Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: Infected with something I can't remove

  1. #1
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default Infected with something I can't remove

    Hello,
    Sadly, I have returned as I have become newly infected with a new "quirk". I recently installed firefox to use as my default browser and after a week of use i started getting things popping up in IE windows even though I haven't used it for a while. I have used Kaspersky online scanner, Norton, spybot, ad-Aware and Malwarebytes and i will always find something new even if I scan with one immediatly after a scan and cleanup from any other one.

    I have done all in the "Before you post" thread. Here is my HJT log as I need expert help!

    Thanks in advance.
    Fuzzhead23

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:23:35 PM, on 09/03/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Symantec AntiVirus\DefWatch.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Symantec AntiVirus\Rtvscan.exe
    C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\PROGRA~1\SYMANT~2\VPTray.exe
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {d2622bef-046a-4ca8-9fd7-b48c77dd5534} - (no file)
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [qa1jscj88butp44okg2dy4k3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zg7nch5hh3.exe
    O4 - HKCU\..\Run: [gtns00w0vffj3aamxmicwarzwho3c86yprxrehhiwf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\j2ohv6zi1tgl1.exe
    O4 - HKCU\..\Run: [yd1kjd1s0ea82zr3vpx4po6hw4paj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cz53f4zzw.exe
    O4 - HKCU\..\Run: [h2rmymi812ndiw8gjcc6cxl61] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w61kxiqgj0ma.exe
    O4 - HKCU\..\Run: [c2k37ik1fw0fy7j7eefs39qkwetp8jtb1g6s24] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nhuftmxcq.exe
    O4 - HKCU\..\Run: [sxs6pg8qqz29a42o1pk784p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\onghuvi5vm.exe
    O4 - HKCU\..\Run: [bqe0jza8n7kb0oq7ssqp104vaas5j85uyc6892] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oxd2urfv4u2j.exe
    O4 - HKCU\..\Run: [jrvh3ck6dq8kezsm4q2wktk0gznrmiqpx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dejjyhfiw.exe
    O4 - HKCU\..\Run: [thpu2jaoh1cjkmask9hv3pcg0xb2foadriufxsa08xnzyjz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t6unoy48k5.exe
    O4 - HKCU\..\Run: [kf7n0s30r2hbdfa92yk3fv7lrgqiuoxa8dd5r0r5j7smq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jag62gn8mu.exe
    O4 - HKCU\..\Run: [uj07ylf03ptd5l0k3uqkrz8ocz60n0o66oyw2rlr40d26dg4wg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vhrkh7nxlsb.exe
    O4 - HKCU\..\Run: [oxlfg3axn70e3h8jecc80gdud5cmj3u5ptaxh434fplyahk0o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c63lum0s8y1y2.exe
    O4 - HKCU\..\Run: [gw0axu13jr7n32z4w] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b6t7s2gy.exe
    O4 - HKCU\..\Run: [f286w6cfnzs81jdtyzeceg48cfvso8wfrnd6il] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i1lz0t8gz5s.exe
    O4 - HKCU\..\Run: [et3accef482qdvqlq78q] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l403568dz.exe
    O4 - HKCU\..\Run: [lrxek2g4bjssmyh1xxio0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p5pltkb47p54.exe
    O4 - HKCU\..\Run: [g8a1boi506wjrqhb4iugak] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b07ftsci.exe
    O4 - HKCU\..\Run: [bsujnbhn7t801ld0n5kii4e1r3ul] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\juubf769ow.exe
    O4 - HKCU\..\Run: [io84zro9p60k52v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eq3yq5g2xya.exe
    O4 - HKCU\..\Run: [l0rimbk1q6bypvlsbim1xa] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\la2d4kqif7zy.exe
    O4 - HKCU\..\Run: [zac2qvy63q2o3couv4jw6x469aq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ym21o68z4.exe
    O4 - HKCU\..\Run: [o5fiyk62se] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y0pyp65k.exe
    O4 - HKCU\..\Run: [evykwh9472oyizfeeoegzn5bvza3t1pv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\moexqu3pm5.exe
    O4 - HKCU\..\Run: [gz8iq4u2lvo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fpdcyz7mno.exe
    O4 - HKCU\..\Run: [dhrddfa15oa6p08rrpd58fa7c084j2eein3dsjy0d5j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\khnsoprkdlgm4.exe
    O4 - HKCU\..\Run: [z1idnl692p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vet8vzqybphz6.exe
    O4 - HKCU\..\Run: [fcut3n4tpkpy9m2t6b315exjskk39e6e] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\flkqx3.exe
    O4 - HKCU\..\Run: [i0yg49s3wz8rbjel3b3tqs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\awfuz6o.exe
    O4 - HKCU\..\Run: [bfxno9gzi6b5o3gt2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rjs8y6rnrdjz.exe
    O4 - HKCU\..\Run: [x19f0t9fxw9k2p49] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\grnsyc6.exe
    O4 - HKCU\..\Run: [zrk0zhnving] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\udwyzip2.exe
    O4 - HKCU\..\Run: [w21un0rqyl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i21pal8h.exe
    O4 - HKCU\..\Run: [d0vkzge3try1vxgq7ia7wptwr8rl8yeyl9nw05iwpccw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pf8qkzx.exe
    O4 - HKCU\..\Run: [bnal9sndm8k2sv3skrdb4d7xr7o5ybpj7ik17w6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a66y8201emw.exe
    O4 - HKCU\..\Run: [a22zjzkvg4ozsg4w6jsc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tuporftt90c2o.exe
    O4 - HKCU\..\Run: [w4ecg7tc0ve206uqqnh2temk4wra382uorw7807v7h544cxvyf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\se1z8r.exe
    O4 - HKCU\..\Run: [uoszxjbtsuax5s65kzumnd0o8m8mpisq4g50wynr31a] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jvolm2ey1g9.exe
    O4 - HKCU\..\Run: [fdpv0an581u1q557htb2ni817q7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ivlrd4dt.exe
    O4 - HKCU\..\Run: [bbj98pfehn2dzx42ni8y59g1lcfyo0nlqxa81ri2q] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ttixf7b3yt3k.exe
    O4 - HKCU\..\Run: [i5s7lizxgm5cddj5fsem0wii781r50zzi0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uyosbl5n8b0.exe
    O4 - HKCU\..\Run: [z5u0040lmu5w3r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v8tq226y95vn.exe
    O4 - HKCU\..\Run: [zetdlcip3whud0zilhy1mi0anevg47i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q3ijgg0yc.exe
    O4 - HKCU\..\Run: [vew9x694z0buzh7b0zoyjim37ad2eqx41l3mbs5mejaa] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lyc0ikborz5ax.exe
    O4 - HKCU\..\Run: [o36q3m5be2lrra53ih9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\se7gi8ledncq.exe
    O4 - HKCU\..\Run: [yrot72yfvlm325] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zrehb3pmf8k.exe
    O4 - HKCU\..\Run: [bmlw8ayh8t88pj1aicxq198rjk8qnyrjrjpo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zdx11ku0yr.exe
    O4 - HKCU\..\Run: [yblaf7votafiait3mmy36x1gxwid59758o3z9x6onw5t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\synnn3.exe
    O4 - HKCU\..\Run: [fbge74wtxfaglf8boeqxtsxtnatv5y] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q6j5lx.exe
    O4 - HKCU\..\Run: [cmxcb80zlulorvxucr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lrzwmfwszmc8g.exe
    O4 - HKCU\..\Run: [exqqrjukiw1sg7h6s10sszfyh9sofh0925y902lgolpap7wo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fjc6ecnzb4n3s.exe
    O4 - HKCU\..\Run: [faxsq5m5pkvwbezrylult13nuq6rpio] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yb78uymfvshvu.exe
    O4 - HKCU\..\Run: [kv1g52yicf2hxrss5te] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v6vpegac.exe
    O4 - HKCU\..\Run: [zsh2ad2rmy4jx0ptkv0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mn2b655pag.exe
    O4 - HKCU\..\Run: [p80xg94unbek0kkmpktzkmpcqfioiunnjtuv36] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rrer70eyrm.exe
    O4 - HKCU\..\Run: [f6gba6ghtywa5jh279j17ezmv9x3eqqfyezmcutbmppbi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m9lvwma3a.exe
    O4 - HKCU\..\Run: [nwz49oa6hyirkt52jkpdfnuje] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p7by113nws.exe
    O4 - HKCU\..\Run: [tvmulid1to314i77bybirquhegd1xgahph] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i4pk7l7hz.exe
    O4 - HKCU\..\Run: [diav4gatfzm1pnlf4zc6ug] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uwwrxgshfe5cg.exe
    O4 - HKCU\..\Run: [itpl2luf4r7mix0qm6bcda91d52alun3sadgir9oywr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wx94assq9q3s.exe
    O4 - HKCU\..\Run: [br4ssd2sdd0etz5z80kerj2em2t7jvd2jpt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vsn9sswc8w.exe
    O4 - HKCU\..\Run: [qh2otgon3dxfrk9sy2oc2z2wnbtllcdu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p846qzyk1im0.exe
    O4 - HKCU\..\Run: [ba5xbcskhynfc0df9dejv1ddb3c7r125cle5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o3is8vcss3.exe
    O4 - HKCU\..\Run: [fippw3xi0zf8h1aw20ta7yk4k8tosrjvw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dgdwhiwu1r22.exe
    O4 - HKCU\..\Run: [xfigt1jm0sjjhvecjct5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\glpwxh8xu.exe
    O4 - HKCU\..\Run: [ia4rqp649f9sbngkp5uapnj1ly6j92qa7vp5sa9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q454wfx.exe
    O4 - HKCU\..\Run: [jtgk1w3w6qg2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\efo3f9r083x65.exe
    O4 - HKCU\..\Run: [rdbll8vvlhbwxtfjfr4v29k80xmwii9php14sadn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rndieu55fm.exe
    O4 - HKCU\..\Run: [hc9meyx78lwqytw7f2t07ceknwz6b9e7ficd8yytvcfvr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\awvtukpyp.exe
    O4 - HKCU\..\Run: [qgxusqb2tn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\znu51g8q7za2.exe
    O4 - HKCU\..\Run: [xbq1yevzsoea8tentima89w44cv980ek5pbwj7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kpvrhejbwz.exe
    O4 - HKCU\..\Run: [g34rh6id1qpzcsn7g20gnq1klq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g07nlbzni.exe
    O4 - HKCU\..\Run: [ogynzox1mz6m8vl6c8vo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z2x97ufkerwb3.exe
    O4 - HKCU\..\Run: [gyfzjk8rp1r4upe4axkshyy99ndyxu3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sp98ez.exe
    O4 - HKCU\..\Run: [s2m9zrkap369vei0c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ry4a6i6bxl4e9.exe
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: http://*.trymedia.com (HKLM)
    O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Advanced) - https://www.epost.ca/printing/smsx.cab
    O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.4.1.cab
    O16 - DPF: {CBD8B1CB-2F5F-415F-93E8-A297B33DCBB2} (CentrinoCheck Control) - http://entriq.vo.llnwd.net/o1/NBCUni...ck_1_0_0_5.cab
    O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} - http://entriq.vo.llnwd.net/o1/NBCUni...2_2_Silent.cab
    O16 - DPF: {DE0FB644-C59B-46D1-B650-88BA945BC98F} - http://entriq.vo.llnwd.net/o1/NBCUni...al_1_0_0_7.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://l.yimg.com/jh/games/web_games...ploader_v6.cab
    O18 - Protocol: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} - E:\CDS300\__CDS2.dll (file missing)
    O20 - AppInit_DLLs: bzqpfd.dll
    O20 - Winlogon Notify: fccccYpM - C:\WINDOWS\
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
    O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service (lavasoft ad-aware service) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

    --
    End of file - 16088 bytes

  2. #2
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
    "BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
    All advice given is taken at your own risk.
    Please make sure you have read this information so we are on the same page.

    Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
    The junk can be tough to remove, so do not expect fast or easy.

    Pinned (sticky) to the top of this forum, and posted above are the directions, make sure you have read and followed them.

    Did you read an follow the advice I posted last time from experts? Seems you are back infected very fast?

    1) Please DO NOT ENABLE Spybot S&D TeaTimer while we work together.

    2) A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use

    Download ComboFix from here:

    Link 1

    * IMPORTANT !!! Save ComboFix.exe to your Desktop

    • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
    • See this Link for programs that need to be disabled and instruction on how to disable them.
    • Remember to re-enable them when we're done.

    • Double click on ComboFix.exe & follow the prompts.
    • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.


    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


    Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

    Click on Yes, to continue scanning for malware.

    When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a New Hijackthis log.

    *If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.

    Tutorial if needed
    http://www.bleepingcomputer.com/comb...o-use-combofix

    3) Post also an uninstall list: Open Hijackthis.
    Click the "Open the Misc Tools" section Button.
    Click the "Open Uninstall Manager" Button.
    Click the "Save list..." Button.
    Save it to your desktop. Copy and paste the contents into your reply.
    Image: http://img.bleepingcomputer.com/tuto...nstall-man.jpg

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

  3. #3
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Sorry this is such a long post....Hopefully all that you need is here...

    I had to delete the snapshot portion of the log because the log was just to big. It was 709029 characters long and I'm limited to 64000 characters total for the post.

    If you need that part of the file we will have to get it to you another way.


    ComboFix.txt was as follows:

    ComboFix 09-03-10.03 - HP_Administrator 2009-03-11 21:16:26.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1471 [GMT -4:00]
    Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
    AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated)
    FW: Norton Internet Worm Protection *disabled*
    * Created a new restore point
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\program files\INSTALL.LOG
    c:\windows\IE4 Error Log.txt
    c:\windows\system32\bzqpfd.dll
    c:\windows\system32\gazizisa.dll
    c:\windows\system32\x64

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_uacd.sys


    ((((((((((((((((((((((((( Files Created from 2009-02-12 to 2009-03-12 )))))))))))))))))))))))))))))))
    .

    2009-03-10 22:21 . 2009-03-10 23:16 <DIR> d-------- c:\documents and settings\HP_Administrator\.housecall6.6
    2009-03-10 22:21 . 2009-03-10 22:21 102,664 --a------ c:\windows\system32\drivers\tmcomm.sys
    2009-03-09 23:11 . 2009-03-09 23:11 0 --a------ c:\windows\system32\AAWService_2009_03_09_23_11_40.dmp
    2009-03-09 23:10 . 2009-03-09 23:10 <DIR> d-------- c:\program files\ERUNT
    2009-03-09 21:59 . 2009-03-09 21:47 15,688 --a------ c:\windows\system32\lsdelete.exe
    2009-03-09 21:47 . 2009-03-09 21:47 64,160 --a------ c:\windows\system32\drivers\Lbd.sys
    2009-03-09 21:44 . 2009-03-09 21:44 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
    2009-03-09 21:43 . 2009-03-09 21:43 <DIR> d-------- c:\program files\Lavasoft
    2009-03-08 13:22 . 2009-03-11 21:24 113,902 --a------ c:\windows\system32\drivers\7e10e056.sys
    2009-03-04 22:55 . 2009-03-04 22:49 172,032 --a------ c:\windows\system32\igfxres.dll
    2009-03-04 22:51 . 2009-03-04 22:50 920,088 --a------ c:\windows\system32\igxpun.exe
    2009-03-04 22:51 . 2009-03-04 22:49 319,456 --a------ c:\windows\system32\difxapi.dll
    2009-02-28 00:47 . 2009-02-28 00:47 <DIR> d-------- c:\program files\Common Files\Sandlot Shared
    2009-02-28 00:47 . 2009-02-28 00:47 <DIR> d-------- c:\documents and settings\All Users\Application Data\Sandlot Games
    2009-02-28 00:45 . 2009-02-28 00:45 <DIR> d-------- c:\program files\ReflexiveArcade
    2009-02-26 01:34 . 2009-02-26 01:34 37,423,916 --a------ C:\Dj Moule - Fa Fa Fa Good (I feel good - JB - Taxman - Beatles - Fa-fa-fa - Datarock).wav
    2009-02-26 01:21 . 2009-02-26 01:21 30,367,532 --a------ C:\Party Ben - Single Ladies (In Mayberry).wav
    2009-02-26 00:03 . 2009-02-26 00:03 <DIR> d-------- c:\program files\ConvertHelper
    2009-02-25 22:45 . 2009-02-25 22:45 0 --a------ c:\windows\nsreg.dat
    2009-02-24 18:56 . 2009-01-09 15:19 1,089,593 --------- c:\windows\system32\dllcache\ntprint.cat
    2009-02-21 00:55 . 2009-02-21 00:55 <DIR> d-------- c:\program files\Hasbro Interactive
    2009-02-19 21:35 . 2009-02-19 21:35 <DIR> d-------- c:\program files\IKEA HomePlanner
    2009-02-13 00:10 . 2009-02-13 00:13 <DIR> d-------- C:\New Folder

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-03-12 01:24 --------- d-----w c:\program files\Symantec AntiVirus
    2009-03-10 01:43 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
    2009-03-09 02:27 --------- d-----w c:\program files\Spybot - Search & Destroy
    2009-03-09 01:53 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-03-08 22:41 34 ----a-w c:\documents and settings\HP_Administrator\jagex_runescape_preferences.dat
    2009-03-05 02:49 5,854,752 ----a-w c:\windows\system32\drivers\igxpmp32.sys
    2009-02-26 03:35 --------- d-----w c:\program files\Java
    2009-02-12 02:15 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
    2009-02-11 15:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
    2009-02-11 15:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
    2009-02-08 22:47 --------- d--h--w c:\program files\InstallShield Installation Information
    2009-02-08 22:47 --------- d-----w c:\program files\Windows Plus
    2009-02-08 22:47 --------- d-----w c:\program files\Winamp
    2009-02-08 22:47 --------- d-----w c:\program files\Total Video Converter
    2009-02-08 22:47 --------- d-----w c:\program files\QuickTime
    2009-02-08 22:47 --------- d-----w c:\program files\Hewlett-Packard
    2009-02-08 22:47 --------- d-----w c:\program files\DISC
    2009-02-08 22:47 --------- d-----w c:\program files\Common Files\Motive
    2009-02-08 22:47 --------- d-----w c:\program files\Apple Software Update
    2009-02-08 22:22 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\Audacity
    2009-02-08 22:16 --------- d-----w c:\program files\Audacity 1.3 Beta (Unicode)
    2009-01-30 02:53 --------- d-----w c:\program files\Reference Assemblies
    2009-01-30 02:53 --------- d-----w c:\program files\MSBuild
    2009-01-14 23:58 --------- d-----w c:\program files\FreeRIP2
    2009-01-12 05:08 --------- d-----w c:\documents and settings\All Users\Application Data\Motive
    2006-09-05 01:59 251 ----a-w c:\program files\wt3d.ini
    2006-12-30 19:59 22 --sha-w c:\windows\SMINST\HPCD.sys
    2008-08-04 15:47 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008080420080805\index.dat
    .


    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2005-06-02 48752]
    "vptray"="c:\progra~1\SYMANT~2\VPTray.exe" [2005-06-23 85696]
    "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-25 148888]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-04 141848]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-04 166424]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-04 137752]
    "Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-09 515416]
    "RTHDCPL"="RTHDCPL.EXE" [2007-10-25 c:\windows\RTHDCPL.EXE]

    c:\documents and settings\Default User\Start Menu\Programs\Startup\
    Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-06-10 27136]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=bzqpfd.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lavasoft ad-aware service]
    @="Service"

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk.disabled]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk.disabled
    backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.disabledCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Updates From HP.lnk.disabled]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Updates From HP.lnk.disabled
    backup=c:\windows\pss\Updates From HP.lnk.disabledCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "BellCanada_McciTrayApp"=c:\program files\BellCanada\McciTrayApp.exe
    "DISCover"=c:\program files\DISC\DISCover.exe
    "DiscUpdateManager"=c:\program files\DISC\DiscUpdMgr.exe
    "ehTray"=c:\windows\ehome\ehtray.exe
    "HP Software Update"=c:\program files\HP\HP Software Update\HPwuSchd2.exe
    "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    "HPHUPD08"=c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
    "IAAnotif"=c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
    "KBD"=c:\hp\KBD\KBD.EXE
    "DMAScheduler"="c:\program files\HP DigitalMedia Archive\DMAScheduler.exe"
    "vptray"=c:\program files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe
    "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe"
    "RTHDCPL"=RTHDCPL.EXE
    "Recguard"=c:\windows\SMINST\RECGUARD.EXE
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
    "WinampAgent"="c:\program files\Winamp\winampa.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\DISC\\DISCover.exe"=
    "c:\\Program Files\\DISC\\DiscStreamHub.exe"=
    "c:\\Program Files\\DISC\\myFTP.exe"=
    "c:\\Program Files\\Updates from HP\\9972322\\Program\\Updates from HP.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe"=
    "c:\\Program Files\\TmNationsForever\\TmForever.exe"=

    R0 lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-09 64160]
    R2 lavasoft ad-aware service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 951632]
    R3 eraserutildrv10910;EraserUtilDrv10910;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10910.sys [2009-03-11 101936]
    S0 xbfgcf;xbfgcf;c:\windows\system32\drivers\rvuttqrz.sys --> c:\windows\system32\drivers\rvuttqrz.sys [?]
    S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2005-06-23 124608]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a1873c6-7a31-11dd-8a2e-001731c05904}]
    \Shell\Shell00\Command - F:\Start.exe
    .
    Contents of the 'Scheduled Tasks' folder

    2009-02-03 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{d2622bef-046a-4ca8-9fd7-b48c77dd5534} - (no file)
    Notify-fccccYpM - (no file)


    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.ca/
    uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uInternet Settings,ProxyOverride = 127.0.0.1
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    Trusted Zone: trymedia.com
    Handler: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} -
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\70ydwwu5.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/
    FF - component: c:\documents and settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\70ydwwu5.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}\platform\WINNT\components\FoxyTunes.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-03-11 21:23:21
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\7e10e056]
    "ImagePath"="\SystemRoot\System32\drivers\7e10e056.sys"
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\program files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\program files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    c:\program files\Common Files\Symantec Shared\ccEvtMgr.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Symantec AntiVirus\DefWatch.exe
    c:\windows\ehome\ehrecvr.exe
    c:\windows\ehome\ehSched.exe
    c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Common Files\LightScribe\LSSrvc.exe
    c:\windows\system32\igfxsrvc.exe
    c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    c:\program files\Symantec AntiVirus\Rtvscan.exe
    c:\windows\ehome\mcrdsvc.exe
    c:\program files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
    c:\windows\system32\wbem\unsecapp.exe
    c:\windows\system32\dllhost.exe
    .
    **************************************************************************
    .
    Completion time: 2009-03-11 21:34:50 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-03-12 01:34:47
    ComboFix2.txt 2008-07-20 16:27:24

    Pre-Run: 188,732,297,216 bytes free
    Post-Run: 188,774,297,600 bytes free



    8357 --- E O F --- 2009-02-24 23:03:27


    HijackThis was as follows:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:49:00 PM, on 11/03/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Symantec AntiVirus\DefWatch.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\PROGRA~1\SYMANT~2\VPTray.exe
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Symantec AntiVirus\Rtvscan.exe
    C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: http://*.trymedia.com (HKLM)
    O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Advanced) - https://www.epost.ca/printing/smsx.cab
    O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.4.1.cab
    O16 - DPF: {CBD8B1CB-2F5F-415F-93E8-A297B33DCBB2} (CentrinoCheck Control) - http://entriq.vo.llnwd.net/o1/NBCUni...ck_1_0_0_5.cab
    O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} - http://entriq.vo.llnwd.net/o1/NBCUni...2_2_Silent.cab
    O16 - DPF: {DE0FB644-C59B-46D1-B650-88BA945BC98F} - http://entriq.vo.llnwd.net/o1/NBCUni...al_1_0_0_7.cab
    O18 - Protocol: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} - E:\CDS300\__CDS2.dll (file missing)
    O20 - AppInit_DLLs: bzqpfd.dll
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
    O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service (lavasoft ad-aware service) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

    --
    End of file - 8450 bytes

    Uninstall List was as follows:

    Ad-Aware
    Ad-Aware
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Reader 7.0.8
    Adobe Shockwave Player 11
    Apple Mobile Device Support
    Apple Software Update
    Audacity 1.3.6 (Unicode)
    Audio Play And Record 2.12
    Bulk Rename Utility 2, 5, 1, 0
    Chipamp
    Chuzzle Deluxe 1.01
    ConvertHelper 2.2
    Critical Update for Windows Media Player 11 (KB959772)
    Data Fax SoftModem with SmartCP
    DISCover
    Efficient Networks SpeedStream DSL
    Enhanced Multimedia Keyboard Solution
    ERUNT 1.1j
    FoxyTunes for Firefox
    FreeRIP v2.951
    Garmin City Navigator North America NT 2009 Update
    Garmin Communicator Plugin
    GdiplusUpgrade
    Genesys USB Mass Storage Device
    High Definition Audio Driver Package - KB888111
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 10 (KB910393)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB961118)
    HP Boot Optimizer
    HP Deskjet Printer Preload
    HP DigitalMedia Archive
    HP Document Viewer 6.1
    HP DVD Play 2.1
    HP Imaging Device Functions 7.0
    HP Photosmart 330,380,420,470,7800,8000,8200 Series
    HP Photosmart Cameras 6.0
    HP Photosmart for Media Center PC
    HP Photosmart Premier Software 6.5
    HP PSC & OfficeJet 5.3.B
    HP PSC & OfficeJet 6.1.A
    HP Solution Center and Imaging Support Tools 6.1
    HP Update
    HP Web Helper
    IKEA Home Planner
    Intel Matrix Storage Manager
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) Network Connections Drivers
    Intel(R) Quick Resume Technology Drivers
    Intel(R) Quick Resume Technology Drivers
    Intel® Viiv™ Software
    InterActual Player
    iTunes
    J2SE Runtime Environment 5.0 Update 10
    J2SE Runtime Environment 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 5
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    Java(TM) 6 Update 12
    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) 6 Update 5
    Java(TM) 6 Update 7
    Java(TM) SE Runtime Environment 6 Update 1
    LaCie Backup Software v1.5.2378
    LiveUpdate 2.6 (Symantec Corporation)
    Malwarebytes' Anti-Malware
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 3.5 SP1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Standard Edition 2003
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Works
    Mozilla Firefox (3.0.7)
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    muvee autoProducer 5.0
    muvee autoProducer unPlugged 2.0
    Print Server
    PSP Video 9 2.25
    Python 2.2 pywin32 extensions (build 203)
    Python 2.2.3
    QuickTime
    RealPlayer
    Realtek High Definition Audio Driver
    Sandlot Games Client Services
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB928090)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB933566)
    Security Update for Windows Internet Explorer 7 (KB937143)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 10 (KB936782)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB960715)
    SereneScene Marine Aquarium 2
    Sid Meier's Civilization 4
    Sid Meier's Colonization 1.0
    Sonic Express Labeler
    Sonic MyDVD Plus
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    SPORE™ Creature Creator Trial Edition
    Spybot - Search & Destroy
    Symantec AntiVirus
    The Game Of Life
    TmNationsForever
    Total Video Converter 3.14 080930
    Update for Windows Media Player 10 (KB913800)
    Update for Windows Media Player 10 (KB926251)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB967715)
    Updates from HP (remove only)
    USB Storage Driver
    Visual C++ 2008 x86 Runtime - (v9.0.30729)
    Visual C++ 2008 x86 Runtime - v9.0.30729.01
    Winamp
    Windows Media Format 11 runtime
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player 11
    Windows XP Media Center Edition 2005 KB908246
    Windows XP Media Center Edition 2005 KB925766
    Windows XP Service Pack 3



    Thanks

  4. #4
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Use multiple posts to post all of the information so I can see it if needed.

    You are aware you have this item on your computer?
    O18 - Protocol: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} - E:\CDS300\__CDS2.dll (file missing)
    http://www.google.com/search?hl=en&q=CDS300&btnG=Search

    Follow the directions carefully and in the numbered order.

    1) Disable this so it does block out tools >>> Ad-Aware Ad-Watch
    Right click on the Ad-Watch icon in the system tray.
    At the bottom of the screen there will be two checkable items called "Active" and "Automatic".
    Active: This will turn Ad-Watch On\Off without closing it
    Automatic: Suspicious activity will be blocked automatically
    Uncheck both of those boxes.

    2) Please download ATF Cleaner by Atribune
    http://www.atribune.org/public-beta/ATF-Cleaner.exe
    Save it to your Desktop. We will use this later.

    3) Open notepad and copy/paste the text in the codebox below into it:

    Code:
    Registry::
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=-
    Save this as CFScript



    Referring to the picture above, drag CFScript into ComboFix.exe.

    This may start ComboFix again. I do not need to see the log this time.

    4) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

    (you may leave the HP redirects if you use them)
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    O15 - Trusted Zone: http://*.trymedia.com (HKLM)
    O20 - AppInit_DLLs: bzqpfd.dll <<< may be gone

    Close all programs but HJT and all browser windows, then click on "Fix Checked"

    5) Run ATF Cleaner
    Double-click ATF-Cleaner.exe to run the program.
    Click Select All found at the bottom of the list.
    Click the Empty Selected button.
    Click Exit on the Main menu to close the program.

    *Cleaning Prefetch may result in a few slow starts until the folder is repopulated:
    http://www.windowsnetworking.com/art...efetch-XP.html

    (if you still have MBAM, no need to download but make sure you update to version 1840 and run the program as instructed)

    6) Download Malwarebytes' Anti-Malware to your Desktop
    http://www.malwarebytes.org/

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform FULL SCAN, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
    * Please post contents of that file & a new HJT log in your next reply.

    Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

    Tutorial if needed:
    http://www.techsupportteam.org/forum...ware-mbam.html

    How is the computer running now?

    Thanks


    This can be done as time permits, but it is important, and may be why you are infected.
    Uninstall list: I look for malware and security issues and will not know all of your programs, but you should.
    Hackers are using out of date programs to infect folks more and more,
    Here is a small free tool that lets you know when something needs an update if you are interested:
    http://secunia.com/vulnerability_scanning/personal/ While PSI runs in the System Tray for realtime notifications, I personally prefer to turn it off in MSConfig and run it from All Programs when I want to do a check.

    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin

    Adobe recommends all users of Adobe Flash Player 10.0.12.36 and earlier versions upgrade to the newest version 10.0.22.87
    http://www.adobe.com/support/securit...apsb09-01.html

    Adobe Reader 7.0.8 <<< out of date and unsafe, see this:
    http://news.cnet.com/8301-1009_3-100...ml?tag=nl.e433
    http://www.filehippo.com/download_adobe_reader/
    (if you want a smaller program, look at this one)
    Foxit Reader 2.3 for Windows (make sure to uncheck any toolbars)
    http://www.foxitsoftware.com/pdf/rd_intro.php

    J2SE Runtime Environment 5.0 Update 10
    J2SE Runtime Environment 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 5
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) 6 Update 5
    Java(TM) 6 Update 7
    Java(TM) SE Runtime Environment 6 Update 1

    http://forums.spybot.info/showpost.p...80&postcount=2
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

  5. #5
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    I will try to chop the combofix.txt into chunks, but it will probably fill 11-12 posts. (It's 185 pages in MS Word.)

    Section
    1

    ComboFix 09-03-10.03 - HP_Administrator 2009-03-11 21:16:26.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1471 [GMT -4:00]
    Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
    AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated)
    FW: Norton Internet Worm Protection *disabled*
    * Created a new restore point
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\program files\INSTALL.LOG
    c:\windows\IE4 Error Log.txt
    c:\windows\system32\bzqpfd.dll
    c:\windows\system32\gazizisa.dll
    c:\windows\system32\x64

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_uacd.sys


    ((((((((((((((((((((((((( Files Created from 2009-02-12 to 2009-03-12 )))))))))))))))))))))))))))))))
    .

    2009-03-10 22:21 . 2009-03-10 23:16 <DIR> d-------- c:\documents and settings\HP_Administrator\.housecall6.6
    2009-03-10 22:21 . 2009-03-10 22:21 102,664 --a------ c:\windows\system32\drivers\tmcomm.sys
    2009-03-09 23:11 . 2009-03-09 23:11 0 --a------ c:\windows\system32\AAWService_2009_03_09_23_11_40.dmp
    2009-03-09 23:10 . 2009-03-09 23:10 <DIR> d-------- c:\program files\ERUNT
    2009-03-09 21:59 . 2009-03-09 21:47 15,688 --a------ c:\windows\system32\lsdelete.exe
    2009-03-09 21:47 . 2009-03-09 21:47 64,160 --a------ c:\windows\system32\drivers\Lbd.sys
    2009-03-09 21:44 . 2009-03-09 21:44 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
    2009-03-09 21:43 . 2009-03-09 21:43 <DIR> d-------- c:\program files\Lavasoft
    2009-03-08 13:22 . 2009-03-11 21:24 113,902 --a------ c:\windows\system32\drivers\7e10e056.sys
    2009-03-04 22:55 . 2009-03-04 22:49 172,032 --a------ c:\windows\system32\igfxres.dll
    2009-03-04 22:51 . 2009-03-04 22:50 920,088 --a------ c:\windows\system32\igxpun.exe
    2009-03-04 22:51 . 2009-03-04 22:49 319,456 --a------ c:\windows\system32\difxapi.dll
    2009-02-28 00:47 . 2009-02-28 00:47 <DIR> d-------- c:\program files\Common Files\Sandlot Shared
    2009-02-28 00:47 . 2009-02-28 00:47 <DIR> d-------- c:\documents and settings\All Users\Application Data\Sandlot Games
    2009-02-28 00:45 . 2009-02-28 00:45 <DIR> d-------- c:\program files\ReflexiveArcade
    2009-02-26 01:34 . 2009-02-26 01:34 37,423,916 --a------ C:\Dj Moule - Fa Fa Fa Good (I feel good - JB - Taxman - Beatles - Fa-fa-fa - Datarock).wav
    2009-02-26 01:21 . 2009-02-26 01:21 30,367,532 --a------ C:\Party Ben - Single Ladies (In Mayberry).wav
    2009-02-26 00:03 . 2009-02-26 00:03 <DIR> d-------- c:\program files\ConvertHelper
    2009-02-25 22:45 . 2009-02-25 22:45 0 --a------ c:\windows\nsreg.dat
    2009-02-24 18:56 . 2009-01-09 15:19 1,089,593 --------- c:\windows\system32\dllcache\ntprint.cat
    2009-02-21 00:55 . 2009-02-21 00:55 <DIR> d-------- c:\program files\Hasbro Interactive
    2009-02-19 21:35 . 2009-02-19 21:35 <DIR> d-------- c:\program files\IKEA HomePlanner
    2009-02-13 00:10 . 2009-02-13 00:13 <DIR> d-------- C:\New Folder

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-03-12 01:24 --------- d-----w c:\program files\Symantec AntiVirus
    2009-03-10 01:43 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
    2009-03-09 02:27 --------- d-----w c:\program files\Spybot - Search & Destroy
    2009-03-09 01:53 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-03-08 22:41 34 ----a-w c:\documents and settings\HP_Administrator\jagex_runescape_preferences.dat
    2009-03-05 02:49 5,854,752 ----a-w c:\windows\system32\drivers\igxpmp32.sys
    2009-02-26 03:35 --------- d-----w c:\program files\Java
    2009-02-12 02:15 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
    2009-02-11 15:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
    2009-02-11 15:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
    2009-02-08 22:47 --------- d--h--w c:\program files\InstallShield Installation Information
    2009-02-08 22:47 --------- d-----w c:\program files\Windows Plus
    2009-02-08 22:47 --------- d-----w c:\program files\Winamp
    2009-02-08 22:47 --------- d-----w c:\program files\Total Video Converter
    2009-02-08 22:47 --------- d-----w c:\program files\QuickTime
    2009-02-08 22:47 --------- d-----w c:\program files\Hewlett-Packard
    2009-02-08 22:47 --------- d-----w c:\program files\DISC
    2009-02-08 22:47 --------- d-----w c:\program files\Common Files\Motive
    2009-02-08 22:47 --------- d-----w c:\program files\Apple Software Update
    2009-02-08 22:22 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\Audacity
    2009-02-08 22:16 --------- d-----w c:\program files\Audacity 1.3 Beta (Unicode)
    2009-01-30 02:53 --------- d-----w c:\program files\Reference Assemblies
    2009-01-30 02:53 --------- d-----w c:\program files\MSBuild
    2009-01-14 23:58 --------- d-----w c:\program files\FreeRIP2
    2009-01-12 05:08 --------- d-----w c:\documents and settings\All Users\Application Data\Motive
    2006-09-05 01:59 251 ----a-w c:\program files\wt3d.ini
    2006-12-30 19:59 22 --sha-w c:\windows\SMINST\HPCD.sys
    2008-08-04 15:47 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008080420080805\index.dat
    .

    ((((((((((((((((((((((((((((( snapshot@2008-07-20_12.27.05.45 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-05-02 13:42:10 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-07-07 20:23:18 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-12 04:22:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:31 755,576 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:45:15 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:45:16 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:45:16 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:45:16 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:45:17 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 14:38:05 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:53:10 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2008-06-23 16:01:38 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 16:01:38 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 16:01:39 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 16:01:39 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 16:01:39 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 16:01:39 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 16:01:39 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 16:01:40 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 16:01:40 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 16:01:43 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 16:01:43 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 16:01:44 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 16:01:46 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 16:01:46 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 16:01:46 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 16:01:49 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 16:01:49 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 16:01:49 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 16:01:50 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 16:01:50 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 16:01:50 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 16:01:50 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 16:01:51 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 16:01:51 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 16:01:51 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 12:25:27 1,846,912 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-09-10 01:10:56 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
    + 2008-10-03 09:49:31 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
    + 2008-09-04 17:12:27 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
    + 2008-07-09 18:08:38 382,840 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
    + 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
    + 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:08:36 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:08:36 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:08:36 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:08:36 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:08:36 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:08:36 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:28:12 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:08:36 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:08:37 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 17:26:50 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:08:39 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:08:39 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:08:40 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:08:40 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:08:40 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:08:43 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:08:43 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:08:44 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:08:44 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:08:44 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:08:44 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:08:44 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:08:45 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:08:45 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:08:45 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-10-23 12:43:42 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
    + 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
    + 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
    + 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 10:39:28 2,145,280 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 19:39:46 2,066,048 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 10:09:44 2,023,936 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 20:11:10 2,189,184 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
    + 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
    + 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
    + 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
    + 2008-07-08 13:02:04 755,576 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
    + 2008-07-08 13:02:12 382,840 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
    + 2008-10-16 20:24:09 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
    + 2008-10-16 20:24:09 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
    + 2008-10-16 20:24:09 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
    + 2008-10-16 20:24:09 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
    + 2008-10-16 20:24:09 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
    + 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
    + 2008-10-16 20:24:09 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
    + 2008-10-16 20:24:09 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
    + 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
    + 2008-10-16 20:24:09 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
    + 2008-10-16 20:24:09 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-16 20:24:09 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
    + 2008-10-16 20:24:09 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
    + 2008-10-16 20:24:09 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
    + 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
    + 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
    + 2008-10-16 20:24:10 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
    + 2008-10-16 20:24:10 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
    + 2008-10-16 20:24:10 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
    + 2008-10-16 20:24:10 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
    + 2008-10-16 20:24:10 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
    + 2008-10-16 20:24:10 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
    + 2008-10-16 20:24:10 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
    + 2008-10-16 20:24:10 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
    + 2008-10-16 20:24:10 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
    + 2008-10-16 20:24:10 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
    + 2008-10-16 20:24:11 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
    + 2008-10-16 20:24:11 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
    + 2008-10-16 20:24:11 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
    + 2008-10-15 16:25:53 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
    + 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
    + 2008-12-13 06:26:56 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
    + 2008-07-09 07:38:24 17,272 ----a-w c:\windows\$hf_mig$\KB960715\spmsg.dll
    + 2008-07-09 07:38:25 231,288 ----a-w c:\windows\$hf_mig$\KB960715\spuninst.exe
    + 2008-07-09 07:38:24 26,488 ----a-w c:\windows\$hf_mig$\KB960715\update\spcustom.dll
    + 2008-11-15 17:18:04 755,576 ----a-w c:\windows\$hf_mig$\KB960715\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB960715\update\updspapi.dll
    + 2008-12-20 23:55:43 124,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\advpack.dll
    + 2008-12-20 23:55:44 347,136 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtmsft.dll
    + 2008-12-20 23:55:44 214,528 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtrans.dll
    + 2008-12-20 23:55:44 132,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\extmgr.dll
    + 2008-12-20 23:55:45 63,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\icardie.dll
    + 2008-12-19 09:41:51 70,656 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe
    + 2008-12-20 23:55:45 153,088 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakeng.dll
    + 2008-12-20 23:55:45 230,400 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieaksie.dll
    + 2008-12-19 05:24:02 161,792 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dat
    + 2008-12-20 23:55:46 380,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dll
    + 2008-12-20 23:55:46 388,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iedkcs32.dll
    + 2008-12-20 23:55:50 6,068,736 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieframe.dll
    + 2008-12-20 23:55:50 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iernonce.dll
    + 2008-12-20 23:55:50 267,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iertutil.dll
    + 2008-12-19 09:41:52 13,824 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe
    + 2008-12-19 05:25:30 634,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
    + 2008-12-20 23:55:51 27,648 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\jsproxy.dll
    + 2008-12-20 23:55:51 459,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeeds.dll
    + 2008-12-20 23:55:51 52,224 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeedsbs.dll
    + 2009-01-16 16:24:38 3,596,288 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
    + 2008-12-20 23:55:56 477,696 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtmled.dll
    + 2008-12-20 23:55:56 193,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msrating.dll
    + 2008-12-20 23:55:57 671,232 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mstime.dll
    + 2008-12-20 23:55:57 102,912 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\occache.dll
    + 2008-12-20 23:55:57 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\pngfilt.dll
    + 2008-12-20 23:55:57 105,984 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\url.dll
    + 2008-12-20 23:55:59 1,163,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll
    + 2008-12-20 23:55:59 233,472 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\webcheck.dll
    + 2008-12-20 23:56:00 827,904 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\updspapi.dll
    + 2004-08-10 04:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
    + 2006-08-16 11:58:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-10 04:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-10 04:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-10 04:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-10 04:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-10 04:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-10 04:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-10 04:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-10 04:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-10 04:00:00 187,776 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-10 04:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-10 04:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-10 04:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-10 04:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-10 04:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-10 04:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2004-08-10 04:00:00 29,696 -c----w c:\windows\$NtServicePackUninstall$\admexs.dll
    + 2003-03-24 22:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
    + 2003-03-24 22:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
    + 2004-08-10 04:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\admwprox.dll
    + 2004-08-10 04:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\adsiis51.dll
    + 2004-08-10 04:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-10 04:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-10 04:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-10 04:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-10 04:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
    + 2004-08-10 04:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-10 04:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-10 04:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 13:54:18 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 13:58:57 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-10 04:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-10 04:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-10 04:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0401.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0404.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-10 04:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-10 04:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-10 04:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040d.dll
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0411.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0412.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0804.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-10 04:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-10 04:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-10 04:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-10 04:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-10 11:00:00 36,992 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-10 11:00:00 37,376 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-10 04:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-10 04:00:00 108,544 -c----w c:\windows\$NtServicePackUninstall$\appconf.dll
    + 2004-08-10 04:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-10 04:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
    + 2004-08-10 04:00:00 295,936 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
    + 2004-08-10 04:00:00 331,264 -c----w c:\windows\$NtServicePackUninstall$\aqueue.dll
    + 2004-08-10 11:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2004-08-10 04:00:00 369,664 -c----w c:\windows\$NtServicePackUninstall$\asp51.dll
    + 2002-06-21 23:31:20 20,480 -c----w c:\windows\$NtServicePackUninstall$\aspnet_filter.dll
    + 2007-01-02 20:34:04 200,704 -c----w c:\windows\$NtServicePackUninstall$\aspnet_isapi.dll
    + 2004-08-04 04:11:06 24,576 -c----w c:\windows\$NtServicePackUninstall$\aspnet_regiis.exe
    + 2002-06-21 23:31:22 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_state.exe
    + 2007-01-02 20:34:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_wp.exe
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
    + 2004-08-10 04:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-04 12:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-10 04:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-10 04:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-10 04:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-10 04:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-10 04:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2003-03-24 22:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
    + 2003-03-24 22:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
    + 2005-03-02 18:09:29 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-10 11:00:00 588,800 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-10 04:00:00 602,624 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-10 11:00:00 580,608 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-10 04:00:00 84,992 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-10 04:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-10 04:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-10 04:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-10 04:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-10 04:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
    + 2004-08-10 04:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-10 04:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-10 04:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2006-09-14 08:31:26 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-10 04:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-10 04:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-10 04:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\c_g18030.dll
    + 2004-08-10 11:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-10 04:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-10 04:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-10 04:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-10 04:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-10 04:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 11:39:42 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-10 04:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 11:39:43 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-10 04:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2006-09-14 08:31:26 151,040 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:53:41 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-10 04:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-10 04:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-10 04:00:00 457,728 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-10 04:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2003-03-24 22:52:04 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-10 04:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-10 04:00:00 1,352,192 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:06:29 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-10 04:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
    + 2004-08-10 04:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-10 04:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 11:39:43 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 11:39:43 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-10 04:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-10 04:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-10 04:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-10 04:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-10 04:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-10 04:00:00 388,608 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-10 11:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
    + 2004-08-10 04:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-10 04:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-10 04:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-10 04:00:00 185,344 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-10 04:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-10 04:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-10 04:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-10 11:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2004-08-10 04:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\coadmin.dll
    + 2005-07-26 11:39:43 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-10 04:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 11:39:44 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:45:58 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-10 04:00:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-10 04:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-10 04:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\compfilt.dll
    + 2004-08-10 04:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 11:39:44 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2004-08-10 04:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-10 04:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-10 04:00:00 792,064 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-10 04:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-10 04:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 11:39:44 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 11:39:45 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-10 04:00:00 1,032,192 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-10 04:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-10 04:00:00 345,600 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-10 04:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2007-01-09 00:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-10 04:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-10 11:00:00 36,480 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-10 04:00:00 597,504 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-10 04:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-10 04:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-10 04:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-10 04:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-10 04:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-10 04:00:00 512,512 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-10 04:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-10 04:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-10 04:00:00 326,656 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-10 04:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2006-06-03 11:40:49 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-10 04:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-10 04:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-10 04:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2006-09-14 08:31:26 1,054,208 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-10 04:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-10 04:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-10 04:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\davcdata.exe
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-10 11:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-10 04:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-10 04:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-10 04:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-10 04:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-10 04:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-10 04:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-10 04:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-10 04:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-10 04:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-10 04:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-10 04:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-10 04:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-10 04:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-10 04:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 12:59:41 111,616 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-10 04:00:00 370,176 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-10 04:00:00 539,136 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-10 04:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-10 04:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-10 04:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-10 04:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:12:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-10 04:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-10 04:00:00 1,501,696 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-10 04:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-10 04:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-10 04:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-10 04:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-10 04:00:00 224,768 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-10 04:00:00 799,744 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-10 04:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-10 04:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-10 04:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-10 04:00:00 153,344 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-10 04:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-10 04:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-10 04:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-10 04:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-10 04:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 13:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-10 11:00:00 52,224 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:10 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:32:43 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-10 04:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-10 04:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-10 04:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-10 04:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-10 04:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-10 04:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-10 04:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-10 04:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-10 04:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-10 04:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-10 04:00:00 212,480 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-10 04:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-10 04:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-10 11:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
    + 2004-08-04 13:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 13:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-10 04:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\drvqry.exe
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-10 04:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-10 04:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-10 04:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-10 04:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    + 2004-08-10 04:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-10 04:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-10 04:00:00 142,336 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-10 04:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-10 04:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-10 04:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-10 04:00:00 113,152 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-10 04:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-10 04:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-10 04:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-10 04:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-10 04:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-10 04:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-10 04:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-10 04:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-10 04:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2006-08-22 09:05:26 498,742 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2006-08-22 02:54:14 2,678 -c----w c:\windows\$NtServicePackUninstall$\e0sn3pnj.dat
    + 2004-08-10 04:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
    + 2004-08-10 04:00:00 183,296 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-10 04:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2005-07-26 11:39:45 243,200 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2005-10-20 22:20:03 1,082,368 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2004-08-10 04:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-10 04:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-10 04:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\evcreate.exe
    + 2004-08-10 11:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
    + 2004-08-10 04:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-10 11:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
    + 2004-08-10 04:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\evntagnt.dll
    + 2004-08-10 04:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\evntcmd.exe
    + 2004-08-10 04:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2004-08-10 04:00:00 92,160 -c----w c:\windows\$NtServicePackUninstall$\evntwin.exe
    + 2004-08-10 04:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\evtgprov.dll
    + 2004-08-10 04:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
    + 2007-06-13 10:23:07 1,033,216 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2004-08-10 04:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\exstrace.dll
    + 2004-08-10 04:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-10 11:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\f3ahvoas.dll
    + 2004-08-10 04:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-10 04:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-10 04:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-10 04:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-10 04:00:00 117,760 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
    + 2004-08-10 04:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
    + 2004-08-10 04:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-10 04:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-10 04:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-10 04:00:00 34,944 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    + 2004-08-10 04:00:00 87,552 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:21:06 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    + 2006-08-22 02:54:13 2,678 -c----w c:\windows\$NtServicePackUninstall$\fn5jzzjf.dat
    + 2004-08-10 04:00:00 382,976 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-18 04:14:45 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2004-08-10 04:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    + 2004-08-10 04:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2004-05-13 06:39:48 184,435 -c----w c:\windows\$NtServicePackUninstall$\fp4amsft.dll
    + 2003-03-24 22:52:04 82,035 -c----w c:\windows\$NtServicePackUninstall$\fp4anscp.dll
    + 2003-03-24 22:52:04 147,513 -c----w c:\windows\$NtServicePackUninstall$\fp4apws.dll
    + 2003-03-24 22:52:04 49,210 -c----w c:\windows\$NtServicePackUninstall$\fp4areg.dll
    + 2003-03-24 22:52:04 102,509 -c----w c:\windows\$NtServicePackUninstall$\fp4atxt.dll
    + 2003-03-24 22:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2003-03-24 22:52:04 41,020 -c----w c:\windows\$NtServicePackUninstall$\fp4avnb.dll
    + 2003-03-24 22:52:04 32,826 -c----w c:\windows\$NtServicePackUninstall$\fp4avss.dll
    + 2003-03-24 22:52:04 49,212 -c----w c:\windows\$NtServicePackUninstall$\fp4awebs.dll
    + 2004-05-13 06:39:48 876,653 -c----w c:\windows\$NtServicePackUninstall$\fp4awel.dll
    + 2003-03-24 22:52:04 14,608 -c----w c:\windows\$NtServicePackUninstall$\fp98sadm.exe
    + 2003-03-24 22:52:04 109,328 -c----w c:\windows\$NtServicePackUninstall$\fp98swin.exe
    + 2003-03-24 22:52:04 24,632 -c----w c:\windows\$NtServicePackUninstall$\fpadmcgi.exe+ 2003-03-24 22:52:04 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpadmdll.dll
    + 2003-03-24 22:52:04 188,494 -c----w c:\windows\$NtServicePackUninstall$\fpcount.exe
    + 2003-03-24 22:52:04 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
    + 2003-03-24 22:52:04 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpexedll.dll
    + 2004-05-13 06:39:48 598,071 -c----w c:\windows\$NtServicePackUninstall$\fpmmc.dll
    + 2003-03-24 22:52:06 208,896 -c----w c:\windows\$NtServicePackUninstall$\fpmmcsat.dll
    + 2003-03-24 22:52:04 20,538 -c----w c:\windows\$NtServicePackUninstall$\fpremadm.exe

  6. #6
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 2

    + 2004-08-10 04:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-10 04:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-10 04:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    + 2004-08-10 04:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\ftpmib.dll
    + 2004-08-10 04:00:00 125,952 -c----w c:\windows\$NtServicePackUninstall$\ftpsv251.dll
    + 2004-08-10 04:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    + 2004-08-10 04:00:00 452,096 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
    + 2004-08-10 04:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
    + 2004-08-10 04:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
    + 2004-08-10 04:00:00 285,184 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
    + 2004-08-10 04:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
    + 2004-08-10 04:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
    + 2004-08-10 04:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
    + 2004-08-10 04:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2004-08-10 04:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
    + 2004-08-10 04:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
    + 2004-08-10 04:00:00 267,776 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
    + 2004-08-10 04:00:00 246,272 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
    + 2004-08-10 04:00:00 397,312 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
    + 2004-08-10 04:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
    + 2004-08-10 04:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
    + 2004-08-10 04:00:00 400,384 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-09-29 22:04:48 61,440 -c----w c:\windows\$NtServicePackUninstall$\gacutil.exe
    + 2008-02-20 06:51:05 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2004-08-10 04:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
    + 2004-08-10 04:00:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-10 04:00:00 566,784 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
    + 2004-08-10 04:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-10 11:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
    + 2004-08-10 04:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
    + 2004-08-10 04:00:00 198,656 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
    + 2004-08-10 04:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2006-08-22 02:54:16 2,678 -c----w c:\windows\$NtServicePackUninstall$\gtzpn9fn.dat
    + 2004-08-10 04:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-10 04:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\gzip.dll
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-10 04:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2004-08-10 11:00:00 134,400 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2006-08-19 04:55:07 2,232 -c----w c:\windows\$NtServicePackUninstall$\hbdvbr7r.dat
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2005-01-08 07:07:18 138,752 -c----w c:\windows\$NtServicePackUninstall$\hdaudbus.sys
    + 2004-08-10 04:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    + 2004-08-10 04:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-10 04:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2005-05-27 06:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-27 09:04:27 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2004-08-10 11:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-10 04:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2006-01-11 07:48:53 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
    + 2006-01-11 07:48:53 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys.000
    + 2004-08-10 04:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2006-07-21 08:24:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    + 2004-08-10 04:00:00 344,064 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-10 04:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-10 04:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\hostmib.dll
    + 2004-08-10 04:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    + 2004-08-10 04:00:00 268,288 -c----w c:\windows\$NtServicePackUninstall$\httpext.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\httpmb51.dll
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\httpod51.dll
    + 2004-08-10 04:00:00 41,984 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-11-18 00:41:24 347,136 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-04 03:14:38 52,736 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-10 04:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-10 04:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2005-06-29 08:46:00 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2004-08-10 04:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-10 04:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-10 04:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-10 04:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-10 04:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-10 04:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-10 04:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2006-10-17 17:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    + 2004-08-10 04:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-10 04:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-10 04:00:00 505,344 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\iisadmin.dll
    + 2004-08-10 04:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\iische51.dll
    + 2004-08-10 04:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\iisext51.dll
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\iisfecnv.dll
    + 2004-08-10 04:00:00 79,872 -c----w c:\windows\$NtServicePackUninstall$\iislog51.dll
    + 2004-08-10 04:00:00 64,512 -c----w c:\windows\$NtServicePackUninstall$\iismap.dll
    + 2004-08-10 04:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\iisrstas.exe
    + 2004-08-10 04:00:00 133,632 -c----w c:\windows\$NtServicePackUninstall$\iisrtl.dll
    + 2004-08-10 04:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-10 11:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-10 04:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-10 04:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-10 04:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-10 04:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-10 04:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2004-08-10 04:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2007-08-21 06:15:44 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetin51.exe
    + 2004-08-10 04:00:00 829,440 -c----w c:\windows\$NtServicePackUninstall$\inetmgr.dll
    + 2004-08-10 04:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-10 04:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-10 04:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\infoadmn.dll
    + 2004-08-10 04:00:00 257,024 -c----w c:\windows\$NtServicePackUninstall$\infocomm.dll
    + 2004-08-10 04:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-10 04:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-04 12:59:42 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-04 12:59:20 36,096 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-10 04:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    + 2004-08-10 04:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2006-05-19 12:59:41 94,720 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-10 04:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-08-10 04:00:00 331,264 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-10 04:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-10 04:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\iprip.dll
    + 2004-08-10 04:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    + 2004-08-10 04:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-10 04:00:00 349,696 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-10 04:00:00 182,784 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-10 04:00:00 384,000 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-10 04:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-10 04:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 2004-08-10 04:00:00 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 2004-08-10 04:00:00 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 2004-08-10 04:00:00 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
    + 2004-08-10 04:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 2004-08-10 04:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2006-01-11 07:48:58 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys
    + 2006-01-11 07:48:58 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys.000
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2001-08-18 03:58:02 35,840 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    + 2004-08-10 04:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\isatq.dll
    + 2004-08-10 04:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\iscomlog.dll
    + 2004-08-10 04:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2005-05-27 09:04:27 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 09:04:27 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-10 04:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-10 11:00:00 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:47:07 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:47:07 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    + 2006-10-17 17:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd101.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd106n.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdax2.dll
    + 2004-08-04 02:58:34 24,576 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdibm02.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41a.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41j.dll
    + 2004-08-10 04:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
    + 2004-08-10 11:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-10 04:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-10 04:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsno.dll
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdukx.dll
    + 2004-08-10 04:00:00 7,424 -c----w c:\windows\$NtServicePackUninstall$\kd1394.dll
    + 2005-06-15 17:49:30 295,936 -c----w c:\windows\$NtServicePackUninstall$\kerberos.dll
    + 2007-04-16 15:52:53 984,576 -c----w c:\windows\$NtServicePackUninstall$\kernel32.dll
    + 2004-08-10 04:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys.000
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
    + 2004-08-04 13:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
    + 2004-08-10 11:00:00 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
    + 2004-08-04 14:56:44 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-10 04:00:00 423,936 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
    + 2004-08-10 04:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
    + 2005-09-01 01:41:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
    + 2004-08-10 04:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
    + 2004-08-10 04:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
    + 2004-08-10 04:00:00 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
    + 2004-08-10 04:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
    + 2004-08-10 04:00:00 221,696 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
    + 2004-08-10 04:00:00 341,504 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
    + 2004-08-10 04:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
    + 2004-08-10 04:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
    + 2004-08-10 04:00:00 59,392 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
    + 2004-08-10 04:00:00 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
    + 2004-08-10 04:00:00 514,560 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\lonsint.dll
    + 2004-08-10 04:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
    + 2004-08-10 04:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
    + 2004-08-10 04:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
    + 2006-08-22 02:54:14 2,678 -c----w c:\windows\$NtServicePackUninstall$\lr37ln17.dat
    + 2007-11-07 09:26:56 721,920 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
    + 2004-08-10 04:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
    + 2004-08-10 04:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
    + 2004-08-10 04:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
    + 2004-08-10 04:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
    + 2004-08-10 04:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
    + 2004-08-10 04:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
    + 2004-08-10 04:00:00 37,888 -c----w c:\windows\$NtServicePackUninstall$\md5filt.dll
    + 2004-08-10 04:00:00 118,272 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-10 04:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\metada51.dll
    + 2004-08-10 11:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
    + 2007-03-08 15:36:28 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
    + 2006-11-01 19:17:45 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
    + 2004-08-10 04:00:00 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
    + 2004-08-10 04:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
    + 2004-08-10 04:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
    + 2004-08-10 04:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
    + 2004-08-10 04:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
    + 2004-08-10 04:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
    + 2005-07-26 06:46:57 7,680 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
    + 2004-08-10 04:00:00 240,128 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
    + 2004-08-10 04:00:00 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
    + 2004-08-10 04:00:00 815,104 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
    + 2004-08-10 04:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
    + 2004-08-10 04:00:00 1,192,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
    + 2004-08-10 04:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
    + 2004-08-10 04:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
    + 2004-08-10 04:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
    + 2004-08-10 04:00:00 207,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
    + 2004-08-10 04:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
    + 2004-08-10 11:00:00 30,080 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
    + 2004-08-10 04:00:00 153,600 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
    + 2004-08-10 04:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
    + 2004-08-10 04:00:00 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
    + 2004-08-10 11:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
    + 2004-08-10 04:00:00 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
    + 2004-08-10 04:00:00 3,555,328 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
    + 2004-08-10 04:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
    + 2004-08-10 04:00:00 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
    + 2004-08-10 04:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
    + 2004-08-10 04:00:00 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
    + 2004-08-10 04:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
    + 2007-07-06 10:05:47 72,960 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
    + 2007-07-06 12:46:59 138,240 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
    + 2007-07-06 12:46:59 47,104 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
    + 2007-07-06 12:46:59 16,896 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
    + 2004-08-10 04:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
    + 2004-08-10 04:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
    + 2007-07-06 12:46:59 660,992 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
    + 2007-07-06 12:46:59 177,152 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
    + 2004-08-10 04:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
    + 2007-07-06 12:46:59 95,744 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
    + 2004-08-10 04:00:00 517,632 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
    + 2004-08-10 04:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
    + 2004-08-10 04:00:00 117,248 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
    + 2004-08-10 04:00:00 186,880 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
    + 2007-07-06 12:46:59 48,640 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
    + 2007-07-06 12:46:59 471,552 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
    + 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.000
    + 2004-08-10 04:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
    + 2004-08-10 04:00:00 331,776 -c----w c:\windows\$NtServicePackUninstall$\msadce.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
    + 2006-03-23 05:44:21 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
    + 2004-08-10 04:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
    + 2004-08-10 04:00:00 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
    + 2006-12-26 13:07:23 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
    + 2006-12-26 13:07:23 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
    + 2006-12-26 13:07:23 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
    + 2004-08-10 04:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
    + 2004-08-10 04:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
    + 2004-08-10 04:00:00 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
    + 2005-06-29 08:46:00 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
    + 2004-08-10 04:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
    + 2005-09-27 07:34:26 169,984 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
    + 2007-01-02 20:28:28 2,273,280 -c----w c:\windows\$NtServicePackUninstall$\mscorsvr.dll
    + 2007-01-02 20:28:46 2,281,472 -c----w c:\windows\$NtServicePackUninstall$\mscorwks.dll
    + 2004-08-10 04:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
    + 2004-08-10 04:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
    + 2008-02-26 11:59:50 294,912 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
    + 2004-08-10 04:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-10 04:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
    + 2004-08-10 04:00:00 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
    + 2004-08-10 04:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
    + 2004-08-10 04:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
    + 2004-08-10 04:00:00 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
    + 2004-08-10 04:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
    + 2004-08-10 04:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
    + 2004-08-10 04:00:00 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
    + 2004-08-10 04:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
    + 2004-08-10 04:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
    + 2004-08-10 04:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
    + 2006-03-01 19:42:42 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
    + 2004-08-10 04:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
    + 2006-03-01 19:42:42 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
    + 2006-03-01 19:42:42 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
    + 2004-08-10 04:00:00 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
    + 2004-08-10 04:00:00 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
    + 2006-11-27 14:54:06 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
    + 2004-08-10 04:00:00 994,304 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
    + 2004-08-10 04:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
    + 2004-08-10 04:00:00 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
    + 2004-08-10 04:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
    + 2004-08-04 07:06:34 82,944 -c----w c:\windows\$NtServicePackUninstall$\msgsc.dll
    + 2004-08-04 07:06:34 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
    + 2004-08-10 04:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-10 04:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
    + 2004-08-10 11:00:00 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
    + 2007-04-18 16:12:23 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
    + 2004-08-10 04:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
    + 2004-08-10 04:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
    + 2005-05-04 02:58:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
    + 2005-05-04 02:58:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
    + 2004-08-10 04:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
    + 2004-08-10 04:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
    + 2005-05-04 02:58:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
    + 2004-08-10 04:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
    + 2004-08-10 04:00:00 376,320 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
    + 2004-08-10 04:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
    + 2005-05-04 02:58:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
    + 2008-03-27 08:12:54 151,583 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
    + 2006-12-26 13:07:23 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
    + 2004-08-04 12:58:42 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
    + 2004-08-10 04:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
    + 2004-08-10 04:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
    + 2004-10-13 23:24:37 1,694,208 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
    + 2004-08-10 04:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
    + 2004-08-10 04:00:00 122,368 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
    + 2004-08-10 04:00:00 561,664 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
    + 2004-08-10 04:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
    + 2007-05-16 15:12:08 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
    + 2004-08-10 04:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
    + 2004-08-10 04:00:00 2,479,616 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
    + 2004-08-10 04:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
    + 2004-08-10 04:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
    + 2004-08-10 04:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
    + 2004-08-10 04:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
    + 2004-08-04 12:58:40 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
    + 2004-08-04 12:58:42 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
    + 2004-08-10 04:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
    + 2004-08-10 04:00:00 134,656 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
    + 2004-08-10 11:00:00 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
    + 2004-08-10 04:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
    + 2004-08-10 04:00:00 274,944 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
    + 2004-08-10 04:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
    + 2004-08-10 04:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
    + 2004-08-10 04:00:00 407,552 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
    + 2004-08-10 04:00:00 655,360 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
    + 2004-08-10 04:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
    + 2004-08-10 04:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
    + 2004-02-24 03:42:40 1,386,496 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
    + 2004-08-10 04:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
    + 2004-08-10 04:00:00 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
    + 2004-08-10 04:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
    + 2004-08-10 04:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
    + 2004-08-10 04:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
    + 2004-08-10 04:00:00 204,288 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
    + 2008-06-20 17:41:10 245,248 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
    + 2004-08-10 04:00:00 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
    + 2004-08-10 04:00:00 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
    + 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
    + 2004-08-10 11:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
    + 2006-03-01 19:42:42 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
    + 2006-03-01 19:42:42 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
    + 2004-08-10 04:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
    + 2004-08-10 04:00:00 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
    + 2004-08-10 04:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-10 04:00:00 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
    + 2004-08-10 04:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
    + 2004-08-10 04:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
    + 2004-08-10 04:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-10 04:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
    + 2004-08-10 04:00:00 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
    + 2004-08-10 04:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
    + 2004-08-10 04:00:00 9,600 -c----w c:\windows\$NtServicePackUninstall$\ndistapi.sys
    + 2005-06-21 08:52:55 14,592 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
    + 2005-06-21 08:52:55 14,592 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys.000
    + 2004-08-10 04:00:00 91,776 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
    + 2004-08-10 04:00:00 38,016 -c----w c:\windows\$NtServicePackUninstall$\ndproxy.sys
    + 2004-08-10 04:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\net.exe
    + 2004-08-10 04:00:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
    + 2006-08-17 12:28:27 332,288 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
    + 2004-08-10 04:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
    + 2004-08-10 04:00:00 162,816 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
    + 2004-08-10 04:00:00 622,080 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
    + 2004-08-10 04:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
    + 2007-01-15 20:11:26 73,728 -c----w c:\windows\$NtServicePackUninstall$\netfxupdate.exe
    + 2004-08-10 04:00:00 139,264 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
    + 2004-08-10 04:00:00 407,040 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
    + 2005-08-22 18:29:46 197,632 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
    + 2004-08-10 04:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
    + 2004-08-10 04:00:00 875,008 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
    + 2004-08-10 04:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
    + 2004-08-10 11:00:00 329,728 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
    + 2004-08-10 04:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
    + 2005-06-22 05:00:18 1,705,472 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
    + 2004-08-10 04:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
    + 2004-08-10 04:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
    + 2004-08-10 04:00:00 245,760 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
    + 2004-08-13 00:50:01 247,808 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
    + 2004-08-10 11:00:00 61,824 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
    + 2004-08-10 04:00:00 103,936 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
    + 2004-08-10 04:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
    + 2004-08-10 04:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
    + 2004-08-10 04:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
    + 2004-08-10 04:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
    + 2004-08-10 04:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
    + 2004-08-10 04:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
    + 2004-08-10 04:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
    + 2004-08-10 04:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
    + 2004-08-10 04:00:00 226,816 -c----w c:\windows\$NtServicePackUninstall$\npdrmv2.dll
    + 2004-08-10 04:00:00 364,544 -c----w c:\windows\$NtServicePackUninstall$\npdsplay.dll
    + 2004-08-10 04:00:00 30,848 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
    + 2004-08-10 04:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
    + 2004-08-10 04:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
    + 2004-08-10 04:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\npwmsdrm.dll
    + 2004-08-10 04:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\nsepm.dll
    + 2004-08-10 04:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
    + 2004-08-10 04:00:00 1,200,128 -c----w c:\windows\$NtServicePackUninstall$\ntbackup.exe
    + 2004-08-10 11:00:00 708,096 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
    + 2004-08-10 04:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
    + 2004-08-10 04:00:00 212,992 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
    + 2007-02-09 11:10:35 574,464 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe.000
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe.000
    + 2004-08-10 04:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
    + 2004-08-10 04:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
    + 2004-08-10 04:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
    + 2004-08-10 04:00:00 179,712 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
    + 2004-08-10 04:00:00 488,448 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
    + 2004-08-10 04:00:00 435,200 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    + 2004-08-10 04:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    + 2004-08-10 04:00:00 91,136 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
    + 2004-08-10 04:00:00 143,872 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
    + 2004-08-10 04:00:00 419,840 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\ntvdmd.dll
    + 2006-10-13 12:35:12 64,000 -c----w c:\windows\$NtServicePackUninstall$\nwapi32.dll
    + 2004-08-10 04:00:00 88,448 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
    + 2006-10-13 12:35:12 142,336 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
    + 2006-10-13 10:23:15 163,584 -c----w c:\windows\$NtServicePackUninstall$\nwrdr.sys
    + 2006-10-13 12:35:12 65,536 -c----w c:\windows\$NtServicePackUninstall$\nwwks.dll
    + 2004-08-10 04:00:00 266,752 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
    + 2004-08-10 04:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\obelog.dll
    + 2004-08-10 04:00:00 966,656 -c----w c:\windows\$NtServicePackUninstall$\obemetal.dll
    + 2004-08-10 04:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\obemtllc.dll
    + 2004-08-10 04:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\obepopc.dll
    + 2004-08-10 04:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
    + 2004-08-10 04:00:00 393,728 -c----w c:\windows\$NtServicePackUninstall$\obrb0401.dll
    + 2004-08-10 04:00:00 212,480 -c----w c:\windows\$NtServicePackUninstall$\obrb0404.dll
    + 2004-08-10 04:00:00 428,032 -c----w c:\windows\$NtServicePackUninstall$\obrb0405.dll
    + 2004-08-10 04:00:00 418,816 -c----w c:\windows\$NtServicePackUninstall$\obrb0406.dll
    + 2004-08-10 04:00:00 403,456 -c----w c:\windows\$NtServicePackUninstall$\obrb0407.dll
    + 2004-08-10 04:00:00 419,328 -c----w c:\windows\$NtServicePackUninstall$\obrb0408.dll
    + 2004-08-10 04:00:00 405,504 -c----w c:\windows\$NtServicePackUninstall$\obrb040b.dll
    + 2004-08-10 04:00:00 410,624 -c----w c:\windows\$NtServicePackUninstall$\obrb040c.dll
    + 2004-08-10 04:00:00 384,000 -c----w c:\windows\$NtServicePackUninstall$\obrb040d.dll
    + 2004-08-10 04:00:00 434,176 -c----w c:\windows\$NtServicePackUninstall$\obrb040e.dll
    + 2004-08-10 04:00:00 413,696 -c----w c:\windows\$NtServicePackUninstall$\obrb0410.dll
    + 2004-08-10 04:00:00 275,456 -c----w c:\windows\$NtServicePackUninstall$\obrb0411.dll
    + 2004-08-10 04:00:00 306,688 -c----w c:\windows\$NtServicePackUninstall$\obrb0412.dll
    + 2004-08-10 04:00:00 401,920 -c----w c:\windows\$NtServicePackUninstall$\obrb0413.dll
    + 2004-08-10 04:00:00 353,792 -c----w c:\windows\$NtServicePackUninstall$\obrb0414.dll
    + 2004-08-10 04:00:00 391,680 -c----w c:\windows\$NtServicePackUninstall$\obrb0415.dll
    + 2004-08-10 04:00:00 409,600 -c----w c:\windows\$NtServicePackUninstall$\obrb0416.dll
    + 2004-08-10 04:00:00 427,008 -c----w c:\windows\$NtServicePackUninstall$\obrb0419.dll
    + 2004-08-10 04:00:00 405,504 -c----w c:\windows\$NtServicePackUninstall$\obrb041b.dll
    + 2004-08-10 04:00:00 363,520 -c----w c:\windows\$NtServicePackUninstall$\obrb041d.dll
    + 2004-08-10 04:00:00 390,144 -c----w c:\windows\$NtServicePackUninstall$\obrb041f.dll
    + 2004-08-10 04:00:00 408,576 -c----w c:\windows\$NtServicePackUninstall$\obrb0424.dll
    + 2004-08-10 04:00:00 270,336 -c----w c:\windows\$NtServicePackUninstall$\obrb0804.dll
    + 2004-08-10 04:00:00 435,200 -c----w c:\windows\$NtServicePackUninstall$\obrb0816.dll
    + 2004-08-10 04:00:00 446,464 -c----w c:\windows\$NtServicePackUninstall$\obrb0c0a.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
    + 2004-08-10 04:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\ocmanage.dll
    + 2004-08-10 04:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
    + 2004-08-10 04:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
    + 2004-08-10 04:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
    + 2004-08-10 04:00:00 135,168 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
    + 2004-08-10 04:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
    + 2004-08-10 04:00:00 106,496 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
    + 2004-08-10 04:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
    + 2004-08-10 04:00:00 53,279 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
    + 2004-08-10 04:00:00 278,559 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
    + 2004-08-10 04:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
    + 2004-08-10 04:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
    + 2004-08-10 04:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
    + 2004-08-10 04:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
    + 2004-08-10 04:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
    + 2004-08-10 04:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
    + 2004-08-10 04:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
    + 2004-08-10 04:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
    + 2004-08-10 04:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
    + 2004-08-10 04:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
    + 2004-08-10 04:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
    + 2004-08-10 04:00:00 61,056 -c----w c:\windows\$NtServicePackUninstall$\ohci1394.sys
    + 2005-07-26 11:39:48 1,285,120 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
    + 2007-12-04 18:38:13 550,912 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
    + 2005-07-26 11:39:48 74,752 -c----w c:\windows\$NtServicePackUninstall$\olecli32.dll
    + 2005-07-26 11:39:49 37,888 -c----w c:\windows\$NtServicePackUninstall$\olecnv32.dll
    + 2004-08-10 04:00:00 487,424 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
    + 2006-10-16 16:15:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\oledlg.dll
    + 2004-08-10 04:00:00 107,008 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
    + 2004-08-10 04:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
    + 2004-08-10 04:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
    + 2004-08-10 11:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\openfiles.exe
    + 2004-08-10 04:00:00 713,728 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-10 04:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\opnfiles.exe
    + 2004-08-10 04:00:00 215,552 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
    + 2004-08-10 04:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-10 04:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\p2p.dll
    + 2004-08-10 04:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\p2pgasvc.dll
    + 2004-08-10 04:00:00 312,320 -c----w c:\windows\$NtServicePackUninstall$\p2pgraph.dll
    + 2004-08-10 04:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\p2pnetsh.dll
    + 2004-08-10 04:00:00 526,848 -c----w c:\windows\$NtServicePackUninstall$\p2psvc.dll
    + 2004-08-10 11:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
    + 2004-08-10 04:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
    + 2004-08-10 11:00:00 80,128 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
    + 2004-08-10 04:00:00 18,688 -c----w c:\windows\$NtServicePackUninstall$\partmgr.sys
    + 2004-08-10 04:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
    + 2004-08-10 04:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
    + 2004-08-10 04:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
    + 2004-08-10 04:00:00 68,224 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
    + 2004-08-04 12:59:42 25,088 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
    + 2001-08-18 02:35:22 248,320 -c----w c:\windows\$NtServicePackUninstall$\pcl4res.dll
    + 2004-08-10 04:00:00 119,936 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
    + 2004-08-10 04:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
    + 2004-08-10 04:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
    + 2004-08-10 04:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\perfnet.dll
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
    + 2004-08-10 04:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
    + 2004-08-10 04:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
    + 2004-08-10 11:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
    + 2004-08-10 11:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
    + 2004-08-10 04:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
    + 2004-08-10 04:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
    + 2004-08-10 11:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-10 04:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\pnrpnsp.dll
    + 2004-08-10 04:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\policman.dll
    + 2004-08-10 04:00:00 105,472 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
    + 2004-03-17 00:58:20 136,960 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
    + 2004-03-17 00:58:20 136,960 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys.000
    + 2004-08-10 04:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\powercfg.exe
    + 2005-06-25 06:47:40 8,832 -c----w c:\windows\$NtServicePackUninstall$\powerfil.sys
    + 2005-06-25 06:47:40 8,832 -c----w c:\windows\$NtServicePackUninstall$\powerfil.sys.000
    + 2004-08-10 04:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-10 04:00:00 560,640 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
    + 2004-08-10 11:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
    + 2004-08-10 04:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
    + 2004-08-10 04:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
    + 2004-08-10 04:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
    + 2004-08-10 04:00:00 237,056 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-10 04:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\proxycfg.exe
    + 2004-08-10 04:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
    + 2004-08-10 04:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
    + 2004-08-10 04:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
    + 2004-08-10 04:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
    + 2004-08-10 04:00:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-10 04:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\pwsdata.dll
    + 2004-08-10 04:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
    + 2004-08-10 04:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
    + 2005-06-29 08:55:07 385,024 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
    + 2004-08-10 04:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
    + 2004-08-10 04:00:00 733,696 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-10 04:00:00 382,464 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
    + 2008-05-07 04:55:40 1,288,192 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
    + 2006-06-22 05:06:30 1,435,648 -c----w c:\windows\$NtServicePackUninstall$\query.dll
    + 2004-08-10 04:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
    + 2004-08-10 04:00:00 20,736 -c----w c:\windows\$NtServicePackUninstall$\ramdisk.sys
    + 2006-06-26 17:37:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    + 2004-08-10 04:00:00 236,544 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
    + 2004-08-10 04:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
    + 2004-08-10 04:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
    + 2004-08-10 04:00:00 657,920 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
    + 2004-08-10 04:00:00 51,328 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
    + 2006-06-22 10:47:18 181,248 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
    + 2004-08-10 04:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
    + 2004-08-10 04:00:00 206,336 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
    + 2004-08-10 04:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
    + 2004-08-10 04:00:00 48,384 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
    + 2004-08-10 04:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
    + 2004-08-10 04:00:00 112,128 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
    + 2004-08-10 04:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
    + 2004-08-10 04:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
    + 2004-08-10 04:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
    + 2006-05-05 09:47:57 174,592 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
    + 2004-08-10 04:00:00 147,968 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
    + 2004-08-10 04:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
    + 2004-08-10 04:00:00 92,168 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
    + 2004-08-04 05:01:16 196,864 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
    + 2005-06-10 04:09:46 139,528 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
    + 2004-08-10 04:00:00 87,176 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
    + 2004-08-10 04:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
    + 2004-08-10 04:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
    + 2004-08-03 21:59:38 57,472 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
    + 2004-08-10 04:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
    + 2004-08-10 04:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
    + 2004-08-10 11:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
    + 2004-08-10 04:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
    + 2004-08-10 04:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
    + 2004-08-10 04:00:00 397,824 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
    + 2004-08-10 04:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
    + 2004-08-10 04:00:00 177,152 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
    + 2004-08-10 04:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
    + 2004-08-10 04:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
    + 2006-11-27 14:54:06 433,152 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
    + 2008-05-08 12:28:49 202,752 -c----w c:\windows\$NtServicePackUninstall$\rmcast.sys
    + 2004-08-10 04:00:00 30,080 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
    + 2004-08-10 04:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\rpcref.dll
    + 2007-07-09 13:16:16 582,656 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
    + 2005-07-26 11:39:49 397,824 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
    + 2004-08-10 04:00:00 152,576 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
    + 2004-08-10 04:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
    + 2004-08-10 04:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
    + 2004-08-10 04:00:00 107,520 -c----w c:\windows\$NtServicePackUninstall$\rsnotify.exe
    + 2004-08-10 04:00:00 380,416 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
    + 2004-08-10 04:00:00 90,112 -c----w c:\windows\$NtServicePackUninstall$\rsvpsp.dll
    + 2004-08-10 04:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
    + 2004-08-10 04:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
    + 2004-08-10 04:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
    + 2004-08-10 04:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\rw001ext.dll
    + 2004-08-10 04:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\rw330ext.dll
    + 2004-08-10 04:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\rwnh.dll
    + 2004-08-10 04:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
    + 2004-08-10 04:00:00 29,696 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
    + 2004-08-10 04:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
    + 2004-08-10 04:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
    + 2004-08-10 04:00:00 415,744 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
    + 2004-08-10 04:00:00 741,376 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
    + 2004-08-10 04:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
    + 2005-06-01 06:46:29 43,264 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys
    + 2005-06-01 06:46:29 43,264 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys.000
    + 2004-08-10 04:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
    + 2004-08-10 04:00:00 95,744 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
    + 2004-08-10 04:00:00 171,008 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
    + 2004-08-10 04:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
    + 2004-08-10 04:00:00 313,856 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
    + 2007-04-25 14:21:15 144,896 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
    + 2004-08-10 04:00:00 190,976 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
    + 2004-08-10 11:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\schtasks.exe
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
    + 2004-08-10 04:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
    + 2004-08-10 04:00:00 202,752 -c----w c:\windows\$NtServicePackUninstall$\script.dll
    + 2004-08-10 04:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
    + 2004-08-10 04:00:00 159,744 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
    + 2004-08-10 04:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
    + 2004-08-10 04:00:00 96,256 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
    + 2004-08-10 04:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\sctasks.exe
    + 2004-08-10 04:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-10 04:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sdbus.sys
    + 2004-08-10 04:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sdhcinst.dll
    + 2004-08-10 04:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\secedit.exe
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
    + 2004-08-10 04:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
    + 2004-08-10 04:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
    + 2004-08-10 04:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
    + 2004-08-10 04:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
    + 2004-08-10 04:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll

  7. #7
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 3

    + 2004-08-10 04:00:00 221,696 -c----w c:\windows\$NtServicePackUninstall$\seo.dll
    + 2004-08-10 04:00:00 15,488 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
    + 2004-08-10 04:00:00 64,896 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
    + 2004-08-10 04:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
    + 2004-08-10 04:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\services.exe
    + 2004-08-10 04:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
    + 2004-08-10 04:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
    + 2007-01-15 20:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\setregni.exe
    + 2004-08-10 04:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
    + 2004-08-10 04:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
    + 2004-08-10 04:00:00 983,552 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
    + 2004-08-10 04:00:00 101,376 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
    + 2004-08-10 04:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
    + 2004-08-10 04:00:00 140,288 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
    + 2004-08-10 04:00:00 1,580,544 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-10 04:00:00 11,136 -c----w c:\windows\$NtServicePackUninstall$\sffdisk.sys
    + 2004-08-10 04:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\sffp_sd.sys
    + 2004-08-10 04:00:00 11,392 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
    + 2004-08-10 04:00:00 549,376 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
    + 2006-09-04 06:12:56 1,497,088 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
    + 2007-10-26 03:34:01 8,460,288 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
    + 2004-08-10 04:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
    + 2004-08-10 04:00:00 438,272 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
    + 2006-09-14 08:31:29 474,112 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
    + 2004-08-10 04:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
    + 2004-08-10 04:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
    + 2004-08-10 04:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\shrpubw.exe
    + 2004-08-10 04:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\shscrap.dll
    + 2006-12-19 21:52:18 134,656 -c----w c:\windows\$NtServicePackUninstall$\shsvcs.dll
    + 2003-03-24 22:52:04 20,536 -c----w c:\windows\$NtServicePackUninstall$\shtml.dll
    + 2003-03-24 22:52:04 16,437 -c----w c:\windows\$NtServicePackUninstall$\shtml.exe
    + 2004-08-10 04:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\shutdown.exe
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\sigtab.dll
    + 2004-08-10 04:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-10 04:00:00 26,112 -c----w c:\windows\$NtServicePackUninstall$\skeys.exe
    + 2004-08-10 04:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\slayerxp.dll
    + 2004-08-10 04:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\smbinst.exe
    + 2004-08-10 04:00:00 236,544 -c----w c:\windows\$NtServicePackUninstall$\smi2smir.exe
    + 2004-08-10 04:00:00 363,008 -c----w c:\windows\$NtServicePackUninstall$\smlogcfg.dll
    + 2004-08-10 04:00:00 89,600 -c----w c:\windows\$NtServicePackUninstall$\smlogsvc.exe
    + 2004-08-10 04:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\smss.exe
    + 2004-08-10 04:00:00 189,440 -c----w c:\windows\$NtServicePackUninstall$\smtpadm.dll
    + 2004-08-10 04:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\smtpapi.dll
    + 2004-08-10 04:00:00 2,134,528 -c----w c:\windows\$NtServicePackUninstall$\smtpsnap.dll
    + 2004-08-10 04:00:00 456,704 -c----w c:\windows\$NtServicePackUninstall$\smtpsvc.dll
    + 2004-08-10 04:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\sndrec32.exe
    + 2004-08-10 04:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\sniffpol.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\snmp.exe
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\snmpapi.dll
    + 2004-08-10 04:00:00 259,072 -c----w c:\windows\$NtServicePackUninstall$\snmpcl.dll
    + 2004-08-10 04:00:00 358,400 -c----w c:\windows\$NtServicePackUninstall$\snmpincl.dll
    + 2004-08-10 04:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\snmpmib.dll
    + 2004-08-10 04:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\snmpsmir.dll
    + 2004-08-10 04:00:00 182,272 -c----w c:\windows\$NtServicePackUninstall$\snmpsnap.dll
    + 2004-08-10 04:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\snmpthrd.dll
    + 2004-08-10 04:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\snmptrap.exe
    + 2004-08-10 04:00:00 130,048 -c----w c:\windows\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-10 11:00:00 25,472 -c----w c:\windows\$NtServicePackUninstall$\sonydcam.sys
    + 2004-08-10 04:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\sort.exe
    + 2004-08-10 04:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\spgrmr.dll
    + 2004-08-10 04:00:00 538,624 -c----w c:\windows\$NtServicePackUninstall$\spider.exe
    + 2004-08-10 04:00:00 12,800 -c----w c:\windows\$NtServicePackUninstall$\spiisupd.exe
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys.000
    + 2004-08-10 11:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\spnpinst.exe
    + 2004-08-10 04:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\spoolss.dll
    + 2005-06-10 23:53:32 57,856 -c----w c:\windows\$NtServicePackUninstall$\spoolsv.exe
    + 2004-08-10 04:00:00 186,880 -c----w c:\windows\$NtServicePackUninstall$\spra0401.dll
    + 2004-08-10 04:00:00 189,440 -c----w c:\windows\$NtServicePackUninstall$\spra0402.dll
    + 2004-08-10 04:00:00 161,280 -c----w c:\windows\$NtServicePackUninstall$\spra0404.dll
    + 2004-08-10 04:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra0405.dll
    + 2004-08-10 04:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0406.dll
    + 2004-08-10 04:00:00 199,680 -c----w c:\windows\$NtServicePackUninstall$\spra0407.dll
    + 2004-08-10 04:00:00 197,632 -c----w c:\windows\$NtServicePackUninstall$\spra0408.dll
    + 2004-08-10 04:00:00 186,368 -c----w c:\windows\$NtServicePackUninstall$\spra040b.dll
    + 2004-08-10 04:00:00 197,632 -c----w c:\windows\$NtServicePackUninstall$\spra040c.dll
    + 2004-08-10 04:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\spra040d.dll
    + 2004-08-10 04:00:00 195,584 -c----w c:\windows\$NtServicePackUninstall$\spra040e.dll
    + 2004-08-10 04:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\spra0410.dll
    + 2004-08-10 04:00:00 171,008 -c----w c:\windows\$NtServicePackUninstall$\spra0411.dll
    + 2004-08-10 04:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\spra0412.dll
    + 2004-08-10 04:00:00 196,096 -c----w c:\windows\$NtServicePackUninstall$\spra0413.dll
    + 2004-08-10 04:00:00 189,440 -c----w c:\windows\$NtServicePackUninstall$\spra0414.dll
    + 2004-08-10 04:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\spra0415.dll
    + 2004-08-10 04:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0416.dll
    + 2004-08-10 04:00:00 190,464 -c----w c:\windows\$NtServicePackUninstall$\spra0418.dll
    + 2004-08-10 04:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0419.dll
    + 2004-08-10 04:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra041a.dll
    + 2004-08-10 04:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\spra041b.dll
    + 2004-08-10 04:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra041d.dll
    + 2004-08-10 04:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\spra041e.dll
    + 2004-08-10 04:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra041f.dll
    + 2004-08-10 04:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0424.dll
    + 2004-08-10 04:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\spra0425.dll
    + 2004-08-10 04:00:00 188,928 -c----w c:\windows\$NtServicePackUninstall$\spra0426.dll
    + 2004-08-10 04:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\spra0427.dll
    + 2004-08-10 04:00:00 161,280 -c----w c:\windows\$NtServicePackUninstall$\spra0804.dll
    + 2004-08-10 04:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\spra0816.dll
    + 2004-08-10 04:00:00 196,096 -c----w c:\windows\$NtServicePackUninstall$\spra0c0a.dll
    + 2004-08-10 04:00:00 2,869,248 -c----w c:\windows\$NtServicePackUninstall$\sprb0401.dll
    + 2004-08-10 04:00:00 477,696 -c----w c:\windows\$NtServicePackUninstall$\sprb0404.dll
    + 2004-08-10 04:00:00 734,720 -c----w c:\windows\$NtServicePackUninstall$\sprb0405.dll
    + 2004-08-10 04:00:00 742,912 -c----w c:\windows\$NtServicePackUninstall$\sprb0406.dll
    + 2004-08-10 04:00:00 788,992 -c----w c:\windows\$NtServicePackUninstall$\sprb0407.dll
    + 2004-08-10 04:00:00 801,280 -c----w c:\windows\$NtServicePackUninstall$\sprb0408.dll
    + 2004-08-10 04:00:00 729,088 -c----w c:\windows\$NtServicePackUninstall$\sprb040b.dll
    + 2004-08-10 04:00:00 793,600 -c----w c:\windows\$NtServicePackUninstall$\sprb040c.dll
    + 2004-08-10 04:00:00 2,842,112 -c----w c:\windows\$NtServicePackUninstall$\sprb040d.dll
    + 2004-08-10 04:00:00 769,536 -c----w c:\windows\$NtServicePackUninstall$\sprb040e.dll
    + 2004-08-10 04:00:00 769,536 -c----w c:\windows\$NtServicePackUninstall$\sprb0410.dll
    + 2004-08-10 04:00:00 562,688 -c----w c:\windows\$NtServicePackUninstall$\sprb0411.dll
    + 2004-08-10 04:00:00 543,744 -c----w c:\windows\$NtServicePackUninstall$\sprb0412.dll
    + 2004-08-10 04:00:00 769,024 -c----w c:\windows\$NtServicePackUninstall$\sprb0413.dll
    + 2004-08-10 04:00:00 716,288 -c----w c:\windows\$NtServicePackUninstall$\sprb0414.dll
    + 2004-08-10 04:00:00 759,808 -c----w c:\windows\$NtServicePackUninstall$\sprb0415.dll
    + 2004-08-10 04:00:00 752,128 -c----w c:\windows\$NtServicePackUninstall$\sprb0416.dll
    + 2004-08-10 04:00:00 736,768 -c----w c:\windows\$NtServicePackUninstall$\sprb0419.dll
    + 2004-08-10 04:00:00 757,248 -c----w c:\windows\$NtServicePackUninstall$\sprb041b.dll
    + 2004-08-10 04:00:00 724,992 -c----w c:\windows\$NtServicePackUninstall$\sprb041d.dll
    + 2004-08-10 04:00:00 724,480 -c----w c:\windows\$NtServicePackUninstall$\sprb041f.dll
    + 2004-08-10 04:00:00 732,160 -c----w c:\windows\$NtServicePackUninstall$\sprb0424.dll
    + 2004-08-10 04:00:00 470,016 -c----w c:\windows\$NtServicePackUninstall$\sprb0804.dll
    + 2004-08-10 04:00:00 751,616 -c----w c:\windows\$NtServicePackUninstall$\sprb0816.dll
    + 2004-08-10 04:00:00 773,632 -c----w c:\windows\$NtServicePackUninstall$\sprb0c0a.dll
    + 2004-08-10 04:00:00 250,880 -c----w c:\windows\$NtServicePackUninstall$\sptip.dll
    + 2008-04-14 09:42:08 438,272 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spcompat.dll
    + 2007-08-11 00:46:18 231,288 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 00:46:28 382,840 -c----w c:\windows\$NtServicePackUninstall$\spuninst\updspapi.dll
    + 2004-08-10 04:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\sqldb20.dll
    + 2004-08-10 04:00:00 528,384 -c----w c:\windows\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-10 04:00:00 462,848 -c----w c:\windows\$NtServicePackUninstall$\sqlqp20.dll
    + 2004-08-10 04:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\sqlse20.dll
    + 2004-08-10 04:00:00 442,368 -c----w c:\windows\$NtServicePackUninstall$\sqlsrv32.dll
    + 2004-08-10 04:00:00 180,800 -c----w c:\windows\$NtServicePackUninstall$\sqlunirl.dll
    + 2004-08-10 04:00:00 217,088 -c----w c:\windows\$NtServicePackUninstall$\sqlxmlx.dll
    + 2004-08-10 04:00:00 73,472 -c----w c:\windows\$NtServicePackUninstall$\sr.sys
    + 2004-08-10 04:00:00 58,434 -c----w c:\windows\$NtServicePackUninstall$\srchctls.dll
    + 2004-08-10 04:00:00 725,566 -c----w c:\windows\$NtServicePackUninstall$\srchui.dll
    + 2004-08-10 04:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\srclient.dll
    + 2004-08-10 04:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\srrstr.dll
    + 2004-08-10 04:00:00 170,496 -c----w c:\windows\$NtServicePackUninstall$\srsvc.dll
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtServicePackUninstall$\srv.sys
    + 2004-12-07 19:32:34 96,768 -c----w c:\windows\$NtServicePackUninstall$\srvsvc.dll
    + 2004-08-10 04:00:00 704,512 -c----w c:\windows\$NtServicePackUninstall$\ss3dfo.scr
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\ssbezier.scr
    + 2004-08-10 04:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\ssdpapi.dll
    + 2004-08-10 04:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
    + 2004-08-10 04:00:00 393,216 -c----w c:\windows\$NtServicePackUninstall$\ssflwbox.scr
    + 2004-08-10 04:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\ssinc51.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ssmarque.scr
    + 2004-08-10 04:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ssmypics.scr
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\ssmyst.scr
    + 2004-08-10 04:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\sspifilt.dll
    + 2004-08-10 04:00:00 610,304 -c----w c:\windows\$NtServicePackUninstall$\sspipes.scr
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\ssstars.scr
    + 2004-08-10 04:00:00 679,936 -c----w c:\windows\$NtServicePackUninstall$\sstext3d.scr
    + 2004-08-10 04:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\sstub.dll
    + 2004-08-10 04:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\staxmem.dll
    + 2004-08-10 04:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\stclient.dll
    + 2004-08-10 04:00:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\stdprov.dll
    + 2004-08-10 04:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sti.dll
    + 2004-08-10 04:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\sti_ci.dll
    + 2004-08-10 04:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\stimon.exe
    + 2004-08-10 04:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\stobject.dll
    + 2004-08-03 23:56:46 74,752 -c----w c:\windows\$NtServicePackUninstall$\storprop.dll
    + 2004-08-04 13:08:04 48,640 -c----w c:\windows\$NtServicePackUninstall$\stream.sys
    + 2006-08-21 14:52:08 246,814 -c----w c:\windows\$NtServicePackUninstall$\strmdll.dll
    + 2004-08-10 04:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\strmfilt.dll
    + 2006-08-22 02:54:14 2,678 -c----w c:\windows\$NtServicePackUninstall$\su5bhvzx.dat
    + 2004-08-10 04:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\svcext51.dll
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\svchost.exe
    + 2004-08-10 11:00:00 4,352 -c----w c:\windows\$NtServicePackUninstall$\swenum.sys
    + 2001-08-18 04:00:52 54,272 -c----w c:\windows\$NtServicePackUninstall$\swmidi.sys
    + 2006-10-19 13:56:32 713,216 -c----w c:\windows\$NtServicePackUninstall$\sxs.dll
    + 2004-08-10 04:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\synceng.dll
    + 2004-08-10 04:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\syncui.dll
    + 2004-08-04 13:15:56 60,800 -c----w c:\windows\$NtServicePackUninstall$\sysaudio.sys
    + 2004-08-10 04:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\sysinfo.exe
    + 2004-08-10 04:00:00 168,960 -c----w c:\windows\$NtServicePackUninstall$\sysmod.dll
    + 2004-08-10 04:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\sysocmgr.exe
    + 2004-08-10 04:00:00 984,576 -c----w c:\windows\$NtServicePackUninstall$\syssetup.dll
    + 2004-07-20 00:54:18 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\system.dll
    + 2004-08-10 11:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\systeminfo.exe
    + 2005-10-18 04:14:46 118,272 -c----w c:\windows\$NtServicePackUninstall$\t2embed.dll
    + 2004-08-10 04:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\tabletoc.dll
    + 2004-08-10 04:00:00 14,976 -c----w c:\windows\$NtServicePackUninstall$\tape.sys
    + 2004-08-10 04:00:00 858,624 -c----w c:\windows\$NtServicePackUninstall$\tapi3.dll
    + 2004-08-10 04:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\tapi32.dll
    + 2005-07-08 16:27:56 249,344 -c----w c:\windows\$NtServicePackUninstall$\tapisrv.dll
    + 2004-08-10 04:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\taskkill.exe
    + 2004-08-10 04:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\tasklist.exe
    + 2004-08-10 04:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\taskmgr.exe
    + 2008-06-20 10:45:13 360,320 -c----w c:\windows\$NtServicePackUninstall$\tcpip.sys
    + 2008-06-20 09:52:06 225,920 -c----w c:\windows\$NtServicePackUninstall$\tcpip6.sys
    + 2004-08-10 04:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\tcpmib.dll
    + 2004-08-10 04:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmon.dll
    + 2004-08-10 04:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmonui.dll
    + 2003-03-24 22:52:04 32,827 -c----w c:\windows\$NtServicePackUninstall$\tcptest.exe
    + 2003-03-24 22:52:06 16,384 -c----w c:\windows\$NtServicePackUninstall$\tcptsat.dll
    + 2004-08-10 04:00:00 18,560 -c----w c:\windows\$NtServicePackUninstall$\tdi.sys
    + 2004-08-10 04:00:00 12,040 -c----w c:\windows\$NtServicePackUninstall$\tdpipe.sys
    + 2004-08-10 04:00:00 21,896 -c----w c:\windows\$NtServicePackUninstall$\tdtcp.sys
    + 2005-05-10 23:45:48 75,776 -c----w c:\windows\$NtServicePackUninstall$\telnet.exe
    + 2004-08-04 07:01:08 40,840 -c----w c:\windows\$NtServicePackUninstall$\termdd.sys
    + 2004-08-10 04:00:00 358,400 -c----w c:\windows\$NtServicePackUninstall$\termmgr.dll
    + 2005-03-10 14:49:51 295,424 -c----w c:\windows\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-10 04:00:00 385,536 -c----w c:\windows\$NtServicePackUninstall$\themeui.dll
    + 2004-08-10 04:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\tlntadmn.exe
    + 2004-08-10 04:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\tlntsess.exe
    + 2004-08-10 04:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\tlntsvr.exe
    + 2004-08-10 04:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\tlntsvrp.dll
    + 2007-01-15 20:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\togac.exe
    + 2004-08-10 04:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\tools.dll
    + 2004-08-10 11:00:00 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstart.exe
    + 2004-08-10 04:00:00 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstrt.exe
    + 2004-08-10 04:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\tracerpt.exe
    + 2004-08-10 04:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\tracert.exe
    + 2004-08-10 04:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\tree.com
    + 2004-08-10 04:00:00 153,088 -c----w c:\windows\$NtServicePackUninstall$\triedit.dll
    + 2004-08-10 04:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\trkwks.dll
    + 2004-08-10 04:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\tscfgwmi.dll
    + 2004-08-10 04:00:00 12,168 -c----w c:\windows\$NtServicePackUninstall$\tsddd.dll
    + 2004-08-10 04:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\tshoot.dll
    + 2004-08-10 04:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-10 11:00:00 12,416 -c----w c:\windows\$NtServicePackUninstall$\tunmp.sys
    + 2004-08-10 04:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-10 04:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\twext.dll
    + 2005-07-26 11:39:49 101,376 -c----w c:\windows\$NtServicePackUninstall$\txflog.dll
    + 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtServicePackUninstall$\tzchange.exe
    + 2004-08-10 04:00:00 66,176 -c----w c:\windows\$NtServicePackUninstall$\udfs.sys
    + 2004-08-10 04:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\udhisapi.dll
    + 2004-08-10 04:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\uihelper.dll
    + 2004-08-10 04:00:00 275,456 -c----w c:\windows\$NtServicePackUninstall$\ulib.dll
    + 2004-08-10 04:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\umandlg.dll
    + 2005-08-23 03:35:42 123,392 -c----w c:\windows\$NtServicePackUninstall$\umpnpmgr.dll
    + 2004-08-04 16:26:48 264,704 -c----w c:\windows\$NtServicePackUninstall$\unidrv.dll
    + 2004-08-04 16:26:48 197,120 -c----w c:\windows\$NtServicePackUninstall$\unidrvui.dll
    + 2004-08-10 04:00:00 74,240 -c----w c:\windows\$NtServicePackUninstall$\unimdmat.dll
    + 2004-08-10 04:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-04 16:26:36 619,520 -c----w c:\windows\$NtServicePackUninstall$\unires.dll
    + 2004-08-10 04:00:00 316,416 -c----w c:\windows\$NtServicePackUninstall$\untfs.dll
    + 2007-04-23 10:32:54 364,160 -c----w c:\windows\$NtServicePackUninstall$\update.sys
    + 2004-08-10 04:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\uploadm.exe
    + 2004-08-10 04:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\upnp.dll
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\upnpcont.exe
    + 2007-02-05 20:17:02 185,344 -c----w c:\windows\$NtServicePackUninstall$\upnphost.dll
    + 2004-08-10 04:00:00 239,616 -c----w c:\windows\$NtServicePackUninstall$\upnpui.dll
    + 2004-08-10 04:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\ups.exe
    + 2004-08-10 04:00:00 12,672 -c----w c:\windows\$NtServicePackUninstall$\usb8023.sys
    + 2004-08-10 11:00:00 23,808 -c----w c:\windows\$NtServicePackUninstall$\usbcamd.sys
    + 2004-08-10 11:00:00 23,936 -c----w c:\windows\$NtServicePackUninstall$\usbcamd2.sys
    + 2004-08-04 03:08:48 31,616 -c----w c:\windows\$NtServicePackUninstall$\usbccgp.sys
    + 2005-03-31 08:13:52 27,008 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys
    + 2005-03-31 08:13:52 27,008 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys.000
    + 2004-08-04 13:08:44 57,600 -c----w c:\windows\$NtServicePackUninstall$\usbhub.sys
    + 2004-08-10 11:00:00 16,000 -c----w c:\windows\$NtServicePackUninstall$\usbintel.sys
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\usbmon.dll
    + 2004-08-04 13:08:44 142,976 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys
    + 2004-08-04 03:01:26 25,856 -c----w c:\windows\$NtServicePackUninstall$\usbprint.sys
    + 2004-08-04 02:58:46 15,104 -c----w c:\windows\$NtServicePackUninstall$\usbscan.sys
    + 2004-08-10 04:00:00 26,496 -c----w c:\windows\$NtServicePackUninstall$\usbstor.sys
    + 2004-08-04 13:08:38 20,480 -c----w c:\windows\$NtServicePackUninstall$\usbuhci.sys
    + 2004-08-04 14:56:48 74,240 -c----w c:\windows\$NtServicePackUninstall$\usbui.dll
    + 2007-03-08 15:36:28 577,536 -c----w c:\windows\$NtServicePackUninstall$\user32.dll
    + 2004-08-10 04:00:00 723,456 -c----w c:\windows\$NtServicePackUninstall$\userenv.dll
    + 2004-08-10 04:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\userinit.exe
    + 2004-08-10 04:00:00 406,528 -c----w c:\windows\$NtServicePackUninstall$\usp10.dll
    + 2004-08-10 04:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\utilman.exe
    + 2004-08-10 04:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\uxtheme.dll
    + 2004-08-10 04:00:00 30,749 -c----w c:\windows\$NtServicePackUninstall$\vbajet32.dll
    + 2006-11-08 02:03:36 413,696 -c----w c:\windows\$NtServicePackUninstall$\vbscript.dll
    + 2004-08-10 04:00:00 26,112 -c----w c:\windows\$NtServicePackUninstall$\vdmdbg.dll
    + 2004-08-10 04:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\vdmredir.dll
    + 2006-03-17 00:38:01 28,672 -c----w c:\windows\$NtServicePackUninstall$\verclsid.exe
    + 2004-08-10 04:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\verifier.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\version.dll
    + 2004-08-10 04:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
    + 2004-08-04 12:59:44 5,376 -c----w c:\windows\$NtServicePackUninstall$\viaide.sys
    + 2004-08-10 04:00:00 79,744 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
    + 2004-08-10 04:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
    + 2004-08-10 04:00:00 52,352 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
    + 2004-08-10 04:00:00 430,592 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
    + 2004-08-10 04:00:00 289,792 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
    + 2004-08-10 04:00:00 174,592 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
    + 2004-08-10 04:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\w3ssl.dll
    + 2004-08-10 04:00:00 363,520 -c----w c:\windows\$NtServicePackUninstall$\w3svc.dll
    + 2004-08-10 04:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
    + 2007-05-16 15:12:12 510,976 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
    + 2004-08-10 04:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
    + 2007-05-16 15:12:15 85,504 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
    + 2004-08-10 04:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-10 04:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\wam51.dll
    + 2004-08-10 04:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\wamreg51.dll
    + 2004-08-10 04:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
    + 2004-08-10 04:00:00 17,664 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
    + 2004-08-10 04:00:00 208,896 -c----w c:\windows\$NtServicePackUninstall$\wavemsp.dll
    + 2004-08-10 04:00:00 196,608 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
    + 2004-08-10 04:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
    + 2004-08-10 04:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
    + 2004-08-10 04:00:00 530,944 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
    + 2004-08-10 04:00:00 178,176 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
    + 2004-08-10 04:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
    + 2004-08-10 04:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
    + 2004-08-10 04:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
    + 2004-08-10 04:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
    + 2004-08-10 04:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
    + 2004-08-10 04:00:00 197,120 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
    + 2006-03-24 04:37:50 49,152 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
    + 2004-08-04 14:56:58 23,552 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys.000
    + 2006-01-04 03:35:05 68,096 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
    + 2004-08-10 04:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
    + 2004-08-10 04:00:00 433,664 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
    + 2004-08-10 04:00:00 463,360 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
    + 2004-08-10 04:00:00 124,416 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
    + 2004-08-10 04:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
    + 2006-12-19 18:16:47 333,824 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
    + 2004-08-10 04:00:00 589,312 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
    + 2004-08-10 04:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
    + 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
    + 2004-08-10 04:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
    + 2004-08-10 04:00:00 937,984 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
    + 2004-08-10 04:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
    + 2004-08-10 04:00:00 351,232 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
    + 2004-08-10 04:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
    + 2004-08-10 04:00:00 502,272 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
    + 2004-08-10 04:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
    + 2004-08-10 11:00:00 764,928 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
    + 2004-08-10 04:00:00 99,328 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
    + 2004-08-10 04:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\winshfhc.dll
    + 2004-08-10 04:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
    + 2007-03-17 13:43:01 292,864 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
    + 2004-08-10 04:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
    + 2004-08-10 04:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
    + 2004-08-10 04:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
    + 2006-08-17 12:28:27 132,096 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
    + 2004-08-10 04:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
    + 2004-08-10 04:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
    + 2004-08-10 04:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
    + 2004-08-10 04:00:00 196,608 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
    + 2004-08-10 04:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
    + 2004-08-10 04:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
    + 2004-08-10 04:00:00 358,912 -c----w c:\windows\$NtServicePackUninstall$\wmic.exe
    + 2004-08-10 04:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
    + 2004-08-10 04:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
    + 2004-08-10 04:00:00 156,672 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
    + 2004-08-10 04:00:00 132,096 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
    + 2004-08-10 04:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
    + 2004-08-10 04:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
    + 2004-08-10 04:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
    + 2004-08-10 04:00:00 437,248 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
    + 2004-08-10 04:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
    + 2004-08-10 04:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
    + 2004-08-10 04:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
    + 2004-08-10 04:00:00 95,232 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
    + 2004-08-10 04:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\wmm2ae.dll
    + 2004-08-10 04:00:00 402,432 -c----w c:\windows\$NtServicePackUninstall$\wmm2filt.dll
    + 2004-08-10 04:00:00 502,272 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxa.dll
    + 2004-08-10 04:00:00 325,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxb.dll
    + 2004-08-10 04:00:00 4,256,768 -c----w c:\windows\$NtServicePackUninstall$\wmm2res.dll
    + 2004-08-10 04:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2res2.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcd.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcore.dll
    + 2004-08-10 04:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpui.dll
    + 2004-08-10 04:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
    + 2004-08-10 04:00:00 303,616 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
    + 2004-08-10 04:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
    + 2004-08-10 04:00:00 264,192 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
    + 2004-08-10 04:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
    + 2004-08-10 04:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
    + 2004-08-10 04:00:00 82,944 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-10 04:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\wscntfy.exe
    + 2004-08-10 04:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
    + 2004-08-10 04:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\wscsvc.dll
    + 2004-08-10 04:00:00 596,992 -c----w c:\windows\$NtServicePackUninstall$\wsecedit.dll
    + 2004-08-10 04:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\wshbth.dll
    + 2004-08-10 04:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
    + 2004-08-10 04:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
    + 2004-08-10 04:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
    + 2004-08-10 04:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
    + 2004-08-10 04:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
    + 2004-08-10 04:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
    + 2004-08-10 04:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
    + 2004-08-10 04:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
    + 2004-08-10 04:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-10 04:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
    + 2005-06-22 05:00:18 383,488 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
    + 2005-06-22 05:00:18 52,736 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
    + 2005-06-22 05:00:18 52,736 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll.000
    + 2005-06-22 05:00:18 474,624 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
    + 2005-06-22 05:00:18 474,624 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll.000
    + 2004-08-10 04:00:00 91,648 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
    + 2004-08-10 04:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
    + 2006-07-14 15:51:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\xmllite.dll
    + 2004-08-10 04:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\xmlprov.dll
    + 2004-08-10 04:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\xmlprovi.dll
    + 2006-03-01 19:42:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
    + 2006-10-10 12:44:50 557,568 -c----w c:\windows\$NtServicePackUninstall$\xpnetdiag.exe
    + 2004-08-10 04:00:00 438,784 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
    + 2004-08-10 04:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
    + 2004-08-10 04:00:00 2,897,920 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
    + 2007-10-29 10:04:03 350,720 -c----w c:\windows\$NtServicePackUninstall$\xpsp3res.dll
    + 2004-08-10 04:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
    + 2008-04-14 00:11:59 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648$\spuninst\updspapi.dll
    - 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
    + 2008-04-13 18:55:08 202,624 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
    + 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762_0$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:53 246,272 -c----w c:\windows\$NtUninstallKB950974$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll
    + 2008-04-14 00:11:54 691,712 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
    + 2008-04-14 00:12:38 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
    - 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
    + 2008-04-14 12:30:49 272,128 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
    + 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2_0$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
    + 2008-04-13 18:46:32 273,024 -c----w c:\windows\$NtUninstallKB951376$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\updspapi.dll
    - 2007-10-29 22:35:13 1,287,680 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
    + 2008-04-14 00:12:03 1,288,192 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
    + 2007-10-29 22:35:13 1,287,680 -c----w c:\windows\$NtUninstallKB951698_0$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll
    - 2004-08-10 04:00:00 138,496 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
    + 2008-04-13 19:19:23 138,112 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
    - 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
    + 2008-04-14 00:11:52 147,968 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
    - 2004-08-10 04:00:00 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
    + 2008-04-14 00:12:01 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
    - 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
    + 2008-04-13 19:20:16 361,344 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
    - 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
    + 2008-04-13 19:00:02 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
    + 2004-08-10 04:00:00 138,496 -c----w c:\windows\$NtUninstallKB951748_0$\afd.sys
    + 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748_0$\dnsapi.dll
    + 2004-08-10 04:00:00 245,248 -c----w c:\windows\$NtUninstallKB951748_0$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\updspapi.dll
    + 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip.sys
    + 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip6.sys
    + 2008-04-14 00:12:15 139,264 -c----w c:\windows\$NtUninstallKB951978$\cscript.exe
    + 2008-04-14 00:11:56 512,000 -c----w c:\windows\$NtUninstallKB951978$\jscript.dll
    + 2008-04-14 00:12:05 180,224 -c----w c:\windows\$NtUninstallKB951978$\scrobj.dll
    + 2008-04-14 00:12:05 172,032 -c----w c:\windows\$NtUninstallKB951978$\scrrun.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951978$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951978$\spuninst\updspapi.dll
    + 2008-04-14 00:12:08 434,176 -c----w c:\windows\$NtUninstallKB951978$\vbscript.dll
    + 2008-04-14 00:12:41 155,648 -c----w c:\windows\$NtUninstallKB951978$\wscript.exe
    + 2008-04-14 00:12:10 90,112 -c----w c:\windows\$NtUninstallKB951978$\wshext.dll
    + 2006-10-19 01:03:58 100,864 -c----w c:\windows\$NtUninstallKB952069_WM9$\logagent.exe
    + 2007-07-27 14:41:48 231,288 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe
    + 2007-07-27 14:41:48 382,840 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\updspapi.dll
    + 2006-10-19 02:47:20 937,984 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmnetmgr.dll
    + 2006-10-19 02:47:22 2,450,944 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmvcore.dll
    + 2008-04-14 00:11:58 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi.dll
    + 2008-04-14 00:11:58 73,728 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll
    + 2007-07-27 14:41:48 231,288 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
    + 2007-07-27 14:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
    + 2006-10-19 02:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB954211$\spuninst\updspapi.dll
    + 2008-04-13 19:30:10 1,845,632 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
    + 2008-04-14 00:12:01 1,306,624 -c----w c:\windows\$NtUninstallKB954459$\msxml6.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954459$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB954459$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954600$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB954600$\spuninst\updspapi.dll
    + 2008-04-14 00:12:07 246,814 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
    + 2008-04-14 00:12:01 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB955069$\spuninst\spuninst.exe
    + 2008-07-09 18:08:38 382,840 -c----w c:\windows\$NtUninstallKB955069$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB955839$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB955839$\spuninst\updspapi.dll
    + 2008-07-11 12:42:28 62,976 -c----w c:\windows\$NtUninstallKB955839$\tzchange.exe
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB956391$\spuninst\updspapi.dll
    + 2008-04-14 00:11:54 285,184 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
    + 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB956802$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956802$\spuninst\updspapi.dll
    + 2008-06-20 11:40:08 138,496 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB956803$\spuninst\updspapi.dll
    + 2008-04-13 18:31:21 2,023,936 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
    + 2008-04-13 19:24:37 2,145,280 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956841$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB957095$\spuninst\updspapi.dll
    + 2008-04-13 19:15:11 334,848 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
    + 2008-04-13 19:17:01 456,576 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
    + 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB957097$\spuninst\spuninst.exe
    + 2008-07-08 13:02:12 382,840 -c----w c:\windows\$NtUninstallKB957097$\spuninst\updspapi.dll
    + 2008-04-14 00:12:01 337,408 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB958644$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958644$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB958687$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958687$\spuninst\updspapi.dll
    + 2008-09-08 10:41:42 333,824 -c----w c:\windows\$NtUninstallKB958687$\srv.sys
    + 2008-07-09 07:38:25 231,288 -c----w c:\windows\$NtUninstallKB960715$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB960715$\spuninst\updspapi.dll
    - 2008-07-01 15:14:42 315,392 ----a-w c:\windows\.file_store_32\runescape\jogl.dll
    + 2009-01-08 02:45:11 315,392 ----a-w c:\windows\.file_store_32\runescape\jogl.dll
    - 2008-07-01 15:14:43 20,480 ----a-w c:\windows\.file_store_32\runescape\jogl_awt.dll
    + 2009-01-08 02:45:11 20,480 ----a-w c:\windows\.file_store_32\runescape\jogl_awt.dll
    + 2008-09-02 12:42:33 100,888 ----a-w c:\windows\.jagex_cache_32\loginapplet\cache--1999123318.dat
    + 2009-03-06 13:49:21 101,991 ----a-w c:\windows\.jagex_cache_32\loginapplet\cache-1272026540.dat
    + 2009-03-08 22:41:29 315,392 ----a-w c:\windows\.jagex_cache_32\runescape\jogl.dll
    + 2009-03-08 22:41:29 20,480 ----a-w c:\windows\.jagex_cache_32\runescape\jogl_awt.dll
    - 2005-05-04 01:43:28 69,632 ----a-w c:\windows\ALCMTR.EXE
    + 2005-05-03 15:43:28 69,632 ----a-w c:\windows\ALCMTR.EXE
    - 2006-02-21 00:01:58 2,809,856 ----a-w c:\windows\ALCWZRD.EXE
    + 2006-05-04 13:26:36 2,808,832 ----a-w c:\windows\ALCWZRD.EXE
    - 2006-10-04 14:05:26 39,424 ------w c:\windows\AppPatch\acadproc.dll
    + 2008-04-14 00:11:48 39,424 ----a-w c:\windows\AppPatch\acadproc.dll
    - 2004-08-10 04:00:00 1,852,416 ------w c:\windows\AppPatch\AcGenral.dll
    + 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
    - 2004-08-10 04:00:00 450,048 ------w c:\windows\AppPatch\AcLayers.dll
    + 2008-04-14 00:11:48 451,072 ----a-w c:\windows\AppPatch\aclayers.dll
    - 2004-08-10 04:00:00 137,728 ------w c:\windows\AppPatch\AcLua.dll
    + 2008-04-14 00:11:48 141,312 ----a-w c:\windows\AppPatch\aclua.dll
    - 2004-08-10 04:00:00 244,736 ------w c:\windows\AppPatch\AcSpecfc.dll
    + 2008-04-14 00:11:48 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll
    - 2004-08-10 04:00:00 116,224 ------w c:\windows\AppPatch\AcXtrnal.dll
    + 2008-04-14 00:11:48 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
    - 2005-08-31 03:58:42 8,704 ------w c:\windows\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-08-04 15:43:25 8,704 ----a-w c:\windows\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2006-06-10 12:13:56 117,248 ----a-w c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
    + 2008-08-04 15:48:59 117,248 ----a-w c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
    - 2005-08-31 03:58:42 12,288 ------w c:\windows\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-08-04 15:43:23 12,288 ----a-w c:\windows\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2005-08-31 03:58:42 34,816 ------w c:\windows\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-08-04 15:43:25 34,816 ----a-w c:\windows\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2006-06-10 12:13:56 102,400 ----a-w c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
    + 2008-08-04 15:48:59 102,400 ----a-w c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
    - 2008-01-18 01:19:40 1,863,680 ----a-w c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\ehcm.dll
    + 2008-08-04 15:48:59 1,863,680 ----a-w c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll
    - 2006-06-10 12:13:56 192,512 ----a-w c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
    + 2008-08-04 15:48:59 192,512 ----a-w c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
    - 2008-01-18 01:19:40 868,352 ----a-w c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
    + 2008-08-04 15:48:59 868,352 ----a-w c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
    - 2006-06-10 12:13:56 126,976 ----a-w c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
    + 2008-08-04 15:48:59 126,976 ----a-w c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
    - 2006-06-10 12:13:56 110,592 ----a-w c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
    + 2008-08-04 15:48:59 110,592 ----a-w c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
    - 2006-06-10 12:13:56 8,192 ----a-w c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
    + 2008-08-04 15:48:59 8,192 ----a-w c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
    - 2006-06-10 12:13:56 73,728 ----a-w c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
    + 2008-08-04 15:48:59 73,728 ----a-w c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
    - 2006-06-10 12:13:56 167,936 ----a-w c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
    + 2008-08-04 15:48:59 167,936 ----a-w c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
    - 2008-01-18 01:19:40 204,800 ----a-w c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiplay.dll
    + 2008-08-04 15:48:59 204,800 ----a-w c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiPlay.dll
    - 2006-06-10 12:13:56 389,120 ----a-w c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
    + 2008-08-04 15:48:59 389,120 ----a-w c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
    - 2006-06-10 12:13:56 18,944 ----a-w c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
    + 2008-08-04 15:48:59 18,944 ----a-w c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
    - 2006-06-10 12:13:56 278,528 ----a-w c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
    + 2008-08-04 15:48:59 278,528 ----a-w c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
    - 2006-06-10 12:13:56 122,880 ----a-w c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
    + 2008-08-04 15:48:59 122,880 ----a-w c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
    - 2006-06-10 12:13:56 53,248 ----a-w c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
    + 2008-08-04 15:48:59 53,248 ----a-w c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
    - 2006-06-10 12:13:56 389,120 ----a-w c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
    + 2008-08-04 15:48:59 389,120 ----a-w c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
    - 2005-08-31 03:58:42 7,168 ------w c:\windows\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-08-04 15:43:28 7,168 ----a-w c:\windows\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2005-08-31 03:58:42 32,768 ------w c:\windows\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-08-04 15:43:28 32,768 ----a-w c:\windows\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll
    - 2005-08-31 03:58:42 4,096 ------w c:\windows\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-08-04 15:43:28 4,096 ----a-w c:\windows\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2005-08-31 03:58:42 27,136 ------w c:\windows\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-08-04 15:43:28 27,136 ----a-w c:\windows\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2006-12-30 02:58:17 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    + 2008-10-16 17:31:30 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    - 2006-12-30 02:58:17 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    + 2008-10-16 17:31:30 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    - 2006-12-30 02:58:17 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    + 2008-10-16 17:31:31 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    + 2008-10-16 17:31:26 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:26 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:27 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:27 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2006-12-30 02:58:17 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:28 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:28 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:29 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:29 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:29 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-10-16 17:31:31 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2006-12-30 02:58:17 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    + 2008-10-16 17:31:31 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    - 2006-12-30 02:58:17 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    + 2008-10-16 17:31:31 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    - 2006-12-30 02:58:17 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    + 2008-10-16 17:31:31 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    - 2006-12-30 02:58:18 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    + 2008-10-16 17:31:31 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    - 2006-12-30 02:58:17 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    + 2008-10-16 17:31:30 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    - 2005-08-31 03:58:42 712,704 ------w c:\windows\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-08-04 15:43:23 712,704 ----a-w c:\windows\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2006-06-10 12:13:56 45,056 ----a-w c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
    + 2008-08-04 15:48:59 45,056 ----a-w c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
    - 2005-08-31 03:58:42 28,672 ------w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-08-04 15:43:22 28,672 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2005-08-31 03:58:42 286,720 ------w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-08-04 15:43:23 286,720 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2005-08-31 03:58:42 5,632 ------w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    + 2008-08-04 15:43:24 5,632 ----a-w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    - 2005-08-31 03:58:42 11,264 ------w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-08-04 15:43:22 11,264 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-08-31 03:58:42 18,944 ------w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-08-04 15:43:22 18,944 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2005-08-31 03:58:42 6,656 ------w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-08-04 15:43:22 6,656 ----a-w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2005-08-31 03:58:42 1,564,672 ------w c:\windows\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll
    + 2008-08-04 15:43:29 1,564,672 ----a-w c:\windows\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll
    - 2005-08-31 03:58:42 32,768 ------w c:\windows\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll
    + 2008-08-04 15:43:24 32,768 ----a-w c:\windows\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll
    - 2006-06-10 12:13:56 77,824 ----a-w c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
    + 2008-08-04 15:48:59 77,824 ----a-w c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
    - 2005-08-31 03:58:42 77,824 ------w c:\windows\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-08-04 15:43:25 77,824 ----a-w c:\windows\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2005-08-31 03:58:42 1,179,648 ------w c:\windows\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll
    + 2008-08-04 15:43:27 1,179,648 ----a-w c:\windows\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll
    - 2005-08-31 03:58:42 1,695,744 ------w c:\windows\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-08-04 15:43:27 1,695,744 ----a-w c:\windows\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll
    - 2005-08-31 03:58:42 86,016 ------w c:\windows\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-08-04 15:43:25 86,016 ----a-w c:\windows\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2005-08-31 03:58:42 65,536 ------w c:\windows\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-08-04 15:43:25 65,536 ----a-w c:\windows\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2005-08-31 03:58:42 462,848 ------w c:\windows\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-08-04 15:43:27 462,848 ----a-w c:\windows\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2005-08-31 03:58:42 212,992 ------w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-08-04 15:43:24 212,992 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2005-08-31 03:58:42 48,640 ------w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    + 2008-08-04 15:43:24 48,640 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    - 2005-08-31 03:58:42 352,256 ------w c:\windows\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-08-04 15:43:29 352,256 ----a-w c:\windows\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll
    - 2005-08-31 03:58:42 241,664 ------w c:\windows\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-08-04 15:43:28 241,664 ----a-w c:\windows\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2005-08-31 03:58:42 311,296 ------w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-08-04 15:43:29 311,296 ----a-w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2005-08-31 03:58:42 131,072 ------w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-08-04 15:43:29 131,072 ----a-w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2005-08-31 03:58:42 77,824 ------w c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll

  8. #8
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 4

    + 2008-08-04 15:43:24 77,824 ----a-w c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
    - 2005-08-31 03:58:42 126,976 ------w c:\windows\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-08-04 15:43:26 126,976 ----a-w c:\windows\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2005-08-31 03:58:42 61,440 ------w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-08-04 15:43:26 61,440 ----a-w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2005-08-31 03:58:42 507,904 ------w c:\windows\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-08-04 15:43:26 507,904 ----a-w c:\windows\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2007-07-10 21:52:32 1,200,128 ----a-w c:\windows\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-08-04 15:43:26 1,200,128 ----a-w c:\windows\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll
    - 2005-08-31 03:58:42 2,002,944 ------w c:\windows\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-08-04 15:43:26 2,002,944 ----a-w c:\windows\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2005-08-31 03:58:42 1,302,528 ------w c:\windows\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll
    + 2008-08-04 15:43:27 1,302,528 ----a-w c:\windows\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll
    - 2005-08-31 03:58:42 1,179,648 ------w c:\windows\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll
    + 2008-08-04 15:43:27 1,179,648 ----a-w c:\windows\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll
    + 2009-01-30 02:56:19 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-01-30 02:56:21 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-01-30 02:53:41 163,840 ----a-w c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2009-01-30 02:56:24 4,546,560 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-01-30 02:53:44 4,210,688 ----a-w c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2009-01-30 02:56:25 486,400 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-01-30 02:56:25 2,933,248 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2009-01-30 02:56:22 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-01-30 02:56:22 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2009-01-30 02:53:45 368,640 ----a-w c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2009-01-30 02:56:22 261,632 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-01-30 02:56:17 5,242,880 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-01-30 02:56:20 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-01-30 02:56:17 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-01-30 02:56:19 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-01-30 02:56:20 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-01-30 02:56:20 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-01-30 02:56:20 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-01-30 02:54:27 106,496 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
    + 2009-01-30 02:56:23 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-01-30 02:54:28 733,184 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-01-30 02:56:23 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-01-30 02:54:28 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-01-30 02:54:28 802,816 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
    + 2009-01-30 02:56:23 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-01-30 02:54:28 94,208 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    + 2009-01-30 02:56:24 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-01-30 02:56:21 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-01-30 02:53:41 397,312 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    + 2009-01-30 02:56:21 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2009-01-30 02:56:21 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-01-30 02:56:22 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-01-30 02:56:21 659,456 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-01-30 02:54:27 41,984 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    + 2009-01-30 02:56:24 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-01-30 02:56:22 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-01-30 02:56:20 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-01-30 02:56:20 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-01-30 02:53:47 598,016 ----a-w c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2009-01-30 02:53:44 32,768 ----a-w c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    + 2009-01-30 02:53:47 46,104 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
    + 2009-01-30 02:53:49 196,608 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2009-01-30 02:53:49 139,264 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2009-01-30 02:53:49 397,312 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2009-01-30 02:53:49 163,840 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2009-01-30 02:56:57 5,283,840 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2009-01-30 02:53:50 864,256 ----a-w c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2009-01-30 02:53:45 528,384 ----a-w c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2009-01-30 02:54:29 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
    + 2009-01-30 02:53:41 110,592 ----a-w c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2009-01-30 02:56:24 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-01-30 02:54:30 45,056 ----a-w c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2009-01-30 02:54:30 163,840 ----a-w c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    + 2009-01-30 02:54:34 57,344 ----a-w c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2009-01-30 02:56:25 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-01-30 02:56:25 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-01-30 02:54:31 667,648 ----a-w c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
    + 2009-01-30 02:54:31 53,248 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2009-01-30 02:54:31 229,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
    + 2009-01-30 02:54:31 2,879,488 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2009-01-30 02:54:26 684,032 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2009-01-30 02:57:19 294,912 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    + 2009-01-30 02:54:25 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
    + 2009-01-30 02:57:19 442,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
    + 2009-01-30 02:56:26 745,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-01-30 02:56:26 970,752 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-01-30 02:56:19 5,062,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-01-30 02:54:26 286,720 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    + 2009-01-30 02:56:19 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2009-01-30 02:56:21 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-01-30 02:56:18 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-01-30 02:56:23 626,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-01-30 02:53:50 126,976 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2009-01-30 02:53:42 430,080 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2009-01-30 02:53:42 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    + 2009-01-30 02:54:32 143,360 ----a-w c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2009-01-30 02:56:24 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-01-30 02:56:23 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-01-30 02:54:34 233,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
    + 2009-01-30 02:56:23 303,104 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-01-30 02:56:22 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-01-30 02:53:42 966,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2009-01-30 02:56:22 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-01-30 02:53:44 73,728 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    + 2009-01-30 02:53:44 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2009-01-30 02:54:25 569,344 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
    + 2009-01-30 02:56:55 5,931,008 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2009-01-30 02:56:21 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-01-30 02:53:48 688,128 ----a-w c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2009-01-30 02:54:35 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    + 2009-01-30 02:54:35 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2009-01-30 02:57:20 229,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
    + 2009-01-30 02:54:32 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
    + 2009-01-30 02:57:20 139,264 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
    + 2009-01-30 02:54:36 335,872 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
    + 2009-01-30 02:57:20 1,277,952 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2009-01-30 02:56:17 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-01-30 02:56:18 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-01-30 02:54:37 61,440 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2009-01-30 02:56:18 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-01-30 02:56:18 5,025,792 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-01-30 02:54:33 12,288 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2009-01-30 02:53:46 1,138,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2009-01-30 02:53:46 1,630,208 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2009-01-30 02:53:47 540,672 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    + 2009-01-30 02:54:25 507,904 ----a-w c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
    + 2009-01-30 02:54:33 139,264 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2009-01-30 02:56:27 2,048,000 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-01-30 02:56:26 3,149,824 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-01-30 02:53:48 167,936 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2009-01-30 02:53:48 385,024 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2009-01-30 02:53:45 40,960 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2009-01-30 02:53:45 98,304 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2009-01-30 02:53:46 1,245,184 ----a-w c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2009-01-30 02:53:48 94,208 ----a-w c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2009-01-30 03:02:27 25,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll
    + 2009-01-30 03:02:28 842,240 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetMMCExt.ni.dll
    + 2009-01-30 03:02:15 410,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcConfig.ni.exe
    + 2009-01-30 03:02:39 220,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\CustomMarshalers.ni.dll
    + 2009-01-30 03:02:28 14,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
    + 2009-01-30 03:02:40 222,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2009-01-30 03:02:32 1,888,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll
    + 2009-01-30 03:02:42 839,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll
    + 2009-01-30 03:02:30 74,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
    + 2009-01-30 03:02:42 65,024 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
    + 2009-01-30 03:02:48 1,966,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2009-01-30 03:02:45 1,620,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll
    + 2009-01-30 03:02:49 175,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2009-01-30 03:02:49 144,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll
    + 2009-01-30 03:04:09 2,332,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Microsoft.JScript.ni.dll
    + 2009-01-30 03:02:19 386,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2009-01-30 03:02:17 1,093,120 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll
    + 2009-01-30 03:02:52 1,712,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll
    + 2009-01-30 03:04:10 55,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll
    + 2009-01-30 03:02:29 133,632 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.exe
    + 2009-01-30 02:57:44 11,486,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni.dll
    + 2009-01-30 02:57:56 1,451,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll
    + 2009-01-30 02:57:57 39,424 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
    + 2009-01-30 02:58:23 12,216,320 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\PresentationCore.ni.dll
    + 2009-01-30 02:58:25 47,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
    + 2009-01-30 02:58:58 258,048 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll
    + 2009-01-30 02:58:55 368,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll
    + 2009-01-30 02:58:57 539,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll
    + 2009-01-30 02:58:53 14,327,808 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll
    + 2009-01-30 02:58:56 224,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll
    + 2009-01-30 02:59:02 1,657,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\PresentationUI.ni.dll
    + 2009-01-30 02:59:06 2,128,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\ReachFramework.ni.dll
    + 2009-01-30 03:02:20 320,512 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\ServiceModelReg.ni.exe
    + 2009-01-30 03:02:21 256,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiagnostics.ni.dll
    + 2009-01-30 03:02:23 366,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost.ni.exe
    + 2009-01-30 03:02:54 82,944 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
    + 2009-01-30 03:02:53 633,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System.AddIn.ni.dll
    + 2009-01-30 03:02:55 94,208 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
    + 2009-01-30 03:04:05 141,312 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll
    + 2009-01-30 03:02:34 971,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75\System.Configuration.ni.dll
    + 2009-01-30 02:59:11 2,295,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.Core.ni.dll
    + 2009-01-30 03:02:56 135,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll
    + 2009-01-30 03:03:48 756,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll
    + 2009-01-30 03:03:46 9,924,096 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll
    + 2009-01-30 02:59:26 2,516,480 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\System.Data.Linq.ni.dll
    + 2009-01-30 03:03:55 354,816 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll
    + 2009-01-30 03:03:54 939,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll
    + 2009-01-30 03:03:52 1,328,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll
    + 2009-01-30 03:02:38 2,510,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll
    + 2009-01-30 02:59:20 6,616,576 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.Data.ni.dll
    + 2009-01-30 03:03:57 1,801,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\System.Deployment.ni.dll
    + 2009-01-30 02:59:38 10,683,392 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System.Design.ni.dll
    + 2009-01-30 03:03:59 1,116,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll
    + 2009-01-30 03:04:01 881,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll
    + 2009-01-30 03:04:02 455,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll
    + 2009-01-30 02:59:43 208,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll
    + 2009-01-30 02:59:41 1,587,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\System.Drawing.ni.dll
    + 2009-01-30 03:04:03 627,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll
    + 2009-01-30 03:04:03 280,064 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll
    + 2009-01-30 03:01:35 212,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll
    + 2009-01-30 03:01:34 1,056,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13\System.IdentityModel.ni.dll
    + 2009-01-30 03:01:36 381,440 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System.IO.Log.ni.dll
    + 2009-01-30 03:04:04 330,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll
    + 2009-01-30 03:04:07 998,400 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\System.Management.ni.dll
    + 2009-01-30 03:04:11 621,056 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Net.ni.dll
    + 2009-01-30 02:59:45 1,035,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef343380aa002c220dc31e13\System.Printing.ni.dll
    + 2009-01-30 03:01:41 2,338,304 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b133dee73d452652c52767b5ea\System.Runtime.Serialization.ni.dll
    + 2009-01-30 03:04:05 311,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16d8c3589cd2bd3f8d46f0a5402\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2009-01-30 03:02:39 676,352 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da33222c048d683017f2095f04\System.Security.ni.dll
    + 2009-01-30 03:04:16 1,706,496 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad17fe57947eacbc8fa2cea780da\System.ServiceModel.Web.ni.dll
    + 2009-01-30 03:02:13 17,317,888 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4146033013edebd7e0cb604e504ebfee\System.ServiceModel.ni.dll
    + 2009-01-30 03:04:17 212,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea3366939280c1715f1c620e33ee3c8a\System.ServiceProcess.ni.dll
    + 2009-01-30 02:59:48 1,917,440 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c25c1643c85016e7422\System.Speech.ni.dll
    + 2009-01-30 03:04:18 627,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9ae6984c40157cf940bb519f7c\System.Transactions.ni.dll
    + 2009-01-30 03:04:32 141,312 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec08741a765c707bd9169346064a81\System.Web.Abstractions.ni.dll
    + 2009-01-30 03:04:38 36,864 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
    + 2009-01-30 03:04:37 547,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\b7891f5659db299dbd1b3c72db7edb9f\System.Web.DynamicData.ni.dll
    + 2009-01-30 03:04:41 301,056 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e34fa60f0b6c72ca0d12ec89933\System.Web.Entity.Design.ni.dll
    + 2009-01-30 03:04:39 328,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85dd57dd485ab60118ac292ff\System.Web.Entity.ni.dll
    + 2009-01-30 03:04:43 859,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f62044fa702ea6f936071aa5520baa\System.Web.Extensions.Design.ni.dll
    + 2009-01-30 03:04:36 2,403,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d25471b72e1e957bdfe67947c8\System.Web.Extensions.ni.dll
    + 2009-01-30 03:04:46 2,209,280 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec931f439b3114e9031b65d6\System.Web.Mobile.ni.dll
    + 2009-01-30 03:04:47 202,240 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee255220d90dcbe80c990e443051cc5\System.Web.RegularExpressions.ni.dll
    + 2009-01-30 03:04:33 129,536 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f46ab438b2b7ed7c180011a1\System.Web.Routing.ni.dll
    + 2009-01-30 03:04:50 1,840,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002a655920cbfa2bee29d1e22b7\System.Web.Services.ni.dll
    + 2009-01-30 03:04:31 11,796,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619abbf388d590134b\System.Web.ni.dll
    + 2009-01-30 03:00:02 12,430,848 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\63406259e94d5c0ff5b79401dfe113ce\System.Windows.Forms.ni.dll
    + 2009-01-30 03:04:51 37,888 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
    + 2009-01-30 03:04:56 2,992,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbbac0b6e4e9ca62093e49b0c16b\System.Workflow.Activities.ni.dll
    + 2009-01-30 03:05:03 4,514,304 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fbe6f7ad6e4e429052da4317e59\System.Workflow.ComponentModel.ni.dll
    + 2009-01-30 03:05:07 1,908,224 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da36954fcb4cb7ad5adc693ea0f2\System.Workflow.Runtime.ni.dll
    + 2009-01-30 03:05:10 1,356,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ac1750e78d79520dcf19195772eff1b6\System.WorkflowServices.ni.dll
    + 2009-01-30 03:05:11 400,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c338a470b14851ce5987bb0f0869c310\System.Xml.Linq.ni.dll
    + 2009-01-30 03:00:10 5,450,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3baaeff003dc4230f\System.Xml.ni.dll
    + 2009-01-30 02:57:54 7,868,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71be1251ae395a\System.ni.dll
    + 2009-01-30 02:55:46 11,485,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP158.tmp\mscorlib.dll
    + 2009-01-30 03:00:11 447,488 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8db6c0f0277673ea4a2d89fb\UIAutomationClient.ni.dll
    + 2009-01-30 03:00:13 1,049,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957351aec85f526a3350c9718b1e\UIAutomationClientsideProviders.ni.dll
    + 2009-01-30 03:00:14 60,928 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
    + 2009-01-30 03:00:14 187,904 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962d47c722231c1478f180695\UIAutomationTypes.ni.dll
    + 2009-01-30 02:58:02 3,313,664 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b76327d6be9853755\WindowsBase.ni.dll
    + 2009-01-30 03:00:16 240,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a818099f0386e2356ae94f886a2196f\WindowsFormsIntegration.ni.dll
    + 2009-01-30 03:02:24 321,536 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570bb23886a4f32294a\WsatConfig.ni.exe
    + 2008-08-04 15:41:13 61,440 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a_398cd9c2\CustomMarshalers.dll
    + 2008-08-04 15:41:16 3,301,376 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\mscorlib\1.0.3300.0__b77a5c561934e089_73092497\mscorlib.dll
    + 2008-08-04 15:41:23 1,454,080 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Design\1.0.3300.0__b03f5f7f11d50a3a_067f38a8\System.Design.dll
    + 2008-08-04 15:41:25 90,112 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a_c38367d0\System.Drawing.Design.dll
    + 2008-08-04 15:41:24 847,872 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a_cd243132\System.Drawing.dll
    + 2008-08-04 15:41:28 2,953,216 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Windows.Forms\1.0.3300.0__b77a5c561934e089_6ad7ccee\System.Windows.Forms.dll
    + 2008-08-04 15:41:31 2,027,520 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Xml\1.0.3300.0__b77a5c561934e089_fac91eb2\System.Xml.dll
    + 2008-08-04 15:41:19 1,855,488 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System\1.0.3300.0__b77a5c561934e089_bdb2b45b\System.dll
    + 2008-08-04 15:48:41 258,048 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\BDATunePIA\6.0.3000.0__31bf3856ad364e35_af8ea98c\BDATunePIA.dll
    + 2008-08-04 15:48:30 159,744 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehCIR\6.0.3000.0__31bf3856ad364e35_f67eabe4\ehCIR.dll
    + 2008-08-04 15:48:40 2,326,528 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\EhCM\6.0.3000.0__31bf3856ad364e35_8a61aee9\EhCM.dll
    + 2008-08-04 15:48:41 299,008 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehcommon\6.0.3000.0__31bf3856ad364e35_fa722549\ehcommon.dll
    + 2008-08-04 15:48:36 1,306,624 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehepg\6.0.3000.0__31bf3856ad364e35_333b29e8\ehepg.dll
    + 2008-08-04 15:48:31 167,936 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehepgdat\6.0.3000.0__31bf3856ad364e35_435fcf9b\ehepgdat.dll
    + 2008-08-04 15:48:45 167,936 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehExtCOM\6.0.3000.0__31bf3856ad364e35_8475b00b\ehExtCOM.dll
    + 2008-08-04 15:48:57 155,648 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehExtHost\6.0.3000.0__31bf3856ad364e35_2225d0dc\ehExtHost.exe
    + 2008-08-04 15:48:26 10,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiExtCOM\6.0.3000.0__31bf3856ad364e35_5b87caa7\ehiExtCOM.dll
    + 2008-08-04 15:48:26 102,400 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiExtens\6.0.3000.0__31bf3856ad364e35_84ad9e87\ehiExtens.dll
    + 2008-08-04 15:48:34 266,240 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiMsgr\6.0.3000.0__31bf3856ad364e35_bf4067b8\ehiMsgr.dll
    + 2008-08-04 15:48:32 380,928 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiPlay\6.0.3000.0__31bf3856ad364e35_7cdeeb6e\ehiPlay.dll
    + 2008-08-04 15:48:32 565,248 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiProxy\6.0.3000.0__31bf3856ad364e35_f6842a6f\ehiProxy.dll
    + 2008-08-04 15:48:33 40,960 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiUserXp\6.0.3000.0__31bf3856ad364e35_72775f12\ehiUserXp.dll
    + 2008-08-04 15:48:33 458,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiVidCtl\6.0.3000.0__31bf3856ad364e35_4f1c7c23\ehiVidCtl.dll
    + 2008-08-04 15:48:25 180,224 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiwmp\6.0.3000.0__31bf3856ad364e35_8e4e68e9\ehiwmp.dll
    + 2008-08-04 15:48:42 69,632 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiWUapi\6.0.3000.0__31bf3856ad364e35_d55ab201\ehiWUapi.dll
    + 2008-08-04 15:48:30 684,032 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehRecObj\6.0.3000.0__31bf3856ad364e35_3f835659\ehRecObj.dll
    + 2008-08-04 15:48:57 6,336,512 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehshell\6.0.3000.0__31bf3856ad364e35_8817cc4d\ehshell.exe
    + 2008-08-04 15:48:42 65,536 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35_fc57b132\Microsoft.MediaCenter.dll
    + 2008-08-04 15:48:44 20,480 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0_3b739ab7\SonicMCEBurnEngine.dll
    - 2008-06-13 13:10:50 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
    + 2008-06-13 11:05:51 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
    + 2008-07-06 12:06:10 89,088 ------w c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-07-06 12:06:10 765,440 ------w c:\windows\Driver Cache\i386\mxdwdrv.dll
    + 2008-07-06 12:06:10 198,656 ------w c:\windows\Driver Cache\i386\mxdwdui.dll
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    - 2007-02-28 08:38:55 2,057,600 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,066,048 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2007-02-28 09:10:57 2,180,352 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 10:11:02 2,189,184 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-07-06 12:06:10 373,248 ------w c:\windows\Driver Cache\i386\unidrv.dll
    + 2008-07-06 12:06:10 744,960 ------w c:\windows\Driver Cache\i386\unidrvui.dll
    + 2008-03-13 04:52:36 761,344 ------w c:\windows\Driver Cache\i386\unires.dll
    + 2005-10-20 16:02:28 163,328 ----a-w c:\windows\ERDNT\09-03-2009\ERDNT.EXE
    - 2007-06-13 10:23:07 1,033,216 ------w c:\windows\explorer.exe
    + 2008-04-14 00:12:19 1,033,728 ----a-w c:\windows\explorer.exe
    - 2004-08-10 04:00:00 34,816 ------w c:\windows\Help\sniffpol.dll
    + 2008-04-14 00:12:06 34,816 ------w c:\windows\Help\sniffpol.dll
    - 2004-08-10 04:00:00 33,280 ------w c:\windows\Help\sstub.dll
    + 2008-04-14 00:12:07 33,280 ------w c:\windows\Help\sstub.dll
    - 2004-08-10 04:00:00 279,040 ------w c:\windows\Help\tshoot.dll
    + 2008-04-14 00:12:07 279,040 ------w c:\windows\Help\tshoot.dll
    - 2005-05-27 06:22:01 10,752 ------w c:\windows\hh.exe
    + 2008-04-14 00:12:21 10,752 ------w c:\windows\hh.exe
    + 2008-04-23 04:16:28 124,928 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll
    + 2008-04-23 04:16:28 347,136 -c----w c:\windows\ie7updates\KB953838-IE7\dxtmsft.dll
    + 2008-04-23 04:16:28 214,528 -c----w c:\windows\ie7updates\KB953838-IE7\dxtrans.dll
    + 2008-04-23 04:16:28 133,120 -c----w c:\windows\ie7updates\KB953838-IE7\extmgr.dll
    + 2008-04-23 04:16:28 63,488 -c----w c:\windows\ie7updates\KB953838-IE7\icardie.dll
    + 2008-04-22 07:39:58 70,656 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-23 04:16:28 153,088 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll
    + 2008-04-23 04:16:28 230,400 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll
    + 2008-04-20 05:07:51 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll
    + 2008-04-23 04:16:28 383,488 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dll
    + 2008-04-23 04:16:28 384,512 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll
    + 2008-04-23 04:16:28 6,066,176 -c----w c:\windows\ie7updates\KB953838-IE7\ieframe.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll
    + 2008-04-23 04:16:28 267,776 -c----w c:\windows\ie7updates\KB953838-IE7\iertutil.dll
    + 2008-04-22 07:39:58 13,824 -c----w c:\windows\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:40:18 625,664 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-23 04:16:28 27,648 -c----w c:\windows\ie7updates\KB953838-IE7\jsproxy.dll
    + 2008-04-23 04:16:28 459,264 -c----w c:\windows\ie7updates\KB953838-IE7\msfeeds.dll
    + 2008-04-23 04:16:28 52,224 -c----w c:\windows\ie7updates\KB953838-IE7\msfeedsbs.dll
    + 2008-04-24 02:16:30 3,591,680 -c----w c:\windows\ie7updates\KB953838-IE7\mshtml.dll
    + 2008-04-23 04:16:28 478,208 -c----w c:\windows\ie7updates\KB953838-IE7\mshtmled.dll
    + 2008-04-23 04:16:28 193,024 -c----w c:\windows\ie7updates\KB953838-IE7\msrating.dll
    + 2008-04-23 04:16:28 671,232 -c----w c:\windows\ie7updates\KB953838-IE7\mstime.dll
    + 2008-04-23 04:16:28 102,912 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\updspapi.dll
    + 2008-04-23 04:16:28 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll
    + 2008-04-23 04:16:29 1,159,680 -c----w c:\windows\ie7updates\KB953838-IE7\urlmon.dll
    + 2008-04-23 04:16:29 233,472 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll
    + 2008-04-23 04:16:29 826,368 -c----w c:\windows\ie7updates\KB953838-IE7\wininet.dll
    + 2008-06-23 16:57:27 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
    + 2008-06-23 16:57:27 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
    + 2008-06-23 16:57:27 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
    + 2008-06-23 16:57:27 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
    + 2008-06-23 16:57:28 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
    + 2008-06-23 09:20:25 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
    + 2008-06-23 16:57:29 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
    + 2008-06-23 16:57:29 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
    + 2008-06-21 05:23:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
    + 2008-06-23 16:57:29 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
    + 2008-06-23 16:57:29 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
    + 2008-06-23 16:57:33 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
    + 2008-06-23 16:57:33 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
    + 2008-06-23 16:57:34 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
    + 2008-06-23 09:20:26 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
    + 2008-06-23 09:20:52 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
    + 2008-06-23 16:57:35 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
    + 2008-06-23 16:57:36 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
    + 2008-06-23 16:57:36 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
    + 2008-06-24 14:57:40 3,592,192 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
    + 2008-06-23 16:57:39 477,696 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
    + 2008-06-23 16:57:39 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
    + 2008-06-23 16:57:40 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
    + 2008-06-23 16:57:40 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
    + 2008-06-23 16:57:40 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
    + 2008-06-23 16:57:40 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
    + 2008-06-23 16:57:40 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
    + 2008-06-23 16:57:41 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
    + 2008-06-23 16:57:41 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
    + 2008-08-26 07:24:28 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
    + 2008-08-26 07:24:28 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
    + 2008-08-26 07:24:28 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
    + 2008-08-26 07:24:28 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
    + 2008-08-26 07:24:28 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
    + 2008-08-25 08:37:59 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
    + 2008-08-26 07:24:28 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
    + 2008-08-26 07:24:28 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
    + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
    + 2008-08-26 07:24:28 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
    + 2008-08-26 07:24:29 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
    + 2008-10-03 17:41:15 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
    + 2008-08-26 07:24:29 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
    + 2008-08-26 07:24:29 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
    + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
    + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
    + 2008-08-26 07:24:30 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
    + 2008-08-26 07:24:30 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
    + 2008-08-26 07:24:30 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
    + 2008-08-27 08:24:32 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
    + 2008-08-26 07:24:30 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
    + 2008-08-26 07:24:30 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
    + 2008-08-26 07:24:30 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
    + 2008-08-26 07:24:30 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
    + 2008-08-26 07:24:30 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
    + 2008-08-26 07:24:30 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
    + 2008-08-26 07:24:31 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
    + 2008-08-26 07:24:31 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
    + 2008-08-26 07:24:31 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
    + 2008-10-17 07:08:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:38:34 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll
    + 2008-10-16 20:38:34 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
    + 2008-10-16 20:38:34 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
    + 2008-10-16 20:38:35 133,120 -c----w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
    + 2008-10-16 20:38:35 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll
    + 2008-10-16 13:11:09 70,656 -c----w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
    + 2008-10-16 20:38:35 153,088 -c----w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
    + 2008-10-16 20:38:35 230,400 -c----w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
    + 2008-10-15 07:04:53 161,792 -c----w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
    + 2008-10-16 20:38:35 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
    + 2008-10-16 20:38:35 384,512 -c----w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
    + 2008-10-16 20:38:37 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
    + 2008-10-16 20:38:37 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
    + 2008-10-16 20:38:37 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
    + 2008-10-16 13:11:09 13,824 -c----w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
    + 2008-10-15 07:06:26 633,632 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
    + 2008-10-16 20:38:37 27,648 -c----w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
    + 2008-10-16 20:38:37 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
    + 2008-10-16 20:38:37 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
    + 2008-12-13 06:40:02 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
    + 2008-10-16 20:38:38 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
    + 2008-10-16 20:38:38 193,024 -c----w c:\windows\ie7updates\KB961260-IE7\msrating.dll
    + 2008-10-16 20:38:39 671,232 -c----w c:\windows\ie7updates\KB961260-IE7\mstime.dll
    + 2008-10-16 20:38:39 102,912 -c----w c:\windows\ie7updates\KB961260-IE7\occache.dll
    + 2008-10-16 20:38:39 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:38:39 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll
    + 2008-10-16 20:38:39 1,160,192 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
    + 2008-10-16 20:38:39 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
    + 2008-10-16 20:38:40 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll
    - 2004-08-10 04:00:00 220,160 ------w c:\windows\ime\mscandui.dll
    + 2008-04-14 00:11:58 220,160 ------w c:\windows\ime\mscandui.dll
    - 2004-08-10 04:00:00 130,048 ------w c:\windows\ime\SOFTKBD.DLL
    + 2008-04-14 00:12:06 130,048 ------w c:\windows\ime\softkbd.dll
    - 2004-08-10 04:00:00 62,976 ------w c:\windows\ime\SPGRMR.dll
    + 2008-04-13 16:43:18 62,976 ------w c:\windows\ime\spgrmr.dll
    - 2004-08-10 04:00:00 250,880 ------w c:\windows\ime\SPTIP.dll
    + 2008-04-14 00:12:06 250,368 ------w c:\windows\ime\sptip.dll
    - 2008-07-18 13:28:58 25,214 ----a-r c:\windows\Installer\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}\ARPPRODUCTICON.exe
    + 2009-02-08 22:48:30 25,214 ----a-r c:\windows\Installer\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}\ARPPRODUCTICON.exe
    - 2008-07-18 13:28:58 40,960 ----a-r c:\windows\Installer\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}\NewShortcut1.ECFEE69D_DA66_4F00_ABE5_54E931059C01.exe
    + 2009-02-08 22:48:30 40,960 ----a-r c:\windows\Installer\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}\NewShortcut1.ECFEE69D_DA66_4F00_ABE5_54E931059C01.exe
    + 2008-11-12 05:35:45 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    - 2006-09-04 21:31:28 12,288 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2009-02-12 04:58:09 12,288 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2006-09-04 21:31:28 135,168 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2009-02-12 04:58:09 135,168 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2006-09-04 21:31:28 11,264 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2009-02-12 04:58:09 11,264 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2006-09-04 21:31:28 27,136 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2009-02-12 04:58:09 27,136 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2006-09-04 21:31:28 4,096 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2009-02-12 04:58:09 4,096 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2006-09-04 21:31:28 794,624 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2009-02-12 04:58:09 794,624 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2006-09-04 21:31:28 249,856 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2009-02-12 04:58:09 249,856 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2006-09-04 21:31:28 23,040 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2009-02-12 04:58:09 23,040 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2006-09-04 21:31:28 286,720 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2009-02-12 04:58:09 286,720 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2006-09-04 21:31:28 409,600 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2009-02-12 04:58:09 409,600 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
    - 2006-01-09 21:32:34 2,158,592 ----a-w c:\windows\MicCal.exe
    + 2007-06-28 13:44:14 2,165,760 ----a-w c:\windows\MicCal.exe
    + 2004-09-29 16:38:58 2,676,224 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll
    + 2004-12-01 19:53:06 2,846,720 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-02-05 23:32:54 563,712 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-03-18 21:23:14 567,296 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-07-22 21:21:34 577,024 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-09-28 18:11:52 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-12-05 21:20:50 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll
    + 2006-02-03 11:40:48 578,560 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll
    + 2006-03-31 15:27:50 578,560 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll
    - 2003-02-21 09:09:46 57,344 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2008-07-25 16:16:58 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2003-02-21 09:09:32 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2008-07-25 16:16:58 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2008-07-25 16:17:02 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2008-07-25 16:17:02 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2008-07-25 16:17:02 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    - 2002-06-21 23:31:20 20,480 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_filter.dll
    + 2008-04-13 16:09:58 20,480 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_filter.dll
    - 2007-01-02 20:34:04 200,704 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_isapi.dll
    + 2008-04-13 16:09:59 200,704 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_isapi.dll
    - 2004-08-04 04:11:06 24,576 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_regiis.exe
    + 2008-04-13 16:10:01 24,576 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_regiis.exe
    - 2002-06-21 23:31:22 32,768 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_state.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_state.exe
    - 2007-01-02 20:34:04 32,768 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_wp.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_wp.exe
    - 2004-09-29 22:04:48 61,440 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\gacutil.exe
    + 2008-04-13 16:10:32 61,440 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\gacutil.exe
    - 2003-02-21 08:43:50 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2008-07-25 16:16:58 96,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    - 2007-01-02 20:28:28 2,273,280 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorsvr.dll
    + 2007-12-17 11:58:53 2,273,280 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorsvr.dll
    - 2007-01-02 20:28:46 2,281,472 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
    + 2007-12-17 11:59:26 2,281,472 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
    - 2007-01-15 20:11:26 73,728 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\netfxupdate.exe
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\netfxupdate.exe
    - 2007-01-15 20:11:30 57,344 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\SetRegNI.exe
    + 2007-12-17 11:59:54 66,592 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\setregni.exe
    - 2004-07-20 00:54:18 1,179,648 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\System.dll
    + 2007-12-17 11:59:56 1,179,648 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\system.dll
    - 2007-01-15 20:11:30 57,344 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\ToGac.exe
    + 2007-12-17 12:00:05 66,592 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\togac.exe
    + 2008-07-25 16:16:42 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2008-07-25 16:16:48 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2008-07-25 16:16:50 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2008-07-25 16:17:10 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2008-07-25 16:16:36 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2008-07-25 16:17:00 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2008-07-25 16:17:02 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2008-07-25 16:16:44 98,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2008-07-25 16:17:02 58,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2008-07-25 16:16:40 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2008-07-25 16:16:40 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2008-07-25 16:16:40 17,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2008-07-25 16:16:40 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2008-07-25 16:16:38 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2008-07-25 16:16:40 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2008-07-25 16:16:40 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2008-07-25 16:16:40 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2008-07-25 16:16:40 34,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2008-11-25 09:59:18 31,560 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2008-07-25 16:16:40 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2008-07-25 16:17:00 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2008-07-25 16:17:00 89,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2008-07-25 16:16:50 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2008-07-25 16:16:50 1,163,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2008-07-25 16:16:50 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll

  9. #9
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 5

    + 2008-07-25 16:17:02 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2008-07-25 16:17:00 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2008-07-25 16:16:50 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2008-07-25 16:16:46 62,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2008-07-25 16:16:46 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2008-07-25 16:17:16 575,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    + 2008-07-25 16:17:00 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2008-07-25 16:16:58 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2008-07-25 16:17:00 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2008-07-25 16:17:02 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2008-07-25 16:17:00 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2008-07-25 16:17:00 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2008-07-25 16:17:00 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2008-07-25 16:17:00 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2008-07-25 16:17:00 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2008-07-25 16:17:00 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2008-07-25 16:16:54 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2008-07-25 16:16:56 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2008-07-25 16:16:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2008-07-25 16:16:56 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2008-07-25 16:16:56 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2008-07-25 16:16:54 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2008-07-25 16:17:14 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-07-25 16:17:14 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2008-07-25 16:17:12 659,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2008-07-25 16:16:38 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2008-07-25 16:17:16 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2008-07-25 16:16:38 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2008-07-25 16:16:38 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-07-25 16:16:38 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2008-07-25 16:16:40 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2008-07-25 16:16:56 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2008-11-25 09:59:40 990,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2008-07-25 16:17:00 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2008-07-25 16:17:00 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2008-07-25 16:17:00 46,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2008-11-25 09:59:40 364,872 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2008-07-25 16:17:00 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2008-11-25 09:59:40 4,546,560 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2008-07-25 16:17:00 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2008-07-25 16:17:04 345,600 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2008-07-25 16:17:00 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2008-07-25 16:16:58 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2008-07-25 16:17:02 230,912 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2008-07-25 16:17:02 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2008-07-25 16:17:02 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2008-11-25 09:59:36 5,813,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2008-07-25 16:17:04 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2008-07-25 16:17:02 100,856 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2008-07-25 16:17:02 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2008-07-25 16:17:02 88,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2008-07-25 16:16:58 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2008-07-25 16:17:00 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 16:17:00 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2008-07-25 16:17:06 61,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2008-07-25 16:17:02 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2008-07-25 16:17:00 118,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2008-07-25 16:17:04 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2008-07-25 16:17:02 392,184 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2008-07-25 16:17:02 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2008-07-25 16:17:02 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2008-07-25 16:17:00 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2008-07-25 16:17:00 2,933,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2008-11-25 09:59:40 486,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2008-07-25 16:17:02 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2008-07-25 16:16:46 970,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2008-07-25 16:17:00 5,062,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2008-07-25 16:17:00 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2008-07-25 16:17:02 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2008-07-25 16:17:00 3,149,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2008-07-25 16:17:00 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2008-07-25 16:17:00 626,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2008-07-25 16:17:02 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2008-07-25 16:17:02 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2008-07-25 16:17:02 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2008-07-25 16:17:00 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2008-07-25 16:17:00 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2008-07-25 16:17:00 303,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2008-07-25 16:17:00 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-07-25 16:17:00 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2008-07-25 16:17:00 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2008-07-25 16:17:02 261,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2008-11-25 09:59:40 5,242,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2008-07-25 16:17:02 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2008-07-25 16:17:02 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2008-07-25 16:17:00 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2008-07-25 16:17:00 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2008-11-25 09:59:40 2,048,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2008-07-25 16:17:02 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2008-07-25 16:17:10 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2008-07-25 16:16:38 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2008-11-25 09:59:18 436,040 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2008-07-25 16:17:02 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2008-07-30 00:16:38 168,968 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
    + 2008-07-30 00:24:50 881,664 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
    + 2008-07-30 00:16:38 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    + 2008-07-30 00:16:38 163,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
    + 2008-07-30 00:16:38 11,280 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
    + 2008-07-30 00:16:38 156,688 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
    + 2008-07-30 00:16:38 20,504 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
    + 2008-07-30 00:16:38 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2008-07-30 00:16:38 132,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    + 2008-07-30 00:16:38 966,656 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2008-12-06 01:12:12 5,931,008 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    + 2008-07-30 00:16:38 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2008-07-30 00:16:38 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2008-07-30 00:16:38 152,576 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
    + 2008-07-30 00:32:52 17,448 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
    + 2008-07-30 02:10:04 806,928 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
    + 2008-07-30 02:10:04 4,883,464 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
    + 2008-07-30 02:10:04 2,637,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
    + 2008-07-30 02:10:04 71,160 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2008-07-30 00:59:58 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    + 2008-07-30 02:10:04 46,104 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
    + 2008-07-30 00:59:58 132,120 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2008-07-30 01:35:46 864,256 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
    + 2008-12-06 00:35:22 1,736,528 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
    + 2008-07-30 04:40:48 168,448 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
    + 2008-07-30 04:40:48 233,976 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
    + 2008-07-30 04:40:48 41,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2008-07-30 04:40:48 41,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    + 2008-07-30 04:40:48 41,984 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
    + 2008-07-30 04:40:48 1,548,280 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
    + 2008-07-30 04:40:48 78,856 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
    + 2008-07-30 04:40:48 95,224 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
    + 2008-07-30 04:15:24 225,490 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
    + 2008-07-29 23:47:34 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
    + 2008-07-29 23:47:34 276,984 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
    + 2008-07-29 23:47:34 1,064,448 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
    + 2008-07-29 23:47:34 177,152 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
    + 2008-07-29 23:47:34 269,304 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    + 2008-07-29 23:47:34 113,152 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
    + 2008-07-29 23:47:34 84,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
    + 2008-07-29 23:47:34 125,440 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
    + 2008-07-29 23:47:34 126,464 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
    + 2008-07-29 23:47:34 130,048 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
    + 2008-07-29 23:47:34 137,728 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
    + 2008-07-29 23:47:34 122,368 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
    + 2008-07-29 23:47:34 133,120 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
    + 2008-07-29 23:47:34 111,104 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
    + 2008-07-29 23:47:34 132,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
    + 2008-07-29 23:47:34 128,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
    + 2008-07-29 23:47:34 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
    + 2008-07-29 23:47:34 94,720 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
    + 2008-07-29 23:47:34 129,024 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
    + 2008-07-29 23:47:34 121,856 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
    + 2008-07-29 23:47:34 128,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
    + 2008-07-29 23:47:34 122,880 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
    + 2008-07-29 23:47:34 123,904 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
    + 2008-07-29 23:47:34 121,344 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
    + 2008-07-29 23:47:34 121,344 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
    + 2008-07-29 23:47:34 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
    + 2008-07-29 23:47:34 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
    + 2008-07-29 23:47:34 131,584 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
    + 2008-07-29 23:47:34 110,080 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
    + 2008-07-29 23:47:34 1,364,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
    + 2008-07-29 23:47:34 1,054,208 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
    + 2008-07-29 23:47:34 632,320 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
    + 2008-07-29 23:47:34 413,184 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
    + 2008-07-29 23:47:34 689,152 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
    + 2008-07-29 23:47:34 102,904 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
    + 2008-07-29 23:47:34 89,592 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
    + 2008-07-29 23:47:34 108,536 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
    + 2008-07-29 23:47:34 108,536 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
    + 2008-07-29 23:47:34 111,608 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
    + 2008-07-29 23:47:34 113,656 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
    + 2008-07-29 23:47:34 106,488 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
    + 2008-07-29 23:47:34 112,120 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
    + 2008-07-29 23:47:34 101,368 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
    + 2008-07-29 23:47:34 111,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
    + 2008-07-29 23:47:34 110,072 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
    + 2008-07-29 23:47:34 95,224 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
    + 2008-07-29 23:47:34 92,664 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
    + 2008-07-29 23:47:34 108,536 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
    + 2008-07-29 23:47:34 106,488 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
    + 2008-07-29 23:47:34 109,048 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
    + 2008-07-29 23:47:34 107,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
    + 2008-07-29 23:47:34 107,000 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
    + 2008-07-29 23:47:34 105,976 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
    + 2008-07-29 23:47:34 106,488 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
    + 2008-07-29 23:47:34 89,080 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
    + 2008-07-29 23:47:34 110,072 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
    + 2008-07-29 23:47:34 111,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
    + 2008-07-29 23:47:34 107,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
    + 2008-07-29 23:47:34 984,056 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
    + 2008-07-30 04:40:48 802,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
    + 2008-07-30 04:40:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
    + 2008-07-30 04:40:48 41,984 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
    + 2008-07-30 04:40:48 91,136 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
    + 2008-07-30 04:40:48 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
    + 2008-07-30 04:40:48 1,720,824 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
    + 2008-07-30 04:40:48 196,104 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
    + 2008-07-30 04:40:48 70,648 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
    - 2004-08-10 04:00:00 24,064 ------w c:\windows\msagent\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\msagent\agentanm.dll
    - 2004-08-10 04:00:00 214,016 ------w c:\windows\msagent\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ------w c:\windows\msagent\agentctl.dll
    - 2006-10-12 13:54:18 42,496 ------w c:\windows\msagent\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ------w c:\windows\msagent\agentdp2.dll
    - 2007-03-09 13:58:57 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    - 2004-08-10 04:00:00 49,152 ------w c:\windows\msagent\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ------w c:\windows\msagent\agentmpx.dll
    - 2004-08-10 04:00:00 24,064 ------w c:\windows\msagent\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\msagent\agentpsh.dll
    - 2004-08-10 04:00:00 44,032 ------w c:\windows\msagent\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ------w c:\windows\msagent\agentsr.dll
    - 2006-10-12 11:54:07 256,512 ------w c:\windows\msagent\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ------w c:\windows\msagent\agentsvr.exe
    - 2004-08-10 04:00:00 24,064 ------w c:\windows\msagent\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ------w c:\windows\msagent\agtintl.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\msagent\intl\agt0405.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt0406.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\msagent\intl\agt0406.dll
    - 2004-08-10 04:00:00 21,504 ------w c:\windows\msagent\intl\agt0407.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\msagent\intl\agt0407.dll
    - 2004-08-10 04:00:00 22,016 ------w c:\windows\msagent\intl\agt0408.dll
    + 2007-04-02 18:26:00 22,016 ------w c:\windows\msagent\intl\agt0408.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt0409.dll
    + 2008-04-13 17:32:28 19,968 ------w c:\windows\msagent\intl\agt0409.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt040b.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\msagent\intl\agt040b.dll
    - 2004-08-10 04:00:00 21,504 ------w c:\windows\msagent\intl\agt040c.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\msagent\intl\agt040c.dll
    - 2004-08-10 04:00:00 19,968 ------w c:\windows\msagent\intl\agt040e.dll
    + 2007-04-02 18:26:00 19,968 ------w c:\windows\msagent\intl\agt040e.dll
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\msagent\intl\agt0410.dll
    + 2007-04-02 18:26:00 20,992 ------w c:\windows\msagent\intl\agt0410.dll
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\msagent\intl\agt0413.dll
    + 2007-04-02 18:26:01 20,992 ------w c:\windows\msagent\intl\agt0413.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\msagent\intl\agt0414.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt0415.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\msagent\intl\agt0415.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\msagent\intl\agt0416.dll
    + 2007-04-02 18:26:01 20,480 ------w c:\windows\msagent\intl\agt0416.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\msagent\intl\agt0419.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\msagent\intl\agt041d.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\msagent\intl\agt041f.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\msagent\intl\agt041f.dll
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\msagent\intl\agt0816.dll
    + 2007-04-02 18:26:02 20,992 ------w c:\windows\msagent\intl\agt0816.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\msagent\intl\agt0c0a.dll
    + 2007-04-02 18:26:02 20,480 ------w c:\windows\msagent\intl\agt0c0a.dll
    - 2004-08-10 04:00:00 39,936 ------w c:\windows\msagent\mslwvtts.dll
    + 2008-04-14 00:12:00 39,936 ------w c:\windows\msagent\mslwvtts.dll
    - 2004-08-10 04:00:00 90,624 ------w c:\windows\mui\muisetup.exe
    + 2008-04-14 00:12:29 90,624 ------w c:\windows\mui\muisetup.exe
    - 2006-06-03 11:40:49 33,792 ------w c:\windows\network diagnostic\custsat.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\network diagnostic\custsat.dll
    - 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe
    - 2000-08-31 12:00:00 28,672 ----a-w c:\windows\Nircmd.exe
    + 2000-08-31 12:00:00 29,696 ----a-w c:\windows\Nircmd.exe
    - 2004-08-10 04:00:00 69,120 ------w c:\windows\NOTEPAD.EXE
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\notepad.exe
    - 2004-08-10 04:00:00 768,512 ------w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe
    + 2008-04-14 00:12:21 769,024 ------w c:\windows\pchealth\helpctr\binaries\helpctr.exe
    - 2004-08-10 04:00:00 743,936 ------w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
    + 2008-04-14 00:12:21 744,448 ------w c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\pchealth\helpctr\binaries\HscUpd.exe
    + 2008-04-14 00:12:21 18,432 ------w c:\windows\pchealth\helpctr\binaries\hscupd.exe
    - 2005-09-27 07:34:26 169,984 ------w c:\windows\pchealth\helpctr\binaries\msconfig.exe
    + 2008-04-14 00:12:27 169,984 ------w c:\windows\pchealth\helpctr\binaries\msconfig.exe
    - 2004-08-10 04:00:00 376,320 ------w c:\windows\pchealth\helpctr\binaries\msinfo.dll
    + 2008-04-14 00:11:59 376,832 ------w c:\windows\pchealth\helpctr\binaries\msinfo.dll
    - 2004-08-10 04:00:00 102,400 ------w c:\windows\pchealth\helpctr\binaries\pchshell.dll
    + 2008-04-14 00:12:02 102,912 ------w c:\windows\pchealth\helpctr\binaries\pchshell.dll
    - 2004-08-10 04:00:00 38,912 ------w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    + 2008-04-14 00:12:02 38,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    - 2006-06-10 12:51:33 92,947 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
    + 2008-08-04 15:43:21 92,947 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
    - 2006-06-10 12:51:33 7,950 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
    + 2008-08-04 15:43:21 8,688 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
    - 2006-06-10 12:50:48 341,048 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\HPBasicDetection3.dll
    + 2008-08-04 15:42:51 341,048 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\HPBasicDetection3.dll
    - 2006-06-10 12:50:48 163,840 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\modemcheck.dll
    + 2008-08-04 15:42:51 163,840 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\modemcheck.dll
    - 2006-06-10 12:50:48 61,440 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\modemutil.dll
    + 2008-08-04 15:42:51 61,440 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\modemutil.dll
    - 2006-06-10 12:50:48 40,960 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\ScDmi.dll
    + 2008-08-04 15:42:51 40,960 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\ScDmi.dll
    - 2006-06-10 12:50:48 32,768 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\Scom.dll
    + 2008-08-04 15:42:51 32,768 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\Scom.dll
    - 2006-06-10 12:50:48 32,768 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\uploadHSC.dll
    + 2008-08-04 15:42:51 32,768 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\uploadHSC.dll
    - 2006-05-30 16:20:10 208,896 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
    + 2008-08-04 15:42:51 217,088 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
    - 2006-06-10 12:50:48 44,032 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\Scripts\devcon.exe
    + 2008-08-04 15:42:52 44,032 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\Scripts\devcon.exe
    - 2006-06-10 12:50:50 45,056 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\uninstallUI\eHelpSetup.exe
    + 2008-08-04 15:42:53 45,056 ----a-w c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\uninstallUI\eHelpSetup.exe
    - 2004-08-10 04:00:00 150,528 ------w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe
    + 2008-04-14 00:12:38 150,528 ------w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe
    - 2004-08-10 04:00:00 151,552 ------w c:\windows\PeerNet\sqldb20.dll
    + 2008-04-14 00:12:06 151,552 ------w c:\windows\PeerNet\sqldb20.dll
    - 2004-08-10 04:00:00 462,848 ------w c:\windows\PeerNet\sqlqp20.dll
    + 2008-04-14 00:12:06 462,848 ------w c:\windows\PeerNet\sqlqp20.dll
    - 2004-08-10 04:00:00 110,592 ------w c:\windows\PeerNet\sqlse20.dll
    + 2008-04-14 00:12:06 110,592 ------w c:\windows\PeerNet\sqlse20.dll
    - 2004-08-10 11:00:00 146,432 ------w c:\windows\regedit.exe
    + 2008-04-14 00:12:32 146,432 ------w c:\windows\regedit.exe
    - 2006-03-08 11:54:04 16,010,240 ----a-w c:\windows\RTHDCPL.EXE
    + 2007-10-25 08:57:56 16,855,552 ----a-w c:\windows\RTHDCPL.EXE
    - 2006-02-21 00:05:50 9,712,640 ----a-w c:\windows\RTLCPL.EXE
    + 2007-03-23 16:19:10 9,715,200 ----a-w c:\windows\RTLCPL.EXE
    - 2006-03-03 03:13:10 360,448 ----a-w c:\windows\RtlUpd.exe
    + 2007-07-26 15:06:22 1,191,936 ----a-w c:\windows\RtlUpd.exe
    + 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
    + 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
    + 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
    + 2008-04-14 00:11:48 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll
    + 2004-08-04 02:32:22 231,552 ------w c:\windows\ServicePackFiles\i386\ac97ali.sys
    + 2004-08-04 02:32:32 84,480 ------w c:\windows\ServicePackFiles\i386\ac97via.sys
    + 2008-04-14 00:11:48 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll
    + 2008-04-14 00:12:11 184,320 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
    + 2008-04-14 00:11:48 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
    + 2008-04-14 00:11:48 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
    + 2008-04-14 00:11:48 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll
    + 2008-04-14 00:11:48 115,712 ------w c:\windows\ServicePackFiles\i386\aclui.dll
    + 2008-04-13 18:36:35 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys
    + 2008-04-14 00:11:48 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
    + 2008-04-14 00:11:48 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll
    + 2008-04-14 00:12:12 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
    + 2008-04-14 00:11:48 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
    + 2008-04-14 00:11:48 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
    + 2008-04-14 00:11:48 29,696 ------w c:\windows\ServicePackFiles\i386\admexs.dll
    + 2008-04-14 00:11:48 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
    + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
    + 2004-08-04 02:32:24 10,880 ------w c:\windows\ServicePackFiles\i386\admjoy.sys
    + 2008-04-14 00:11:48 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
    + 2008-04-14 00:11:48 43,520 ------w c:\windows\ServicePackFiles\i386\admwprox.dll
    + 2008-04-14 00:11:48 290,816 ------w c:\windows\ServicePackFiles\i386\adsiis51.dll
    + 2008-04-14 00:11:48 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
    + 2008-04-14 00:11:48 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
    + 2008-04-14 00:11:48 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll
    + 2008-04-14 00:11:48 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll
    + 2008-04-14 00:11:48 123,392 ------w c:\windows\ServicePackFiles\i386\adsnw.dll
    + 2004-07-17 15:35:20 85,813 ------w c:\windows\ServicePackFiles\i386\adsutil.vbs
    + 2008-04-14 00:11:48 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll
    + 2008-04-14 00:11:48 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll
    + 2008-04-14 00:11:48 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll
    + 2008-04-14 00:11:48 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll
    + 2008-04-14 00:11:48 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll
    + 2008-04-14 00:11:48 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll
    + 2008-04-14 00:11:48 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll
    + 2008-04-14 00:11:48 617,472 ------w c:\windows\ServicePackFiles\i386\advapi32.dll
    + 2008-04-14 00:11:48 99,840 ------w c:\windows\ServicePackFiles\i386\advpack.dll
    + 2008-04-13 16:39:23 142,592 ------w c:\windows\ServicePackFiles\i386\aec.sys
    + 2008-04-13 19:19:23 138,112 ------w c:\windows\ServicePackFiles\i386\afd.sys
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll
    + 2008-04-14 00:11:48 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll
    + 2008-04-14 00:11:48 42,496 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll
    + 2008-04-14 00:11:48 57,344 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll
    + 2008-04-14 00:11:48 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll
    + 2008-04-14 00:11:48 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll
    + 2008-04-14 00:12:12 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe
    + 2008-04-13 18:36:38 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys
    + 2008-04-13 18:36:39 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll
    + 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll
    + 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll
    + 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll
    + 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll
    + 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll
    + 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll
    + 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll
    + 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll
    + 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll
    + 2008-04-14 00:11:49 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll
    + 2008-04-14 00:12:12 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe
    + 2008-04-14 00:12:12 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe
    + 2008-04-13 18:36:38 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys
    + 2008-04-14 00:11:49 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll
    + 2008-04-13 18:36:39 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys
    + 2008-04-13 18:31:32 37,376 ------w c:\windows\ServicePackFiles\i386\amdk6.sys
    + 2008-04-13 18:31:33 37,760 ------w c:\windows\ServicePackFiles\i386\amdk7.sys
    + 2008-04-14 00:11:49 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll
    + 2004-08-04 02:31:20 36,224 ------w c:\windows\ServicePackFiles\i386\an983.sys
    + 2008-04-14 00:11:49 108,544 ------w c:\windows\ServicePackFiles\i386\appconf.dll
    + 2008-04-14 00:11:49 125,952 ------w c:\windows\ServicePackFiles\i386\apphelp.dll
    + 2008-04-14 00:11:49 167,936 ------w c:\windows\ServicePackFiles\i386\appmgmts.dll
    + 2008-04-14 00:11:49 295,936 ------w c:\windows\ServicePackFiles\i386\appmgr.dll
    + 2008-04-14 00:11:49 331,264 ------w c:\windows\ServicePackFiles\i386\aqueue.dll
    + 2008-04-13 18:51:25 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys
    + 2008-04-14 00:11:49 369,664 ------w c:\windows\ServicePackFiles\i386\asp51.dll
    + 2008-04-13 16:09:58 20,480 ------w c:\windows\ServicePackFiles\i386\aspnet_filter.dll
    + 2008-04-13 16:09:59 200,704 ------w c:\windows\ServicePackFiles\i386\aspnet_isapi.dll
    + 2008-04-13 16:10:01 24,576 ------w c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_state.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_wp.exe
    + 2008-04-14 00:12:12 30,208 ------w c:\windows\ServicePackFiles\i386\asr_fmt.exe
    + 2008-04-14 00:12:12 32,768 ------w c:\windows\ServicePackFiles\i386\asr_pfu.exe
    + 2008-04-14 00:11:49 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll
    + 2008-04-13 18:57:27 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys
    + 2008-04-14 00:12:12 25,088 ------w c:\windows\ServicePackFiles\i386\at.exe
    + 2008-04-13 18:40:30 96,512 ------w c:\windows\ServicePackFiles\i386\atapi.sys
    + 2004-08-04 02:29:30 56,623 ------w c:\windows\ServicePackFiles\i386\ati1btxx.sys
    + 2004-08-04 02:29:30 11,615 ------w c:\windows\ServicePackFiles\i386\ati1mdxx.sys
    + 2004-08-04 02:29:30 12,047 ------w c:\windows\ServicePackFiles\i386\ati1pdxx.sys
    + 2004-08-04 02:29:32 30,671 ------w c:\windows\ServicePackFiles\i386\ati1raxx.sys
    + 2004-08-04 02:29:32 63,663 ------w c:\windows\ServicePackFiles\i386\ati1rvxx.sys
    + 2004-08-04 02:29:32 26,367 ------w c:\windows\ServicePackFiles\i386\ati1snxx.sys
    + 2004-08-04 02:29:32 21,343 ------w c:\windows\ServicePackFiles\i386\ati1ttxx.sys
    + 2004-08-04 02:29:32 36,463 ------w c:\windows\ServicePackFiles\i386\ati1tuxx.sys
    + 2004-08-04 02:29:32 29,455 ------w c:\windows\ServicePackFiles\i386\ati1xbxx.sys
    + 2004-08-04 02:29:32 34,735 ------w c:\windows\ServicePackFiles\i386\ati1xsxx.sys
    + 2008-04-14 00:11:49 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll
    + 2008-04-14 00:11:49 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
    + 2008-04-14 00:11:49 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll
    + 2004-08-04 02:29:28 327,040 ------w c:\windows\ServicePackFiles\i386\ati2mtaa.sys
    + 2004-08-04 02:29:28 701,440 ------w c:\windows\ServicePackFiles\i386\ati2mtag.sys
    + 2008-04-14 00:11:49 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
    + 2008-04-14 00:11:49 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
    + 2008-04-14 00:11:50 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll
    + 2004-08-04 02:29:28 57,856 ------w c:\windows\ServicePackFiles\i386\atinbtxx.sys
    + 2004-08-04 02:29:30 13,824 ------w c:\windows\ServicePackFiles\i386\atinmdxx.sys
    + 2004-08-04 02:29:30 14,336 ------w c:\windows\ServicePackFiles\i386\atinpdxx.sys
    + 2004-08-04 02:29:30 52,224 ------w c:\windows\ServicePackFiles\i386\atinraxx.sys
    + 2004-08-04 02:29:32 104,960 ------w c:\windows\ServicePackFiles\i386\atinrvxx.sys
    + 2004-08-04 02:29:32 28,672 ------w c:\windows\ServicePackFiles\i386\atinsnxx.sys
    + 2004-08-04 02:29:32 13,824 ------w c:\windows\ServicePackFiles\i386\atinttxx.sys
    + 2004-08-04 02:29:32 73,216 ------w c:\windows\ServicePackFiles\i386\atintuxx.sys
    + 2004-08-04 02:29:32 31,744 ------w c:\windows\ServicePackFiles\i386\atinxbxx.sys
    + 2004-08-04 02:29:32 63,488 ------w c:\windows\ServicePackFiles\i386\atinxsxx.sys
    + 2008-04-14 00:11:50 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll
    + 2008-04-14 00:11:50 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll
    + 2008-04-14 00:11:50 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll
    + 2008-04-14 00:12:12 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe
    + 2008-04-13 18:51:25 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys
    + 2008-04-14 00:09:01 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll
    + 2008-04-13 18:51:30 55,808 ------w c:\windows\ServicePackFiles\i386\atmlane.sys
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:12:12 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe
    + 2008-04-14 00:11:50 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll
    + 2008-04-14 00:11:50 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll
    + 2008-04-14 00:11:50 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll
    + 2008-04-14 00:11:50 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll
    + 2008-04-14 00:11:50 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll
    + 2008-04-14 00:11:50 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll
    + 2008-04-14 00:12:12 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe
    + 2008-04-14 00:11:50 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll
    + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe
    + 2008-04-14 00:11:50 62,464 ------w c:\windows\ServicePackFiles\i386\authz.dll
    + 2008-04-14 00:12:12 588,800 ------w c:\windows\ServicePackFiles\i386\autochk.exe
    + 2008-04-14 00:12:12 602,624 ------w c:\windows\ServicePackFiles\i386\autoconv.exe
    + 2008-04-14 00:12:13 580,608 ------w c:\windows\ServicePackFiles\i386\autofmt.exe
    + 2008-04-14 00:12:13 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe
    + 2008-04-13 18:46:20 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys
    + 2008-04-13 18:46:07 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys
    + 2008-04-14 00:11:50 84,992 ------w c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll
    + 2008-04-14 00:11:50 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll
    + 2008-04-14 00:11:50 29,184 ------w c:\windows\ServicePackFiles\i386\batmeter.dll
    + 2008-04-14 00:11:50 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll
    + 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys
    + 2008-04-13 18:46:21 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys
    + 2008-04-14 00:11:50 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll
    + 2008-04-14 00:11:50 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll
    + 2008-04-14 00:12:13 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe
    + 2008-04-14 00:12:13 142,848 ------w c:\windows\ServicePackFiles\i386\bootcfg.exe
    + 2008-04-13 18:53:23 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys
    + 2008-04-13 17:03:24 63,488 ------w c:\windows\ServicePackFiles\i386\browselc.dll
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\browser.dll
    + 2008-04-14 00:11:50 1,025,024 ------w c:\windows\ServicePackFiles\i386\browseui.dll
    + 2008-04-14 00:11:50 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll
    + 2008-04-14 00:11:50 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll
    + 2008-04-13 18:46:33 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys
    + 2008-04-13 18:46:33 37,888 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys
    + 2008-04-13 18:51:34 101,120 ------w c:\windows\ServicePackFiles\i386\bthpan.sys
    + 2008-04-13 18:46:32 273,024 ------w c:\windows\ServicePackFiles\i386\bthport.sys
    + 2008-04-13 18:46:31 36,480 ------w c:\windows\ServicePackFiles\i386\bthprint.sys
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll
    + 2008-04-13 18:46:29 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll
    + 2008-04-14 00:11:50 60,416 ------w c:\windows\ServicePackFiles\i386\cabinet.dll
    + 2008-04-14 00:11:50 84,480 ------w c:\windows\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:12:13 19,968 ------w c:\windows\ServicePackFiles\i386\cacls.exe
    + 2008-04-14 00:11:50 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 150,016 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll
    + 2004-07-20 00:54:04 94,208 ------w c:\windows\ServicePackFiles\i386\caspol.exe
    + 2008-04-14 00:11:50 226,304 ------w c:\windows\ServicePackFiles\i386\catsrv.dll
    + 2008-04-14 00:11:50 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll
    + 2008-04-14 00:11:50 625,664 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll
    + 2008-04-13 18:46:23 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys
    + 2008-04-13 19:14:21 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys
    + 2008-04-14 00:11:50 151,040 ------w c:\windows\ServicePackFiles\i386\cdfview.dll
    + 2008-04-14 00:11:50 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll
    + 2008-04-14 00:11:50 2,091,520 ------w c:\windows\ServicePackFiles\i386\cdosys.dll
    + 2008-04-13 18:40:46 62,976 ------w c:\windows\ServicePackFiles\i386\cdrom.sys
    + 2008-04-14 00:11:50 194,560 ------w c:\windows\ServicePackFiles\i386\certcli.dll
    + 2008-04-14 00:11:50 457,728 ------w c:\windows\ServicePackFiles\i386\certmgr.dll
    + 2008-04-14 00:11:50 38,912 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll
    + 2008-04-14 00:09:05 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-04-14 00:12:14 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe
    + 2008-04-14 00:11:50 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-04-13 18:40:58 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys
    + 2008-04-14 00:11:50 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll
    + 2008-04-14 00:11:50 1,358,848 ------w c:\windows\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:12:14 56,832 ------w c:\windows\ServicePackFiles\i386\cipher.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
    + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-04-14 00:11:50 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:12:14 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:12:14 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:11:50 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-14 00:11:50 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:12:14 389,120 ------w c:\windows\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:11:50 344,064 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:12:14 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:11:50 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:12:15 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:11:50 39,424 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:51 46,592 ------w c:\windows\ServicePackFiles\i386\coadmin.dll
    + 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll
    + 2008-04-14 00:11:51 60,416 ------w c:\windows\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll
    + 2008-04-14 00:11:51 195,072 ------w c:\windows\ServicePackFiles\i386\comadmin.dll
    + 2008-04-14 00:11:51 617,472 ------w c:\windows\ServicePackFiles\i386\comctl32.dll
    + 2008-04-14 00:11:51 276,992 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll
    + 2008-04-14 00:11:51 252,928 ------w c:\windows\ServicePackFiles\i386\compatui.dll
    + 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys
    + 2008-04-14 00:11:51 24,064 ------w c:\windows\ServicePackFiles\i386\compfilt.dll
    + 2008-04-14 00:11:51 229,376 ------w c:\windows\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll
    + 2008-04-14 00:12:15 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe
    + 2008-04-14 00:11:51 792,064 ------w c:\windows\ServicePackFiles\i386\comres.dll
    + 2008-04-13 18:43:32 9,728 ------w c:\windows\ServicePackFiles\i386\comsdupd.exe
    + 2008-04-14 00:11:51 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll
    + 2008-04-14 00:11:51 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll
    + 2008-04-14 00:11:51 1,267,200 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll
    + 2008-04-14 00:11:51 539,648 ------w c:\windows\ServicePackFiles\i386\comuid.dll
    + 2008-04-14 00:12:15 1,032,192 ------w c:\windows\ServicePackFiles\i386\conf.exe
    + 2008-04-14 00:11:51 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 357,888 ------w c:\windows\ServicePackFiles\i386\confmsp.dll
    + 2008-04-14 00:12:15 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe
    + 2004-08-04 04:11:12 69,632 ------w c:\windows\ServicePackFiles\i386\corperfmonext.dll
    + 2008-04-14 00:11:51 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll
    + 2008-04-14 00:11:51 163,840 ------w c:\windows\ServicePackFiles\i386\credui.dll
    + 2008-04-13 18:31:32 36,736 ------w c:\windows\ServicePackFiles\i386\crusoe.sys
    + 2008-04-14 00:11:51 599,040 ------w c:\windows\ServicePackFiles\i386\crypt32.dll
    + 2008-04-14 00:11:51 74,752 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll
    + 2008-04-14 00:11:51 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll
    + 2008-04-14 00:11:51 53,760 ------w c:\windows\ServicePackFiles\i386\cryptext.dll
    + 2008-04-14 00:11:51 64,512 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll
    + 2008-04-14 00:11:51 62,464 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll
    + 2008-04-14 00:11:51 512,512 ------w c:\windows\ServicePackFiles\i386\cryptui.dll
    + 2004-08-04 04:11:18 49,152 ------w c:\windows\ServicePackFiles\i386\csc.exe
    + 2008-04-14 00:11:51 101,888 ------w c:\windows\ServicePackFiles\i386\cscdll.dll
    + 2004-07-20 00:54:04 589,824 ------w c:\windows\ServicePackFiles\i386\cscomp.dll
    + 2008-04-14 00:12:15 139,264 ------w c:\windows\ServicePackFiles\i386\cscript.exe
    + 2008-04-14 00:11:51 326,656 ------w c:\windows\ServicePackFiles\i386\cscui.dll
    + 2008-04-14 00:11:51 32,256 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe
    + 2008-04-14 00:12:16 15,360 ------w c:\windows\ServicePackFiles\i386\ctfmon.exe
    + 2008-04-14 00:11:51 249,856 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\i386\custsat.dll
    + 2004-08-04 02:32:26 48,640 ------w c:\windows\ServicePackFiles\i386\cwrwdm.sys
    + 2008-04-14 00:11:51 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll
    + 2008-04-14 00:11:51 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll
    + 2008-04-14 00:11:51 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll
    + 2008-04-14 00:11:51 824,320 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll
    + 2008-04-14 00:11:51 1,054,208 ------w c:\windows\ServicePackFiles\i386\danim.dll
    + 2008-03-25 04:50:25 554,008 ------w c:\windows\ServicePackFiles\i386\dao360.dll
    + 2008-04-14 00:11:51 54,272 ------w c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll
    + 2008-04-14 00:12:16 42,496 ------w c:\windows\ServicePackFiles\i386\davcdata.exe
    + 2008-04-14 00:11:51 25,088 ------w c:\windows\ServicePackFiles\i386\davclnt.dll
    + 2008-04-14 00:11:51 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll
    + 2008-04-14 00:11:51 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-04-14 00:11:51 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:25:26 1,804 ------w c:\windows\ServicePackFiles\i386\dcache.bin
    + 2008-04-14 00:11:51 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll
    + 2008-04-14 00:11:51 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:12:16 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe
    + 2008-04-14 00:12:16 30,208 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe
    + 2008-04-14 00:11:51 279,552 ------w c:\windows\ServicePackFiles\i386\ddraw.dll
    + 2008-04-14 00:11:51 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll
    + 2008-04-14 00:12:16 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe
    + 2008-04-14 00:11:51 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll
    + 2008-04-14 00:11:51 282,624 ------w c:\windows\ServicePackFiles\i386\devmgr.dll
    + 2008-04-14 00:12:16 82,944 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe
    + 2008-04-14 00:12:16 105,472 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
    + 2008-04-14 00:11:51 39,424 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-04-14 00:11:51 124,416 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll
    + 2008-04-14 00:11:51 111,104 ------w c:\windows\ServicePackFiles\i386\dgnet.dll
    + 2008-04-14 00:11:51 126,976 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:52 379,904 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll
    + 2008-04-14 00:12:17 539,136 ------w c:\windows\ServicePackFiles\i386\dialer.exe
    + 2008-04-14 00:12:17 87,040 ------w c:\windows\ServicePackFiles\i386\diantz.exe
    + 2004-08-10 04:00:00 884,712 ------w c:\windows\ServicePackFiles\i386\digcore.exe
    + 2008-04-14 00:11:52 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll
    + 2008-04-14 00:11:52 158,720 ------w c:\windows\ServicePackFiles\i386\dinput.dll
    + 2008-04-14 00:11:52 181,760 ------w c:\windows\ServicePackFiles\i386\dinput8.dll
    + 2008-04-14 00:11:52 86,528 ------w c:\windows\ServicePackFiles\i386\directdb.dll
    + 2008-04-13 18:40:47 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys
    + 2008-04-14 00:11:52 1,504,256 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll
    + 2008-04-13 18:40:44 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys
    + 2008-04-14 00:12:17 163,840 ------w c:\windows\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:11:52 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll
    + 2008-04-14 00:12:17 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe
    + 2008-04-13 18:40:51 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys
    + 2008-04-14 00:12:17 224,768 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe
    + 2008-04-14 00:11:52 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll
    + 2008-04-13 18:44:48 799,744 ------w c:\windows\ServicePackFiles\i386\dmboot.sys
    + 2008-04-14 00:11:52 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll
    + 2008-04-14 00:11:52 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll
    + 2008-04-13 18:44:46 153,344 ------w c:\windows\ServicePackFiles\i386\dmio.sys
    + 2008-04-14 00:11:52 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll
    + 2008-04-14 00:12:17 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe
    + 2008-04-14 00:11:52 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dmserver.dll
    + 2008-04-14 00:11:52 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll
    + 2008-04-14 00:11:52 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll
    + 2008-04-14 00:11:52 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll
    + 2008-04-13 18:45:01 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys
    + 2008-04-14 00:11:52 52,224 ------w c:\windows\ServicePackFiles\i386\dmutil.dll
    + 2008-04-14 00:11:52 147,968 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll
    + 2008-04-14 00:11:52 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
    + 2008-04-14 00:11:52 48,128 ------w c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2004-08-10 04:00:00 53,840 ------w c:\windows\ServicePackFiles\i386\dosx.exe
    + 2008-04-14 00:11:52 26,112 ------w c:\windows\ServicePackFiles\i386\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll
    + 2008-04-13 18:39:46 206,976 ------w c:\windows\ServicePackFiles\i386\dot4.sys
    + 2008-04-14 00:11:52 102,912 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll
    + 2008-04-14 00:12:17 29,696 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe
    + 2008-04-14 00:11:52 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll
    + 2008-04-14 00:09:19 3,072 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll
    + 2008-04-14 00:11:52 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll
    + 2008-04-14 00:11:52 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll
    + 2008-04-14 00:11:52 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    + 2008-04-14 00:09:20 3,072 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll
    + 2008-04-14 00:12:17 17,920 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe
    + 2008-04-14 00:11:52 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll
    + 2008-04-14 00:11:52 212,480 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll
    + 2008-04-14 00:12:18 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe
    + 2008-04-14 00:11:52 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll
    + 2008-04-14 00:11:52 57,344 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll
    + 2008-04-13 18:45:14 60,160 ------w c:\windows\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:13 2,944 ------w c:\windows\ServicePackFiles\i386\drmkaud.sys
    + 2008-04-14 00:11:52 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll
    + 2008-04-14 00:12:18 62,976 ------w c:\windows\ServicePackFiles\i386\drvqry.exe
    + 2004-08-10 04:00:00 4,656 ------w c:\windows\ServicePackFiles\i386\ds16gt.dll
    + 2008-04-14 00:11:52 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll

  10. #10
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 6

    + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll
    + 2008-04-14 00:11:52 71,680 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    + 2008-04-14 00:11:52 92,672 ------w c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 155,648 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll
    + 2008-04-14 00:11:52 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll
    + 2008-04-14 00:11:52 1,293,824 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll
    + 2008-04-14 00:11:52 142,848 ------w c:\windows\ServicePackFiles\i386\dsprop.dll
    + 2008-04-13 17:09:30 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll
    + 2008-04-14 00:11:52 239,104 ------w c:\windows\ServicePackFiles\i386\dsquery.dll
    + 2008-04-14 00:11:52 51,200 ------w c:\windows\ServicePackFiles\i386\dssec.dll
    + 2008-04-13 17:37:57 138,752 ------w c:\windows\ServicePackFiles\i386\dssenh.dll
    + 2008-04-14 00:11:52 113,152 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll
    + 2008-04-14 00:12:18 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe
    + 2008-04-14 00:11:52 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll
    + 2008-04-14 00:12:18 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    + 2008-04-14 00:12:18 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe
    + 2008-04-14 00:11:52 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll
    + 2008-04-14 00:11:52 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll
    + 2008-04-14 00:12:18 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe
    + 2008-04-14 00:11:52 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll
    + 2008-04-13 18:38:29 71,168 ------w c:\windows\ServicePackFiles\i386\dxg.sys
    + 2008-04-14 00:11:52 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll
    + 2008-04-14 00:11:52 205,312 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\windows\ServicePackFiles\i386\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll
    + 2008-04-14 00:11:52 26,624 ------w c:\windows\ServicePackFiles\i386\efsadu.dll
    + 2008-04-14 00:11:53 183,296 ------w c:\windows\ServicePackFiles\i386\els.dll
    + 2008-04-14 00:11:53 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll
    + 2008-04-14 00:11:53 186,880 ------w c:\windows\ServicePackFiles\i386\encdec.dll
    + 2008-04-13 16:26:02 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll
    + 2004-07-17 15:39:36 120,320 ------w c:\windows\ServicePackFiles\i386\epcl5res.dll
    + 2008-04-14 00:11:53 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll
    + 2008-04-14 00:11:53 246,272 ------w c:\windows\ServicePackFiles\i386\es.dll
    + 2008-04-14 00:11:53 1,082,368 ------w c:\windows\ServicePackFiles\i386\esent.dll
    + 2008-04-14 00:11:53 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll
    + 2004-08-04 02:32:28 137,088 ------w c:\windows\ServicePackFiles\i386\essm2e.sys
    + 2008-04-14 00:12:19 193,024 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe
    + 2008-04-14 00:12:19 50,688 ------w c:\windows\ServicePackFiles\i386\evcreate.exe
    + 2008-04-14 00:11:53 56,320 ------w c:\windows\ServicePackFiles\i386\eventlog.dll
    + 2004-07-20 00:54:06 798,720 ------w c:\windows\ServicePackFiles\i386\eventlogmessages.dll
    + 2008-04-14 00:11:53 101,888 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll
    + 2008-04-14 00:12:19 92,160 ------w c:\windows\ServicePackFiles\i386\evntwin.exe
    + 2008-04-14 00:11:53 45,056 ------w c:\windows\ServicePackFiles\i386\evtgprov.dll
    + 2008-04-14 00:12:19 82,944 ------w c:\windows\ServicePackFiles\i386\evtrig.exe
    + 2008-04-14 00:12:19 1,033,728 ------w c:\windows\ServicePackFiles\i386\explorer.exe
    + 2008-04-14 00:11:53 380,445 ------w c:\windows\ServicePackFiles\i386\expsrv.dll
    + 2008-04-14 00:11:53 14,336 ------w c:\windows\ServicePackFiles\i386\exstrace.dll
    + 2008-04-14 00:11:53 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll
    + 2008-04-14 00:09:30 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll
    + 2008-04-13 19:14:29 143,744 ------w c:\windows\ServicePackFiles\i386\fastfat.sys
    + 2008-04-14 00:11:53 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll
    + 2008-04-14 00:11:53 80,384 ------w c:\windows\ServicePackFiles\i386\faultrep.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe
    + 2008-04-13 18:40:25 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys
    + 2008-04-14 00:11:53 124,928 ------w c:\windows\ServicePackFiles\i386\fde.dll
    + 2008-04-14 00:11:53 73,728 ------w c:\windows\ServicePackFiles\i386\fdeploy.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll
    + 2008-04-14 00:11:53 337,920 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll
    + 2008-04-14 00:12:20 27,136 ------w c:\windows\ServicePackFiles\i386\findstr.exe
    + 2008-04-13 18:33:28 44,544 ------w c:\windows\ServicePackFiles\i386\fips.sys
    + 2008-04-14 00:11:53 87,552 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll
    + 2008-04-13 18:40:25 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys
    + 2008-04-14 00:11:53 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll
    + 2008-04-14 00:12:20 23,040 ------w c:\windows\ServicePackFiles\i386\fltmc.exe
    + 2008-04-13 18:32:59 129,792 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys
    + 2008-04-14 00:11:53 382,976 ------w c:\windows\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 7,680 ------w c:\windows\ServicePackFiles\i386\forcedos.exe
    + 2004-08-04 02:31:24 34,173 ------w c:\windows\ServicePackFiles\i386\forehe.sys
    + 2008-04-14 00:12:42 29,696 ------w c:\windows\ServicePackFiles\i386\format.com
    + 2008-04-14 00:11:53 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll
    + 2008-04-14 00:11:53 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll
    + 2008-04-14 00:11:53 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll
    + 2008-04-14 00:11:53 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll
    + 2008-04-14 00:11:53 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll
    + 2008-04-14 00:11:53 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll
    + 2008-04-14 00:11:53 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll
    + 2008-04-14 00:11:53 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll
    + 2008-04-14 00:11:53 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll
    + 2008-04-14 00:11:53 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll
    + 2008-04-14 00:11:53 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll
    + 2008-04-14 00:12:20 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe
    + 2008-04-14 00:12:20 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe
    + 2008-04-14 00:12:20 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll
    + 2008-04-14 00:12:20 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe
    + 2008-04-14 00:11:53 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll
    + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll
    + 2008-04-14 00:11:53 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll
    + 2007-04-02 16:36:04 208,896 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
    + 2008-04-14 00:12:20 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe
    + 2008-04-14 00:12:20 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    + 2008-04-14 00:09:33 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll
    + 2008-04-14 00:11:53 185,344 ------w c:\windows\ServicePackFiles\i386\framedyn.dll
    + 2008-04-14 00:12:20 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe
    + 2008-04-14 00:12:20 42,496 ------w c:\windows\ServicePackFiles\i386\ftp.exe
    + 2008-04-14 00:11:53 6,144 ------w c:\windows\ServicePackFiles\i386\ftpmib.dll
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\ftpsv251.dll
    + 2004-07-20 00:54:06 233,472 ------w c:\windows\ServicePackFiles\i386\fusion.dll
    + 2008-04-14 00:11:53 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll
    + 2008-04-14 00:11:53 451,584 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll
    + 2008-04-14 00:12:21 142,848 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe
    + 2008-04-14 00:11:54 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll
    + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll
    + 2008-04-14 00:12:21 229,376 ------w c:\windows\ServicePackFiles\i386\fxscover.exe
    + 2008-04-14 00:11:54 26,624 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll
    + 2008-04-14 00:11:54 55,296 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll
    + 2008-04-14 00:11:54 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll
    + 2008-04-14 00:11:54 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll
    + 2008-04-14 00:09:33 6,656 ------w c:\windows\ServicePackFiles\i386\fxsres.dll
    + 2008-04-14 00:11:54 562,176 ------w c:\windows\ServicePackFiles\i386\fxsst.dll
    + 2008-04-14 00:12:21 267,776 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe
    + 2008-04-14 00:11:54 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll
    + 2008-04-14 00:11:54 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll
    + 2008-04-14 00:11:54 154,112 ------w c:\windows\ServicePackFiles\i386\fxsui.dll
    + 2008-04-14 00:11:54 192,512 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll
    + 2008-04-14 00:11:54 400,384 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll
    + 2008-04-13 18:36:40 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys
    + 2008-04-13 18:45:29 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys
    + 2008-04-13 18:45:32 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys
    + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\gdi32.dll
    + 2008-04-14 00:12:21 59,904 ------w c:\windows\ServicePackFiles\i386\getmac.exe
    + 2008-04-14 00:11:54 122,880 ------w c:\windows\ServicePackFiles\i386\glu32.dll
    + 2008-04-14 00:09:35 566,784 ------w c:\windows\ServicePackFiles\i386\gpedit.dll
    + 2004-08-10 04:00:00 101,888 ------w c:\windows\ServicePackFiles\i386\gpkcsp.dll
    + 2006-12-31 01:26:44 9,728 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
    + 2008-04-14 00:12:21 120,832 ------w c:\windows\ServicePackFiles\i386\gprslt.exe
    + 2008-04-14 00:11:54 199,680 ------w c:\windows\ServicePackFiles\i386\gptext.dll
    + 2008-04-14 00:12:21 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe
    + 2008-04-13 18:40:21 28,288 ------w c:\windows\ServicePackFiles\i386\grserial.sys
    + 2008-04-14 00:11:54 133,120 ------w c:\windows\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\windows\ServicePackFiles\i386\guitrna.dll
    + 2008-04-14 00:11:54 32,256 ------w c:\windows\ServicePackFiles\i386\gzip.dll
    + 2008-04-14 00:11:54 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll
    + 2008-04-14 00:11:54 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll
    + 2008-04-13 18:31:32 105,344 ------w c:\windows\ServicePackFiles\i386\hal.dll
    + 2008-04-13 18:31:28 131,840 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll
    + 2008-04-13 18:31:27 81,152 ------w c:\windows\ServicePackFiles\i386\halacpi.dll
    + 2008-04-13 18:31:28 150,528 ------w c:\windows\ServicePackFiles\i386\halapic.dll
    + 2008-04-13 18:31:28 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll
    + 2008-04-13 18:31:32 152,576 ------w c:\windows\ServicePackFiles\i386\halmps.dll
    + 2008-04-13 18:31:31 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll
    + 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys
    + 2008-04-14 00:12:21 15,872 ------w c:\windows\ServicePackFiles\i386\help.exe
    + 2008-04-14 00:12:21 769,024 ------w c:\windows\ServicePackFiles\i386\helpctr.exe
    + 2008-04-14 00:12:21 744,448 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe
    + 2008-04-14 00:12:21 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe
    + 2008-04-14 00:11:54 41,472 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll
    + 2008-04-14 00:11:54 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll
    + 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys
    + 2008-04-13 18:46:30 25,600 ------w c:\windows\ServicePackFiles\i386\hidbth.sys
    + 2008-04-13 18:45:26 36,864 ------w c:\windows\ServicePackFiles\i386\hidclass.sys
    + 2008-04-13 18:45:26 19,200 ------w c:\windows\ServicePackFiles\i386\hidir.sys
    + 2008-04-13 18:45:22 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys
    + 2008-04-14 00:11:54 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys
    + 2008-04-14 00:11:54 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll
    + 2008-04-14 00:11:54 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll
    + 2008-04-14 00:11:54 344,064 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll
    + 2008-04-14 00:11:54 330,752 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll
    + 2008-04-14 00:11:54 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll
    + 2008-04-14 00:11:54 144,896 ------w c:\windows\ServicePackFiles\i386\hotplug.dll
    + 2008-04-14 00:11:54 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll
    + 2008-04-14 00:11:54 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    + 2008-04-14 00:11:54 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll
    + 2008-04-14 00:12:21 18,432 ------w c:\windows\ServicePackFiles\i386\hscupd.exe
    + 2004-08-04 02:41:48 220,032 ------w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys
    + 2008-04-14 00:11:54 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    + 2004-08-04 02:41:50 685,056 ------w c:\windows\ServicePackFiles\i386\hsfcxts2.sys
    + 2004-08-04 02:41:56 1,041,536 ------w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys
    + 2008-04-13 18:53:53 264,832 ------w c:\windows\ServicePackFiles\i386\http.sys
    + 2008-04-14 00:11:54 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll
    + 2008-04-14 00:11:54 268,288 ------w c:\windows\ServicePackFiles\i386\httpext.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\httpmb51.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\httpod51.dll
    + 2008-04-14 00:11:54 41,984 ------w c:\windows\ServicePackFiles\i386\htui.dll
    + 2008-04-14 00:11:54 347,136 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll
    + 2008-04-13 18:41:22 8,576 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys
    + 2008-04-13 18:41:22 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys
    + 2008-04-13 19:18:00 52,480 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys
    + 2008-04-14 00:11:54 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
    + 2004-08-04 02:29:38 161,020 ------w c:\windows\ServicePackFiles\i386\i81xnt5.sys
    + 2008-04-14 00:11:54 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll
    + 2008-04-14 00:11:54 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll
    + 2008-04-14 00:11:54 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll
    + 2008-04-14 00:11:54 254,976 ------w c:\windows\ServicePackFiles\i386\icm32.dll
    + 2008-04-14 00:09:40 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll
    + 2008-04-13 16:44:29 2,560 ------w c:\windows\ServicePackFiles\i386\iconlib.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll
    + 2008-04-14 00:12:22 214,528 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe
    + 2008-04-14 00:12:22 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe
    + 2008-04-14 00:11:54 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll
    + 2008-04-14 00:11:54 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll
    + 2008-04-14 00:11:54 172,032 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll
    + 2008-04-14 00:11:54 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll
    + 2008-04-14 00:12:22 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe
    + 2008-04-14 00:11:54 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll
    + 2008-04-14 00:11:54 120,832 ------w c:\windows\ServicePackFiles\i386\idq.dll
    + 2008-04-14 00:12:22 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe
    + 2008-04-14 00:11:54 143,360 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll
    + 2008-04-14 00:11:54 216,576 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll
    + 2008-04-14 00:11:54 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll
    + 2008-04-14 00:12:22 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll
    + 2007-01-02 20:29:28 8,192 ------w c:\windows\ServicePackFiles\i386\ieexec.exe
    + 2004-07-20 00:54:06 7,168 ------w c:\windows\ServicePackFiles\i386\ieexecremote.dll
    + 2004-07-20 00:54:06 32,768 ------w c:\windows\ServicePackFiles\i386\iehost.dll
    + 2008-04-14 00:11:54 251,904 ------w c:\windows\ServicePackFiles\i386\iepeers.dll
    + 2008-04-14 00:11:54 48,640 ------w c:\windows\ServicePackFiles\i386\iernonce.dll
    + 2008-04-14 00:11:54 62,976 ------w c:\windows\ServicePackFiles\i386\iesetup.dll
    + 2008-04-14 00:12:22 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe
    + 2008-04-14 00:12:22 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe
    + 2008-04-14 00:11:54 135,680 ------w c:\windows\ServicePackFiles\i386\ifmon.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll
    + 2008-04-14 00:11:54 505,344 ------w c:\windows\ServicePackFiles\i386\iis.dll
    + 2008-04-14 00:11:54 25,088 ------w c:\windows\ServicePackFiles\i386\iisadmin.dll
    + 2008-04-14 00:11:54 145,408 ------w c:\windows\ServicePackFiles\i386\iische51.dll
    + 2008-04-14 00:11:54 68,608 ------w c:\windows\ServicePackFiles\i386\iisext51.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\iisfecnv.dll
    + 2008-04-14 00:11:54 79,872 ------w c:\windows\ServicePackFiles\i386\iislog51.dll
    + 2008-04-14 00:11:54 64,512 ------w c:\windows\ServicePackFiles\i386\iismap.dll
    + 2008-04-14 00:12:22 30,720 ------w c:\windows\ServicePackFiles\i386\iisrstas.exe
    + 2008-04-14 00:11:54 133,632 ------w c:\windows\ServicePackFiles\i386\iisrtl.dll
    + 2004-08-04 04:11:48 184,320 ------w c:\windows\ServicePackFiles\i386\ilasm.exe
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll
    + 2008-04-14 00:11:54 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll
    + 2008-04-14 00:12:22 150,528 ------w c:\windows\ServicePackFiles\i386\imapi.exe
    + 2008-04-13 18:40:58 42,112 ------w c:\windows\ServicePackFiles\i386\imapi.sys
    + 2008-04-14 00:11:54 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll
    + 2008-04-14 00:11:54 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll
    + 2008-04-14 00:11:54 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 123,392 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll
    + 2008-04-14 00:11:54 274,432 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll
    + 2008-04-14 00:11:54 691,712 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll
    + 2008-04-14 00:12:22 15,360 ------w c:\windows\ServicePackFiles\i386\inetin51.exe
    + 2008-04-14 00:11:55 829,440 ------w c:\windows\ServicePackFiles\i386\inetmgr.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll
    + 2008-04-14 00:11:55 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll
    + 2008-04-14 00:11:55 15,872 ------w c:\windows\ServicePackFiles\i386\inetppui.dll
    + 2008-04-13 16:22:12 48,128 ------w c:\windows\ServicePackFiles\i386\inetres.dll
    + 2008-04-14 00:12:22 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe
    + 2008-04-14 00:11:55 13,312 ------w c:\windows\ServicePackFiles\i386\infoadmn.dll
    + 2008-04-14 00:11:55 257,024 ------w c:\windows\ServicePackFiles\i386\infocomm.dll
    + 2008-04-14 00:11:55 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll
    + 2008-04-14 00:11:55 123,392 ------w c:\windows\ServicePackFiles\i386\input.dll
    + 2008-04-14 00:11:55 96,256 ------w c:\windows\ServicePackFiles\i386\inseng.dll
    + 2004-07-20 00:54:06 24,576 ------w c:\windows\ServicePackFiles\i386\installutil.exe
    + 2008-04-13 18:40:29 5,504 ------w c:\windows\ServicePackFiles\i386\intelide.sys
    + 2008-04-13 18:31:32 36,352 ------w c:\windows\ServicePackFiles\i386\intelppm.sys
    + 2008-04-13 18:53:34 36,608 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys
    + 2008-04-14 00:12:22 55,808 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe
    + 2008-04-14 00:09:30 103,424 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll
    + 2008-04-14 00:09:23 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll
    + 2008-04-14 00:11:55 94,720 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll
    + 2008-04-13 18:57:07 20,864 ------w c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2008-04-14 00:11:55 161,280 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll
    + 2008-04-13 18:57:15 152,832 ------w c:\windows\ServicePackFiles\i386\ipnat.sys
    + 2008-04-14 00:11:55 331,264 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll
    + 2008-04-14 00:11:55 330,752 ------w c:\windows\ServicePackFiles\i386\ippromon.dll
    + 2008-04-14 00:11:55 35,328 ------w c:\windows\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll
    + 2008-04-13 19:19:42 75,264 ------w c:\windows\ServicePackFiles\i386\ipsec.sys
    + 2008-04-14 00:11:55 349,696 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
    + 2008-04-14 00:10:45 102,912 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll
    + 2008-04-14 00:09:24 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll
    + 2008-04-14 00:11:55 384,000 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
    + 2008-04-14 00:12:23 53,248 ------w c:\windows\ServicePackFiles\i386\ipv6.exe
    + 2008-04-14 00:11:55 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll
    + 2008-04-14 00:12:23 23,552 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:11:55 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll
    + 2008-04-14 00:11:55 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll
    + 2008-04-14 00:11:55 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
    + 2008-04-14 00:11:55 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll
    + 2008-04-14 00:11:55 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
    + 2008-04-13 18:45:34 46,592 ------w c:\windows\ServicePackFiles\i386\irbus.sys
    + 2008-04-13 18:54:36 88,192 ------w c:\windows\ServicePackFiles\i386\irda.sys
    + 2008-04-13 18:54:28 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys
    + 2008-04-14 00:12:23 151,552 ------w c:\windows\ServicePackFiles\i386\irftp.exe
    + 2008-04-14 00:11:55 28,160 ------w c:\windows\ServicePackFiles\i386\irmon.dll
    + 2008-04-13 18:36:41 37,248 ------w c:\windows\ServicePackFiles\i386\isapnp.sys
    + 2008-04-14 00:11:55 68,608 ------w c:\windows\ServicePackFiles\i386\isatq.dll
    + 2008-04-14 00:11:55 26,624 ------w c:\windows\ServicePackFiles\i386\iscomlog.dll
    + 2008-04-14 00:10:32 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll
    + 2008-04-14 00:10:55 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll
    + 2008-04-14 00:10:55 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll
    + 2008-04-14 00:11:55 81,920 ------w c:\windows\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:10:32 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll
    + 2008-04-14 00:11:55 155,136 ------w c:\windows\ServicePackFiles\i386\itircl.dll
    + 2008-04-14 00:11:55 138,240 ------w c:\windows\ServicePackFiles\i386\itss.dll
    + 2008-04-14 00:11:55 191,488 ------w c:\windows\ServicePackFiles\i386\iuengine.dll
    + 2008-04-14 00:11:55 54,272 ------w c:\windows\ServicePackFiles\i386\ixsso.dll
    + 2008-04-14 00:11:55 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll
    + 2008-04-14 00:11:55 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll
    + 2004-07-20 00:54:06 40,960 ------w c:\windows\ServicePackFiles\i386\jsc.exe
    + 2008-04-14 00:11:56 512,000 ------w c:\windows\ServicePackFiles\i386\jscript.dll
    + 2008-04-14 00:11:56 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll
    + 2008-04-13 18:39:47 24,576 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll
    + 2008-04-13 18:39:48 14,592 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll
    + 2008-04-14 00:09:55 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll
    + 2008-04-13 18:31:35 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll
    + 2008-04-14 00:11:56 184,832 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll
    + 2008-04-14 00:11:56 48,640 ------w c:\windows\ServicePackFiles\i386\kdsui.dll
    + 2008-04-14 00:11:56 253,952 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll
    + 2008-04-14 00:11:56 299,520 ------w c:\windows\ServicePackFiles\i386\kerberos.dll
    + 2008-04-14 00:11:56 989,696 ------w c:\windows\ServicePackFiles\i386\kernel32.dll
    + 2004-08-10 04:00:00 42,537 ------w c:\windows\ServicePackFiles\i386\keyboard.sys
    + 2008-04-14 00:11:56 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
    + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2004-08-10 04:00:00 92,224 ------w c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2008-04-14 00:11:56 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys
    + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-04-14 00:11:56 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
    + 2008-04-14 00:09:05 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-04-14 00:09:05 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-04-14 00:09:05 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    + 2008-04-14 00:09:06 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2004-08-04 02:31:56 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
    + 2004-08-04 02:31:40 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
    + 2008-04-14 00:09:43 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    + 2008-04-14 00:09:43 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-04-14 00:09:44 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    + 2008-04-14 00:09:45 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    + 2008-04-14 00:09:45 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    + 2008-04-14 00:09:45 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2004-08-04 02:31:54 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
    + 2004-08-04 02:31:56 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
    + 2004-08-04 02:31:58 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
    + 2004-08-04 02:32:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
    + 2004-08-04 02:32:12 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
    + 2004-08-04 02:32:16 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
    + 2008-04-14 00:09:46 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    + 2008-04-14 00:09:46 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2004-08-04 02:31:50 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
    + 2008-04-14 00:10:33 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-04-14 00:10:33 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-04-14 00:10:34 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2008-04-14 00:10:34 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-04-14 00:10:34 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2004-08-04 02:32:16 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
    + 2004-08-04 02:32:16 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
    + 2008-04-14 00:10:59 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-04-14 00:11:01 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-04-14 00:11:04 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    + 2008-04-14 00:11:04 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
    + 2008-04-14 09:41:58 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-04-14 00:11:56 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-04-14 00:11:56 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-04-14 00:11:56 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-04-14 00:11:56 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
    + 2008-04-14 00:11:56 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-04-14 00:11:56 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll
    + 2008-04-14 00:11:56 343,040 ------w c:\windows\ServicePackFiles\i386\localspl.dll
    + 2008-04-14 00:11:56 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-04-14 00:12:24 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
    + 2008-04-14 00:12:24 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-04-14 00:12:43 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
    + 2008-04-14 00:12:24 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe
    + 2008-04-14 00:11:56 13,312 ------w c:\windows\ServicePackFiles\i386\lonsint.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-04-14 00:11:56 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-04-14 00:11:56 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-04-14 00:11:56 728,064 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
    + 2008-04-14 00:12:24 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
    + 2004-08-04 02:41:36 606,684 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
    + 2004-08-04 02:41:38 420,992 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
    + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
    + 2004-08-04 02:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2008-04-14 00:12:24 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-04-14 00:12:25 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-04-14 00:11:56 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-04-14 00:11:56 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-04-14 00:11:56 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-04-14 00:11:56 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-04-14 00:11:56 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-04-14 00:11:56 37,888 ------w c:\windows\ServicePackFiles\i386\md5filt.dll
    + 2008-04-14 00:11:56 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
    + 2008-04-14 00:11:56 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2004-08-04 02:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2008-04-14 00:11:56 16,896 ------w c:\windows\ServicePackFiles\i386\medctroc.dll
    + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-04-14 00:11:56 85,504 ------w c:\windows\ServicePackFiles\i386\metada51.dll
    + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-04-14 00:11:56 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
    + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
    + 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-04-14 00:11:56 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2004-07-20 00:54:06 712,704 ------w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
    + 2004-07-20 00:54:06 286,720 ------w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
    + 2008-04-14 00:11:57 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-04-14 00:11:57 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
    + 2008-04-14 00:11:57 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-04-14 00:12:25 103,936 ------w c:\windows\ServicePackFiles\i386\migload.exe
    + 2008-04-14 00:12:25 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
    + 2008-04-14 00:12:25 245,248 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2008-04-14 00:11:57 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
    + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2008-04-14 00:11:57 163,328 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
    + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2008-04-14 00:11:57 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-04-14 00:11:57 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2004-08-10 04:00:00 68,768 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2008-04-14 00:11:57 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-04-14 00:12:25 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-04-14 00:11:57 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
    + 2008-04-14 00:12:26 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
    + 2008-04-13 19:00:19 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-04-14 00:11:57 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll
    + 2008-04-14 00:12:26 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
    + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
    + 2008-04-13 18:39:47 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-04-14 00:12:27 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
    + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
    + 2008-04-14 00:11:57 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-04-14 00:11:57 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2008-04-13 18:39:44 92,544 ------w c:\windows\ServicePackFiles\i386\mqac.sys
    + 2008-04-14 00:11:57 138,240 ------w c:\windows\ServicePackFiles\i386\mqad.dll
    + 2008-04-14 00:12:27 19,968 ------w c:\windows\ServicePackFiles\i386\mqbkup.exe
    + 2008-04-14 00:11:57 47,616 ------w c:\windows\ServicePackFiles\i386\mqdscli.dll
    + 2008-04-14 00:11:57 16,896 ------w c:\windows\ServicePackFiles\i386\mqise.dll
    + 2008-04-14 00:11:57 89,088 ------w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
    + 2008-04-14 00:11:57 225,280 ------w c:\windows\ServicePackFiles\i386\mqoa.dll
    + 2008-04-14 00:11:57 663,040 ------w c:\windows\ServicePackFiles\i386\mqqm.dll
    + 2008-04-14 00:11:57 177,152 ------w c:\windows\ServicePackFiles\i386\mqrt.dll
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mqrtdep.dll
    + 2008-04-14 00:11:57 95,744 ------w c:\windows\ServicePackFiles\i386\mqsec.dll
    + 2008-04-14 00:11:58 517,632 ------w c:\windows\ServicePackFiles\i386\mqsnap.dll
    + 2008-04-14 00:12:27 4,608 ------w c:\windows\ServicePackFiles\i386\mqsvc.exe
    + 2008-04-14 00:12:27 117,248 ------w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
    + 2008-04-14 00:11:58 187,392 ------w c:\windows\ServicePackFiles\i386\mqtrig.dll
    + 2008-04-14 00:11:58 49,152 ------w c:\windows\ServicePackFiles\i386\mqupgrd.dll
    + 2008-04-14 00:11:58 471,552 ------w c:\windows\ServicePackFiles\i386\mqutil.dll
    + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
    + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    + 2008-04-14 00:11:58 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-04-14 00:11:58 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
    + 2008-04-13 17:25:57 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-04-14 00:11:58 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-04-14 00:11:58 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-04-14 00:11:58 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-04-14 00:11:58 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
    + 2008-04-13 17:25:58 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-04-13 17:26:17 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-04-14 00:11:58 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
    + 2008-04-14 00:11:58 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-04-14 00:10:06 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
    + 2008-04-14 00:11:58 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-04-14 00:11:58 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
    + 2008-04-14 00:11:58 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-04-14 00:11:58 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-04-14 00:12:27 169,984 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
    + 2004-07-17 15:42:20 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll
    + 2004-07-20 00:54:06 1,564,672 ------w c:\windows\ServicePackFiles\i386\mscorcfg.dll
    + 2004-08-04 04:12:02 69,632 ------w c:\windows\ServicePackFiles\i386\mscordbc.dll
    + 2004-08-04 04:12:02 221,184 ------w c:\windows\ServicePackFiles\i386\mscordbi.dll
    + 2007-06-27 12:55:10 131,072 ------w c:\windows\ServicePackFiles\i386\mscoree.dll
    + 2007-01-02 20:29:12 73,728 ------w c:\windows\ServicePackFiles\i386\mscorie.dll
    + 2004-07-20 00:54:08 303,104 ------w c:\windows\ServicePackFiles\i386\mscorjit.dll
    + 2007-01-02 20:29:12 86,016 ------w c:\windows\ServicePackFiles\i386\mscorld.dll
    + 2007-01-02 20:21:20 1,998,848 ------w c:\windows\ServicePackFiles\i386\mscorlib.dll
    + 2004-08-04 04:12:08 94,208 ------w c:\windows\ServicePackFiles\i386\mscorpe.dll
    + 2004-08-04 04:12:08 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
    + 2004-08-04 04:12:08 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
    + 2004-08-04 04:12:08 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.dll
    + 2004-08-04 04:12:10 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
    + 2004-08-04 04:12:10 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
    + 2004-08-04 04:12:10 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
    + 2004-08-04 04:12:10 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
    + 2004-08-04 04:12:10 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
    + 2004-08-04 04:12:10 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
    + 2004-08-04 04:12:10 46,592 ------w c:\windows\ServicePackFiles\i386\mscorsec.dll
    + 2004-08-04 04:12:10 69,632 ------w c:\windows\ServicePackFiles\i386\mscorsn.dll
    + 2007-12-17 11:58:53 2,273,280 ------w c:\windows\ServicePackFiles\i386\mscorsvr.dll
    + 2004-08-04 04:12:14 8,704 ------w c:\windows\ServicePackFiles\i386\mscortim.dll
    + 2007-12-17 11:59:26 2,281,472 ------w c:\windows\ServicePackFiles\i386\mscorwks.dll
    + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-04-14 00:11:58 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-04-14 00:11:58 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll
    + 2008-04-14 00:11:58 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
    + 2008-04-14 00:11:58 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
    + 2008-04-14 00:11:58 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
    + 2008-04-14 00:11:58 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
    + 2008-04-13 17:24:14 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-04-14 00:11:58 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
    + 2008-04-14 00:11:59 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
    + 2008-04-14 00:11:59 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-04-14 00:11:59 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
    + 2008-04-14 00:11:59 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
    + 2008-04-13 17:26:07 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-04-14 00:11:59 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-04-14 00:11:59 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
    + 2008-04-14 00:11:59 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-04-14 00:11:59 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-04-14 00:12:27 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
    + 2008-04-14 00:11:59 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-04-14 00:11:59 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2008-04-14 00:11:59 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
    + 2008-04-14 00:11:59 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys
    + 2008-03-25 04:50:28 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
    + 2008-03-25 04:50:30 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
    + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-04-14 00:11:59 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
    + 2008-04-14 00:11:59 997,376 ------w c:\windows\ServicePackFiles\i386\msgina.dll
    + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
    + 2008-04-14 00:11:59 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:12:45 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv
    + 2008-04-14 00:12:45 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv
    + 2008-04-14 00:12:27 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-04-14 00:11:59 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
    + 2008-04-14 00:11:59 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
    + 2008-04-13 16:26:26 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-04-14 00:11:59 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll
    + 2008-04-14 00:11:59 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-04-14 00:11:59 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
    + 2008-04-14 00:11:59 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
    + 2008-04-14 00:12:28 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-04-14 00:11:59 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
    + 2008-04-14 00:11:59 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
    + 2008-04-14 00:12:28 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
    + 2008-04-14 00:11:59 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
    + 2008-04-14 00:11:59 376,832 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
    + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-04-14 00:12:28 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll
    + 2008-03-25 04:50:34 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
    + 2008-03-25 04:50:40 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
    + 2008-04-14 00:12:00 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
    + 2008-04-14 00:12:00 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
    + 2008-03-25 04:50:42 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2008-03-25 04:50:42 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
    + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
    + 2008-04-14 00:12:00 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2008-03-25 04:50:44 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
    + 2008-04-14 00:12:00 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-04-14 00:12:00 170,496 ------w c:\windows\ServicePackFiles\i386\msmqocm.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2004-08-10 04:00:00 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe
    + 2008-04-14 00:12:00 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2004-08-10 04:00:00 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
    + 2008-04-14 00:12:00 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
    + 2008-04-14 00:12:00 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-04-14 00:12:00 565,248 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
    + 2008-04-14 00:12:00 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-04-14 00:12:00 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-04-14 00:12:00 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll
    + 2008-04-14 00:12:00 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
    + 2008-04-13 16:23:54 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
    + 2008-04-14 00:12:00 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2008-04-13 17:24:14 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-04-14 00:12:00 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
    + 2008-04-14 00:12:28 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
    + 2008-04-14 00:12:00 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2008-03-25 04:50:45 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
    + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
    + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
    + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-04-14 00:12:00 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
    + 2008-03-25 04:50:47 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    + 2008-03-25 04:50:49 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    + 2008-03-25 04:50:52 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
    + 2008-04-14 00:12:00 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-04-14 00:12:00 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-04-14 00:12:00 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
    + 2008-04-14 00:12:00 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-04-14 00:12:00 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll
    + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
    + 2008-03-25 04:50:55 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
    + 2008-04-14 00:12:00 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll
    + 2008-04-14 00:12:29 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-04-14 00:12:00 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    + 2008-04-14 00:12:00 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll
    + 2008-04-14 00:12:00 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
    + 2008-04-14 00:12:00 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-04-14 00:12:01 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
    + 2008-04-14 00:12:01 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
    + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-04-14 00:12:01 121,344 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
    + 2008-04-14 00:12:01 1,428,992 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
    + 2008-04-14 00:12:01 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2008-03-25 04:50:57 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
    + 2008-04-14 00:12:01 203,776 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    + 2008-04-14 00:12:01 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
    + 2008-03-25 04:50:58 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
    + 2008-04-14 00:12:01 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2008-03-25 04:50:58 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
    + 2008-04-14 00:12:01 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
    + 2008-04-14 00:12:01 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
    + 2008-04-14 00:12:01 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
    + 2008-04-14 00:12:01 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2004-08-04 02:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
    + 2004-08-04 02:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys
    + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
    + 2008-04-14 00:12:01 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2008-04-14 00:12:01 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    + 2004-08-04 02:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys
    + 2008-04-14 00:12:29 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-04-14 00:12:01 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-04-14 00:12:01 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
    + 2008-04-14 00:12:29 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-04-14 00:12:01 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-04-14 00:12:01 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-04-14 00:12:01 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
    + 2008-04-14 00:12:01 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-04-14 00:12:29 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
    + 2008-04-14 00:12:01 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys
    + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2008-04-14 00:12:29 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
    + 2008-04-14 00:12:29 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
    + 2008-04-14 00:12:01 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
    + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
    + 2008-04-14 00:12:01 622,592 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
    + 2008-04-14 00:12:29 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe
    + 2004-08-10 04:00:00 126,976 ------w c:\windows\ServicePackFiles\i386\netfxocm.dll
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\ServicePackFiles\i386\netfxupdate.exe
    + 2008-04-14 00:12:01 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll
    + 2008-04-14 00:12:01 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
    + 2008-04-14 00:12:01 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
    + 2008-04-14 00:12:01 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-04-14 00:12:01 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
    + 2008-04-14 00:12:01 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-04-14 00:16:51 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
    + 2008-04-14 00:12:29 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-04-14 00:12:02 1,703,936 ------w c:\windows\ServicePackFiles\i386\netshell.dll
    + 2008-04-14 00:12:29 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-04-14 00:12:02 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-04-14 00:12:02 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
    + 2004-08-04 02:31:42 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys
    + 2008-04-14 00:12:02 247,808 ------w c:\windows\ServicePackFiles\i386\newdev.dll
    + 2004-08-04 04:12:20 147,456 ------w c:\windows\ServicePackFiles\i386\ngen.exe
    + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-04-14 00:12:02 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-04-14 00:12:02 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-04-14 00:12:02 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-04-14 00:12:02 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-04-14 00:12:02 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-04-14 00:12:02 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    + 2008-04-14 00:12:02 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •