonui.dll
    + 2003-03-25 17:52:04 32,827 -c----w c:\windows\$NtServicePackUninstall$\tcptest.exe
    + 2003-03-25 17:52:06 16,384 -c----w c:\windows\$NtServicePackUninstall$\tcptsat.dll
    + 2004-08-11 02:00:00 18,560 -c----w c:\windows\$NtServicePackUninstall$\tdi.sys
    + 2004-08-11 02:00:00 12,040 -c----w c:\windows\$NtServicePackUninstall$\tdpipe.sys
    + 2004-08-11 02:00:00 21,896 -c----w c:\windows\$NtServicePackUninstall$\tdtcp.sys
    + 2005-05-10 23:45:48 75,776 -c----w c:\windows\$NtServicePackUninstall$\telnet.exe
    + 2004-08-04 15:01:08 40,840 -c----w c:\windows\$NtServicePackUninstall$\termdd.sys
    + 2004-08-11 02:00:00 358,400 -c----w c:\windows\$NtServicePackUninstall$\termmgr.dll
    + 2004-08-11 02:00:00 295,424 -c----w c:\windows\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-11 02:00:00 385,536 -c----w c:\windows\$NtServicePackUninstall$\themeui.dll
    + 2004-08-11 02:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\tlntadmn.exe
    + 2004-08-11 02:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\tlntsess.exe
    + 2004-08-11 02:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\tlntsvr.exe
    + 2004-08-11 02:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\tlntsvrp.dll
    + 2004-08-11 02:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\tmigrate.dll
    + 2007-01-15 21:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\togac.exe
    + 2004-08-11 02:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\tools.dll
    + 2004-08-11 02:00:00 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstart.exe
    + 2004-08-11 02:00:00 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstrt.exe
    + 2004-08-11 02:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\tracerpt.exe
    + 2004-08-11 02:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\tracert.exe
    + 2004-08-11 02:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\tree.com
    + 2004-08-11 02:00:00 153,088 -c----w c:\windows\$NtServicePackUninstall$\triedit.dll
    + 2004-08-11 02:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\trkwks.dll
    + 2004-08-11 02:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\tscfgwmi.dll
    + 2004-08-11 02:00:00 12,168 -c----w c:\windows\$NtServicePackUninstall$\tsddd.dll
    + 2004-08-11 02:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\tshoot.dll
    + 2004-08-11 02:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-04 13:03:18 12,416 -c----w c:\windows\$NtServicePackUninstall$\tunmp.sys
    + 2004-08-11 02:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-11 02:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\twext.dll
    + 2005-07-26 04:39:49 101,376 -c----w c:\windows\$NtServicePackUninstall$\txflog.dll
    + 2008-07-14 11:09:18 62,976 -c----w c:\windows\$NtServicePackUninstall$\tzchange.exe
    + 2004-08-11 02:00:00 66,176 -c----w c:\windows\$NtServicePackUninstall$\udfs.sys
    + 2004-08-11 02:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\udhisapi.dll
    + 2004-08-11 02:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\uihelper.dll
    + 2004-08-11 02:00:00 275,456 -c----w c:\windows\$NtServicePackUninstall$\ulib.dll
    + 2004-08-11 02:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\umandlg.dll
    + 2005-08-23 03:35:42 123,392 -c----w c:\windows\$NtServicePackUninstall$\umpnpmgr.dll
    + 2007-03-23 01:24:06 376,832 -c----w c:\windows\$NtServicePackUninstall$\unidrv.dll
    + 2007-03-23 02:03:54 749,568 -c----w c:\windows\$NtServicePackUninstall$\unidrvui.dll
    + 2004-08-11 02:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\uniime.dll
    + 2004-08-11 02:00:00 74,240 -c----w c:\windows\$NtServicePackUninstall$\unimdmat.dll
    + 2004-08-11 02:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-11 02:00:00 316,416 -c----w c:\windows\$NtServicePackUninstall$\untfs.dll
    + 2007-04-23 10:32:54 364,160 -c----w c:\windows\$NtServicePackUninstall$\update.sys
    + 2004-08-11 02:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\uploadm.exe
    + 2004-08-11 02:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\upnp.dll
    + 2004-08-11 02:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\upnpcont.exe
    + 2007-02-05 20:17:02 185,344 -c----w c:\windows\$NtServicePackUninstall$\upnphost.dll
    + 2004-08-11 02:00:00 239,616 -c----w c:\windows\$NtServicePackUninstall$\upnpui.dll
    + 2004-08-11 02:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\ups.exe
    + 2004-08-11 02:00:00 12,672 -c----w c:\windows\$NtServicePackUninstall$\usb8023.sys
    + 2004-08-04 03:07:56 59,264 -c----w c:\windows\$NtServicePackUninstall$\usbaudio.sys
    + 2001-08-18 04:03:42 23,808 -c----w c:\windows\$NtServicePackUninstall$\usbcamd.sys
    + 2001-08-18 04:03:44 23,936 -c----w c:\windows\$NtServicePackUninstall$\usbcamd2.sys
    + 2004-08-04 03:08:48 31,616 -c----w c:\windows\$NtServicePackUninstall$\usbccgp.sys
    + 2004-08-11 02:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys
    + 2004-08-11 02:00:00 57,600 -c----w c:\windows\$NtServicePackUninstall$\usbhub.sys
    + 2004-08-04 13:08:58 16,000 -c----w c:\windows\$NtServicePackUninstall$\usbintel.sys
    + 2004-08-11 02:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\usbmon.dll
    + 2004-08-11 02:00:00 142,976 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys
    + 2004-08-04 03:01:26 25,856 -c----w c:\windows\$NtServicePackUninstall$\usbprint.sys
    + 2004-08-04 03:58:46 15,104 -c----w c:\windows\$NtServicePackUninstall$\usbscan.sys
    + 2004-08-11 02:00:00 26,496 -c----w c:\windows\$NtServicePackUninstall$\usbstor.sys
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\usbuhci.sys
    + 2004-08-04 14:56:48 74,240 -c----w c:\windows\$NtServicePackUninstall$\usbui.dll
    + 2007-03-08 15:36:28 577,536 -c----w c:\windows\$NtServicePackUninstall$\user32.dll
    + 2004-08-11 02:00:00 723,456 -c----w c:\windows\$NtServicePackUninstall$\userenv.dll
    + 2004-08-11 02:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\userinit.exe
    + 2004-08-11 02:00:00 406,528 -c----w c:\windows\$NtServicePackUninstall$\usp10.dll
    + 2004-08-11 02:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\utilman.exe
    + 2004-08-11 02:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\uxtheme.dll
    + 2004-08-11 02:00:00 30,749 -c----w c:\windows\$NtServicePackUninstall$\vbajet32.dll
    + 2006-11-08 01:03:36 413,696 -c----w c:\windows\$NtServicePackUninstall$\vbscript.dll
    + 2004-08-11 02:00:00 26,112 -c----w c:\windows\$NtServicePackUninstall$\vdmdbg.dll
    + 2004-08-11 02:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\vdmredir.dll
    + 2006-03-17 00:38:01 28,672 -c----w c:\windows\$NtServicePackUninstall$\verclsid.exe
    + 2004-08-11 02:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\verifier.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\version.dll
    + 2004-08-04 18:56:48 53,760 -c----w c:\windows\$NtServicePackUninstall$\vfwwdm32.dll
    + 2004-08-11 02:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
    + 2004-08-11 02:00:00 79,744 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
    + 2004-08-11 02:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
    + 2004-08-11 02:00:00 426,041 -c----w c:\windows\$NtServicePackUninstall$\voicepad.dll
    + 2004-08-11 02:00:00 86,073 -c----w c:\windows\$NtServicePackUninstall$\voicesub.dll
    + 2004-08-11 02:00:00 52,352 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
    + 2004-08-11 02:00:00 430,592 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
    + 2004-08-11 02:00:00 289,792 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
    + 2004-08-11 02:00:00 174,592 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
    + 2004-08-11 02:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\w3ssl.dll
    + 2004-08-11 02:00:00 363,520 -c----w c:\windows\$NtServicePackUninstall$\w3svc.dll
    + 2004-08-11 02:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
    + 2007-05-16 15:12:12 510,976 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
    + 2004-08-11 02:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
    + 2007-05-16 15:12:15 85,504 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
    + 2004-08-11 02:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-11 02:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\wam51.dll
    + 2004-08-11 02:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\wamreg51.dll
    + 2004-08-11 02:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
    + 2004-08-11 02:00:00 17,664 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
    + 2004-08-11 02:00:00 208,896 -c----w c:\windows\$NtServicePackUninstall$\wavemsp.dll
    + 2004-08-11 02:00:00 196,608 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
    + 2004-08-11 02:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
    + 2004-08-11 02:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
    + 2004-08-11 02:00:00 530,944 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
    + 2004-08-11 02:00:00 178,176 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
    + 2004-08-11 02:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
    + 2004-08-11 02:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
    + 2004-08-11 02:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
    + 2004-08-11 02:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
    + 2004-08-11 02:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
    + 2004-08-11 02:00:00 197,120 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
    + 2004-08-11 02:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
    + 2004-08-04 14:56:58 23,552 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys.000
    + 2006-01-04 03:35:05 68,096 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
    + 2004-08-11 02:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
    + 2004-08-11 02:00:00 433,664 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
    + 2004-08-11 02:00:00 463,360 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
    + 2004-08-11 02:00:00 124,416 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
    + 2004-08-11 02:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
    + 2006-12-19 18:16:47 333,824 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
    + 2004-08-11 02:00:00 589,312 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
    + 2004-08-11 02:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
    + 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
    + 2004-08-11 02:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
    + 2004-08-11 02:00:00 937,984 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
    + 2006-10-24 16:30:06 716,288 -c----w c:\windows\$NtServicePackUninstall$\windowscodecs.dll
    + 2006-10-24 16:29:50 352,256 -c----w c:\windows\$NtServicePackUninstall$\windowscodecsext.dll
    + 2004-08-11 02:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
    + 2004-08-11 02:00:00 351,232 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
    + 2004-08-11 02:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
    + 2004-08-11 02:00:00 502,272 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
    + 2004-08-11 02:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
    + 2004-08-11 02:00:00 764,928 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
    + 2004-08-11 02:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
    + 2004-08-11 02:00:00 99,328 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
    + 2004-08-11 02:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\winshfhc.dll
    + 2004-08-11 02:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
    + 2007-03-17 13:43:01 292,864 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
    + 2004-08-11 02:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
    + 2004-08-11 02:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
    + 2004-08-11 02:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
    + 2006-08-17 12:28:27 132,096 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
    + 2004-08-11 02:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
    + 2004-08-11 02:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
    + 2004-08-11 02:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
    + 2004-08-11 02:00:00 196,608 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
    + 2004-08-11 02:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
    + 2004-08-11 02:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
    + 2004-08-11 02:00:00 358,912 -c----w c:\windows\$NtServicePackUninstall$\wmic.exe
    + 2004-08-11 02:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
    + 2004-08-11 02:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
    + 2004-08-11 02:00:00 156,672 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
    + 2004-08-11 02:00:00 132,096 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
    + 2004-08-11 02:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
    + 2004-08-11 02:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
    + 2004-08-11 02:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
    + 2004-08-11 02:00:00 437,248 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
    + 2004-08-11 02:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
    + 2004-08-11 02:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
    + 2004-08-11 02:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
    + 2004-08-11 02:00:00 95,232 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
    + 2004-08-11 02:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\wmm2ae.dll
    + 2004-08-11 02:00:00 402,432 -c----w c:\windows\$NtServicePackUninstall$\wmm2filt.dll
    + 2004-08-11 02:00:00 502,272 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxa.dll
    + 2004-08-11 02:00:00 325,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxb.dll
    + 2004-08-11 02:00:00 4,256,768 -c----w c:\windows\$NtServicePackUninstall$\wmm2res.dll
    + 2004-08-11 02:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2res2.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcd.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcore.dll
    + 2006-10-24 16:30:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\wmphoto.dll
    + 2004-08-11 02:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpui.dll
    + 2004-08-11 02:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
    + 2004-08-11 02:00:00 303,616 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
    + 2004-08-11 02:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
    + 2004-08-11 02:00:00 264,192 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
    + 2004-08-11 02:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
    + 2004-08-11 02:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
    + 2004-08-11 02:00:00 82,944 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-11 02:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\wscntfy.exe
    + 2004-08-11 02:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
    + 2004-08-11 02:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\wscsvc.dll
    + 2004-08-11 02:00:00 596,992 -c----w c:\windows\$NtServicePackUninstall$\wsecedit.dll
    + 2004-08-11 02:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\wshbth.dll
    + 2004-08-11 02:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
    + 2004-08-11 02:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
    + 2004-08-11 02:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
    + 2004-08-11 02:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
    + 2004-08-11 02:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
    + 2004-08-11 02:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
    + 2004-08-11 02:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
    + 2004-08-04 13:10:22 19,328 -c----w c:\windows\$NtServicePackUninstall$\wstcodec.sys
    + 2004-08-11 02:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
    + 2004-08-11 02:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-11 02:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\wuauclt1.exe
    + 2004-08-11 02:00:00 183,296 -c----w c:\windows\$NtServicePackUninstall$\wuaueng1.dll
    + 2004-08-11 02:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
    + 2004-08-11 02:00:00 378,368 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
    + 2004-08-04 14:56:48 51,712 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
    + 2004-08-04 14:56:48 359,936 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
    + 2004-08-11 02:00:00 91,648 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
    + 2004-08-11 02:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
    + 2006-07-14 15:51:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\xmllite.dll
    + 2004-08-11 02:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\xmlprov.dll
    + 2004-08-11 02:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\xmlprovi.dll
    + 2006-03-01 19:42:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
    + 2004-08-11 02:00:00 438,784 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
    + 2004-08-11 02:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
    + 2004-08-11 02:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll.026
    + 2004-08-11 02:00:00 2,897,920 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
    + 2007-10-29 10:26:53 115,712 -c----w c:\windows\$NtServicePackUninstall$\xpsp3res.dll
    + 2004-08-11 02:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
    + 2005-02-25 00:35:06 22,240 -c----w c:\windows\$NtUninstallKB890046$\spcustom.dll
    + 2005-02-25 00:35:06 14,048 -c----w c:\windows\$NtUninstallKB890046$\spmsg.dll
    + 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB890046$\spuninst.exe
    - 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB890046$\spuninst\spuninst.exe
    + 2005-02-25 01:35:06 209,632 -c----w c:\windows\$NtUninstallKB890046$\spuninst\spuninst.exe
    - 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB890046$\spuninst\updspapi.dll
    + 2005-02-25 01:35:08 371,936 -c----w c:\windows\$NtUninstallKB890046$\spuninst\updspapi.dll
    + 2005-02-25 00:35:06 718,048 -c----w c:\windows\$NtUninstallKB890046$\update.exe
    + 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB890046$\updspapi.dll
    - 2005-10-12 23:16:49 22,752 -c----w c:\windows\$NtUninstallKB911280$\spcustom.dll
    + 2005-10-12 23:12:25 22,752 -c----w c:\windows\$NtUninstallKB911280$\spcustom.dll
    - 2005-10-12 23:16:49 14,048 -c----w c:\windows\$NtUninstallKB911280$\spmsg.dll
    + 2005-10-12 23:12:25 14,048 -c----w c:\windows\$NtUninstallKB911280$\spmsg.dll
    - 2005-10-12 23:16:49 213,216 -c----w c:\windows\$NtUninstallKB911280$\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB911280$\spuninst.exe
    - 2005-10-12 23:16:51 716,000 -c----w c:\windows\$NtUninstallKB911280$\update.exe
    + 2005-10-12 23:12:29 716,000 -c----w c:\windows\$NtUninstallKB911280$\update.exe
    - 2005-10-12 23:16:56 371,424 -c----w c:\windows\$NtUninstallKB911280$\updspapi.dll
    + 2005-10-12 23:12:34 371,424 -c----w c:\windows\$NtUninstallKB911280$\updspapi.dll
    + 2004-08-11 02:00:00 553,472 -c----w c:\windows\$NtUninstallKB921503$\oleaut32.dll
    + 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB921503$\spuninst\spuninst.exe
    + 2005-10-12 23:12:34 371,424 -c----w c:\windows\$NtUninstallKB921503$\spuninst\updspapi.dll
    - 2004-08-11 02:00:00 2,355,200 -c----w c:\windows\$NtUninstallKB923689$\wmvcore.dll
    + 2005-01-28 17:44:28 2,370,296 -c----w c:\windows\$NtUninstallKB923689$\wmvcore.dll
    - 2005-06-28 14:23:26 213,216 -c----w c:\windows\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe
    + 2005-06-28 15:23:26 213,216 -c----w c:\windows\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe
    - 2005-06-28 14:23:54 371,424 -c----w c:\windows\$NtUninstallKB925398_WMP64$\spuninst\updspapi.dll
    + 2005-06-28 15:23:54 371,424 -c----w c:\windows\$NtUninstallKB925398_WMP64$\spuninst\updspapi.dll
    + 2004-08-11 02:00:00 278,016 -c----w c:\windows\$NtUninstallKB925902$\gdi32.dll
    + 2004-08-11 02:00:00 39,936 -c----w c:\windows\$NtUninstallKB925902$\mf3216.dll
    + 2006-01-19 19:29:19 213,216 -c----w c:\windows\$NtUninstallKB925902$\spuninst\spuninst.exe
    + 2006-01-19 19:29:19 371,424 -c----w c:\windows\$NtUninstallKB925902$\spuninst\updspapi.dll
    + 2005-03-02 18:09:30 577,024 -c----w c:\windows\$NtUninstallKB925902$\user32.dll
    + 2005-03-02 18:09:30 577,024 -c----w c:\windows\$NtUninstallKB925902$\user32.dll.000
    + 2005-03-02 01:06:57 1,836,288 -c----w c:\windows\$NtUninstallKB925902$\win32k.sys
    + 2005-05-04 18:45:32 2,890,240 -c----w c:\windows\$NtUninstallKB927891$\msi.dll
    + 2006-01-19 19:29:19 213,216 -c----w c:\windows\$NtUninstallKB927891$\spuninst\spuninst.exe
    + 2006-01-19 19:29:19 371,424 -c----w c:\windows\$NtUninstallKB927891$\spuninst\updspapi.dll
    + 2004-08-11 02:00:00 81,408 -c----w c:\windows\$NtUninstallKB929123$\directdb.dll
    + 2004-08-11 02:00:00 1,311,232 -c----w c:\windows\$NtUninstallKB929123$\msoe.dll
    + 2006-01-19 19:29:19 213,216 -c----w c:\windows\$NtUninstallKB929123$\spuninst\spuninst.exe
    + 2006-01-19 19:29:19 371,424 -c----w c:\windows\$NtUninstallKB929123$\spuninst\updspapi.dll
    + 2004-08-11 02:00:00 504,832 -c----w c:\windows\$NtUninstallKB929123$\wab32.dll
    + 2004-08-11 02:00:00 84,992 -c----w c:\windows\$NtUninstallKB929123$\wabimp.dll
    + 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB930178$\spuninst\spuninst.exe
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules