View Full Version : I need help!!!
Here is the log file of hijack this
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:40:58 a.m., on 21/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\ARCHIV~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\lphc52qj0et8j.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\MsiExec.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Archivos de programa\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Archivos de programa\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [AVG8_TRAY] C:\ARCHIV~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [AVP] "G:\PortableKaspAntEsp\avp.exe"
O4 - HKLM\..\Run: [inrhc12qj0et8j] C:\WINDOWS\Temp\.tt16.tmp.exe /CR=43BD0650B542D746064C7084654BBDFBC7679FFCF93E64C8F1C9C9712305B7DE6D04D3AB51B7B062A0F452ED04908A5C0C2F97CDED6DC52B05C7AF75416BFECD832F0683DD85DB68FD196163861D854A90DA30
O4 - HKLM\..\Run: [lphc52qj0et8j] C:\WINDOWS\system32\lphc52qj0et8j.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Archivos de programa\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Archivos de programa\DAP\dapextie.htm
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZC
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Download &all with DAP - C:\Archivos de programa\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Investigador - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Archivos de programa\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: aiaqdcz - aiaqdcz.dll (file missing)
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Archivos de programa\Archivos comunes\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7904 bytes
Hi
Please visit this webpage for download links, and instructions for running ComboFix tool:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.
The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.
Once installed, you should see a blue screen prompt that says:
The Recovery Console was successfully installed.
Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link (http://www.bleepingcomputer.com/forums/topic114351.html)
Remember to re-enable them afterwards.
Click Yes to allow ComboFix to continue scanning for malware.
When the tool is finished, it will produce a report for you.
Please include the following reports for further review, and so we may continue cleansing the system:
C:\ComboFix.txt
New HijackThis log.
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:56:06 a.m., on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\ARCHIV~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Archivos de programa\AVG\AVG8\avgrsx.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Archivos de programa\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Archivos de programa\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [AVG8_TRAY] C:\ARCHIV~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Archivos de programa\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Archivos de programa\DAP\dapextie.htm
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZC
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Download &all with DAP - C:\Archivos de programa\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Investigador - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Archivos de programa\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: aiaqdcz - aiaqdcz.dll (file missing)
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Archivos de programa\Archivos comunes\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7326 bytes
ComboFix 08-12-26.03 - CINTHIA 2008-12-27 7:34:01.2 - NTFSx86
Se ejecuta desde: c:\documents and settings\TEMP\Escritorio\ComboFix.exe
ADVERTENCIA - ESTE EQUIPO NO TIENE INSTALADA LA CONSOLA DE RECUPERACION!
.
(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\Readme.txt
c:\windows\system32\blphc52qj0et8j.scr
c:\windows\system32\lphc52qj0et8j.exe
c:\windows\system32\phc52qj0et8j.bmp
.
((((((((((((((((((((((((((((((((((((((( Drivers/Servicios )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_Passthru
-------\Service_restore
(((((((((((((((((( Archivos creados desde 2008-11-27 - 2008-12-27 )))))))))))))))))))))))))))))))))
.
2008-12-21 09:38 . 2008-12-21 09:38 <DIR> d-------- c:\archivos de programa\Trend Micro
2008-12-21 09:38 . 2008-12-21 09:39 1,393 --a------ c:\windows\imsins.BAK
.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-27 11:47 133,152 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-12-27 11:45 5,834,784 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-12-27 11:43 82,232 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-12-27 11:43 14,504 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-12-27 11:24 100,864 ----a-w c:\windows\system32\drivers\ndisio.sys
2008-07-12 03:12 67,696 ----a-w c:\archivos de programa\mozilla firefox\components\jar50.dll
2008-07-12 03:12 54,376 ----a-w c:\archivos de programa\mozilla firefox\components\jsd3250.dll
2008-07-12 03:12 34,952 ----a-w c:\archivos de programa\mozilla firefox\components\myspell.dll
2008-07-12 03:13 46,720 ----a-w c:\archivos de programa\mozilla firefox\components\spellchk.dll
2008-07-12 03:13 172,144 ----a-w c:\archivos de programa\mozilla firefox\components\xpinstal.dll
.
((((((((((((((((((((((((((((( snapshot@2008-09-28_ 8.29.08.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-07-14 15:52:22 121,856 ----a-w c:\windows\$hf_mig$\KB915865\SP2QFE\xmllite.dll
+ 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB915865\spmsg.dll
+ 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB915865\spuninst.exe
+ 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB915865\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe
+ 2005-10-12 23:12:33 371,424 ----a-w c:\windows\$hf_mig$\KB915865\update\updspapi.dll
+ 2006-08-16 11:59:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
+ 2004-08-19 13:42:36 188,416 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
+ 2004-08-19 13:41:40 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
+ 2004-08-19 13:41:40 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
+ 2004-08-19 13:41:40 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
+ 2004-08-19 13:41:40 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
+ 2004-08-19 13:41:40 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
+ 2004-08-19 13:41:40 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
+ 2004-08-19 13:41:40 117,248 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
+ 2004-08-19 13:18:16 189,056 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
+ 2004-08-19 13:41:40 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
+ 2004-08-19 13:41:40 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
+ 2004-08-19 13:41:40 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
+ 2004-08-19 13:42:36 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
+ 2004-08-19 13:41:42 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
+ 2004-08-19 13:41:42 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
+ 2004-08-19 13:41:42 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
+ 2004-08-19 13:41:42 29,696 -c----w c:\windows\$NtServicePackUninstall$\admexs.dll
+ 2003-03-24 20:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
+ 2003-03-24 20:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
+ 2004-08-19 13:41:42 43,520 -c----w c:\windows\$NtServicePackUninstall$\admwprox.dll
+ 2004-08-19 13:41:42 290,816 -c----w c:\windows\$NtServicePackUninstall$\adsiis51.dll
+ 2004-08-19 13:41:42 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
+ 2004-08-19 13:41:42 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
+ 2004-08-19 13:41:42 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
+ 2004-08-19 13:41:42 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
+ 2002-09-10 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
+ 2004-08-19 13:41:42 684,544 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
+ 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
+ 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
+ 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
+ 2004-08-19 13:41:44 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
+ 2004-08-19 13:41:44 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
+ 2006-10-12 14:04:11 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
+ 2007-03-09 13:46:29 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
+ 2004-08-19 13:41:44 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
+ 2004-08-19 13:41:44 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
+ 2004-08-19 13:41:44 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
+ 2006-10-12 11:09:53 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0401.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0404.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
+ 2002-09-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
+ 2002-09-10 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
+ 2002-09-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040d.dll
+ 2002-09-10 12:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
+ 2002-09-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0411.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0412.dll
+ 2002-09-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
+ 2002-09-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
+ 2002-09-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0804.dll
+ 2002-09-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
+ 2002-09-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
+ 2004-08-19 13:41:44 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
+ 2004-08-19 13:42:36 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
+ 2004-08-19 13:42:36 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
+ 2004-08-19 13:41:44 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
+ 2004-08-19 13:56:12 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
+ 2004-08-19 13:56:12 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
+ 2004-08-19 13:41:44 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
+ 2004-08-19 13:41:44 110,080 -c----w c:\windows\$NtServicePackUninstall$\appconf.dll
+ 2004-08-19 13:41:44 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
+ 2004-08-19 13:41:44 175,104 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
+ 2004-08-19 13:41:44 300,032 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
+ 2004-08-19 13:41:44 332,800 -c----w c:\windows\$NtServicePackUninstall$\aqueue.dll
+ 2004-08-19 13:56:12 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
+ 2004-08-19 13:38:16 8,704 -c----w c:\windows\$NtServicePackUninstall$\asferror.dll
+ 1999-08-09 18:39:20 14,832 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
+ 2004-08-19 13:41:44 375,808 -c----w c:\windows\$NtServicePackUninstall$\asp51.dll
+ 2004-08-19 13:42:36 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
+ 2004-08-19 13:42:36 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
+ 2004-08-19 13:41:46 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
+ 2004-08-03 21:05:04 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
+ 2004-08-19 13:42:36 25,600 -c----w c:\windows\$NtServicePackUninstall$\at.exe
+ 2004-08-03 20:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
+ 2004-08-19 14:41:46 229,376 -c----w c:\windows\$NtServicePackUninstall$\ati2cqag.dll
+ 2004-08-19 14:41:46 201,728 -c----w c:\windows\$NtServicePackUninstall$\ati2dvag.dll
+ 2004-08-19 14:41:46 870,784 -c----w c:\windows\$NtServicePackUninstall$\ati3d1ag.dll
+ 2004-08-19 14:41:46 1,888,992 -c----w c:\windows\$NtServicePackUninstall$\ati3duag.dll
+ 2004-08-19 14:41:46 516,768 -c----w c:\windows\$NtServicePackUninstall$\ativvaxx.dll
+ 2004-08-19 13:41:46 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
+ 2004-08-19 13:42:36 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
+ 2004-08-03 20:58:32 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
+ 2004-08-19 13:38:18 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
+ 2004-08-03 20:58:36 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
+ 2004-08-19 13:41:46 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
+ 2002-09-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
+ 2004-08-19 13:41:46 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
+ 2004-08-19 13:42:36 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
+ 2003-03-24 20:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
+ 2003-03-24 20:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
+ 2005-03-02 18:10:34 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
+ 2004-08-19 13:42:36 624,128 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
+ 2004-08-19 13:42:38 637,952 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
+ 2004-08-19 13:42:38 615,936 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
+ 2004-08-19 13:42:38 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
+ 2004-08-19 13:41:46 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
+ 2004-08-19 13:41:46 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
+ 2004-08-19 13:41:48 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
+ 2004-08-19 13:41:48 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
+ 2004-08-19 13:41:48 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
+ 2004-08-19 13:41:48 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
+ 2004-08-19 13:41:48 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
+ 2004-08-19 13:42:38 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
+ 2002-09-10 12:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
+ 2004-08-03 20:59:58 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
+ 2004-08-19 13:38:18 68,608 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
+ 2004-08-19 13:41:48 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
+ 2008-06-23 15:39:59 1,023,488 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
+ 2004-08-19 13:41:48 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
+ 2004-08-19 13:41:48 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
+ 2008-06-14 17:59:52 272,512 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
+ 2008-06-14 17:59:52 272,512 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
+ 2004-08-19 13:41:48 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
+ 2004-08-19 13:41:48 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
+ 2002-09-10 12:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\c_g18030.dll
+ 2004-08-19 13:41:48 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
+ 2004-08-19 13:41:48 84,992 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
+ 2002-09-10 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
+ 2004-08-19 13:41:48 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
+ 2004-08-19 13:41:48 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
+ 2002-09-10 12:00:00 145,920 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
+ 2005-07-26 04:39:54 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
+ 2004-08-19 13:41:50 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
+ 2005-07-26 04:39:54 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
+ 2004-08-03 21:14:12 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
+ 2008-06-23 15:39:59 151,552 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
+ 2005-09-10 01:55:12 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
+ 2004-08-03 20:59:54 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
+ 2004-08-19 13:41:50 199,680 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
+ 2004-08-19 13:41:50 465,408 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
+ 2004-08-19 13:41:52 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
+ 2004-08-19 13:38:22 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
+ 2003-03-24 20:52:04 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
+ 2004-08-03 20:31:52 97,792 -c----w c:\windows\$NtServicePackUninstall$\chtmbx.dll
+ 2004-08-03 20:31:54 56,320 -c----w c:\windows\$NtServicePackUninstall$\chtskdic.dll
+ 2004-08-03 20:31:54 173,568 -c----w c:\windows\$NtServicePackUninstall$\chtskf.dll
+ 2002-09-10 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
+ 2004-08-19 13:41:52 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
+ 2004-08-03 20:31:54 198,656 -c----w c:\windows\$NtServicePackUninstall$\cintime.dll
+ 2006-06-22 05:13:49 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
+ 2004-08-19 13:42:40 57,344 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
+ 2004-08-19 13:42:40 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
+ 2004-08-03 21:14:28 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
+ 2005-07-26 04:39:54 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
+ 2005-07-26 04:39:55 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
+ 2004-08-19 13:42:40 65,024 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
+ 2004-08-19 13:41:52 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
+ 2004-08-19 13:42:40 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
+ 2004-08-19 13:42:40 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
+ 2004-08-19 13:42:40 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
+ 2004-08-19 13:41:52 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
+ 2004-08-19 13:41:52 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
+ 2004-08-19 13:42:40 402,944 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
+ 2004-08-19 13:42:08 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
+ 2004-08-19 13:41:52 349,696 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
+ 2004-08-19 13:42:40 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
+ 2004-08-19 13:42:40 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
+ 2004-08-19 13:41:54 188,416 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
+ 2004-08-19 13:41:54 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
+ 2004-08-19 13:42:40 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
+ 2004-08-19 13:41:54 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
+ 2004-08-19 13:56:12 50,176 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
+ 2004-08-19 13:41:54 47,104 -c----w c:\windows\$NtServicePackUninstall$\coadmin.dll
+ 2005-07-26 04:39:55 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
+ 2002-09-10 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
+ 2005-07-26 04:39:56 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
+ 2006-08-25 15:46:29 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
+ 2004-08-19 13:41:54 280,576 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
+ 2004-08-19 13:41:54 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
+ 2004-08-19 13:41:54 24,064 -c----w c:\windows\$NtServicePackUninstall$\compfilt.dll
+ 2004-08-19 13:41:54 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
+ 2005-07-26 04:39:56 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
+ 2004-08-19 13:42:40 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
+ 2002-09-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
+ 2004-08-19 13:41:56 837,120 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
+ 2002-09-10 12:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
+ 2002-09-10 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
+ 2005-07-26 04:39:57 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
+ 2005-07-26 04:39:57 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
+ 2004-08-19 13:42:42 1,040,384 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
+ 2004-08-19 13:41:56 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
+ 2002-09-10 12:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
+ 2004-08-19 13:42:42 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
+ 2007-08-13 22:42:54 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
+ 2004-08-19 13:41:56 165,376 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
+ 2004-08-19 13:56:12 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
+ 2004-08-19 13:41:56 603,648 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
+ 2004-08-19 13:41:58 75,264 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
+ 2004-08-19 13:41:58 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
+ 2004-08-19 13:41:58 54,272 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
+ 2004-08-19 13:41:58 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
+ 2004-08-19 13:41:58 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
+ 2004-08-19 13:41:58 528,384 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
+ 2004-08-19 13:41:58 102,400 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
+ 2004-08-19 13:42:42 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
+ 2004-08-19 13:41:58 332,800 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
+ 2004-08-19 13:41:58 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
+ 2004-08-19 13:42:42 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
+ 2004-08-19 13:42:42 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
+ 2004-08-19 13:41:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
+ 2004-08-19 13:42:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
+ 2004-08-19 13:42:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
+ 2004-08-19 13:42:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
+ 2004-08-19 13:42:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
+ 2008-06-23 15:40:00 1,056,256 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
+ 2004-08-19 13:42:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
+ 2002-09-10 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
+ 2004-08-19 13:42:42 42,496 -c----w c:\windows\$NtServicePackUninstall$\davcdata.exe
+ 2004-08-19 13:42:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
+ 2004-08-19 13:42:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
+ 2004-08-19 13:42:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
+ 2004-08-19 13:42:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
+ 2004-08-19 13:42:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
+ 2004-08-19 13:58:52 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
+ 2004-08-19 13:42:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
+ 2004-08-19 13:42:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
+ 2002-09-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
+ 2004-08-19 13:42:42 32,256 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
+ 2004-08-19 13:42:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
+ 2004-08-19 13:42:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
+ 2004-08-19 13:42:42 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
+ 2004-08-19 13:42:02 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
+ 2004-08-19 13:42:02 289,280 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
+ 2004-08-19 13:42:42 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
+ 2004-08-19 13:42:42 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
+ 2004-08-19 13:42:02 38,912 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
+ 2004-08-19 13:42:02 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
+ 2004-08-19 13:42:02 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
+ 2004-08-19 13:42:02 114,176 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
+ 2006-05-19 13:18:51 111,616 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
+ 2002-09-10 12:00:00 406,016 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
+ 2004-08-19 13:42:44 546,816 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
+ 2004-08-19 13:42:44 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
+ 2004-08-19 13:42:02 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
+ 2004-08-19 13:42:02 167,936 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
+ 2004-08-19 13:42:02 190,976 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
+ 2007-05-16 15:11:57 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
+ 2004-08-03 20:59:56 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
+ 2002-09-10 12:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
+ 2004-08-03 20:59:54 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
+ 2004-08-19 13:42:44 167,424 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
+ 2002-09-10 12:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
+ 2004-08-19 13:42:44 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
+ 2004-08-19 13:42:44 225,792 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
+ 2004-08-19 13:42:02 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
+ 2004-08-19 13:28:34 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
+ 2004-08-19 13:42:02 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
+ 2002-09-10 12:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
+ 2004-08-19 13:42:02 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
+ 2004-08-19 13:42:02 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
+ 2004-08-19 13:28:40 154,240 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
+ 2004-08-19 13:42:02 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
+ 2004-08-19 13:42:44 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
+ 2004-08-19 13:42:02 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
+ 2004-08-19 13:42:02 24,064 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
+ 2004-08-19 13:42:02 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
+ 2004-08-19 13:42:02 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
+ 2004-08-19 13:42:02 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
+ 2004-08-04 04:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
+ 2004-08-19 13:56:12 57,344 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
+ 2008-06-20 17:41:07 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
+ 2008-02-20 05:35:06 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
+ 2004-08-19 13:42:04 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
+ 2004-08-19 13:40:16 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
+ 2004-08-19 13:42:44 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
+ 2004-08-19 13:42:04 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
+ 2004-08-19 13:42:04 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
+ 2004-08-19 13:38:36 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
+ 2004-08-19 13:42:04 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
+ 2004-08-19 13:42:04 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
+ 2004-08-19 13:42:04 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
+ 2004-08-19 13:38:36 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
+ 2004-08-19 13:42:44 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
+ 2004-08-19 13:42:04 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
+ 2004-08-19 13:42:04 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
+ 2004-08-19 13:42:44 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
+ 2004-08-19 13:42:04 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
+ 2004-08-19 13:42:04 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
+ 2002-09-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
+ 2004-08-04 04:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
+ 2004-08-04 04:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
+ 2004-08-19 13:42:04 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
+ 2002-09-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\drvqry.exe
+ 2004-08-19 13:42:04 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
+ 2004-08-19 13:42:04 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
+ 2004-08-19 13:42:04 74,752 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
+ 2004-08-19 13:42:04 93,184 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
+ 2002-09-10 12:00:00 148,480 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
+ 2004-08-19 13:42:06 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
+ 2004-08-19 13:42:06 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
+ 2004-08-19 13:42:06 144,896 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
+ 2004-08-19 13:38:38 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
+ 2004-08-19 13:42:06 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
+ 2004-08-19 13:42:06 52,224 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
+ 2004-08-03 20:31:44 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
+ 2004-08-19 13:42:06 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
+ 2004-08-19 13:42:06 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
+ 2004-08-19 13:42:44 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
+ 2004-08-19 13:42:06 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
+ 2004-08-19 13:42:44 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
+ 2004-08-19 13:42:44 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
+ 2004-08-19 13:42:06 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
+ 2004-08-19 13:42:06 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
+ 2004-08-19 13:42:46 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
+ 2004-08-19 13:42:06 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
+ 2004-08-03 21:00:56 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
+ 2006-08-24 17:17:24 499,766 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
+ 2004-08-19 13:42:06 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
+ 2004-08-19 13:42:08 186,368 -c----w c:\windows\$NtServicePackUninstall$\els.dll
+ 2004-08-19 13:42:08 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
+ 2004-08-19 13:42:08 186,368 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
+ 2004-08-19 13:42:08 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
+ 2008-07-07 20:31:19 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
+ 2005-10-20 22:26:00 1,095,168 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
+ 2004-08-19 13:42:08 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
+ 2004-08-19 13:42:46 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
+ 2004-08-19 13:42:46 52,224 -c----w c:\windows\$NtServicePackUninstall$\evcreate.exe
+ 2004-08-19 13:42:46 52,224 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
+ 2004-08-19 13:42:08 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
+ 2002-09-10 12:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
+ 2004-08-19 13:42:08 108,032 -c----w c:\windows\$NtServicePackUninstall$\evntagnt.dll
+ 2004-08-19 13:42:46 25,600 -c----w c:\windows\$NtServicePackUninstall$\evntcmd.exe
+ 2004-08-19 13:42:08 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
+ 2004-08-19 13:42:46 93,184 -c----w c:\windows\$NtServicePackUninstall$\evntwin.exe
+ 2004-08-19 13:42:08 45,568 -c----w c:\windows\$NtServicePackUninstall$\evtgprov.dll
+ 2002-09-10 12:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
+ 2007-06-13 13:22:28 1,035,776 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
+ 2004-08-19 13:42:08 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
+ 2004-08-19 13:42:08 14,336 -c----w c:\windows\$NtServicePackUninstall$\exstrace.dll
+ 2004-08-19 13:42:48 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
+ 2002-09-10 12:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
+ 2002-09-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\f3ahvoas.dll
+ 2004-08-03 21:14:18 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
+ 2004-08-19 13:42:08 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
+ 2004-08-19 13:42:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
+ 2004-08-03 20:59:28 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
+ 2002-09-10 12:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
+ 2004-08-19 13:42:08 75,776 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
+ 2004-08-19 13:42:08 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
+ 2004-08-19 13:42:08 345,600 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
+ 2004-08-19 13:42:48 28,672 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
+ 2002-09-10 12:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
+ 2004-08-19 13:42:08 88,576 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
+ 2004-08-03 20:59:28 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
+ 2006-08-21 12:27:46 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
+ 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
+ 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
+ 2004-08-19 13:42:08 385,024 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
+ 2005-10-17 21:21:06 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
+ 2004-08-19 13:42:48 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
+ 2002-09-10 12:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
+ 2002-09-10 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
+ 2004-08-19 13:42:08 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
+ 2004-05-13 05:39:48 184,435 -c----w c:\windows\$NtServicePackUninstall$\fp4amsft.dll
+ 2003-03-24 20:52:04 82,035 -c----w c:\windows\$NtServicePackUninstall$\fp4anscp.dll
+ 2003-03-24 20:52:04 147,513 -c----w c:\windows\$NtServicePackUninstall$\fp4apws.dll
+ 2003-03-24 20:52:04 49,210 -c----w c:\windows\$NtServicePackUninstall$\fp4areg.dll
+ 2003-03-24 20:52:04 102,509 -c----w c:\windows\$NtServicePackUninstall$\fp4atxt.dll
+ 2003-03-24 20:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
+ 2003-03-24 20:52:04 41,020 -c----w c:\windows\$NtServicePackUninstall$\fp4avnb.dll
+ 2003-03-24 20:52:04 32,826 -c----w c:\windows\$NtServicePackUninstall$\fp4avss.dll
+ 2003-03-24 20:52:04 49,212 -c----w c:\windows\$NtServicePackUninstall$\fp4awebs.dll
+ 2004-05-13 05:39:48 876,653 -c----w c:\windows\$NtServicePackUninstall$\fp4awel.dll
+ 2002-05-14 18:08:54 14,608 -c----w c:\windows\$NtServicePackUninstall$\fp98sadm.exe
+ 2002-05-14 18:08:54 109,328 -c----w c:\windows\$NtServicePackUninstall$\fp98swin.exe
+ 2003-03-24 20:52:04 24,632 -c----w c:\windows\$NtServicePackUninstall$\fpadmcgi.exe
+ 2003-03-24 20:52:04 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpadmdll.dll
+ 2003-03-24 20:52:04 188,494 -c----w c:\windows\$NtServicePackUninstall$\fpcount.exe
+ 2002-05-14 18:08:54 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
+ 2003-03-24 20:52:04 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpexedll.dll
+ 2004-05-13 05:39:48 598,071 -c----w c:\windows\$NtServicePackUninstall$\fpmmc.dll
+ 2003-03-24 20:52:04 20,538 -c----w c:\windows\$NtServicePackUninstall$\fpremadm.exe
+ 2004-08-19 13:38:48 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
+ 2004-08-19 13:42:08 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
+ 2004-08-19 13:42:48 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
+ 2004-08-19 13:42:48 45,568 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
+ 2004-08-19 13:42:08 6,144 -c----w c:\windows\$NtServicePackUninstall$\ftpmib.dll
+ 2004-08-19 13:42:08 127,488 -c----w c:\windows\$NtServicePackUninstall$\ftpsv251.dll
+ 2004-08-19 13:42:08 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
+ 2004-08-19 13:42:08 452,096 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
+ 2004-08-19 13:42:48 143,360 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
+ 2004-08-19 13:42:08 72,192 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
+ 2004-08-19 13:42:08 285,184 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
+ 2004-08-19 13:42:48 235,520 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
+ 2004-08-19 13:42:08 27,136 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
+ 2004-08-19 13:42:08 62,976 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
+ 2004-08-19 13:42:08 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
+ 2004-08-19 13:42:08 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
+ 2004-08-19 13:42:08 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
+ 2004-08-19 13:42:08 8,704 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
+ 2004-08-19 13:38:50 7,168 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
+ 2004-08-19 13:42:08 562,688 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
+ 2004-08-19 13:42:50 268,288 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
+ 2004-08-19 13:42:08 246,272 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
+ 2004-08-19 13:42:08 397,312 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
+ 2004-08-19 13:42:08 155,648 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
+ 2004-08-19 13:42:08 195,584 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
+ 2004-08-19 13:42:08 400,384 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
+ 2004-08-03 22:08:22 10,624 -c----w c:\windows\$NtServicePackUninstall$\gameenum.sys
+ 2008-02-20 06:51:29 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
+ 2002-09-10 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
+ 2004-08-19 13:42:08 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
+ 2004-08-19 13:42:10 574,976 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
+ 2004-08-19 13:38:52 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
+ 2004-08-19 13:42:50 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
+ 2004-08-19 13:42:50 123,392 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
+ 2004-08-19 13:42:10 201,728 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
+ 2004-08-19 13:42:50 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
+ 2004-08-19 13:42:10 124,928 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
+ 2004-08-19 13:42:10 32,256 -c----w c:\windows\$NtServicePackUninstall$\gzip.dll
+ 2004-08-19 13:42:10 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
+ 2004-08-19 13:42:10 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
+ 2004-08-03 20:59:10 131,968 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
+ 2004-08-19 13:42:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
+ 2002-09-10 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\help.exe
+ 2004-08-19 13:42:50 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
+ 2004-08-19 13:42:50 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
+ 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
+ 2005-05-27 02:08:05 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
+ 2004-08-19 13:56:12 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
+ 2004-08-03 21:08:20 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
+ 2004-08-03 21:08:18 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
+ 2006-07-21 08:28:15 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
+ 2004-08-19 13:42:10 347,136 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
+ 2004-08-19 13:42:10 334,336 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
+ 2004-08-19 13:42:10 39,936 -c----w c:\windows\$NtServicePackUninstall$\hostmib.dll
+ 2004-08-19 13:42:10 145,920 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
+ 2004-08-19 13:42:50 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
+ 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
+ 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
+ 2004-08-19 13:42:10 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
+ 2004-08-19 13:42:10 268,288 -c----w c:\windows\$NtServicePackUninstall$\httpext.dll
+ 2004-08-19 13:42:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\httpmb51.dll
+ 2004-08-19 13:42:10 61,952 -c----w c:\windows\$NtServicePackUninstall$\httpod51.dll
+ 2004-08-19 13:42:10 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
+ 2002-09-10 12:00:00 13,463,552 -c----w c:\windows\$NtServicePackUninstall$\hwxjpn.dll
+ 2004-11-17 17:42:32 353,280 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
+ 2004-08-19 13:23:42 53,760 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
+ 2004-08-19 13:42:10 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
+ 2004-08-19 13:42:10 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
+ 2004-08-19 13:42:10 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
+ 2005-06-29 01:49:43 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
+ 2004-08-19 13:38:58 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
+ 2004-08-19 13:42:10 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
+ 2004-08-19 13:42:10 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
+ 2004-08-19 13:42:50 218,112 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
+ 2004-08-19 13:42:50 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
+ 2004-08-19 13:42:10 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
+ 2004-08-19 13:42:10 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
+ 2004-08-19 13:42:10 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
+ 2004-08-19 13:42:10 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
+ 2004-08-19 13:42:50 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
+ 2004-08-19 13:42:10 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
+ 2004-08-19 13:42:10 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
+ 2007-08-13 22:45:18 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
+ 2004-08-19 13:42:50 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
+ 2004-08-19 13:42:10 140,800 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
+ 2004-08-19 13:42:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
+ 2004-08-19 13:39:02 507,392 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
+ 2004-08-19 13:42:10 25,088 -c----w c:\windows\$NtServicePackUninstall$\iisadmin.dll
+ 2004-08-19 13:42:10 145,408 -c----w c:\windows\$NtServicePackUninstall$\iische51.dll
+ 2004-08-19 13:42:10 68,608 -c----w c:\windows\$NtServicePackUninstall$\iisext51.dll
+ 2004-08-19 13:42:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\iisfecnv.dll
+ 2004-08-19 13:42:10 79,872 -c----w c:\windows\$NtServicePackUninstall$\iislog51.dll
+ 2004-08-19 13:42:10 65,024 -c----w c:\windows\$NtServicePackUninstall$\iismap.dll
+ 2004-08-19 13:42:50 31,232 -c----w c:\windows\$NtServicePackUninstall$\iisrstas.exe
+ 2004-08-19 13:42:10 133,632 -c----w c:\windows\$NtServicePackUninstall$\iisrtl.dll
+ 2004-08-19 13:42:10 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
+ 2004-08-19 13:42:10 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
+ 2004-08-19 13:42:52 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
+ 2004-08-03 21:00:16 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
+ 2004-08-03 21:04:38 106,496 -c----w c:\windows\$NtServicePackUninstall$\imekrcic.dll
+ 2004-08-03 21:04:34 86,016 -c----w c:\windows\$NtServicePackUninstall$\imekrmbx.dll
+ 2004-08-19 13:42:10 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
+ 2004-08-03 20:31:50 811,064 -c----w c:\windows\$NtServicePackUninstall$\imjp81k.dll
+ 2004-08-03 20:31:52 368,696 -c----w c:\windows\$NtServicePackUninstall$\imjpcic.dll
+ 2004-08-03 20:31:52 716,856 -c----w c:\windows\$NtServicePackUninstall$\imjpcus.dll
+ 2004-08-03 20:31:54 81,976 -c----w c:\windows\$NtServicePackUninstall$\imjpdct.dll
+ 2004-08-03 20:32:16 274,489 -c----w c:\windows\$NtServicePackUninstall$\imjputyc.dll
+ 2004-08-03 20:32:28 102,456 -c----w c:\windows\$NtServicePackUninstall$\imlang.dll
+ 2004-08-19 13:42:10 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
+ 2002-09-10 12:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
+ 2002-09-10 12:00:00 315,452 -c----w c:\windows\$NtServicePackUninstall$\imskf.dll
+ 2004-08-19 13:42:10 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
+ 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
+ 2004-08-19 13:42:52 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetin51.exe
+ 2004-08-19 13:42:10 840,192 -c----w c:\windows\$NtServicePackUninstall$\inetmgr.dll
+ 2004-08-19 13:42:10 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
+ 2004-08-19 13:42:10 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
+ 2004-08-19 13:42:10 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
+ 2004-08-19 13:39:04 50,176 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
+ 2004-08-19 13:42:52 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
+ 2004-08-19 13:42:10 13,312 -c----w c:\windows\$NtServicePackUninstall$\infoadmn.dll
+ 2004-08-19 13:42:10 257,024 -c----w c:\windows\$NtServicePackUninstall$\infocomm.dll
+ 2004-08-19 13:42:10 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
+ 2004-08-19 13:42:12 125,952 -c----w c:\windows\$NtServicePackUninstall$\input.dll
+ 2004-08-19 13:26:22 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
+ 2004-08-03 21:00:08 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
+ 2004-08-19 13:42:52 57,856 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
+ 2006-05-19 13:18:51 95,232 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
+ 2004-08-03 21:04:46 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
+ 2002-09-10 12:00:00 164,352 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
+ 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
+ 2004-08-19 13:42:14 332,288 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
+ 2004-08-19 13:42:14 354,304 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
+ 2004-08-19 13:42:14 36,352 -c----w c:\windows\$NtServicePackUninstall$\iprip.dll
+ 2002-09-10 12:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
+ 2004-08-03 21:14:30 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
+ 2004-08-19 13:42:14 358,400 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
+ 2004-08-19 13:42:14 183,808 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
+ 2004-08-19 13:42:14 387,072 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
+ 2004-08-19 13:42:52 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
+ 2004-08-19 13:42:14 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
+ 2004-08-19 13:42:52 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
+ 2002-09-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
+ 2004-08-19 13:42:14 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
+ 2004-08-19 13:42:14 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
+ 2004-08-19 13:42:14 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
+ 2004-08-19 13:42:14 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
+ 2004-08-19 13:42:14 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
+ 2004-08-03 21:00:48 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
+ 2002-09-10 12:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
+ 2004-08-19 13:42:14 68,608 -c----w c:\windows\$NtServicePackUninstall$\isatq.dll
+ 2004-08-19 13:42:14 27,136 -c----w c:\windows\$NtServicePackUninstall$\iscomlog.dll
+ 2004-08-19 13:42:14 86,016 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
+ 2004-08-19 13:42:14 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
+ 2005-05-27 02:08:05 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
+ 2005-05-27 02:08:05 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
+ 2004-08-19 13:42:14 54,784 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
+ 2004-08-19 13:56:12 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
+ 2006-06-01 18:48:51 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
+ 2006-06-01 18:48:51 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
+ 2007-08-13 22:38:04 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
+ 2002-09-10 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd101.dll
+ 2002-09-10 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd106n.dll
+ 2002-09-10 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdax2.dll
+ 2004-08-19 13:28:04 25,088 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
+ 2004-08-19 13:39:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
+ 2002-09-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdibm02.dll
+ 2004-08-19 13:39:10 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
+ 2004-08-19 13:39:10 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
+ 2004-08-19 13:39:10 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
+ 2002-09-10 12:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41a.dll
+ 2002-09-10 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41j.dll
+ 2004-08-19 13:39:10 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
+ 2004-08-19 13:39:10 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
+ 2004-08-19 13:39:10 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
+ 2002-09-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
+ 2004-08-19 13:39:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
+ 2004-08-19 13:39:10 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
+ 2004-08-19 13:39:10 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsno.dll
+ 2004-08-19 13:39:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdukx.dll
+ 2004-08-03 20:59:24 7,424 -c----w c:\windows\$NtServicePackUninstall$\kd1394.dll
+ 2005-06-15 17:50:46 295,936 -c----w c:\windows\$NtServicePackUninstall$\kerberos.dll
+ 2007-04-16 15:54:21 1,037,824 -c----w c:\windows\$NtServicePackUninstall$\kernel32.dll
+ 2004-08-19 13:42:14 155,136 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
+ 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
+ 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys.000
+ 2004-08-19 13:42:14 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
+ 2004-08-04 04:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
+ 2004-08-03 20:59:48 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
+ 2004-08-19 20:42:14 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
+ 2004-08-19 13:42:14 424,448 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
+ 2004-08-19 13:42:14 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
+ 2005-09-01 01:43:36 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
+ 2004-08-19 13:42:14 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
+ 2004-08-19 13:42:14 33,792 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
+ 2004-08-19 13:42:14 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
+ 2004-08-19 13:42:14 100,864 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
+ 2004-08-19 13:42:14 224,768 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
+ 2004-08-19 13:42:14 343,552 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
+ 2004-08-19 13:42:14 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
+ 2004-08-19 13:42:52 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
+ 2004-08-19 13:42:14 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
+ 2004-08-19 13:42:52 61,952 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
+ 2004-08-19 13:43:24 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
+ 2004-08-19 13:42:54 515,584 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
+ 2004-08-19 13:42:14 13,312 -c----w c:\windows\$NtServicePackUninstall$\lonsint.dll
+ 2004-08-19 13:42:14 23,040 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
+ 2004-08-19 13:42:14 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
+ 2004-08-19 13:42:14 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
+ 2004-08-19 13:42:14 19,968 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
+ 2007-11-07 09:28:35 726,528 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
+ 2004-08-19 13:42:54 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
+ 2004-08-19 13:42:54 73,216 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
+ 2004-08-19 13:42:54 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
+ 2004-08-19 13:42:14 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
+ 2004-08-19 13:42:14 85,504 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
+ 2004-08-19 13:42:14 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
+ 2004-08-19 13:42:14 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
+ 2004-08-19 13:42:14 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
+ 2004-08-19 13:42:14 37,888 -c----w c:\windows\$NtServicePackUninstall$\md5filt.dll
+ 2004-08-19 13:42:14 119,296 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
+ 2004-08-19 13:42:14 16,896 -c----w c:\windows\$NtServicePackUninstall$\medctroc.dll
+ 2004-08-19 13:42:14 86,016 -c----w c:\windows\$NtServicePackUninstall$\metada51.dll
+ 2004-08-19 13:56:12 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
+ 2007-03-08 15:36:30 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
+ 2006-11-01 19:18:28 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
+ 2004-08-19 13:42:14 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
+ 2004-08-19 13:42:14 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
+ 2004-08-19 13:42:14 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
+ 2004-08-19 13:42:14 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
+ 2004-08-19 13:42:14 201,216 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
+ 2004-08-19 13:42:16 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
+ 2004-08-19 13:42:54 103,936 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
+ 2004-08-19 13:42:54 786,432 -c----w c:\windows\$NtServicePackUninstall$\migrate.exe
+ 2005-07-25 23:46:57 7,680 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
+ 2004-08-19 13:42:54 246,272 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
+ 2002-09-10 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
+ 2004-08-19 13:42:16 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
+ 2004-08-19 13:42:54 816,128 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
+ 2004-08-19 13:42:16 76,288 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
+ 2004-08-19 13:42:16 1,197,568 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
+ 2004-08-19 13:42:16 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
+ 2004-08-19 13:42:16 17,920 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
+ 2004-08-19 13:42:16 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
+ 2004-08-19 13:42:56 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
+ 2004-08-19 13:42:16 209,408 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
+ 2004-08-19 13:42:56 143,872 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
+ 2004-08-19 13:56:12 30,336 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
+ 2004-08-19 13:42:16 151,040 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
+ 2004-08-19 13:42:56 17,408 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
+ 2004-08-19 13:42:16 124,928 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
+ 2002-09-10 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
+ 2004-08-19 13:39:18 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
+ 2004-08-19 13:56:12 23,552 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
+ 2004-08-03 20:58:32 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
+ 2004-08-19 13:42:58 3,555,328 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
+ 2004-08-19 13:42:16 310,272 -c----w c:\windows\$NtServicePackUninstall$\mp43dmod.dll
+ 2004-08-19 13:42:16 384,512 -c----w c:\windows\$NtServicePackUninstall$\mp4sdmod.dll
+ 2004-08-19 13:42:16 240,640 -c----w c:\windows\$NtServicePackUninstall$\mpg4dmod.dll
+ 2004-08-19 13:42:58 124,928 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
+ 2004-08-19 13:42:58 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
+ 2004-08-19 13:42:16 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
+ 2004-08-19 13:42:16 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
+ 2002-09-10 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
+ 2004-08-19 13:42:16 368,640 -c----w c:\windows\$NtServicePackUninstall$\mpvis.dll
+ 2007-07-06 10:05:47 72,960 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
+ 2007-07-06 12:50:55 138,240 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
+ 2004-08-19 13:42:58 19,968 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
+ 2007-07-06 12:50:55 47,104 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
+ 2007-07-06 12:50:55 16,896 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
+ 2004-08-19 13:42:16 89,088 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
+ 2004-08-19 13:42:16 225,280 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
+ 2007-07-06 12:50:55 660,992 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
+ 2007-07-06 12:50:55 177,152 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
+ 2004-08-19 13:42:16 123,392 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
+ 2007-07-06 12:50:55 95,744 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
+ 2004-08-19 13:42:16 517,632 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
+ 2004-08-19 13:42:58 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
+ 2004-08-19 13:42:58 117,248 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
+ 2004-08-19 13:42:16 186,880 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
+ 2007-07-06 12:50:55 48,640 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
+ 2007-07-06 12:50:55 521,216 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
+ 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
+ 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
+ 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.000
+ 2004-08-19 13:42:16 72,192 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
+ 2004-08-19 13:39:22 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
+ 2004-08-19 13:42:16 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
+ 2004-08-19 13:39:22 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
+ 2006-03-23 05:44:52 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
+ 2004-08-19 13:39:22 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
+ 2004-08-19 13:42:16 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
+ 2004-08-19 13:42:16 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
+ 2004-08-19 13:39:22 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
+ 2004-08-19 13:39:22 28,672 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
+ 2006-12-26 13:09:05 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
+ 2006-12-26 13:09:05 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
+ 2004-08-19 13:42:16 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
+ 2006-12-26 13:09:05 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
+ 2004-08-19 13:42:16 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
+ 2004-08-19 13:39:22 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
+ 2004-08-19 13:42:16 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
+ 2004-08-19 13:42:16 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
+ 2004-08-19 13:42:16 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
+ 2008-06-24 16:23:35 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
+ 2004-08-19 13:42:16 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
+ 2004-08-19 13:42:58 159,744 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
+ 2004-08-19 13:39:24 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
+ 2004-08-19 13:42:16 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
+ 2004-08-19 13:42:16 294,400 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
+ 2004-08-19 13:42:16 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
+ 2004-08-19 13:42:16 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
+ 2004-08-19 13:42:16 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
+ 2004-08-19 13:42:16 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
+ 2004-08-19 13:42:16 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
+ 2004-08-19 13:42:16 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
+ 2004-08-19 13:39:24 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
+ 2004-08-19 13:42:16 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
+ 2004-08-19 13:39:24 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
+ 2004-08-19 13:42:16 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
+ 2004-08-19 13:42:16 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
+ 2004-08-19 13:42:16 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
+ 2004-08-19 13:39:24 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
+ 2004-08-19 13:42:16 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
+ 2004-08-19 13:42:16 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
+ 2004-08-19 13:42:16 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
+ 2004-08-19 13:39:24 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
+ 2004-08-19 13:42:16 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
+ 2004-08-19 13:42:16 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
+ 2004-08-19 13:42:16 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
+ 2004-08-19 13:42:16 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
+ 2004-08-19 13:42:16 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
+ 2004-08-19 13:42:58 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
+ 2004-08-19 13:42:16 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
+ 2006-03-01 19:43:59 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
+ 2002-09-10 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
+ 2006-03-01 19:44:00 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
+ 2006-03-01 19:44:00 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
+ 2004-08-19 13:39:26 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
+ 2004-08-03 21:00:42 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
+ 2006-11-27 14:54:16 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
+ 2004-08-19 13:42:16 999,936 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
+ 2004-08-03 21:04:14 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
+ 2004-08-19 13:42:16 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
+ 2004-08-19 13:42:16 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
+ 2004-08-19 20:57:44 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
+ 2004-08-19 13:42:16 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
+ 2004-08-19 13:43:26 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
+ 2004-08-19 13:56:12 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
+ 2007-04-18 16:14:22 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
+ 2004-08-19 13:42:16 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
+ 2004-08-19 13:42:16 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
+ 2004-08-19 13:42:16 251,392 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
+ 2005-05-04 19:45:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
+ 2005-05-04 19:45:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe.000
+ 2005-05-04 19:45:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
+ 2005-05-04 19:45:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll.000
+ 2004-08-19 13:42:16 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
+ 2004-08-19 13:42:58 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
+ 2005-05-04 19:45:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
+ 2005-05-04 19:45:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll.000
+ 2004-08-19 13:42:16 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
+ 2004-08-19 13:42:16 380,928 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
+ 2004-08-19 13:42:58 40,960 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
+ 2005-05-04 19:45:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
+ 2005-05-04 19:45:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll.000
+ 2006-12-26 13:09:05 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
+ 2004-08-04 03:58:42 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
+ 2004-08-19 13:42:18 25,600 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
+ 2004-08-19 13:42:18 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
+ 2004-08-19 13:42:18 169,984 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
+ 2004-10-13 16:24:37 1,694,208 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
+ 2004-08-19 13:42:18 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
+ 2004-08-19 13:42:18 122,880 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
+ 2004-08-19 13:42:18 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
+ 2004-08-19 13:42:18 563,200 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
+ 2004-08-19 13:42:18 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
+ 2004-08-19 13:42:18 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
+ 2007-05-16 15:12:05 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
+ 2004-08-19 13:42:18 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
+ 2004-08-19 13:39:42 2,515,456 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
+ 2004-08-19 13:42:18 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
+ 2002-09-10 12:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
+ 2004-08-19 13:39:42 24,576 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
+ 2004-08-19 13:42:18 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
+ 2004-08-19 13:43:00 346,624 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
+ 2004-08-19 13:42:18 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
+ 2004-08-04 03:58:40 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
+ 2004-08-04 03:58:42 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
+ 2004-08-19 13:39:42 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
+ 2004-08-19 13:42:18 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
+ 2004-08-19 13:42:18 134,656 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
+ 2004-08-19 13:56:12 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
+ 2004-08-19 13:42:18 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
+ 2004-08-19 13:42:18 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
+ 2004-08-19 13:42:18 279,552 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
+ 2004-08-19 13:43:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
+ 2004-08-19 13:42:18 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
+ 2004-08-19 13:19:12 409,088 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
+ 2004-08-03 20:59:44 655,360 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
+ 2004-08-19 13:42:18 195,584 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
+ 2004-08-19 13:42:18 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
+ 2004-02-24 02:42:40 1,386,496 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
+ 2004-08-19 13:42:18 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
+ 2004-08-19 13:42:18 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
+ 2004-08-19 13:42:18 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
+ 2004-08-03 20:58:26 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
+ 2004-08-19 13:42:18 121,856 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
+ 2004-08-19 13:42:18 1,433,600 -c----w c:\windows\$NtServicePackUninstall$\msvidctl.dll
+ 2004-08-19 13:42:18 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
+ 2004-08-19 13:42:20 204,800 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
+ 2008-06-20 17:41:07 248,320 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
+ 2004-08-19 13:42:20 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
+ 2004-08-19 13:42:20 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
+ 2004-08-19 13:42:20 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
+ 2007-06-26 06:09:15 1,104,896 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
+ 2004-08-19 13:56:12 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
+ 2002-09-10 12:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\mtstocom.exe
+ 2006-03-01 19:44:00 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
+ 2002-09-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
+ 2002-09-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
+ 2002-09-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
+ 2006-03-01 19:44:00 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
+ 2004-08-03 21:15:22 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
+ 2004-08-19 13:42:20 91,136 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
+ 2004-08-19 13:42:20 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
+ 2004-08-19 13:43:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
+ 2004-08-19 13:42:20 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
+ 2004-08-19 13:42:20 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
+ 2004-08-19 13:42:20 18,432 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
+ 2004-08-19 13:43:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
+ 2004-08-19 13:42:20 19,456 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
+ 2004-08-03 21:14:30 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
+ 2004-08-19 13:42:20 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
+ 2002-09-10 12:00:00 9,600 -c----w c:\windows\$NtServicePackUninstall$\ndistapi.sys
+ 2004-08-19 13:56:12 12,928 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
+ 2004-08-03 21:14:32 91,776 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
+ 2002-09-10 12:00:00 38,016 -c----w c:\windows\$NtServicePackUninstall$\ndproxy.sys
+ 2004-08-19 13:43:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\net.exe
+ 2004-08-19 13:43:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
+ 2006-08-17 12:29:42 332,288 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
+ 2004-08-03 21:03:22 34,560 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
+ 2004-08-03 21:14:38 162,816 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
+ 2004-08-19 13:42:20 632,320 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
+ 2004-08-19 13:43:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
+ 2004-08-19 13:42:20 142,336 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
+ 2004-08-19 13:42:20 407,040 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
+ 2005-08-22 18:34:57 197,632 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
+ 2004-08-19 13:42:20 77,824 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
+ 2004-08-19 13:42:20 880,640 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
+ 2004-08-19 13:42:20 12,288 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
+ 2004-08-19 13:46:12 331,776 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
+ 2004-08-19 13:43:00 87,552 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
+ 2004-08-19 13:42:20 1,717,760 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
+ 2004-08-19 13:43:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
+ 2004-08-19 13:42:20 82,944 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
+ 2004-08-19 13:42:20 245,760 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
+ 2004-08-19 13:42:20 250,368 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
+ 2004-08-19 13:56:12 61,824 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
+ 2004-08-19 13:42:20 103,936 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
+ 2004-08-19 13:42:20 229,376 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
+ 2004-08-19 13:42:20 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
+ 2004-08-19 13:42:20 81,920 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
+ 2004-08-19 13:42:20 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
+ 2004-08-19 13:42:20 151,552 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
+ 2004-08-19 13:42:20 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
+ 2004-08-03 20:59:52 40,320 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
+ 2004-08-19 13:42:20 172,032 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
+ 2004-08-19 13:42:20 188,416 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
+ 2004-08-19 13:43:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
+ 2004-08-19 13:43:30 226,816 -c----w c:\windows\$NtServicePackUninstall$\npdrmv2.dll
+ 2005-11-29 21:27:06 364,544 -c----w c:\windows\$NtServicePackUninstall$\npdsplay.dll
+ 2004-08-03 21:00:44 30,848 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
+ 2004-08-19 13:43:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
+ 2004-08-19 13:42:20 55,296 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
+ 2004-08-19 13:42:20 10,240 -c----w c:\windows\$NtServicePackUninstall$\npwmsdrm.dll
+ 2004-08-19 13:42:20 45,056 -c----w c:\windows\$NtServicePackUninstall$\nsepm.dll
+ 2004-08-19 13:43:02 79,872 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
+ 2004-08-19 13:43:04 1,232,896 -c----w c:\windows\$NtServicePackUninstall$\ntbackup.exe
+ 2004-08-19 13:41:32 732,672 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
+ 2004-08-19 13:42:20 67,072 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
+ 2004-08-19 13:42:20 212,992 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
+ 2007-02-09 11:10:35 574,464 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
+ 2007-02-28 16:02:21 2,138,624 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
+ 2007-02-28 16:02:37 2,060,032 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
+ 2007-02-28 16:02:19 2,018,304 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
+ 2004-08-19 13:42:20 43,520 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
+ 2004-08-19 13:42:20 8,192 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
+ 2004-08-19 13:42:20 119,808 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
+ 2004-08-19 13:42:20 40,960 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
+ 2004-08-19 13:42:22 180,224 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
+ 2004-08-19 13:42:22 495,104 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
+ 2004-08-19 13:42:22 437,760 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
+ 2004-08-19 13:42:22 63,488 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
+ 2007-02-28 16:02:33 2,182,784 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
+ 2004-08-19 13:42:22 92,160 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
+ 2004-08-19 13:42:22 144,896 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
+ 2004-08-19 13:43:04 420,864 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
+ 2002-09-10 12:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\ntvdmd.dll
+ 2006-10-13 12:36:47 64,000 -c----w c:\windows\$NtServicePackUninstall$\nwapi32.dll
+ 2004-08-03 21:03:36 88,448 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
+ 2006-10-13 12:36:47 144,384 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
+ 2006-10-13 10:23:15 163,584 -c----w c:\windows\$NtServicePackUninstall$\nwrdr.sys
+ 2006-10-13 12:36:47 65,536 -c----w c:\windows\$NtServicePackUninstall$\nwwks.dll
+ 2004-08-19 13:42:22 267,776 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
+ 2004-08-19 13:42:22 288,256 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
+ 2004-08-19 13:40:00 481,792 -c----w c:\windows\$NtServicePackUninstall$\obrs0c0a.dll
+ 2004-08-19 13:42:22 15,872 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
+ 2002-09-10 12:00:00 61,952 -c----w c:\windows\$NtServicePackUninstall$\ocmanage.dll
+ 2004-08-19 13:42:22 17,408 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
+ 2004-08-19 13:42:22 249,856 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
+ 2004-08-19 13:42:22 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
+ 2004-08-19 13:43:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
+ 2004-08-19 13:42:22 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
+ 2004-08-19 13:42:22 135,168 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
+ 2004-08-19 13:43:04 69,632 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
+ 2004-08-19 13:42:22 106,496 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
+ 2004-08-19 13:42:22 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
+ 2004-08-19 13:42:22 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
+ 2004-08-19 13:40:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
+ 2004-08-19 13:40:00 61,712 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
+ 2004-08-19 13:42:22 278,559 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
+ 2004-08-19 13:40:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
+ 2004-08-19 13:42:22 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
+ 2004-08-19 13:42:22 20,511 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
+ 2004-08-19 13:42:22 20,510 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
+ 2004-08-19 13:42:22 20,510 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
+ 2004-08-19 13:42:22 20,510 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
+ 2004-08-19 13:42:22 20,511 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
+ 2004-08-19 13:42:22 104,448 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
+ 2004-08-19 13:43:04 60,416 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
+ 2004-08-19 13:42:22 35,328 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
+ 2004-08-19 13:42:22 120,832 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
+ 2005-07-26 04:40:00 1,284,608 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
+ 2007-12-04 18:41:03 550,912 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
+ 2005-07-26 04:40:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\olecli32.dll
+ 2005-07-26 04:40:00 37,888 -c----w c:\windows\$NtServicePackUninstall$\olecnv32.dll
+ 2004-08-19 13:42:22 487,424 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
+ 2004-08-19 13:42:22 73,728 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
+ 2006-10-16 16:14:42 124,416 -c----w c:\windows\$NtServicePackUninstall$\oledlg.dll
+ 2004-08-19 13:42:22 109,056 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
+ 2004-08-19 13:42:22 83,456 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
+ 2004-08-19 13:43:04 51,712 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
+ 2004-08-19 13:43:04 70,656 -c----w c:\windows\$NtServicePackUninstall$\openfiles.exe
+ 2004-08-19 13:42:22 713,728 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
+ 2004-08-19 13:43:04 70,656 -c----w c:\windows\$NtServicePackUninstall$\opnfiles.exe
+ 2004-08-19 13:43:06 216,064 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
+ 2004-08-19 13:42:22 67,584 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
+ 2004-08-19 13:42:22 116,224 -c----w c:\windows\$NtServicePackUninstall$\p2p.dll
+ 2004-08-19 13:42:22 86,016 -c----w c:\windows\$NtServicePackUninstall$\p2pgasvc.dll
+ 2004-08-19 13:42:22 312,320 -c----w c:\windows\$NtServicePackUninstall$\p2pgraph.dll
+ 2004-08-19 13:42:22 88,064 -c----w c:\windows\$NtServicePackUninstall$\p2pnetsh.dll
+ 2004-08-19 13:42:22 526,848 -c----w c:\windows\$NtServicePackUninstall$\p2psvc.dll
+ 2004-08-19 13:56:12 46,720 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
+ 2004-08-19 13:43:06 59,392 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
+ 2004-08-03 20:32:12 15,872 -c----w c:\windows\$NtServicePackUninstall$\padrs404.dll
+ 2004-08-03 20:31:50 15,360 -c----w c:\windows\$NtServicePackUninstall$\padrs804.dll
+ 2004-08-19 13:56:12 80,256 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
+ 2002-09-10 12:00:00 18,688 -c----w c:\windows\$NtServicePackUninstall$\partmgr.sys
+ 2004-08-19 13:42:22 64,512 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
+ 2004-08-19 13:42:22 102,400 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
+ 2004-08-19 13:42:22 38,912 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
+ 2004-08-19 13:18:16 68,992 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
+ 2004-08-03 20:59:42 25,088 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
+ 2004-08-19 13:18:20 120,192 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
+ 2004-08-19 13:42:22 286,208 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
+ 2004-08-19 13:42:22 41,984 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
+ 2004-08-19 13:42:22 27,136 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
+ 2004-08-19 13:43:06 15,872 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
+ 2002-09-10 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\perfnet.dll
+ 2004-08-19 13:42:22 26,112 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
+ 2004-08-19 13:42:22 35,328 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
+ 2004-08-19 13:42:22 172,032 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
+ 2004-08-19 13:56:12 35,328 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
+ 2004-08-19 13:38:40 24,064 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
+ 2004-08-19 13:43:06 284,160 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
+ 2004-08-19 13:43:06 19,456 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
+ 2004-08-03 20:31:50 175,104 -c----w c:\windows\$NtServicePackUninstall$\pintlcsa.dll
+ 2004-08-03 20:31:50 53,760 -c----w c:\windows\$NtServicePackUninstall$\pintlcsd.dll
+ 2004-08-03 20:31:50 70,144 -c----w c:\windows\$NtServicePackUninstall$\pintlphr.exe
+ 2004-08-19 13:56:12 15,360 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
+ 2004-08-03 20:31:50 67,584 -c----w c:\windows\$NtServicePackUninstall$\pmigrate.dll
+ 2004-08-19 13:42:22 48,640 -c----w c:\windows\$NtServicePackUninstall$\pnrpnsp.dll
+ 2004-08-19 13:42:22 92,672 -c----w c:\windows\$NtServicePackUninstall$\policman.dll
+ 2004-08-19 13:42:22 105,984 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
+ 2004-08-04 04:15:50 145,792 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
+ 2004-08-19 13:43:06 49,152 -c----w c:\windows\$NtServicePackUninstall$\powercfg.exe
+ 2004-08-19 13:42:22 17,408 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
+ 2004-08-19 13:42:22 574,976 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
+ 2004-08-19 13:56:12 39,552 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
+ 2004-08-19 13:42:22 27,648 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
+ 2004-08-19 13:43:06 109,568 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
+ 2004-08-19 13:43:06 50,688 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
+ 2004-08-19 13:42:22 237,056 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
+ 2004-08-19 13:43:06 9,728 -c----w c:\windows\$NtServicePackUninstall$\proxycfg.exe
+ 2004-08-19 13:42:22 23,040 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
+ 2004-08-19 13:42:22 98,304 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
+ 2004-08-03 21:04:20 69,120 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
+ 2004-08-19 13:42:22 43,520 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
+ 2004-08-19 13:42:22 34,816 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
+ 2004-08-19 13:42:22 7,680 -c----w c:\windows\$NtServicePackUninstall$\pwsdata.dll
+ 2004-08-19 13:42:22 192,512 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
+ 2004-08-19 13:42:22 279,040 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
+ 2004-08-19 13:42:22 386,048 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
+ 2004-08-19 13:42:22 563,200 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
+ 2004-08-19 13:40:06 733,696 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
+ 2004-08-19 13:42:22 382,464 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
+ 2004-08-19 13:42:22 18,944 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
+ 2004-08-19 13:43:06 20,480 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
+ 2008-05-07 05:15:31 1,293,824 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
+ 2006-06-22 05:13:50 1,440,256 -c----w c:\windows\$NtServicePackUninstall$\query.dll
+ 2004-08-19 13:42:22 43,520 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
+ 2004-08-03 21:00:52 20,736 -c----w c:\windows\$NtServicePackUninstall$\ramdisk.sys
+ 2006-06-26 17:41:27 8,192 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
+ 2004-08-19 13:42:22 237,056 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
+ 2004-08-19 13:42:22 89,088 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
+ 2004-08-19 13:42:22 69,632 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
+ 2004-08-19 13:42:22 677,376 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
+ 2004-08-03 21:14:24 51,328 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
+ 2004-08-19 13:42:22 61,440 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
+ 2006-06-22 10:48:10 181,248 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
+ 2004-08-19 13:43:06 57,344 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
+ 2004-08-19 13:42:22 206,336 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
+ 2004-08-03 21:05:08 41,472 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
+ 2004-08-03 21:14:28 48,384 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
+ 2004-08-19 13:42:22 16,896 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
+ 2004-08-19 13:42:22 58,880 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
+ 2004-08-19 13:42:22 112,640 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
+ 2004-08-19 13:42:22 102,912 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
+ 2004-08-19 13:43:06 35,840 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
+ 2004-08-19 13:43:06 23,040 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
+ 2006-05-05 09:47:57 174,592 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
+ 2004-08-19 13:42:22 147,968 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
+ 2004-08-19 13:43:06 62,464 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
+ 2004-08-19 13:43:38 92,168 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
+ 2004-08-04 04:01:16 196,864 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
+ 2004-08-19 13:42:22 19,968 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
+ 2005-06-10 04:11:21 139,528 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
+ 2004-08-19 13:43:38 87,176 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
+ 2004-08-19 13:43:06 13,824 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
+ 2004-08-19 13:43:06 67,072 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
+ 2004-08-19 14:21:20 58,624 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
+ 2004-08-19 13:43:06 52,224 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
+ 2004-08-19 13:42:22 49,664 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
+ 2004-08-19 13:43:06 152,064 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
+ 2004-08-19 13:42:22 59,904 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
+ 2004-08-19 13:43:06 11,776 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
+ 2004-08-19 13:42:22 401,408 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
+ 2004-08-19 13:42:22 61,440 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
+ 2004-08-19 13:42:22 177,152 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
+ 2004-08-19 13:42:22 58,880 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
+ 2004-08-19 13:43:08 15,360 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
+ 2006-11-27 14:54:17 433,152 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
+ 2008-05-08 12:28:49 202,752 -c----w c:\windows\$NtServicePackUninstall$\rmcast.sys
+ 2004-08-03 21:04:32 30,080 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
+ 2004-08-19 13:42:22 4,096 -c----w c:\windows\$NtServicePackUninstall$\rpcref.dll
+ 2007-07-09 13:11:11 584,192 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
+ 2005-07-26 04:40:01 397,824 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
+ 2004-08-19 13:42:22 61,440 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
+ 2004-08-03 20:31:44 152,576 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
+ 2004-08-19 13:43:08 16,384 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
+ 2004-08-19 13:42:22 40,448 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
+ 2004-08-19 13:42:22 18,944 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
+ 2004-08-19 13:43:08 107,520 -c----w c:\windows\$NtServicePackUninstall$\rsnotify.exe
+ 2004-08-19 13:43:08 382,976 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
+ 2002-09-10 12:00:00 90,112 -c----w c:\windows\$NtServicePackUninstall$\rsvpsp.dll
+ 2004-08-19 13:43:08 77,824 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
+ 2004-08-19 13:42:22 31,744 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
+ 2004-08-19 13:42:22 44,032 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
+ 2004-08-19 13:43:08 33,280 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
+ 2004-08-19 13:43:08 14,336 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
+ 2002-09-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\rw001ext.dll
+ 2002-09-10 12:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\rw330ext.dll
+ 2004-08-19 13:42:22 9,728 -c----w c:\windows\$NtServicePackUninstall$\rwnh.dll
+ 2004-08-19 13:42:22 43,520 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
+ 2004-08-19 13:42:22 29,696 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
+ 2004-08-19 13:42:22 45,568 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
+ 2004-08-19 13:42:22 64,000 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
+ 2004-08-19 13:42:22 429,056 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
+ 2004-08-19 13:42:22 741,376 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
+ 2004-08-19 13:43:08 13,824 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
+ 2004-08-19 13:42:22 270,848 -c----w c:\windows\$NtServicePackUninstall$\sbe.dll
+ 2004-08-19 13:42:22 159,232 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
+ 2004-08-19 13:42:22 70,656 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
+ 2004-08-19 13:43:08 99,840 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
+ 2004-08-19 13:42:24 171,520 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
+ 2004-08-19 13:42:24 184,832 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
+ 2004-08-19 13:42:24 324,096 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
+ 2007-04-25 14:22:37 144,896 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
+ 2004-08-19 13:42:24 192,000 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
+ 2004-08-19 13:43:08 128,000 -c----w c:\windows\$NtServicePackUninstall$\schtasks.exe
+ 2004-08-19 13:42:24 22,016 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
+ 2004-08-19 13:43:08 36,864 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
+ 2004-08-19 13:42:24 204,288 -c----w c:\windows\$NtServicePackUninstall$\script.dll
+ 2004-08-19 13:43:24 9,216 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
+ 2004-08-19 13:42:24 159,744 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
+ 2004-08-19 13:42:24 151,552 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
+ 2004-08-03 20:59:42 96,256 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
+ 2004-08-19 13:43:08 128,000 -c----w c:\windows\$NtServicePackUninstall$\sctasks.exe
+ 2004-08-19 13:43:08 78,336 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
+ 2004-08-03 21:07:48 67,584 -c----w c:\windows\$NtServicePackUninstall$\sdbus.sys
+ 2004-08-19 13:42:24 29,184 -c----w c:\windows\$NtServicePackUninstall$\sdhcinst.dll
+ 2004-08-19 13:43:08 18,944 -c----w c:\windows\$NtServicePackUninstall$\secedit.exe
+ 2004-08-19 13:42:24 18,944 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
+ 2004-08-19 13:42:24 55,808 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
+ 2004-08-19 13:42:24 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
+ 2004-08-19 13:42:24 29,696 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
+ 2004-08-19 13:42:24 55,296 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
+ 2004-08-19 13:42:24 38,912 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
+ 2004-08-19 13:42:24 6,656 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll
+ 2004-08-19 13:42:24 221,696 -c----w c:\windows\$NtServicePackUninstall$\seo.dll
+ 2004-08-03 20:59:08 15,488 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
+ 2004-08-19 13:23:46 66,176 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
+ 2004-08-19 13:42:24 56,832 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
+ 2004-08-19 13:43:10 108,544 -c----w c:\windows\$NtServicePackUninstall$\services.exe
+ 2004-08-19 13:43:10 142,848 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
+ 2004-08-19 13:43:10 32,256 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
+ 2004-08-19 13:43:10 23,040 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
+ 2004-08-19 13:43:10 778,240 -c----w c:\windows\$NtServicePackUninstall$\setup_wm.exe
+ 2004-08-19 13:43:10 73,728 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
+ 2004-08-19 13:42:26 999,424 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
+ 2004-08-19 13:42:26 101,888 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
+ 2004-08-19 13:42:26 5,120 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
+ 2004-08-19 13:42:26 141,824 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
+ 2004-08-19 13:42:26 1,548,800 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
+ 2004-08-03 20:59:56 11,136 -c----w c:\windows\$NtServicePackUninstall$\sffdisk.sys
+ 2004-08-03 20:59:56 10,240 -c----w c:\windows\$NtServicePackUninstall$\sffp_sd.sys
+ 2004-08-03 20:59:56 11,392 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
+ 2004-08-19 13:40:20 565,760 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
+ 2008-06-23 15:40:07 1,495,040 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
+ 2007-10-25 16:56:23 8,496,640 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
+ 2004-08-19 13:42:26 25,088 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
+ 2004-08-19 13:42:26 68,096 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
+ 2004-08-19 13:42:26 65,536 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
+ 2004-08-19 13:42:26 440,320 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
+ 2008-06-23 15:40:08 474,624 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
+ 2004-08-19 13:42:26 152,576 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
+ 2004-08-19 13:43:10 42,496 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
+ 2004-08-19 13:43:10 78,848 -c----w c:\windows\$NtServicePackUninstall$\shrpubw.exe
+ 2004-08-19 13:42:26 28,160 -c----w c:\windows\$NtServicePackUninstall$\shscrap.dll
+ 2006-12-19 21:49:47 134,656 -c----w c:\windows\$NtServicePackUninstall$\shsvcs.dll
+ 2003-03-24 20:52:04 20,536 -c----w c:\windows\$NtServicePackUninstall$\shtml.dll
+ 2003-03-24 20:52:04 16,437 -c----w c:\windows\$NtServicePackUninstall$\shtml.exe
+ 2004-08-19 13:43:10 20,480 -c----w c:\windows\$NtServicePackUninstall$\shutdown.exe
+ 2004-08-19 13:42:26 13,824 -c----w c:\windows\$NtServicePackUninstall$\sigtab.dll
+ 2004-08-19 13:43:10 71,168 -c----w c:\windows\$NtServicePackUninstall$\sigverif.exe
+ 2004-08-19 13:43:10 26,112 -c----w c:\windows\$NtServicePackUninstall$\skeys.exe
+ 2004-08-19 13:42:26 25,600 -c----w c:\windows\$NtServicePackUninstall$\slayerxp.dll
+ 2004-08-19 13:42:26 98,304 -c----w c:\windows\$NtServicePackUninstall$\slbiop.dll
+ 2004-08-19 13:43:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\smbinst.exe
+ 2004-08-19 13:43:10 236,544 -c----w c:\windows\$NtServicePackUninstall$\smi2smir.exe
+ 2004-08-19 13:42:26 369,152 -c----w c:\windows\$NtServicePackUninstall$\smlogcfg.dll
+ 2004-08-19 13:43:10 92,160 -c----w c:\windows\$NtServicePackUninstall$\smlogsvc.exe
+ 2004-08-19 13:43:10 50,688 -c----w c:\windows\$NtServicePackUninstall$\smss.exe
+ 2004-08-19 13:42:26 189,952 -c----w c:\windows\$NtServicePackUninstall$\smtpadm.dll
+ 2004-08-19 13:42:26 10,752 -c----w c:\windows\$NtServicePackUninstall$\smtpapi.dll
+ 2004-08-19 13:42:26 2,134,528 -c----w c:\windows\$NtServicePackUninstall$\smtpsnap.dll
+ 2004-08-19 13:42:26 465,408 -c----w c:\windows\$NtServicePackUninstall$\smtpsvc.dll
+ 2004-08-19 13:43:12 132,608 -c----w c:\windows\$NtServicePackUninstall$\sndrec32.exe
+ 2004-08-19 13:42:26 34,816 -c----w c:\windows\$NtServicePackUninstall$\sniffpol.dll
+ 2004-08-19 13:43:12 32,768 -c----w c:\windows\$NtServicePackUninstall$\snmp.exe
+ 2004-08-19 13:42:26 18,944 -c----w c:\windows\$NtServicePackUninstall$\snmpapi.dll
+ 2004-08-19 13:42:26 259,072 -c----w c:\windows\$NtServicePackUninstall$\snmpcl.dll
+ 2004-08-19 13:42:26 358,400 -c----w c:\windows\$NtServicePackUninstall$\snmpincl.dll
+ 2004-08-19 13:42:26 6,144 -c----w c:\windows\$NtServicePackUninstall$\snmpmib.dll
+ 2004-08-19 13:42:26 188,416 -c----w c:\windows\$NtServicePackUninstall$\snmpsmir.dll
+ 2004-08-19 13:42:26 183,808 -c----w c:\windows\$NtServicePackUninstall$\snmpsnap.dll
+ 2004-08-19 13:42:26 40,448 -c----w c:\windows\$NtServicePackUninstall$\snmpthrd.dll
+ 2004-08-19 13:43:12 8,704 -c----w c:\windows\$NtServicePackUninstall$\snmptrap.exe
+ 2004-08-19 13:42:26 130,048 -c----w c:\windows\$NtServicePackUninstall$\softkbd.dll
+ 2004-08-19 13:56:12 25,472 -c----w c:\windows\$NtServicePackUninstall$\sonydcam.sys
+ 2002-09-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\sort.exe
+ 2004-08-19 13:40:30 62,976 -c----w c:\windows\$NtServicePackUninstall$\spgrmr.dll
+ 2004-08-19 13:43:12 539,136 -c----w c:\windows\$NtServicePackUninstall$\spider.exe
+ 2004-08-03 20:59:36 12,800 -c----w c:\windows\$NtServicePackUninstall$\spiisupd.exe
+ 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys
+ 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys.000
+ 2004-08-19 13:43:12 11,776 -c----w c:\windows\$NtServicePackUninstall$\spnpinst.exe
+ 2004-08-19 13:42:26 74,752 -c----w c:\windows\$NtServicePackUninstall$\spoolss.dll
+ 2005-06-10 23:53:32 57,856 -c----w c:\windows\$NtServicePackUninstall$\spoolsv.exe
+ 2004-08-19 13:40:30 196,096 -c----w c:\windows\$NtServicePackUninstall$\spra0403.dll
+ 2004-08-19 13:40:36 196,096 -c----w c:\windows\$NtServicePackUninstall$\sprs0c0a.dll
+ 2004-08-19 13:40:42 2,966,528 -c----w c:\windows\$NtServicePackUninstall$\sprt0c0a.dll
+ 2004-08-19 13:42:26 272,384 -c----w c:\windows\$NtServicePackUninstall$\sptip.dll
+ 2008-04-14 12:48:38 438,272 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spcompat.dll
+ 2007-08-11 01:47:08 233,848 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe
+ 2007-08-11 01:47:18 401,272 -c----w c:\windows\$NtServicePackUninstall$\spuninst\updspapi.dll
+ 2004-08-19 13:42:26 151,552 -c----w c:\windows\$NtServicePackUninstall$\sqldb20.dll
+ 2004-08-19 13:42:26 528,384 -c----w c:\windows\$NtServicePackUninstall$\sqloledb.dll
+ 2004-08-19 13:42:26 462,848 -c----w c:\windows\$NtServicePackUninstall$\sqlqp20.dll
+ 2004-08-19 13:42:26 110,592 -c----w c:\windows\$NtServicePackUninstall$\sqlse20.dll
+ 2004-08-19 13:42:26 442,368 -c----w c:\windows\$NtServicePackUninstall$\sqlsrv32.dll
+ 2004-08-19 13:42:26 180,800 -c----w c:\windows\$NtServicePackUninstall$\sqlunirl.dll
+ 2004-08-19 13:42:26 217,088 -c----w c:\windows\$NtServicePackUninstall$\sqlxmlx.dll
+ 2004-08-19 13:33:36 73,600 -c----w c:\windows\$NtServicePackUninstall$\sr.sys
+ 2004-08-19 13:42:26 58,434 -c----w c:\windows\$NtServicePackUninstall$\srchctls.dll
+ 2004-08-19 13:42:28 726,590 -c----w c:\windows\$NtServicePackUninstall$\srchui.dll
+ 2004-08-19 13:42:28 67,584 -c----w c:\windows\$NtServicePackUninstall$\srclient.dll
+ 2004-08-19 13:42:28 241,152 -c----w c:\windows\$NtServicePackUninstall$\srrstr.dll
+ 2004-08-19 13:42:28 171,008 -c----w c:\windows\$NtServicePackUninstall$\srsvc.dll
+ 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtServicePackUninstall$\srv.sys
+ 2004-12-07 19:34:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\srvsvc.dll
+ 2004-08-19 13:43:24 708,608 -c----w c:\windows\$NtServicePackUninstall$\ss3dfo.scr
+ 2004-08-19 13:43:24 19,968 -c----w c:\windows\$NtServicePackUninstall$\ssbezier.scr
+ 2004-08-19 13:42:28 34,816 -c----w c:\windows\$NtServicePackUninstall$\ssdpapi.dll
+ 2004-08-19 13:42:28 71,680 -c----w c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
+ 2004-08-19 13:43:26 393,216 -c----w c:\windows\$NtServicePackUninstall$\ssflwbox.scr
+ 2004-08-19 13:42:28 45,568 -c----w c:\windows\$NtServicePackUninstall$\ssinc51.dll
+ 2004-08-19 13:43:26 20,992 -c----w c:\windows\$NtServicePackUninstall$\ssmarque.scr
+ 2004-08-19 13:43:26 47,616 -c----w c:\windows\$NtServicePackUninstall$\ssmypics.scr
+ 2004-08-19 13:43:26 18,944 -c----w c:\windows\$NtServicePackUninstall$\ssmyst.scr
+ 2004-08-19 13:42:28 46,592 -c----w c:\windows\$NtServicePackUninstall$\sspifilt.dll
+ 2004-08-19 13:43:26 610,304 -c----w c:\windows\$NtServicePackUninstall$\sspipes.scr
+ 2004-08-19 13:43:26 14,848 -c----w c:\windows\$NtServicePackUninstall$\ssstars.scr
+ 2004-08-19 13:43:26 684,032 -c----w c:\windows\$NtServicePackUninstall$\sstext3d.scr
+ 2004-08-19 13:42:28 33,280 -c----w c:\windows\$NtServicePackUninstall$\sstub.dll
+ 2004-08-19 13:42:28 8,192 -c----w c:\windows\$NtServicePackUninstall$\staxmem.dll
+ 2002-09-10 12:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\stclient.dll
+ 2004-08-19 13:42:28 86,528 -c----w c:\windows\$NtServicePackUninstall$\stdprov.dll
+ 2004-08-19 13:42:28 68,096 -c----w c:\windows\$NtServicePackUninstall$\sti.dll
+ 2004-08-19 13:42:28 137,728 -c----w c:\windows\$NtServicePackUninstall$\sti_ci.dll
+ 2004-08-19 13:43:12 14,848 -c----w c:\windows\$NtServicePackUninstall$\stimon.exe
+ 2004-08-19 13:42:28 122,368 -c----w c:\windows\$NtServicePackUninstall$\stobject.dll
+ 2004-08-19 14:42:28 76,288 -c----w c:\windows\$NtServicePackUninstall$\storprop.dll
+ 2004-08-04 04:08:04 48,640 -c----w c:\windows\$NtServicePackUninstall$\stream.sys
+ 2006-08-24 17:19:40 246,814 -c----w c:\windows\$NtServicePackUninstall$\strmdll.dll
+ 2004-08-19 13:42:28 75,776 -c----w c:\windows\$NtServicePackUninstall$\strmfilt.dll
+ 2004-08-19 13:42:28 47,104 -c----w c:\windows\$NtServicePackUninstall$\svcext51.dll
+ 2004-08-19 13:43:12 14,336 -c----w c:\windows\$NtServicePackUninstall$\svchost.exe
+ 2004-08-19 13:56:12 4,352 -c----w c:\windows\$NtServicePackUninstall$\swenum.sys
+ 2001-08-18 03:00:52 54,272 -c----w c:\windows\$NtServicePackUninstall$\swmidi.sys
+ 2006-10-20 01:38:50 716,288 -c----w c:\windows\$NtServicePackUninstall$\sxs.dll
+ 2004-08-19 13:42:28 57,856 -c----w c:\windows\$NtServicePackUninstall$\synceng.dll
+ 2004-08-19 13:42:28 195,072 -c----w c:\windows\$NtServicePackUninstall$\syncui.dll
+ 2004-08-04 04:15:56 60,800 -c----w c:\windows\$NtServicePackUninstall$\sysaudio.sys
+ 2002-09-10 12:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\sysinfo.exe
+ 2004-08-19 13:42:28 169,472 -c----w c:\windows\$NtServicePackUninstall$\sysmod.dll
+ 2004-08-19 13:43:12 107,520 -c----w c:\windows\$NtServicePackUninstall$\sysocmgr.exe
+ 2004-08-19 13:42:28 1,001,472 -c----w c:\windows\$NtServicePackUninstall$\syssetup.dll
+ 2002-09-10 12:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\systeminfo.exe
+ 2005-10-17 21:21:06 118,272 -c----w c:\windows\$NtServicePackUninstall$\t2embed.dll
+ 2004-08-19 13:42:28 34,304 -c----w c:\windows\$NtServicePackUninstall$\tabletoc.dll
+ 2004-08-03 21:00:00 14,976 -c----w c:\windows\$NtServicePackUninstall$\tape.sys
+ 2004-08-19 13:42:28 860,160 -c----w c:\windows\$NtServicePackUninstall$\tapi3.dll
+ 2004-08-19 13:42:28 181,760 -c----w c:\windows\$NtServicePackUninstall$\tapi32.dll
+ 2005-07-08 16:29:01 249,344 -c----w c:\windows\$NtServicePackUninstall$\tapisrv.dll
+ 2002-09-10 12:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\taskkill.exe
+ 2002-09-10 12:00:00 74,240 -c----w c:\windows\$NtServicePackUninstall$\tasklist.exe
+ 2004-08-19 13:43:14 141,312 -c----w c:\windows\$NtServicePackUninstall$\taskmgr.exe
+ 2008-06-20 10:45:13 360,320 -c----w c:\windows\$NtServicePackUninstall$\tcpip.sys
+ 2008-06-20 09:52:06 225,920 -c----w c:\windows\$NtServicePackUninstall$\tcpip6.sys
+ 2004-08-19 13:42:28 14,848 -c----w c:\windows\$NtServicePackUninstall$\tcpmib.dll
+ 2004-08-19 13:42:28 46,592 -c----w c:\windows\$NtServicePackUninstall$\tcpmon.dll
+ 2004-08-19 13:42:28 46,592 -c----w c:\windows\$NtServicePackUninstall$\tcpmonui.dll
+ 2003-03-24 20:52:04 32,827 -c----w c:\windows\$NtServicePackUninstall$\tcptest.exe
+ 2004-08-03 21:07:50 18,560 -c----w c:\windows\$NtServicePackUninstall$\tdi.sys
+ 2004-08-19 13:43:38 12,040 -c----w c:\windows\$NtServicePackUninstall$\tdpipe.sys
+ 2004-08-19 13:43:38 21,896 -c----w c:\windows\$NtServicePackUninstall$\tdtcp.sys
+ 2005-05-11 02:30:02 77,824 -c----w c:\windows\$NtServicePackUninstall$\telnet.exe
+ 2004-08-19 20:43:36 40,840 -c----w c:\windows\$NtServicePackUninstall$\termdd.sys
+ 2004-08-19 13:42:28 358,912 -c----w c:\windows\$NtServicePackUninstall$\termmgr.dll
+ 2004-08-19 13:42:28 296,960 -c----w c:\windows\$NtServicePackUninstall$\termsrv.dll
+ 2004-08-19 13:42:28 390,656 -c----w c:\windows\$NtServicePackUninstall$\themeui.dll
+ 2004-08-19 13:43:14 63,488 -c----w c:\windows\$NtServicePackUninstall$\tlntadmn.exe
+ 2004-08-19 13:43:14 79,360 -c----w c:\windows\$NtServicePackUninstall$\tlntsess.exe
+ 2004-08-19 13:43:14 74,240 -c----w c:\windows\$NtServicePackUninstall$\tlntsvr.exe
+ 2004-08-19 13:42:28 7,168 -c----w c:\windows\$NtServicePackUninstall$\tlntsvrp.dll
+ 2004-08-03 20:32:14 10,240 -c----w c:\windows\$NtServicePackUninstall$\tmigrate.dll
+ 2002-09-10 12:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\tools.dll
+ 2004-08-19 13:43:14 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstart.exe
+ 2004-08-19 13:43:14 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstrt.exe
+ 2004-08-19 13:43:14 260,608 -c----w c:\windows\$NtServicePackUninstall$\tracerpt.exe
+ 2004-08-19 13:43:14 13,312 -c----w c:\windows\$NtServicePackUninstall$\tracert.exe
+ 2002-09-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\tree.com
+ 2004-08-19 13:42:28 153,088 -c----w c:\windows\$NtServicePackUninstall$\triedit.dll
+ 2004-08-19 13:42:28 90,624 -c----w c:\windows\$NtServicePackUninstall$\trkwks.dll
+ 2004-08-19 13:42:28 93,696 -c----w c:\windows\$NtServicePackUninstall$\tscfgwmi.dll
+ 2004-08-19 13:43:38 12,168 -c----w c:\windows\$NtServicePackUninstall$\tsddd.dll
+ 2004-08-19 13:42:28 279,040 -c----w c:\windows\$NtServicePackUninstall$\tshoot.dll
+ 2004-08-19 13:42:28 123,392 -c----w c:\windows\$NtServicePackUninstall$\tsoc.dll
+ 2004-08-19 13:56:12 12,416 -c----w c:\windows\$NtServicePackUninstall$\tunmp.sys
+ 2004-08-19 13:42:28 50,688 -c----w c:\windows\$NtServicePackUninstall$\twain_32.dll
+ 2004-08-19 13:42:28 44,032 -c----w c:\windows\$NtServicePackUninstall$\twext.dll
+ 2005-07-26 04:40:01 101,376 -c----w c:\windows\$NtServicePackUninstall$\txflog.dll
+ 2008-07-14 11:09:18 62,976 -c----w c:\windows\$NtServicePackUninstall$\tzchange.exe
+ 2004-08-03 22:07:44 44,672 -c----w c:\windows\$NtServicePackUninstall$\uagp35.sys
+ 2004-08-03 21:00:32 66,176 -c----w c:\windows\$NtServicePackUninstall$\udfs.sys
+ 2004-08-19 13:42:28 25,600 -c----w c:\windows\$NtServicePackUninstall$\udhisapi.dll
+ 2004-08-19 13:42:28 103,936 -c----w c:\windows\$NtServicePackUninstall$\uihelper.dll
+ 2004-08-19 13:42:28 310,784 -c----w c:\windows\$NtServicePackUninstall$\ulib.dll
+ 2004-08-19 13:42:28 36,864 -c----w c:\windows\$NtServicePackUninstall$\umandlg.dll
+ 2005-08-23 03:39:10 124,416 -c----w c:\windows\$NtServicePackUninstall$\umpnpmgr.dll
+ 2004-08-03 21:04:12 76,288 -c----w c:\windows\$NtServicePackUninstall$\uniime.dll
+ 2004-08-19 13:42:28 78,848 -c----w c:\windows\$NtServicePackUninstall$\unimdmat.dll
+ 2004-08-19 13:42:28 13,824 -c----w c:\windows\$NtServicePackUninstall$\uniplat.dll
+ 2004-08-19 13:43:14 208,896 -c----w c:\windows\$NtServicePackUninstall$\unregmp2.exe
+ 2004-08-19 13:42:28 316,416 -c----w c:\windows\$NtServicePackUninstall$\untfs.dll
+ 2004-08-03 20:58:34 209,408 -c----w c:\windows\$NtServicePackUninstall$\update.sys
+ 2004-08-19 13:43:14 151,040 -c----w c:\windows\$NtServicePackUninstall$\uploadm.exe
+ 2004-08-19 13:42:28 132,608 -c----w c:\windows\$NtServicePackUninstall$\upnp.dll
+ 2004-08-19 13:43:14 16,896 -c----w c:\windows\$NtServicePackUninstall$\upnpcont.exe
+ 2007-02-05 20:18:39 185,344 -c----w c:\windows\$NtServicePackUninstall$\upnphost.dll
+ 2004-08-19 13:42:28 240,128 -c----w c:\windows\$NtServicePackUninstall$\upnpui.dll
+ 2004-08-19 13:43:14 18,432 -c----w c:\windows\$NtServicePackUninstall$\ups.exe
+ 2004-08-03 21:04:34 12,672 -c----w c:\windows\$NtServicePackUninstall$\usb8023.sys
+ 2002-09-10 12:00:00 23,808 -c----w c:\windows\$NtServicePackUninstall$\usbcamd.sys
+ 2002-09-10 12:00:00 23,936 -c----w c:\windows\$NtServicePackUninstall$\usbcamd2.sys
+ 2004-08-03 21:08:38 26,624 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys
+ 2004-08-03 21:08:44 57,600 -c----w c:\windows\$NtServicePackUninstall$\usbhub.sys
+ 2004-08-19 13:56:12 16,000 -c----w c:\windows\$NtServicePackUninstall$\usbintel.sys
+ 2004-08-19 13:42:28 16,896 -c----w c:\windows\$NtServicePackUninstall$\usbmon.dll
+ 2004-08-03 21:08:38 17,024 -c----w c:\windows\$NtServicePackUninstall$\usbohci.sys
+ 2004-08-03 21:08:44 142,976 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys
+ 2004-08-04 03:01:26 25,856 -c----w c:\windows\$NtServicePackUninstall$\usbprint.sys
+ 2004-08-04 02:58:46 15,104 -c----w c:\windows\$NtServicePackUninstall$\usbscan.sys
+ 2004-08-04 04:08:48 26,496 -c----w c:\windows\$NtServicePackUninstall$\usbstor.sys
+ 2004-08-19 14:42:28 77,824 -c----w c:\windows\$NtServicePackUninstall$\usbui.dll
+ 2007-03-08 15:36:30 578,560 -c----w c:\windows\$NtServicePackUninstall$\user32.dll
+ 2004-08-19 13:42:28 729,600 -c----w c:\windows\$NtServicePackUninstall$\userenv.dll
+ 2004-08-19 13:43:14 25,088 -c----w c:\windows\$NtServicePackUninstall$\userinit.exe
+ 2004-08-19 13:42:28 406,528 -c----w c:\windows\$NtServicePackUninstall$\usp10.dll
+ 2004-08-19 13:43:14 50,176 -c----w c:\windows\$NtServicePackUninstall$\utilman.exe
+ 2004-08-19 13:42:28 220,160 -c----w c:\windows\$NtServicePackUninstall$\uxtheme.dll
+ 2004-08-19 13:42:28 30,749 -c----w c:\windows\$NtServicePackUninstall$\vbajet32.dll
+ 2007-08-13 22:54:10 413,696 -c----w c:\windows\$NtServicePackUninstall$\vbscript.dll
+ 2004-08-19 13:42:28 26,112 -c----w c:\windows\$NtServicePackUninstall$\vdmdbg.dll
+ 2004-08-19 13:42:28 51,712 -c----w c:\windows\$NtServicePackUninstall$\vdmredir.dll
+ 2006-03-17 00:38:01 28,672 -c----w c:\windows\$NtServicePackUninstall$\verclsid.exe
+ 2002-09-10 12:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\verifier.dll
+ 2004-08-19 13:42:28 18,944 -c----w c:\windows\$NtServicePackUninstall$\version.dll
+ 2004-08-03 21:07:08 20,992 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
+ 2004-08-03 21:07:06 79,744 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
+ 2004-08-19 13:42:28 131,584 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
+ 2004-08-03 20:32:36 426,041 -c----w c:\windows\$NtServicePackUninstall$\voicepad.dll
+ 2004-08-03 20:32:36 86,073 -c----w c:\windows\$NtServicePackUninstall$\voicesub.dll
+ 2004-08-19 13:28:08 53,248 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
+ 2004-08-19 13:42:28 430,592 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
+ 2004-08-19 13:43:14 293,888 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
+ 2004-08-19 13:42:28 176,640 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
+ 2004-08-19 13:42:28 15,872 -c----w c:\windows\$NtServicePackUninstall$\w3ssl.dll
+ 2004-08-19 13:42:28 368,128 -c----w c:\windows\$NtServicePackUninstall$\w3svc.dll
+ 2004-08-19 13:43:16 46,080 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
+ 2007-05-16 15:12:07 510,976 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
+ 2004-08-19 13:41:04 261,632 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
+ 2004-08-19 13:42:28 32,768 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
+ 2007-05-16 15:12:07 85,504 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
+ 2004-08-19 13:43:16 30,208 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
+ 2004-08-19 13:42:28 77,824 -c----w c:\windows\$NtServicePackUninstall$\wam51.dll
+ 2004-08-19 13:42:28 53,248 -c----w c:\windows\$NtServicePackUninstall$\wamreg51.dll
+ 2004-08-03 21:04:58 34,560 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
+ 2004-08-03 21:07:34 17,664 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
+ 2002-09-10 12:00:00 208,896 -c----w c:\windows\$NtServicePackUninstall$\wavemsp.dll
+ 2004-08-19 13:42:30 200,192 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
+ 2004-08-19 13:42:30 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
+ 2004-08-19 13:42:30 71,680 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
+ 2004-08-19 13:42:30 531,456 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
+ 2004-08-19 13:42:30 178,176 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
+ 2004-08-19 13:42:30 273,920 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
+ 2004-08-19 13:42:30 44,032 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
+ 2004-08-19 13:42:30 18,944 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
+ 2004-08-19 13:42:30 43,520 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
+ 2004-08-19 13:43:16 119,296 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
+ 2004-08-19 13:42:30 197,120 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
+ 2004-08-19 13:42:30 49,152 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
+ 2004-08-19 20:43:26 23,552 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
+ 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys.000
+ 2006-01-04 03:35:09 68,096 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
+ 2004-08-19 13:42:30 136,192 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
+ 2004-08-19 13:43:16 66,560 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
+ 2004-08-19 13:43:16 435,200 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
+ 2004-08-19 13:42:30 461,312 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
+ 2004-08-19 13:42:30 124,928 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
+ 2004-08-19 13:42:30 75,776 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
+ 2006-12-19 18:17:15 334,336 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
+ 2004-08-19 13:42:30 592,384 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
+ 2004-08-19 13:42:30 111,104 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
+ 2008-03-20 08:09:25 1,845,376 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
+ 2004-08-19 13:42:30 102,400 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
+ 2004-08-19 13:41:10 937,984 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
+ 2004-08-19 13:43:16 286,720 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
+ 2004-08-19 13:42:32 351,232 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
+ 2004-08-19 13:42:32 32,768 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
+ 2004-08-19 13:43:16 505,344 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
+ 2004-08-19 13:42:32 180,224 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
+ 2004-08-19 13:41:14 774,144 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
+ 2004-08-19 13:42:32 16,896 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
+ 2004-08-19 13:42:32 100,352 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
+ 2004-08-19 13:42:32 17,408 -c----w c:\windows\$NtServicePackUninstall$\winshfhc.dll
+ 2004-08-19 13:43:26 146,944 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
+ 2007-03-17 13:45:06 293,376 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
+ 2004-08-19 13:42:32 53,760 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
+ 2004-08-19 13:42:32 176,640 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
+ 2004-08-19 13:43:16 5,632 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
+ 2006-08-17 12:29:42 132,096 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
+ 2004-08-19 13:42:32 172,544 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
+ 2004-08-19 13:42:32 93,696 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
+ 2004-08-19 13:41:16 200,704 -c----w c:\windows\$NtServicePackUninstall$\wmerror.dll
+ 2004-08-19 13:41:16 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
+ 2004-08-19 13:43:16 196,608 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
+ 2004-08-19 13:41:16 7,680 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
+ 2004-08-19 13:42:32 89,088 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
+ 2004-08-19 13:43:18 126,464 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
+ 2004-08-19 13:43:18 366,592 -c----w c:\windows\$NtServicePackUninstall$\wmic.exe
+ 2004-08-19 13:42:32 60,928 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
+ 2004-08-19 13:42:32 140,800 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
+ 2004-08-19 13:42:32 156,672 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
+ 2004-08-19 13:42:32 132,096 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
+ 2004-08-19 13:42:32 62,464 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
+ 2004-08-19 13:42:32 62,976 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
+ 2004-08-19 13:42:32 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
+ 2004-08-19 13:42:32 437,248 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
+ 2004-08-19 13:43:18 218,112 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
+ 2004-08-19 13:42:32 41,472 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
+ 2004-08-19 13:42:32 145,408 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
+ 2004-08-19 13:42:32 98,816 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
+ 2004-08-19 13:42:32 167,936 -c----w c:\windows\$NtServicePackUninstall$\wmm2ae.dll
+ 2004-08-19 13:42:32 4,096 -c----w c:\windows\$NtServicePackUninstall$\wmm2eres.dll
+ 2004-08-19 13:42:32 7,680 -c----w c:\windows\$NtServicePackUninstall$\wmm2ext.dll
+ 2004-08-19 13:42:32 402,432 -c----w c:\windows\$NtServicePackUninstall$\wmm2filt.dll
+ 2004-08-19 13:42:32 502,272 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxa.dll
+ 2004-08-19 13:42:32 325,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxb.dll
+ 2004-08-19 13:42:32 4,283,392 -c----w c:\windows\$NtServicePackUninstall$\wmm2res.dll
+ 2004-08-19 13:42:32 6,144 -c----w c:\windows\$NtServicePackUninstall$\wmm2res2.dll
+ 2007-04-30 06:22:16 4,734,976 -c----w c:\windows\$NtServicePackUninstall$\wmp.dll
+ 2004-08-19 13:42:32 114,688 -c----w c:\windows\$NtServicePackUninstall$\wmpasf.dll
+ 2004-08-19 13:42:32 98,304 -c----w c:\windows\$NtServicePackUninstall$\wmpband.dll
+ 2004-08-19 13:42:32 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcd.dll
+ 2004-08-19 13:42:32 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcore.dll
+ 2004-08-19 13:42:32 233,472 -c----w c:\windows\$NtServicePackUninstall$\wmpdxm.dll
+ 2004-08-19 13:43:18 73,728 -c----w c:\windows\$NtServicePackUninstall$\wmplayer.exe
+ 2004-08-19 13:41:26 2,977,792 -c----w c:\windows\$NtServicePackUninstall$\wmploc.dll
+ 2004-08-19 13:42:32 221,184 -c----w c:\windows\$NtServicePackUninstall$\wmpns.dll
+ 2004-08-19 13:42:32 102,400 -c----w c:\windows\$NtServicePackUninstall$\wmpshell.dll
+ 2004-08-19 13:42:32 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpui.dll
+ 2004-08-19 13:42:32 115,200 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
+ 2004-08-19 13:42:32 303,616 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
+ 2004-08-19 13:43:18 218,112 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
+ 2004-08-19 13:42:32 265,216 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
+ 2004-08-19 13:43:18 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
+ 2004-08-19 13:43:18 32,768 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
+ 2004-08-19 13:42:32 82,944 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
+ 2004-08-19 13:42:32 19,968 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
+ 2004-08-19 13:43:18 13,824 -c----w c:\windows\$NtServicePackUninstall$\wscntfy.exe
+ 2004-08-19 13:43:18 114,688 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
+ 2004-08-19 13:42:32 81,408 -c----w c:\windows\$NtServicePackUninstall$\wscsvc.dll
+ 2004-08-19 13:42:32 611,328 -c----w c:\windows\$NtServicePackUninstall$\wsecedit.dll
+ 2004-08-19 13:42:32 108,032 -c----w c:\windows\$NtServicePackUninstall$\wshbth.dll
+ 2004-08-19 13:42:32 28,672 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
+ 2004-08-19 13:42:32 65,536 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
+ 2004-08-19 13:42:32 14,336 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
+ 2004-08-19 13:42:32 11,776 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
+ 2004-08-19 13:42:32 19,968 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
+ 2004-08-19 13:42:32 42,496 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
+ 2004-08-19 13:42:32 25,600 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
+ 2004-08-19 13:42:32 51,200 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
+ 2004-08-19 13:42:32 18,432 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
+ 2004-08-19 13:42:34 6,656 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
+ 2004-08-19 13:42:34 378,880 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
+ 2004-08-19 13:56:12 51,712 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
+ 2004-08-19 13:56:12 360,448 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
+ 2004-08-19 13:42:34 91,648 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
+ 2004-08-19 13:43:18 30,720 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
+ 2006-07-14 15:51:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\xmllite.dll
+ 2004-08-19 13:42:34 129,536 -c----w c:\windows\$NtServicePackUninstall$\xmlprov.dll
+ 2004-08-19 13:42:34 50,176 -c----w c:\windows\$NtServicePackUninstall$\xmlprovi.dll
+ 2006-03-01 19:44:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
+ 2004-08-19 13:40:00 481,792 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
+ 2004-08-19 13:40:36 196,096 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
+ 2004-08-19 13:40:42 2,966,528 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
+ 2008-07-03 09:42:31 369,152 -c----w c:\windows\$NtServicePackUninstall$\xpsp3res.dll
+ 2004-08-19 13:42:34 339,968 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
+ 2006-05-25 14:29:04 213,216 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe
+ 2006-05-25 14:29:04 371,424 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\updspapi.dll
+ 2006-05-24 16:32:48 213,216 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe
+ 2006-05-24 16:32:48 371,424 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\updspapi.dll
+ 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB915865$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c----w c:\windows\$NtUninstallKB915865$\spuninst\updspapi.dll
- 2004-08-19 20:57:44 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
+ 2008-04-14 02:18:26 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
+ 2004-08-19 20:57:44 82,944 -c----w c:\windows\$NtUninstallKB946648_0$\msgsc.dll
+ 2007-11-30 12:39:24 233,848 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:24 401,272 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\updspapi.dll
- 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
+ 2008-04-13 18:55:08 202,624 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
+ 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762_0$\rmcast.sys
+ 2007-11-30 12:39:24 233,848 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:24 401,272 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll
- 2005-07-26 04:39:57 243,200 -c----w c:\windows\$NtUninstallKB950974$\es.dll
+ 2008-04-14 02:18:21 246,272 -c----w c:\windows\$NtUninstallKB950974$\es.dll
+ 2005-07-26 04:39:57 243,200 -c----w c:\windows\$NtUninstallKB950974_0$\es.dll
+ 2007-11-30 12:39:24 233,848 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:21 401,272 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\updspapi.dll
- 2007-08-21 06:17:25 683,520 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
+ 2008-04-14 02:18:22 691,712 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
+ 2007-08-21 06:17:25 683,520 -c----w c:\windows\$NtUninstallKB951066_0$\inetcomm.dll
+ 2007-11-30 12:39:24 233,848 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:24 401,272 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\updspapi.dll
- 2008-04-14 15:52:46 272,512 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
+ 2008-04-14 15:59:30 272,512 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
+ 2008-04-14 15:52:46 272,512 -c----w c:\windows\$NtUninstallKB951376-v2_0$\bthport.sys
+ 2007-11-30 11:18:55 233,848 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:56 401,272 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
+ 2008-04-14 01:51:43 273,408 -c----w c:\windows\$NtUninstallKB951376$\bthport.sys
+ 2007-11-30 11:18:55 233,848 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:56 401,272 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\updspapi.dll
- 2007-10-29 22:43:41 1,293,824 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
+ 2008-04-14 02:18:33 1,294,336 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
+ 2007-10-29 22:43:41 1,293,824 -c----w c:\windows\$NtUninstallKB951698_0$\quartz.dll
+ 2007-11-30 11:18:55 233,848 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:24 401,272 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll
- 2004-08-03 21:14:16 138,496 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
+ 2008-04-13 19:19:23 138,112 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
- 2008-02-20 05:35:05 148,992 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
+ 2008-04-14 02:18:20 147,968 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
- 2004-08-19 13:42:20 248,320 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
+ 2008-04-14 02:18:28 248,320 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
- 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
+ 2008-04-13 19:20:16 361,344 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
- 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
+ 2008-04-13 19:00:02 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
+ 2004-08-03 21:14:16 138,496 -c----w c:\windows\$NtUninstallKB951748_0$\afd.sys
+ 2008-02-20 05:35:05 148,992 -c----w c:\windows\$NtUninstallKB951748_0$\dnsapi.dll
+ 2004-08-19 13:42:20 248,320 -c----w c:\windows\$NtUninstallKB951748_0$\mswsock.dll
+ 2007-11-30 12:39:24 233,848 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:21 401,272 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\updspapi.dll
+ 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip.sys
+ 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip6.sys
- 2004-08-19 13:42:16 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
+ 2008-05-01 14:31:45 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
+ 2004-08-19 13:42:16 331,776 -c----w c:\windows\$NtUninstallKB952287_0$\msadce.dll
+ 2007-11-30 11:18:55 233,848 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:56 401,272 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\updspapi.dll
- 2005-06-29 01:49:43 74,240 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
+ 2008-04-14 02:18:25 73,728 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
+ 2005-06-29 01:49:43 74,240 -c----w c:\windows\$NtUninstallKB952954_0$\mscms.dll
+ 2007-11-30 12:39:24 233,848 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:24 401,272 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\updspapi.dll
+ 2008-04-14 02:18:18 39,424 ------w c:\windows\AppPatch\acadproc.dll
- 2004-08-19 13:41:40 1,852,416 ----a-w c:\windows\AppPatch\AcGenral.dll
+ 2008-04-14 02:18:18 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
- 2004-08-19 13:41:40 450,048 ----a-w c:\windows\AppPatch\AcLayers.dll
+ 2008-04-14 02:18:18 451,072 ----a-w c:\windows\AppPatch\aclayers.dll
- 2004-08-19 13:41:40 137,728 ----a-w c:\windows\AppPatch\AcLua.dll
+ 2008-04-14 02:18:18 141,312 ----a-w c:\windows\AppPatch\aclua.dll
- 2004-08-19 13:41:40 244,736 ----a-w c:\windows\AppPatch\AcSpecfc.dll
+ 2008-04-14 02:18:18 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll
- 2004-08-19 13:41:42 116,224 ----a-w c:\windows\AppPatch\AcXtrnal.dll
+ 2008-04-14 02:18:18 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
- 2008-06-14 17:59:52 272,512 ------w c:\windows\Driver Cache\i386\bthport.sys
+ 2008-06-14 17:33:37 272,512 ------w c:\windows\Driver Cache\i386\bthport.sys
+ 2008-04-14 02:19:01 58,368 ------w c:\windows\ehome\medctrro.exe
+ 2005-10-21 00:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
- 2007-06-13 13:22:28 1,035,776 ----a-w c:\windows\explorer.exe
+ 2008-04-14 02:18:57 1,036,288 ----a-w c:\windows\explorer.exe
- 2004-08-19 13:42:26 34,816 ----a-w c:\windows\Help\sniffpol.dll
+ 2008-04-14 02:18:36 34,816 ----a-w c:\windows\Help\sniffpol.dll
- 2004-08-19 13:42:28 33,280 ----a-w c:\windows\Help\sstub.dll
+ 2008-04-14 02:18:44 33,280 ----a-w c:\windows\Help\sstub.dll
- 2004-08-19 13:42:28 279,040 ----a-w c:\windows\Help\tshoot.dll
+ 2008-04-14 02:18:44 279,040 ----a-w c:\windows\Help\tshoot.dll
- 2005-05-26 23:22:01 10,752 ----a-w c:\windows\hh.exe
+ 2008-04-14 02:18:59 10,752 ----a-w c:\windows\hh.exe
+ 2004-08-19 13:41:42 61,440 -c----w c:\windows\ie7\admparse.dll
+ 2004-08-19 13:41:42 101,376 -c----w c:\windows\ie7\advpack.dll
+ 2004-08-19 13:41:56 35,328 -c----w c:\windows\ie7\corpol.dll
+ 2004-08-19 13:41:58 28,672 -c----w c:\windows\ie7\custsat.dll
+ 2008-06-23 15:40:00 357,888 -c----w c:\windows\ie7\dxtmsft.dll
+ 2008-06-23 15:40:00 205,312 -c----w c:\windows\ie7\dxtrans.dll
+ 2008-06-23 15:40:00 55,808 -c----w c:\windows\ie7\extmgr.dll
+ 2004-08-19 13:42:10 38,912 -c----w c:\windows\ie7\hmmapi.dll
+ 2004-08-19 13:42:50 34,304 -c----w c:\windows\ie7\ie4uinit.exe
+ 2004-08-19 13:42:10 139,264 -c----w c:\windows\ie7\ieakeng.dll
+ 2004-08-19 13:42:10 221,184 -c----w c:\windows\ie7\ieaksie.dll
+ 2002-09-10 12:00:00 241,664 -c----w c:\windows\ie7\ieakui.dll
+ 2004-08-19 13:42:10 323,584 -c----w c:\windows\ie7\iedkcs32.dll
+ 2008-06-23 09:49:29 18,432 -c----w c:\windows\ie7\iedw.exe
+ 2004-08-19 13:42:10 81,920 -c----w c:\windows\ie7\ieencode.dll
+ 2008-06-23 15:40:01 251,392 -c----w c:\windows\ie7\iepeers.dll
+ 2004-08-19 13:42:10 49,152 -c----w c:\windows\ie7\iernonce.dll
+ 2004-08-19 13:42:10 63,488 -c----w c:\windows\ie7\iesetup.dll
+ 2004-08-19 13:42:50 93,184 -c----w c:\windows\ie7\iexplore.exe
+ 2004-08-19 13:42:10 35,840 -c----w c:\windows\ie7\imgutil.dll
+ 2008-06-23 15:40:01 96,768 -c----w c:\windows\ie7\inseng.dll
+ 2007-12-18 14:42:03 450,560 -c----w c:\windows\ie7\jscript.dll
+ 2008-06-23 15:40:01 16,384 -c----w c:\windows\ie7\jsproxy.dll
+ 2004-08-19 13:42:14 22,528 -c----w c:\windows\ie7\licmgr10.dll
+ 2004-08-19 13:42:58 29,184 -c----w c:\windows\ie7\mshta.exe
+ 2008-06-23 15:40:03 3,080,704 -c----w c:\windows\ie7\mshtml.dll
+ 2008-06-23 15:40:04 449,024 -c----w c:\windows\ie7\mshtmled.dll
+ 2004-08-19 13:39:30 57,344 -c----w c:\windows\ie7\mshtmler.dll
+ 2002-09-10 12:00:00 146,432 -c----w c:\windows\ie7\msls31.dll
+ 2008-06-23 15:40:04 146,432 -c----w c:\windows\ie7\msrating.dll
+ 2008-06-23 15:40:05 532,480 -c----w c:\windows\ie7\mstime.dll
+ 2004-08-19 13:42:22 97,280 -c----w c:\windows\ie7\occache.dll
+ 2008-06-23 15:40:05 39,424 -c----w c:\windows\ie7\pngfilt.dll
+ 2007-09-26 22:25:10 33,472 -c----w c:\windows\ie7\spuninst\iecustom.dll
+ 2007-09-26 22:18:52 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe
+ 2006-09-06 21:43:22 215,776 -c----w c:\windows\ie7\spuninst\spuninst.exe
+ 2006-09-06 21:43:24 389,856 -c----w c:\windows\ie7\spuninst\updspapi.dll
+ 2004-08-19 13:42:28 37,888 -c----w c:\windows\ie7\url.dll
+ 2008-06-23 15:40:08 616,960 -c----w c:\windows\ie7\urlmon.dll
+ 2007-12-18 14:42:03 417,792 -c----w c:\windows\ie7\vbscript.dll
+ 2007-06-26 13:56:57 851,968 -c----w c:\windows\ie7\vgx.dll
+ 2004-08-19 13:42:30 280,576 -c----w c:\windows\ie7\webcheck.dll
+ 2008-06-23 15:40:09 662,016 -c----w c:\windows\ie7\wininet.dll
+ 2007-03-06 01:27:50 215,776 -c----w c:\windows\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:29:00 389,856 -c----w c:\windows\ie7updates\KB938127-v2-IE7\spuninst\updspapi.dll
+ 2007-08-13 22:54:10 765,952 -c----w c:\windows\ie7updates\KB938127-v2-IE7\vgx.dll
- 2004-08-19 13:42:16 220,160 ----a-w c:\windows\ime\mscandui.dll
+ 2008-04-14 02:18:25 220,160 ----a-w c:\windows\ime\mscandui.dll
- 2004-08-19 13:42:26 130,048 ----a-w c:\windows\ime\SOFTKBD.DLL
+ 2008-04-14 02:18:36 130,048 ----a-w c:\windows\ime\softkbd.dll
- 2004-08-19 13:40:30 62,976 ----a-w c:\windows\ime\SPGRMR.dll
+ 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ime\spgrmr.dll
- 2004-08-19 13:42:26 272,384 ----a-w c:\windows\ime\SPTIP.dll
+ 2008-04-14 02:18:43 272,384 ----a-w c:\windows\ime\sptip.dll
- 2004-08-19 13:43:14 208,896 ----a-w c:\windows\inf\unregmp2.exe
+ 2008-04-14 02:19:14 208,896 ----a-w c:\windows\inf\unregmp2.exe
- 2008-07-05 03:51:14 167,936 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\accicons.exe
+ 2008-12-27 11:27:07 167,936 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\accicons.exe
- 2008-07-05 03:51:14 2,560 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\cagicon.exe
+ 2008-12-27 11:27:07 2,560 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\cagicon.exe
- 2008-07-05 03:51:15 81,920 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\fpicon.exe
+ 2008-12-27 11:27:07 81,920 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\fpicon.exe
- 2008-07-05 03:51:12 34,304 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\misc.exe
+ 2008-12-27 11:27:06 34,304 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\misc.exe
- 2008-07-05 03:51:15 8,192 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\mspicons.exe
+ 2008-12-27 11:27:08 8,192 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\mspicons.exe
- 2008-07-05 03:51:15 3,584 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\opwicon.exe
+ 2008-12-27 11:27:08 3,584 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\opwicon.exe
- 2008-07-05 03:51:16 114,688 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\outicon.exe
+ 2008-12-27 11:27:09 114,688 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\outicon.exe
- 2008-07-05 03:51:13 16,384 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\PEicons.exe
+ 2008-12-27 11:27:07 16,384 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\PEicons.exe
- 2008-07-05 03:51:13 30,720 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\pptico.exe
+ 2008-12-27 11:27:07 30,720 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\pptico.exe
- 2008-07-05 03:51:17 22,528 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\unbndico.exe
+ 2008-12-27 11:27:09 22,528 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\unbndico.exe
- 2008-07-05 03:51:12 45,056 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\wordicon.exe
+ 2008-12-27 11:27:06 45,056 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\wordicon.exe
- 2008-07-05 03:51:12 90,112 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\xlicons.exe
+ 2008-12-27 11:27:06 90,112 ----a-r c:\windows\Installer\{90280C0A-6000-11D3-8CFE-0050048383C9}\xlicons.exe
- 2008-04-20 15:20:34 29,926 ----a-r c:\windows\Installer\{FC411B47-30BF-428C-9C1E-F6C54A94EA7E}\MsblIco.Exe
+ 2008-09-28 20:00:46 29,926 ----a-r c:\windows\Installer\{FC411B47-30BF-428C-9C1E-F6C54A94EA7E}\MsblIco.Exe
+ 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
+ 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
+ 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
+ 2008-04-14 02:18:06 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
- 2004-08-19 13:41:44 24,064 ----a-w c:\windows\msagent\agentanm.dll
+ 2008-04-14 02:18:18 24,064 ----a-w c:\windows\msagent\agentanm.dll
- 2004-08-19 13:41:44 214,016 ----a-w c:\windows\msagent\agentctl.dll
+ 2008-04-14 02:18:18 214,016 ----a-w c:\windows\msagent\agentctl.dll
- 2006-10-12 14:04:11 42,496 ----a-w c:\windows\msagent\agentdp2.dll
+ 2008-04-14 02:18:18 42,496 ----a-w c:\windows\msagent\agentdp2.dll
- 2007-03-09 13:46:29 57,344 ----a-w c:\windows\msagent\agentdpv.dll
+ 2008-04-14 02:18:18 57,344 ----a-w c:\windows\msagent\agentdpv.dll
- 2004-08-19 13:41:44 49,152 ----a-w c:\windows\msagent\agentmpx.dll
+ 2008-04-14 02:18:18 49,152 ----a-w c:\windows\msagent\agentmpx.dll
- 2004-08-19 13:41:44 24,064 ----a-w c:\windows\msagent\agentpsh.dll
+ 2008-04-14 02:18:18 24,064 ----a-w c:\windows\msagent\agentpsh.dll
- 2004-08-19 13:41:44 44,032 ----a-w c:\windows\msagent\agentsr.dll
+ 2008-04-14 02:18:18 44,032 ----a-w c:\windows\msagent\agentsr.dll
- 2006-10-12 11:09:53 256,512 ----a-w c:\windows\msagent\agentsvr.exe
+ 2008-04-14 02:18:49 256,512 ----a-w c:\windows\msagent\agentsvr.exe
- 2004-08-19 13:41:44 24,064 ----a-w c:\windows\msagent\agtintl.dll
+ 2008-04-14 02:18:19 24,064 ----a-w c:\windows\msagent\agtintl.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
+ 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
+ 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
- 2002-09-10 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
+ 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
- 2002-09-10 12:00:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
+ 2007-04-02 18:26:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll
+ 2008-04-13 17:32:28 19,968 ----a-w c:\windows\msagent\intl\agt0409.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
+ 2007-04-02 18:26:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
- 2002-09-10 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
+ 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
- 2002-09-10 12:00:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
+ 2007-04-02 18:26:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
- 2002-09-10 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
+ 2007-04-02 18:26:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
- 2002-09-10 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
+ 2007-04-02 18:26:01 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
- 2002-09-10 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
+ 2007-04-02 18:26:01 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
- 2002-09-10 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
- 2002-09-10 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
+ 2007-04-02 18:26:02 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
- 2002-09-10 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
+ 2007-04-02 18:26:02 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
- 2004-08-19 13:42:18 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
+ 2008-04-14 02:18:27 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
+ 2008-04-14 02:18:20 33,792 ------w c:\windows\network diagnostic\custsat.dll
+ 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe
- 2004-08-19 13:43:00 70,144 ----a-w c:\windows\NOTEPAD.EXE
+ 2008-04-14 02:19:06 70,144 ----a-w c:\windows\notepad.exe
- 2004-08-19 13:42:50 768,512 ----a-w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe
+ 2008-04-14 02:18:58 769,024 ----a-w c:\windows\pchealth\helpctr\binaries\helpctr.exe
- 2004-08-19 13:42:50 743,936 ----a-w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
+ 2008-04-14 02:18:58 744,448 ----a-w c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2004-08-19 13:42:50 18,944 ----a-w c:\windows\pchealth\helpctr\binaries\HscUpd.exe
+ 2008-04-14 02:18:59 18,432 ----a-w c:\windows\pchealth\helpctr\binaries\hscupd.exe
- 2004-08-19 13:42:58 159,744 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
+ 2008-04-14 02:19:04 171,520 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
- 2004-08-19 13:42:16 380,928 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
+ 2008-04-14 02:18:26 381,440 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
- 2004-08-19 13:42:22 102,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
+ 2008-04-14 02:18:33 102,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
- 2004-08-19 13:42:22 38,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
+ 2008-04-14 02:18:33 38,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
- 2007-01-29 18:38:23 86,327 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
+ 2008-09-28 18:26:10 86,327 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
- 2007-01-29 18:38:23 2,426 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
+ 2008-09-28 18:26:10 2,740 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
- 2004-08-19 13:43:14 151,040 ----a-w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe
+ 2008-04-14 02:19:14 151,040 ----a-w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe
- 2004-08-19 13:42:26 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
+ 2008-04-14 02:18:43 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
- 2004-08-19 13:42:26 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
+ 2008-04-14 02:18:43 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
- 2004-08-19 13:42:26 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
+ 2008-04-14 02:18:43 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
- 2004-08-19 13:43:06 152,064 ----a-w c:\windows\regedit.exe
+ 2008-04-14 02:19:09 152,064 ----a-w c:\windows\regedit.exe
+ 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
+ 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
+ 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
+ 2008-04-14 02:18:18 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
+ 2008-04-14 02:18:18 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll
+ 2004-08-04 03:32:22 231,552 ------w c:\windows\ServicePackFiles\i386\ac97ali.sys
+ 2004-08-04 03:32:32 84,480 ------w c:\windows\ServicePackFiles\i386\ac97via.sys
+ 2008-04-14 02:18:18 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll
+ 2008-04-14 02:18:49 188,928 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
+ 2008-04-14 02:18:18 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
+ 2008-04-14 02:18:18 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
+ 2008-04-14 02:18:18 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll
+ 2008-04-14 02:18:18 118,272 ------w c:\windows\ServicePackFiles\i386\aclui.dll
+ 2008-04-14 01:48:46 189,056 ------w c:\windows\ServicePackFiles\i386\acpi.sys
+ 2008-04-14 02:18:18 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
+ 2008-04-14 02:18:18 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll
+ 2008-04-14 02:18:49 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
+ 2008-04-14 02:18:18 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
+ 2008-04-14 02:18:18 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
+ 2008-04-14 02:18:18 29,696 ------w c:\windows\ServicePackFiles\i386\admexs.dll
+ 2008-04-14 02:18:18 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
+ 2008-04-14 02:18:49 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
+ 2004-08-04 03:32:24 10,880 ------w c:\windows\ServicePackFiles\i386\admjoy.sys
+ 2008-04-14 02:18:18 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
+ 2008-04-14 02:18:18 43,520 ------w c:\windows\ServicePackFiles\i386\admwprox.dll
+ 2008-04-14 02:18:18 290,816 ------w c:\windows\ServicePackFiles\i386\adsiis51.dll
+ 2008-04-14 02:18:18 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
+ 2008-04-14 02:18:18 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
+ 2008-04-14 02:18:18 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll
+ 2008-04-14 02:18:18 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll
+ 2008-04-14 02:18:18 123,392 ------w c:\windows\ServicePackFiles\i386\adsnw.dll
+ 2007-04-02 13:10:44 85,813 ------w c:\windows\ServicePackFiles\i386\adsutil.vbs
+ 2008-04-14 02:18:18 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll
+ 2008-04-14 02:18:18 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll
+ 2008-04-14 02:18:18 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll
+ 2008-04-14 02:18:18 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll
+ 2008-04-14 02:18:18 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll
+ 2008-04-14 02:18:18 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll
+ 2008-04-14 02:18:18 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll
+ 2008-04-14 02:18:18 685,056 ------w c:\windows\ServicePackFiles\i386\advapi32.dll
+ 2008-04-14 02:18:18 101,376 ------w c:\windows\ServicePackFiles\i386\advpack.dll
+ 2008-04-13 16:39:23 142,592 ------w c:\windows\ServicePackFiles\i386\aec.sys
+ 2008-04-13 19:19:23 138,112 ------w c:\windows\ServicePackFiles\i386\afd.sys
+ 2008-04-14 02:18:18 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll
+ 2008-04-14 02:18:18 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll
+ 2008-04-14 02:18:18 42,496 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll
+ 2008-04-14 02:18:18 57,344 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll
+ 2008-04-14 02:18:18 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll
+ 2008-04-14 02:18:18 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll
+ 2008-04-14 02:18:18 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll
+ 2008-04-14 02:18:49 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe
+ 2008-04-13 18:36:38 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys
+ 2008-04-13 18:36:39 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys
+ 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll
+ 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll
+ 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll
+ 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll
+ 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll
+ 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll
+ 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll
+ 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll
+ 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll
+ 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll
+ 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll
+ 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll
+ 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll
+ 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll
+ 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll
+ 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll
+ 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll
+ 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll
+ 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll
+ 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll
+ 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll
+ 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll
+ 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll
+ 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll
+ 2008-04-14 02:18:19 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll
+ 2008-04-14 02:18:49 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe
+ 2008-04-14 02:18:49 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe
+ 2008-04-13 18:36:38 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys
+ 2008-04-14 02:18:19 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll
+ 2008-04-13 18:36:39 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys
+ 2008-04-14 01:49:41 41,600 ------w c:\windows\ServicePackFiles\i386\amdk6.sys
+ 2008-04-14 01:49:41 41,984 ------w c:\windows\ServicePackFiles\i386\amdk7.sys
+ 2008-04-14 02:18:19 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll
+ 2004-08-04 03:31:20 36,224 ------w c:\windows\ServicePackFiles\i386\an983.sys
+ 2008-04-14 02:18:19 110,080 ------w c:\windows\ServicePackFiles\i386\appconf.dll
+ 2008-04-14 02:18:19 125,952 ------w c:\windows\ServicePackFiles\i386\apphelp.dll
+ 2008-04-14 02:18:19 175,104 ------w c:\windows\ServicePackFiles\i386\appmgmts.dll
+ 2008-04-14 02:18:19 300,032 ------w c:\windows\ServicePackFiles\i386\appmgr.dll
+ 2008-04-14 02:18:19 332,800 ------w c:\windows\ServicePackFiles\i386\aqueue.dll
+ 2008-04-13 18:51:25 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys
+ 2008-04-14 02:18:19 375,808 ------w c:\windows\ServicePackFiles\i386\asp51.dll
+ 2008-04-13 16:09:58 20,480 ------w c:\windows\ServicePackFiles\i386\aspnet_filter.dll
+ 2008-04-13 16:09:59 200,704 ------w c:\windows\ServicePackFiles\i386\aspnet_isapi.dll
+ 2008-04-13 16:10:01 24,576 ------w c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
+ 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_state.exe
+ 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_wp.exe
+ 2008-04-14 02:18:49 30,720 ------w c:\windows\ServicePackFiles\i386\asr_fmt.exe
+ 2008-04-14 02:18:49 32,768 ------w c:\windows\ServicePackFiles\i386\asr_pfu.exe
+ 2008-04-14 02:18:19 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll
+ 2008-04-13 18:57:27 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys
+ 2008-04-14 02:18:49 25,600 ------w c:\windows\ServicePackFiles\i386\at.exe
+ 2008-04-13 18:40:30 96,512 ------w c:\windows\ServicePackFiles\i386\atapi.sys
+ 2004-08-04 03:29:30 56,623 ------w c:\windows\ServicePackFiles\i386\ati1btxx.sys
+ 2004-08-04 03:29:30 11,615 ------w c:\windows\ServicePackFiles\i386\ati1mdxx.sys
+ 2004-08-04 03:29:30 12,047 ------w c:\windows\ServicePackFiles\i386\ati1pdxx.sys
+ 2004-08-04 03:29:32 30,671 ------w c:\windows\ServicePackFiles\i386\ati1raxx.sys
+ 2004-08-04 03:29:32 63,663 ------w c:\windows\ServicePackFiles\i386\ati1rvxx.sys
+ 2004-08-04 03:29:32 26,367 ------w c:\windows\ServicePackFiles\i386\ati1snxx.sys
+ 2004-08-04 03:29:32 21,343 ------w c:\windows\ServicePackFiles\i386\ati1ttxx.sys
+ 2004-08-04 03:29:32 36,463 ------w c:\windows\ServicePackFiles\i386\ati1tuxx.sys
+ 2004-08-04 03:29:32 29,455 ------w c:\windows\ServicePackFiles\i386\ati1xbxx.sys
+ 2004-08-04 03:29:32 34,735 ------w c:\windows\ServicePackFiles\i386\ati1xsxx.sys
+ 2008-04-14 02:18:19 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll
+ 2008-04-14 02:18:19 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
+ 2008-04-14 02:18:19 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll
+ 2004-08-19 20:20:12 327,168 ------w c:\windows\ServicePackFiles\i386\ati2mtaa.sys
+ 2004-08-19 14:20:16 701,440 ------w c:\windows\ServicePackFiles\i386\ati2mtag.sys
+ 2008-04-14 02:18:19 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
+ 2008-04-14 02:18:19 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
+ 2008-04-14 02:18:19 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll
+ 2004-08-04 03:29:28 57,856 ------w c:\windows\ServicePackFiles\i386\atinbtxx.sys
+ 2004-08-04 03:29:30 13,824 ------w c:\windows\ServicePackFiles\i386\atinmdxx.sys
+ 2004-08-04 03:29:30 14,336 ------w c:\windows\ServicePackFiles\i386\atinpdxx.sys
+ 2004-08-04 03:29:30 52,224 ------w c:\windows\ServicePackFiles\i386\atinraxx.sys
+ 2004-08-04 03:29:32 104,960 ------w c:\windows\ServicePackFiles\i386\atinrvxx.sys
+ 2004-08-04 03:29:32 28,672 ------w c:\windows\ServicePackFiles\i386\atinsnxx.sys
+ 2004-08-04 03:29:32 13,824 ------w c:\windows\ServicePackFiles\i386\atinttxx.sys
+ 2004-08-04 03:29:32 73,216 ------w c:\windows\ServicePackFiles\i386\atintuxx.sys
+ 2004-08-04 03:29:32 31,744 ------w c:\windows\ServicePackFiles\i386\atinxbxx.sys
+ 2004-08-04 03:29:32 63,488 ------w c:\windows\ServicePackFiles\i386\atinxsxx.sys
+ 2008-04-14 02:18:19 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll
+ 2008-04-14 02:18:19 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll
+ 2008-04-14 02:18:19 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll
+ 2008-04-14 02:18:49 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe
+ 2008-04-13 18:51:25 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys
+ 2008-04-14 02:16:20 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll
+ 2008-04-13 18:51:30 55,808 ------w c:\windows\ServicePackFiles\i386\atmlane.sys
+ 2008-04-14 02:18:19 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll
+ 2008-04-14 02:18:49 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe
+ 2008-04-14 02:18:19 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll
+ 2008-04-14 02:18:19 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll
+ 2008-04-14 02:18:19 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll
+ 2008-04-14 02:18:19 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll
+ 2008-04-14 02:18:19 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll
+ 2008-04-14 02:18:19 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll
+ 2008-04-14 02:18:49 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe
+ 2008-04-14 02:18:19 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll
+ 2008-04-14 02:18:49 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe
+ 2008-04-14 02:18:19 62,464 ------w c:\windows\ServicePackFiles\i386\authz.dll
+ 2008-04-14 02:18:49 624,128 ------w c:\windows\ServicePackFiles\i386\autochk.exe
+ 2008-04-14 02:18:50 637,952 ------w c:\windows\ServicePackFiles\i386\autoconv.exe
+ 2008-04-14 02:18:50 615,936 ------w c:\windows\ServicePackFiles\i386\autofmt.exe
+ 2008-04-14 02:18:50 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe
+ 2008-04-13 18:46:20 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys
+ 2008-04-13 18:46:07 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys
+ 2008-04-14 02:18:19 85,504 ------w c:\windows\ServicePackFiles\i386\avifil32.dll
+ 2008-04-14 02:18:19 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll
+ 2008-04-14 02:18:19 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll
+ 2008-04-14 02:18:19 29,184 ------w c:\windows\ServicePackFiles\i386\batmeter.dll
+ 2008-04-14 02:18:19 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll
+ 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys
+ 2008-04-13 18:46:21 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys
+ 2008-04-14 02:18:19 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll
+ 2008-04-14 02:18:19 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll
+ 2008-04-14 02:18:19 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll
+ 2008-04-14 02:18:19 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll
+ 2008-04-14 02:18:50 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe
+ 2008-04-14 02:18:51 152,576 ------w c:\windows\ServicePackFiles\i386\bootcfg.exe
+ 2008-04-13 18:53:23 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys
+ 2008-04-14 01:51:37 68,608 ------w c:\windows\ServicePackFiles\i386\browselc.dll
+ 2008-04-14 02:18:19 77,824 ------w c:\windows\ServicePackFiles\i386\browser.dll
+ 2008-04-14 02:18:19 1,025,024 ------w c:\windows\ServicePackFiles\i386\browseui.dll
+ 2008-04-14 02:18:19 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll
+ 2008-04-14 02:18:19 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll
+ 2008-04-13 18:46:33 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys
+ 2008-04-13 18:46:33 37,888 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys
+ 2008-04-13 18:51:34 101,120 ------w c:\windows\ServicePackFiles\i386\bthpan.sys
+ 2008-04-14 01:51:43 273,408 ------w c:\windows\ServicePackFiles\i386\bthport.sys
+ 2008-04-13 18:46:31 36,480 ------w c:\windows\ServicePackFiles\i386\bthprint.sys
+ 2008-04-14 02:18:19 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll
+ 2008-04-13 18:46:29 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys
+ 2008-04-14 02:18:19 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll
+ 2008-04-14 02:18:19 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll
+ 2008-04-14 02:18:19 60,416 ------w c:\windows\ServicePackFiles\i386\cabinet.dll
+ 2008-04-14 02:18:19 84,992 ------w c:\windows\ServicePackFiles\i386\cabview.dll
+ 2008-04-14 02:18:51 20,480 ------w c:\windows\ServicePackFiles\i386\cacls.exe
+ 2008-04-14 02:18:19 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll
+ 2008-04-14 02:18:19 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll
+ 2008-04-14 02:18:19 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll
+ 2008-04-14 02:18:19 153,088 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll
+ 2007-06-27 12:53:18 94,208 ------w c:\windows\ServicePackFiles\i386\caspol.exe
+ 2008-04-14 02:18:19 226,304 ------w c:\windows\ServicePackFiles\i386\catsrv.dll
+ 2008-04-14 02:18:19 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll
+ 2008-04-14 02:18:20 625,664 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll
+ 2008-04-13 18:46:23 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys
+ 2008-04-13 19:14:21 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys
+ 2008-04-14 02:18:20 151,552 ------w c:\windows\ServicePackFiles\i386\cdfview.dll
+ 2008-04-14 02:18:20 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll
+ 2008-04-14 02:18:20 2,091,520 ------w c:\windows\ServicePackFiles\i386\cdosys.dll
+ 2008-04-13 18:40:46 62,976 ------w c:\windows\ServicePackFiles\i386\cdrom.sys
+ 2008-04-14 02:18:20 199,680 ------w c:\windows\ServicePackFiles\i386\certcli.dll
+ 2008-04-14 02:18:20 465,408 ------w c:\windows\ServicePackFiles\i386\certmgr.dll
+ 2008-04-14 02:18:20 39,424 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll
+ 2008-04-14 02:16:23 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
+ 2008-04-14 02:18:51 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe
+ 2008-04-14 02:18:20 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
+ 2008-04-13 18:40:58 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys
+ 2008-04-14 02:18:20 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll
+ 2008-04-14 02:18:20 1,359,360 ------w c:\windows\ServicePackFiles\i386\cimwin32.dll
+ 2008-04-14 02:18:20 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
+ 2008-04-14 02:18:51 57,856 ------w c:\windows\ServicePackFiles\i386\cipher.exe
+ 2008-04-14 02:18:51 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
+ 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
+ 2008-04-14 02:18:20 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
+ 2008-04-14 02:18:20 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
+ 2008-04-14 02:18:52 65,024 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
+ 2008-04-14 02:18:20 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
+ 2008-04-14 02:18:52 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
+ 2008-04-14 02:18:52 104,448 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
+ 2008-04-14 02:18:52 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
+ 2008-04-14 02:18:20 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
+ 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
+ 2008-04-14 02:18:20 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
+ 2008-04-14 02:18:52 403,456 ------w c:\windows\ServicePackFiles\i386\cmd.exe
+ 2008-04-14 02:18:20 350,720 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
+ 2008-04-14 02:18:52 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
+ 2008-04-14 02:18:52 40,448 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
+ 2008-04-14 02:18:20 188,416 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
+ 2008-04-14 02:18:20 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
+ 2008-04-14 02:18:53 65,536 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
+ 2008-04-14 02:18:20 40,960 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
+ 2008-04-14 02:18:20 50,176 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
+ 2008-04-14 02:18:20 83,456 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
+ 2008-04-14 02:18:20 47,104 ------w c:\windows\ServicePackFiles\i386\coadmin.dll
+ 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll
+ 2008-04-14 02:18:20 60,416 ------w c:\windows\ServicePackFiles\i386\colbact.dll
+ 2008-04-14 02:18:20 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll
+ 2008-04-14 02:18:20 195,072 ------w c:\windows\ServicePackFiles\i386\comadmin.dll
+ 2008-04-14 02:18:20 617,472 ------w c:\windows\ServicePackFiles\i386\comctl32.dll
+ 2008-04-14 02:18:20 281,088 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll
+ 2008-04-14 02:18:20 253,440 ------w c:\windows\ServicePackFiles\i386\compatui.dll
+ 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys
+ 2008-04-14 02:18:20 24,064 ------w c:\windows\ServicePackFiles\i386\compfilt.dll
+ 2008-04-14 02:18:20 230,912 ------w c:\windows\ServicePackFiles\i386\compstui.dll
+ 2008-04-14 02:18:20 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll
+ 2008-04-14 02:18:53 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe
+ 2008-04-14 02:18:53 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe
+ 2008-04-14 02:18:20 837,120 ------w c:\windows\ServicePackFiles\i386\comres.dll
+ 2008-04-13 18:43:32 9,728 ------w c:\windows\ServicePackFiles\i386\comsdupd.exe
+ 2008-04-14 02:18:20 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll
+ 2008-04-14 02:18:20 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll
+ 2008-04-14 02:18:20 1,267,200 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll
+ 2008-04-14 02:18:20 539,648 ------w c:\windows\ServicePackFiles\i386\comuid.dll
+ 2008-04-14 02:18:53 1,040,384 ------w c:\windows\ServicePackFiles\i386\conf.exe
+ 2008-04-14 02:18:20 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll
+ 2008-04-14 02:18:20 358,400 ------w c:\windows\ServicePackFiles\i386\confmsp.dll
+ 2008-04-14 02:18:53 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe
+ 2008-04-13 16:10:05 69,632 ------w c:\windows\ServicePackFiles\i386\corperfmonext.dll
+ 2008-04-14 02:18:20 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll
+ 2008-04-14 02:18:20 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll
+ 2008-04-14 02:18:20 165,376 ------w c:\windows\ServicePackFiles\i386\credui.dll
+ 2008-04-14 01:54:26 40,960 ------w c:\windows\ServicePackFiles\i386\crusoe.sys
+ 2008-04-14 02:18:20 605,184 ------w c:\windows\ServicePackFiles\i386\crypt32.dll
+ 2008-04-14 02:18:20 75,264 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll
+ 2008-04-14 02:18:20 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll
+ 2008-04-14 02:18:20 54,272 ------w c:\windows\ServicePackFiles\i386\cryptext.dll
+ 2008-04-14 02:18:20 64,512 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll
+ 2008-04-14 02:18:20 62,464 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll
+ 2008-04-14 02:18:20 528,384 ------w c:\windows\ServicePackFiles\i386\cryptui.dll
+ 2008-04-13 16:10:13 49,152 ------w c:\windows\ServicePackFiles\i386\csc.exe
+ 2008-04-14 02:18:20 102,400 ------w c:\windows\ServicePackFiles\i386\cscdll.dll
+ 2007-06-27 12:53:47 589,824 ------w c:\windows\ServicePackFiles\i386\cscomp.dll
+ 2008-04-14 02:18:53 139,264 ------w c:\windows\ServicePackFiles\i386\cscript.exe
+ 2008-04-14 02:18:20 332,800 ------w c:\windows\ServicePackFiles\i386\cscui.dll
+ 2008-04-14 02:18:20 32,256 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll
+ 2008-04-14 02:18:53 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe
+ 2008-04-14 02:18:53 15,360 ------w c:\windows\ServicePackFiles\i386\ctfmon.exe
+ 2008-04-14 02:18:20 252,416 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll
+ 2008-04-14 02:18:20 33,792 ------w c:\windows\ServicePackFiles\i386\custsat.dll
+ 2004-08-04 03:32:26 48,640 ------w c:\windows\ServicePackFiles\i386\cwrwdm.sys
+ 2008-04-14 02:18:20 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll
+ 2008-04-14 02:18:20 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll
+ 2008-04-14 02:18:20 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll
+ 2008-04-14 02:18:20 824,320 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll
+ 2008-04-14 02:18:20 1,056,256 ------w c:\windows\ServicePackFiles\i386\danim.dll
+ 2008-03-25 04:50:25 554,008 ------w c:\windows\ServicePackFiles\i386\dao360.dll
+ 2008-04-14 02:18:20 54,784 ------w c:\windows\ServicePackFiles\i386\dataclen.dll
+ 2008-04-14 02:18:20 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll
+ 2008-04-14 02:18:54 42,496 ------w c:\windows\ServicePackFiles\i386\davcdata.exe
+ 2008-04-14 02:18:20 25,600 ------w c:\windows\ServicePackFiles\i386\davclnt.dll
+ 2008-04-14 02:18:20 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll
+ 2008-04-14 02:18:20 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
+ 2008-04-14 02:18:20 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll
+ 2008-04-14 02:18:20 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
+ 2008-04-14 02:34:37 1,804 ------w c:\windows\ServicePackFiles\i386\dcache.bin
+ 2008-04-14 02:18:20 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll
+ 2008-04-14 02:18:20 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll
+ 2008-04-14 02:18:54 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe
+ 2008-04-14 02:18:54 32,256 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe
+ 2008-04-14 02:18:20 279,552 ------w c:\windows\ServicePackFiles\i386\ddraw.dll
+ 2008-04-14 02:18:20 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll
+ 2008-04-14 02:18:54 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe
+ 2008-04-14 02:18:20 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll
+ 2008-04-14 02:18:20 289,280 ------w c:\windows\ServicePackFiles\i386\devmgr.dll
+ 2008-04-14 02:18:54 82,944 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe
+ 2008-04-14 02:18:54 105,472 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
+ 2008-04-14 02:18:20 39,424 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
+ 2008-04-14 02:18:20 124,416 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll
+ 2008-04-14 02:18:20 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll
+ 2008-04-14 02:18:20 114,176 ------w c:\windows\ServicePackFiles\i386\dgnet.dll
+ 2008-04-14 02:18:20 126,976 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
+ 2008-04-14 02:18:20 415,744 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll
+ 2008-04-14 02:18:20 48,640 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll
+ 2008-04-14 02:18:54 546,816 ------w c:\windows\ServicePackFiles\i386\dialer.exe
+ 2008-04-14 02:18:54 87,040 ------w c:\windows\ServicePackFiles\i386\diantz.exe
+ 2004-07-17 09:33:34 885,728 ------w c:\windows\ServicePackFiles\i386\digcore.exe
+ 2008-04-14 02:18:20 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll
+ 2008-04-14 02:18:20 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll
+ 2008-04-14 02:18:20 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll
+ 2008-04-14 02:18:20 167,936 ------w c:\windows\ServicePackFiles\i386\dinput.dll
+ 2008-04-14 02:18:20 190,976 ------w c:\windows\ServicePackFiles\i386\dinput8.dll
+ 2008-04-14 02:18:20 86,528 ------w c:\windows\ServicePackFiles\i386\directdb.dll
+ 2008-04-13 18:40:47 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys
+ 2008-04-14 02:18:20 1,504,768 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll
+ 2008-04-13 18:40:44 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys
+ 2008-04-14 02:18:54 167,424 ------w c:\windows\ServicePackFiles\i386\diskpart.exe
+ 2008-04-14 02:18:20 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll
+ 2008-04-14 02:18:55 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe
+ 2008-04-13 18:40:51 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys
+ 2008-04-14 02:18:55 225,792 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe
+ 2008-04-14 02:18:20 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll
+ 2008-04-14 01:55:42 800,256 ------w c:\windows\ServicePackFiles\i386\dmboot.sys
+ 2008-04-14 02:18:20 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll
+ 2008-04-14 02:18:20 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll
+ 2008-04-14 02:18:20 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
+ 2008-04-14 02:18:20 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll
+ 2008-04-14 01:55:45 154,240 ------w c:\windows\ServicePackFiles\i386\dmio.sys
+ 2008-04-14 02:18:20 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll
+ 2008-04-14 02:18:55 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe
+ 2008-04-14 02:18:20 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll
+ 2008-04-14 02:18:20 24,064 ------w c:\windows\ServicePackFiles\i386\dmserver.dll
+ 2008-04-14 02:18:20 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll
+ 2008-04-14 02:18:20 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll
+ 2008-04-14 02:18:20 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll
+ 2008-04-13 18:45:01 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys
+ 2008-04-14 02:18:20 57,344 ------w c:\windows\ServicePackFiles\i386\dmutil.dll
+ 2008-04-14 02:18:20 147,968 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll
+ 2008-04-14 02:18:20 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
+ 2008-04-14 02:18:20 48,640 ------w c:\windows\ServicePackFiles\i386\docprop2.dll
+ 2004-08-03 20:51:28 54,000 ------w c:\windows\ServicePackFiles\i386\dosx.exe
+ 2008-04-14 02:18:20 26,624 ------w c:\windows\ServicePackFiles\i386\dot3api.dll
+ 2008-04-14 02:18:20 59,904 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll
+ 2008-04-14 02:18:20 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll
+ 2008-04-14 02:18:20 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll
+ 2008-04-14 02:18:20 56,832 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll
+ 2008-04-14 02:18:20 133,120 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll
+ 2008-04-14 02:18:20 651,264 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll
+ 2008-04-13 18:39:46 206,976 ------w c:\windows\ServicePackFiles\i386\dot4.sys
+ 2008-04-14 02:18:20 103,424 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll
+ 2008-04-14 02:18:55 29,696 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe
+ 2008-04-14 02:18:20 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll
+ 2008-04-14 02:18:20 24,064 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll
+ 2008-04-14 02:16:32 3,072 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll
+ 2008-04-14 02:18:20 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll
+ 2008-04-14 02:18:20 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll
+ 2008-04-14 02:18:20 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
+ 2008-04-14 02:16:32 3,072 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll
+ 2008-04-14 02:18:55 18,432 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe
+ 2008-04-14 02:18:20 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll
+ 2008-04-14 02:18:20 213,504 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll
+ 2008-04-14 02:18:55 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe
+ 2008-04-14 02:18:20 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll
+ 2008-04-14 02:18:20 57,856 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll
+ 2008-04-13 18:45:14 60,160 ------w c:\windows\ServicePackFiles\i386\drmk.sys
+ 2008-04-13 18:45:13 2,944 ------w c:\windows\ServicePackFiles\i386\drmkaud.sys
+ 2008-04-14 02:18:20 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll
+ 2008-04-14 02:18:55 64,512 ------w c:\windows\ServicePackFiles\i386\drvqry.exe
+ 2004-07-17 09:36:44 4,656 ------w c:\windows\ServicePackFiles\i386\ds16gt.dll
+ 2008-04-14 02:18:20 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll
+ 2008-04-14 02:18:20 181,248 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll
+ 2008-04-14 02:18:20 74,752 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
+ 2008-04-14 02:18:20 93,184 ------w c:\windows\ServicePackFiles\i386\dskquota.dll
+ 2008-04-14 02:18:20 159,744 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll
+ 2008-04-14 02:18:20 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll
+ 2008-04-14 02:18:20 1,293,824 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll
+ 2008-04-14 02:18:20 145,408 ------w c:\windows\ServicePackFiles\i386\dsprop.dll
+ 2008-04-14 01:56:41 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll
+ 2008-04-14 02:18:20 240,128 ------w c:\windows\ServicePackFiles\i386\dsquery.dll
+ 2008-04-14 02:18:20 52,224 ------w c:\windows\ServicePackFiles\i386\dssec.dll
+ 2008-04-13 17:37:57 138,752 ------w c:\windows\ServicePackFiles\i386\dssenh.dll
+ 2008-04-14 02:18:20 113,664 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll
+ 2008-04-14 02:18:20 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll
+ 2008-04-14 02:18:55 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe
+ 2008-04-14 02:18:20 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll
+ 2008-04-14 02:18:55 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
+ 2008-04-14 02:18:55 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe
+ 2008-04-14 02:18:20 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll
+ 2008-04-14 02:18:20 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll
+ 2008-04-14 02:18:56 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe
+ 2008-04-14 02:18:20 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll
+ 2008-04-13 18:38:29 71,168 ------w c:\windows\ServicePackFiles\i386\dxg.sys
+ 2008-04-14 02:18:20 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll
+ 2008-04-14 02:18:20 205,312 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll
+ 2008-04-14 02:18:20 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll
+ 2008-04-14 02:18:20 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll
+ 2008-04-14 02:18:20 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll
+ 2008-04-14 02:18:21 94,720 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll
+ 2008-04-14 02:18:21 179,712 ------w c:\windows\ServicePackFiles\i386\eapphost.dll
+ 2008-04-14 02:18:21 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll
+ 2008-04-14 02:18:21 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll
+ 2008-04-14 02:18:21 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll
+ 2008-04-14 02:18:21 27,136 ------w c:\windows\ServicePackFiles\i386\efsadu.dll
+ 2008-04-14 02:18:21 186,368 ------w c:\windows\ServicePackFiles\i386\els.dll
+ 2008-04-14 02:18:21 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll
+ 2008-04-14 02:18:21 186,880 ------w c:\windows\ServicePackFiles\i386\encdec.dll
+ 2008-04-14 01:49:36 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll
+ 2004-08-19 20:18:58 120,832 ------w c:\windows\ServicePackFiles\i386\epcl5res.dll
+ 2008-04-14 02:18:21 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll
+ 2008-04-14 02:18:21 246,272 ------w c:\windows\ServicePackFiles\i386\es.dll
+ 2008-04-14 02:18:21 1,095,168 ------w c:\windows\ServicePackFiles\i386\esent.dll
+ 2008-04-14 02:18:21 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll
+ 2004-08-04 03:32:28 137,088 ------w c:\windows\ServicePackFiles\i386\essm2e.sys
+ 2008-04-14 02:18:56 195,072 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe
+ 2008-04-14 02:18:56 52,736 ------w c:\windows\ServicePackFiles\i386\evcreate.exe
+ 2008-04-14 02:18:21 56,320 ------w c:\windows\ServicePackFiles\i386\eventlog.dll
+ 2007-06-27 12:54:17 798,720 ------w c:\windows\ServicePackFiles\i386\eventlogmessages.dll
+ 2008-04-14 02:18:21 108,032 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll
+ 2008-04-14 02:18:56 25,088 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe
+ 2008-04-14 02:18:21 21,504 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll
+ 2008-04-14 02:18:56 93,184 ------w c:\windows\ServicePackFiles\i386\evntwin.exe
+ 2008-04-14 02:18:21 45,056 ------w c:\windows\ServicePackFiles\i386\evtgprov.dll
+ 2008-04-14 02:18:56 86,528 ------w c:\windows\ServicePackFiles\i386\evtrig.exe
+ 2008-04-14 02:18:57 1,036,288 ------w c:\windows\ServicePackFiles\i386\explorer.exe
+ 2008-04-14 02:18:21 380,445 ------w c:\windows\ServicePackFiles\i386\expsrv.dll
+ 2008-04-14 02:18:21 14,336 ------w c:\windows\ServicePackFiles\i386\exstrace.dll
+ 2008-04-14 02:18:21 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll
+ 2008-04-14 02:18:57 24,064 ------w c:\windows\ServicePackFiles\i386\extrac32.exe
+ 2008-04-14 02:18:21 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll
+ 2008-04-14 02:16:38 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll
+ 2008-04-13 19:14:29 143,744 ------w c:\windows\ServicePackFiles\i386\fastfat.sys
+ 2008-04-14 02:18:21 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll
+ 2008-04-14 02:18:21 80,896 ------w c:\windows\ServicePackFiles\i386\faultrep.dll
+ 2008-04-14 02:18:57 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe
+ 2008-04-13 18:40:25 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys
+ 2008-04-14 02:18:21 125,952 ------w c:\windows\ServicePackFiles\i386\fde.dll
+ 2008-04-14 02:18:21 75,776 ------w c:\windows\ServicePackFiles\i386\fdeploy.dll
+ 2008-04-14 02:18:21 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll
+ 2008-04-14 02:18:21 345,600 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll
+ 2008-04-14 02:18:57 28,672 ------w c:\windows\ServicePackFiles\i386\findstr.exe
+ 2008-04-14 01:50:12 44,672 ------w c:\windows\ServicePackFiles\i386\fips.sys
+ 2008-04-14 02:18:21 88,576 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll
+ 2008-04-13 18:40:25 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys
+ 2008-04-14 02:18:21 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll
+ 2008-04-14 02:18:57 23,040 ------w c:\windows\ServicePackFiles\i386\fltmc.exe
+ 2008-04-13 18:32:59 129,792 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys
+ 2008-04-14 02:18:21 385,024 ------w c:\windows\ServicePackFiles\i386\fontext.dll
+ 2008-04-14 02:18:21 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll
+ 2008-04-14 02:18:57 21,504 ------w c:\windows\ServicePackFiles\i386\fontview.exe
+ 2008-04-14 02:18:57 8,192 ------w c:\windows\ServicePackFiles\i386\forcedos.exe
+ 2004-08-04 03:31:24 34,173 ------w c:\windows\ServicePackFiles\i386\forehe.sys
+ 2008-04-14 02:19:18 29,696 ------w c:\windows\ServicePackFiles\i386\format.com
+ 2008-04-14 02:18:21 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll
+ 2008-04-14 02:18:21 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll
+ 2008-04-14 02:18:21 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll
+ 2008-04-14 02:18:21 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll
+ 2008-04-14 02:18:21 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll
+ 2008-04-14 02:18:21 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll
+ 2008-04-14 02:18:21 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll
+ 2008-04-14 02:18:21 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll
+ 2008-04-14 02:18:21 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll
+ 2008-04-14 02:18:21 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll
+ 2008-04-14 02:18:21 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll
+ 2008-04-14 02:18:57 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe
+ 2008-04-14 02:18:57 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe
+ 2008-04-14 02:18:57 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
+ 2008-04-14 02:18:21 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll
+ 2008-04-14 02:18:57 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe
+ 2008-04-14 02:18:21 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll
+ 2008-04-14 02:18:21 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll
+ 2008-04-14 02:18:21 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll
+ 2003-04-15 02:14:58 217,088 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
+ 2008-04-14 02:18:57 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe
+ 2008-04-14 02:18:57 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
+ 2008-04-14 02:16:40 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll
+ 2008-04-14 02:18:21 185,344 ------w c:\windows\ServicePackFiles\i386\framedyn.dll
+ 2008-04-14 02:18:57 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe
+ 2008-04-14 02:18:58 45,568 ------w c:\windows\ServicePackFiles\i386\ftp.exe
+ 2008-04-14 02:18:21 6,144 ------w c:\windows\ServicePackFiles\i386\ftpmib.dll
+ 2008-04-14 02:18:21 127,488 ------w c:\windows\ServicePackFiles\i386\ftpsv251.dll
+ 2007-06-27 12:54:17 233,472 ------w c:\windows\ServicePackFiles\i386\fusion.dll
+ 2008-04-14 02:18:21 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll
+ 2008-04-14 02:18:21 451,584 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll
+ 2008-04-14 02:18:58 142,848 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe
+ 2008-04-14 02:18:21 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll
+ 2008-04-14 02:18:21 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll
+ 2008-04-14 02:18:58 235,008 ------w c:\windows\ServicePackFiles\i386\fxscover.exe
+ 2008-04-14 02:18:21 26,624 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll
+ 2008-04-14 02:18:21 62,976 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll
+ 2008-04-14 02:18:21 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll
+ 2008-04-14 02:18:21 23,552 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll
+ 2008-04-14 02:18:21 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll
+ 2008-04-14 02:18:21 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll
+ 2008-04-14 02:16:41 7,168 ------w c:\windows\ServicePackFiles\i386\fxsres.dll
+ 2008-04-14 02:18:21 562,688 ------w c:\windows\ServicePackFiles\i386\fxsst.dll
+ 2008-04-14 02:18:58 268,288 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe
+ 2008-04-14 02:18:21 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll
+ 2008-04-14 02:18:21 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll
+ 2008-04-14 02:18:21 155,648 ------w c:\windows\ServicePackFiles\i386\fxsui.dll
+ 2008-04-14 02:18:21 195,584 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll
+ 2008-04-14 02:18:21 400,384 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll
+ 2008-04-13 18:36:40 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys
+ 2008-04-13 18:45:29 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys
+ 2008-04-13 18:45:32 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys
+ 2008-04-14 02:18:21 285,184 ------w c:\windows\ServicePackFiles\i386\gdi32.dll
+ 2008-04-14 02:18:58 61,952 ------w c:\windows\ServicePackFiles\i386\getmac.exe
+ 2008-04-14 02:18:21 123,904 ------w c:\windows\ServicePackFiles\i386\glu32.dll
+ 2008-04-14 02:18:21 574,976 ------w c:\windows\ServicePackFiles\i386\gpedit.dll
+ 2004-08-03 20:31:44 101,888 ------w c:\windows\ServicePackFiles\i386\gpkcsp.dll
+ 2008-04-14 01:51:24 10,240 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
+ 2008-04-14 02:18:58 124,416 ------w c:\windows\ServicePackFiles\i386\gprslt.exe
+ 2008-04-14 02:18:21 202,752 ------w c:\windows\ServicePackFiles\i386\gptext.dll
+ 2008-04-14 02:18:58 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe
+ 2008-04-14 01:51:27 28,672 ------w c:\windows\ServicePackFiles\i386\grserial.sys
+ 2008-04-14 02:18:21 134,144 ------w c:\windows\ServicePackFiles\i386\guitrn.dll
+ 2008-04-14 02:18:21 115,712 ------w c:\windows\ServicePackFiles\i386\guitrna.dll
+ 2008-04-14 02:18:21 32,256 ------w c:\windows\ServicePackFiles\i386\gzip.dll
+ 2008-04-14 02:18:21 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll
+ 2008-04-14 02:18:21 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll
+ 2008-04-13 18:31:32 105,344 ------w c:\windows\ServicePackFiles\i386\hal.dll
+ 2008-04-13 18:31:28 131,840 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll
+ 2008-04-13 18:31:27 81,152 ------w c:\windows\ServicePackFiles\i386\halacpi.dll
+ 2008-04-13 18:31:28 150,528 ------w c:\windows\ServicePackFiles\i386\halapic.dll
+ 2008-04-13 18:31:28 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll
+ 2008-04-13 18:31:32 152,576 ------w c:\windows\ServicePackFiles\i386\halmps.dll
+ 2008-04-13 18:31:31 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll
+ 2008-04-14 02:18:21 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll
+ 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys
+ 2008-04-14 02:18:58 16,896 ------w c:\windows\ServicePackFiles\i386\help.exe
+ 2008-04-14 02:18:58 769,024 ------w c:\windows\ServicePackFiles\i386\helpctr.exe
+ 2008-04-14 02:18:58 744,448 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe
+ 2008-04-14 02:18:59 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe
+ 2008-04-14 02:18:21 41,472 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll
+ 2008-04-14 02:18:21 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll
+ 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys
+ 2008-04-14 01:51:52 25,728 ------w c:\windows\ServicePackFiles\i386\hidbth.sys
+ 2008-04-13 18:45:26 36,864 ------w c:\windows\ServicePackFiles\i386\hidclass.sys
+ 2008-04-13 18:45:26 19,200 ------w c:\windows\ServicePackFiles\i386\hidir.sys
+ 2008-04-13 18:45:22 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys
+ 2008-04-14 02:18:21 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll
+ 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys
+ 2008-04-14 02:18:21 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll
+ 2008-04-14 02:18:21 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll
+ 2008-04-14 02:18:21 347,136 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll
+ 2008-04-14 02:18:21 334,336 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll
+ 2008-04-14 02:18:21 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll
+ 2008-04-14 02:18:21 145,920 ------w c:\windows\ServicePackFiles\i386\hotplug.dll
+ 2008-04-14 02:18:21 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll
+ 2008-04-14 02:18:21 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
+ 2008-04-14 02:18:21 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll
+ 2008-04-14 02:18:59 18,432 ------w c:\windows\ServicePackFiles\i386\hscupd.exe
+ 2004-08-04 03:41:48 220,032 ------w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys
+ 2008-04-14 02:18:21 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
+ 2004-08-04 03:41:50 685,056 ------w c:\windows\ServicePackFiles\i386\hsfcxts2.sys
+ 2004-08-04 03:41:56 1,041,536 ------w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys
+ 2008-04-13 18:53:53 264,832 ------w c:\windows\ServicePackFiles\i386\http.sys
+ 2008-04-14 02:18:21 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll
+ 2008-04-14 02:18:21 268,288 ------w c:\windows\ServicePackFiles\i386\httpext.dll
+ 2008-04-14 02:18:22 8,192 ------w c:\windows\ServicePackFiles\i386\httpmb51.dll
+ 2008-04-14 02:18:22 61,952 ------w c:\windows\ServicePackFiles\i386\httpod51.dll
+ 2008-04-14 02:18:22 43,008 ------w c:\windows\ServicePackFiles\i386\htui.dll
+ 2008-04-14 02:18:22 353,280 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll
+ 2008-04-13 18:41:22 8,576 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys
+ 2008-04-13 18:41:22 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys
+ 2008-04-14 01:52:35 53,504 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys
+ 2008-04-14 02:18:22 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
+ 2004-08-04 03:29:38 161,020 ------w c:\windows\ServicePackFiles\i386\i81xnt5.sys
+ 2008-04-14 02:18:22 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll
+ 2008-04-14 02:18:22 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll
+ 2008-04-14 02:18:22 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll
+ 2008-04-14 02:18:22 254,976 ------w c:\windows\ServicePackFiles\i386\icm32.dll
+ 2008-04-14 02:16:45 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll
+ 2008-04-13 16:44:29 2,560 ------w c:\windows\ServicePackFiles\i386\iconlib.dll
+ 2008-04-14 02:18:22 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll
+ 2008-04-14 02:18:59 218,112 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe
+ 2008-04-14 02:18:59 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe
+ 2008-04-14 02:18:22 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll
+ 2008-04-14 02:18:22 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll
+ 2008-04-14 02:18:22 176,128 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll
+ 2008-04-14 02:18:22 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll
+ 2008-04-14 02:18:59 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe
+ 2008-04-14 02:18:22 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll
+ 2008-04-14 02:18:22 121,856 ------w c:\windows\ServicePackFiles\i386\idq.dll
+ 2008-04-14 02:18:59 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe
+ 2008-04-14 02:18:22 143,360 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll
+ 2008-04-14 02:18:22 221,184 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll
+ 2008-04-14 02:18:22 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll
+ 2008-04-14 02:18:59 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe
+ 2008-04-14 02:18:22 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll
+ 2007-12-17 11:58:35 8,192 ------w c:\windows\ServicePackFiles\i386\ieexec.exe
+ 2007-06-27 12:54:23 7,168 ------w c:\windows\ServicePackFiles\i386\ieexecremote.dll
+ 2007-06-27 12:54:23 32,768 ------w c:\windows\ServicePackFiles\i386\iehost.dll
+ 2008-04-14 02:18:22 251,904 ------w c:\windows\ServicePackFiles\i386\iepeers.dll
+ 2008-04-14 02:18:22 48,640 ------w c:\windows\ServicePackFiles\i386\iernonce.dll
+ 2008-04-14 02:18:22 63,488 ------w c:\windows\ServicePackFiles\i386\iesetup.dll
+ 2008-04-14 02:18:59 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe
+ 2008-04-14 02:18:59 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe
+ 2008-04-14 02:18:22 140,800 ------w c:\windows\ServicePackFiles\i386\ifmon.dll
+ 2008-04-14 02:18:22 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll
+ 2008-04-14 02:16:47 507,392 ------w c:\windows\ServicePackFiles\i386\iis.dll
+ 2008-04-14 02:18:22 25,088 ------w c:\windows\ServicePackFiles\i386\iisadmin.dll
+ 2008-04-14 02:18:22 145,408 ------w c:\windows\ServicePackFiles\i386\iische51.dll
+ 2008-04-14 02:18:22 68,608 ------w c:\windows\ServicePackFiles\i386\iisext51.dll
+ 2008-04-14 02:18:22 7,168 ------w c:\windows\ServicePackFiles\i386\iisfecnv.dll
+ 2008-04-14 02:18:22 79,872 ------w c:\windows\ServicePackFiles\i386\iislog51.dll
+ 2008-04-14 02:18:22 65,024 ------w c:\windows\ServicePackFiles\i386\iismap.dll
+ 2008-04-14 02:18:59 31,232 ------w c:\windows\ServicePackFiles\i386\iisrstas.exe
+ 2008-04-14 02:18:22 133,632 ------w c:\windows\ServicePackFiles\i386\iisrtl.dll
+ 2008-04-13 16:10:32 184,320 ------w c:\windows\ServicePackFiles\i386\ilasm.exe
+ 2008-04-14 02:18:22 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll
+ 2008-04-14 02:18:22 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll
+ 2008-04-14 02:18:59 150,528 ------w c:\windows\ServicePackFiles\i386\imapi.exe
+ 2008-04-13 18:40:58 42,112 ------w c:\windows\ServicePackFiles\i386\imapi.sys
+ 2008-04-14 02:18:22 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll
+ 2008-04-14 02:18:22 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll
+ 2008-04-14 02:18:22 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll
+ 2008-04-14 02:18:22 126,464 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll
+ 2008-04-14 02:18:22 282,624 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll
+ 2008-04-14 02:18:22 691,712 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll
+ 2008-04-14 02:18:59 15,872 ------w c:\windows\ServicePackFiles\i386\inetin51.exe
+ 2008-04-14 02:18:23 840,192 ------w c:\windows\ServicePackFiles\i386\inetmgr.dll
+ 2008-04-14 02:18:23 32,768 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll
+ 2008-04-14 02:18:23 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll
+ 2008-04-14 02:18:23 16,384 ------w c:\windows\ServicePackFiles\i386\inetppui.dll
+ 2008-04-14 01:53:43 50,176 ------w c:\windows\ServicePackFiles\i386\inetres.dll
+ 2008-04-14 02:18:59 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe
+ 2008-04-14 02:18:23 13,312 ------w c:\windows\ServicePackFiles\i386\infoadmn.dll
+ 2008-04-14 02:18:23 257,024 ------w c:\windows\ServicePackFiles\i386\infocomm.dll
+ 2008-04-14 02:18:23 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll
+ 2008-04-14 02:18:23 125,952 ------w c:\windows\ServicePackFiles\i386\input.dll
+ 2008-04-14 02:18:23 96,768 ------w c:\windows\ServicePackFiles\i386\inseng.dll
+ 2007-06-27 12:54:28 24,576 ------w c:\windows\ServicePackFiles\i386\installutil.exe
+ 2008-04-14 01:54:05 5,632 ------w c:\windows\ServicePackFiles\i386\intelide.sys
+ 2008-04-14 01:54:06 40,576 ------w c:\windows\ServicePackFiles\i386\intelppm.sys
+ 2008-04-13 18:53:34 36,608 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys
+ 2008-04-14 02:19:00 57,856 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe
+ 2008-04-14 02:16:38 103,936 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll
+ 2008-04-14 02:16:34 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll
+ 2008-04-14 02:18:23 95,232 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll
+ 2008-04-13 18:57:07 20,864 ------w c:\windows\ServicePackFiles\i386\ipinip.sys
+ 2008-04-14 02:18:23 171,520 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll
+ 2008-04-13 18:57:15 152,832 ------w c:\windows\ServicePackFiles\i386\ipnat.sys
+ 2008-04-14 02:18:23 332,288 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll
+ 2008-04-14 02:18:23 354,304 ------w c:\windows\ServicePackFiles\i386\ippromon.dll
+ 2008-04-14 02:18:23 36,352 ------w c:\windows\ServicePackFiles\i386\iprip.dll
+ 2008-04-14 02:18:23 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll
+ 2008-04-13 19:19:42 75,264 ------w c:\windows\ServicePackFiles\i386\ipsec.sys
+ 2008-04-14 02:18:23 358,400 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
+ 2008-04-14 02:18:23 184,832 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
+ 2008-04-14 02:17:32 103,424 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll
+ 2008-04-14 02:16:34 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll
+ 2008-04-14 02:18:23 387,072 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
+ 2008-04-14 02:19:00 53,760 ------w c:\windows\ServicePackFiles\i386\ipv6.exe
+ 2008-04-14 02:18:23 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll
+ 2008-04-14 02:19:00 24,576 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe
+ 2008-04-14 02:18:23 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll
+ 2008-04-14 02:18:23 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll
+ 2008-04-14 02:18:24 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
+ 2008-04-14 02:18:24 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll
+ 2008-04-14 02:18:24 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll
+ 2008-04-14 02:18:24 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
+ 2008-04-13 18:45:34 46,592 ------w c:\windows\ServicePackFiles\i386\irbus.sys
+ 2008-04-13 18:54:36 88,192 ------w c:\windows\ServicePackFiles\i386\irda.sys
+ 2008-04-13 18:54:28 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys
+ 2008-04-14 02:19:00 152,576 ------w c:\windows\ServicePackFiles\i386\irftp.exe
+ 2008-04-14 02:18:24 29,184 ------w c:\windows\ServicePackFiles\i386\irmon.dll
+ 2008-04-14 01:54:46 37,760 ------w c:\windows\ServicePackFiles\i386\isapnp.sys
+ 2008-04-14 02:18:24 68,608 ------w c:\windows\ServicePackFiles\i386\isatq.dll
+ 2008-04-14 02:18:24 27,136 ------w c:\windows\ServicePackFiles\i386\iscomlog.dll
+ 2008-04-14 02:17:23 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll
+ 2008-04-14 02:17:40 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll
+ 2008-04-14 02:17:40 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll
+ 2008-04-14 02:18:24 86,016 ------w c:\windows\ServicePackFiles\i386\isign32.dll
+ 2008-04-14 02:17:23 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll
+ 2008-04-14 02:18:24 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll
+ 2008-04-14 02:18:24 155,136 ------w c:\windows\ServicePackFiles\i386\itircl.dll
+ 2008-04-14 02:18:24 138,240 ------w c:\windows\ServicePackFiles\i386\itss.dll
+ 2008-04-14 02:18:24 191,488 ------w c:\windows\ServicePackFiles\i386\iuengine.dll
+ 2008-04-14 02:18:24 54,784 ------w c:\windows\ServicePackFiles\i386\ixsso.dll
+ 2008-04-14 02:18:24 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll
+ 2008-04-14 02:18:24 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll
+ 2008-04-14 02:18:24 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll
+ 2007-06-27 12:54:35 40,960 ------w c:\windows\ServicePackFiles\i386\jsc.exe
+ 2008-04-14 02:18:24 512,000 ------w c:\windows\ServicePackFiles\i386\jscript.dll
+ 2008-04-14 02:18:24 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll
+ 2008-04-14 01:55:09 25,088 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys
+ 2008-04-14 02:16:54 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll
+ 2008-04-14 01:55:10 14,720 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys
+ 2008-04-14 02:16:54 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll
+ 2008-04-14 02:16:54 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll
+ 2008-04-14 02:16:54 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll
+ 2008-04-14 02:16:54 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
+ 2008-04-14 02:16:54 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll
+ 2008-04-14 02:16:54 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll
+ 2008-04-14 02:16:54 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
+ 2008-04-14 02:16:54 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
+ 2008-04-14 02:16:54 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll
+ 2008-04-13 18:31:35 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll
+ 2008-04-14 02:18:24 186,368 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll
+ 2008-04-14 02:18:24 49,152 ------w c:\windows\ServicePackFiles\i386\kdsui.dll
+ 2008-04-14 02:18:24 254,464 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll
+ 2008-04-14 02:18:24 299,520 ------w c:\windows\ServicePackFiles\i386\kerberos.dll
+ 2008-04-14 02:18:24 1,042,944 ------w c:\windows\ServicePackFiles\i386\kernel32.dll
+ 2004-08-03 20:46:56 42,537 ------w c:\windows\ServicePackFiles\i386\keyboard.sys
+ 2008-04-14 02:18:24 155,136 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
+ 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
+ 2008-04-14 02:18:24 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
+ 2008-04-14 02:16:55 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
+ 2008-04-14 02:16:55 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
+ 2008-04-14 02:16:55 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
+ 2008-04-14 02:16:55 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
+ 2008-04-14 02:18:24 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
+ 2008-04-14 02:16:55 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
+ 2008-04-14 02:16:55 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
+ 2008-04-14 02:16:55 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
+ 2008-04-14 02:16:55 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
+ 2004-08-03 20:49:58 92,480 ------w c:\windows\ServicePackFiles\i386\krnl386.exe
+ 2008-04-14 02:18:24 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
+ 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys
+ 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
+ 2008-04-14 02:18:24 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
+ 2008-04-14 02:18:24 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
+ 2008-04-14 02:16:23 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
+ 2008-04-14 02:16:23 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
+ 2008-04-14 02:16:23 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
+ 2008-04-14 02:16:23 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
+ 2004-08-03 20:31:56 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
+ 2004-08-03 20:31:40 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
+ 2008-04-14 02:16:45 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
+ 2008-04-14 02:16:47 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
+ 2008-04-14 02:16:47 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
+ 2008-04-14 02:16:48 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
+ 2008-04-14 02:16:48 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
+ 2008-04-14 02:16:48 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
+ 2008-04-14 02:16:48 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
+ 2004-08-03 20:31:54 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
+ 2004-08-03 20:31:56 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
+ 2004-08-03 20:31:58 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
+ 2004-08-03 20:32:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
+ 2004-08-03 20:32:12 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
+ 2004-08-03 20:32:16 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
+ 2008-04-14 02:16:48 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
+ 2008-04-14 02:16:48 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
+ 2004-08-03 20:31:50 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
+ 2008-04-14 02:16:48 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
+ 2008-04-14 02:17:23 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
+ 2008-04-14 02:17:23 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
+ 2008-04-14 02:17:24 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
+ 2008-04-14 02:17:24 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
+ 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
+ 2008-04-14 02:17:24 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
+ 2004-08-03 20:32:16 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
+ 2004-08-03 20:32:16 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
+ 2008-04-14 02:17:42 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
+ 2008-04-14 02:17:43 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
+ 2008-04-14 02:17:46 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
+ 2008-04-14 02:17:46 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
+ 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
+ 2008-04-14 02:19:00 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
+ 2008-04-14 02:18:24 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
+ 2008-04-14 12:48:26 424,448 ------w c:\windows\ServicePackFiles\i386\licdll.dll
+ 2008-04-14 02:18:24 22,528 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
+ 2008-04-14 02:18:24 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
+ 2008-04-14 02:18:24 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
+ 2008-04-14 02:18:24 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
+ 2008-04-14 02:18:24 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
+ 2008-04-14 02:18:24 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
+ 2008-04-14 02:18:24 100,864 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
+ 2008-04-14 02:18:24 224,768 ------w c:\windows\ServicePackFiles\i386\localsec.dll
+ 2008-04-14 02:18:24 345,088 ------w c:\windows\ServicePackFiles\i386\localspl.dll
+ 2008-04-14 02:18:24 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
+ 2008-04-14 02:19:01 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
+ 2008-04-14 02:18:24 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
+ 2008-04-14 02:19:01 61,952 ------w c:\windows\ServicePackFiles\i386\logman.exe
+ 2008-04-14 02:19:18 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
+ 2008-04-14 02:19:01 515,584 ------w c:\windows\ServicePackFiles\i386\logonui.exe
+ 2008-04-14 02:18:24 13,312 ------w c:\windows\ServicePackFiles\i386\lonsint.dll
+ 2008-04-14 02:18:24 23,040 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
+ 2008-04-14 02:18:24 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
+ 2008-04-14 02:18:24 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
+ 2008-04-14 02:18:24 19,968 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
+ 2008-04-14 02:18:24 732,672 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
+ 2008-04-14 02:19:01 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
+ 2004-08-19 20:29:40 607,292 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
+ 2004-08-19 20:29:42 422,272 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
+ 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
+ 2004-08-04 03:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys
+ 2008-04-14 02:19:01 73,216 ------w c:\windows\ServicePackFiles\i386\magnify.exe
+ 2008-04-14 02:19:01 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe
+ 2008-04-14 02:18:24 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
+ 2008-04-14 02:18:24 85,504 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
+ 2008-04-14 02:18:24 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
+ 2008-04-14 02:18:24 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
+ 2008-04-14 02:18:24 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
+ 2008-04-14 02:18:24 37,888 ------w c:\windows\ServicePackFiles\i386\md5filt.dll
+ 2008-04-14 02:18:24 119,296 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
+ 2008-04-14 02:18:24 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
+ 2004-08-04 03:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
+ 2008-04-14 02:18:24 16,896 ------w c:\windows\ServicePackFiles\i386\medctroc.dll
+ 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
+ 2008-04-14 02:18:24 86,016 ------w c:\windows\ServicePackFiles\i386\metada51.dll
+ 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
+ 2008-04-14 02:18:24 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
+ 2008-04-14 02:18:24 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
+ 2008-04-14 02:18:24 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
+ 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
+ 2008-04-14 02:18:24 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
+ 2008-04-14 02:18:24 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
+ 2007-06-27 12:54:42 712,704 ------w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
+ 2007-06-27 12:54:48 286,720 ------w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
+ 2008-04-14 02:18:24 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
+ 2008-04-14 02:18:24 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll
+ 2008-04-14 02:18:24 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
+ 2008-04-14 02:18:24 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
+ 2008-04-14 02:19:01 104,448 ------w c:\windows\ServicePackFiles\i386\migload.exe
+ 2008-04-14 02:19:02 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
+ 2008-04-14 02:19:02 251,392 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
+ 2008-04-14 02:19:02 247,296 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
+ 2008-04-14 02:18:24 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
+ 2008-04-14 02:18:24 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
+ 2008-04-14 02:19:03 1,415,168 ------w c:\windows\ServicePackFiles\i386\mmc.exe
+ 2008-04-14 02:18:24 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
+ 2008-04-14 02:18:24 16,384 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
+ 2008-04-14 02:18:24 168,960 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
+ 2008-04-14 02:18:24 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
+ 2008-04-14 02:18:24 36,864 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
+ 2008-04-14 02:18:24 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
+ 2008-04-14 02:18:24 5,120 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
+ 2008-04-14 02:18:24 1,878,016 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
+ 2008-04-14 02:19:03 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
+ 2008-04-14 02:18:24 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
+ 2008-04-14 02:18:24 17,920 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
+ 2004-08-19 13:19:28 70,544 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll
+ 2008-04-14 02:18:24 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
+ 2008-04-14 02:19:03 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
+ 2008-04-14 02:18:24 209,408 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
+ 2008-04-14 02:19:03 143,872 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
+ 2008-04-14 01:49:07 30,336 ------w c:\windows\ServicePackFiles\i386\modem.sys
+ 2008-04-14 02:18:24 151,040 ------w c:\windows\ServicePackFiles\i386\modemui.dll
+ 2008-04-14 02:19:03 17,408 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
+ 2008-04-14 02:18:24 124,928 ------w c:\windows\ServicePackFiles\i386\mofd.dll
+ 2008-04-14 02:19:18 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
+ 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
+ 2008-04-14 01:49:12 23,552 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
+ 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
+ 2008-04-14 02:19:03 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
+ 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys
+ 2008-04-14 02:19:04 124,928 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
+ 2008-04-14 02:18:24 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
+ 2008-04-14 02:18:24 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
+ 2008-04-14 02:18:24 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
+ 2008-04-13 18:39:44 92,544 ------w c:\windows\ServicePackFiles\i386\mqac.sys
+ 2008-04-14 02:18:24 138,240 ------w c:\windows\ServicePackFiles\i386\mqad.dll
+ 2008-04-14 02:19:04 19,968 ------w c:\windows\ServicePackFiles\i386\mqbkup.exe
+ 2008-04-14 02:18:24 47,616 ------w c:\windows\ServicePackFiles\i386\mqdscli.dll
+ 2008-04-14 02:18:24 16,896 ------w c:\windows\ServicePackFiles\i386\mqise.dll
+ 2008-04-14 02:18:24 89,088 ------w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
+ 2008-04-14 02:18:24 225,280 ------w c:\windows\ServicePackFiles\i386\mqoa.dll
+ 2008-04-14 02:18:24 663,040 ------w c:\windows\ServicePackFiles\i386\mqqm.dll
+ 2008-04-14 02:18:24 177,152 ------w c:\windows\ServicePackFiles\i386\mqrt.dll
+ 2008-04-14 02:18:24 123,904 ------w c:\windows\ServicePackFiles\i386\mqrtdep.dll
+ 2008-04-14 02:18:24 95,744 ------w c:\windows\ServicePackFiles\i386\mqsec.dll
+ 2008-04-14 02:18:24 517,632 ------w c:\windows\ServicePackFiles\i386\mqsnap.dll
+ 2008-04-14 02:19:04 4,608 ------w c:\windows\ServicePackFiles\i386\mqsvc.exe
+ 2008-04-14 02:19:04 117,248 ------w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
+ 2008-04-14 02:18:24 187,392 ------w c:\windows\ServicePackFiles\i386\mqtrig.dll
+ 2008-04-14 02:18:24 49,152 ------w c:\windows\ServicePackFiles\i386\mqupgrd.dll
+ 2008-04-14 02:18:24 521,216 ------w c:\windows\ServicePackFiles\i386\mqutil.dll
+ 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
+ 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
+ 2008-04-14 02:18:24 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
+ 2008-04-14 02:18:24 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
+ 2007-03-28 12:54:32 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
+ 2008-04-14 02:18:24 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
+ 2007-03-28 12:54:32 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
+ 2008-04-14 02:18:24 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
+ 2007-03-28 12:54:32 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
+ 2008-04-14 02:18:24 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
+ 2008-04-14 02:18:24 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
+ 2007-03-28 12:54:33 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
+ 2007-03-28 12:54:34 28,672 ------w c:\windows\ServicePackFiles\i386\msader15.dll
+ 2008-04-14 02:18:25 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
+ 2008-04-14 02:18:25 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
+ 2008-04-14 02:18:25 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
+ 2008-04-14 02:18:25 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
+ 2008-04-14 02:18:25 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
+ 2008-04-14 02:17:02 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
+ 2008-04-14 02:18:25 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
+ 2008-04-14 02:18:25 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
+ 2008-04-14 02:18:25 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
+ 2008-04-14 02:18:25 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
+ 2008-04-14 02:18:25 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
+ 2008-04-14 02:19:04 171,520 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
+ 2004-07-17 09:42:20 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll
+ 2007-06-27 12:54:57 1,564,672 ------w c:\windows\ServicePackFiles\i386\mscorcfg.dll
+ 2008-04-13 16:10:41 69,632 ------w c:\windows\ServicePackFiles\i386\mscordbc.dll
+ 2008-04-13 16:10:42 221,184 ------w c:\windows\ServicePackFiles\i386\mscordbi.dll
+ 2007-06-27 12:55:10 131,072 ------w c:\windows\ServicePackFiles\i386\mscoree.dll
+ 2008-04-13 16:10:45 73,728 ------w c:\windows\ServicePackFiles\i386\mscorie.dll
+ 2007-06-27 12:55:20 303,104 ------w c:\windows\ServicePackFiles\i386\mscorjit.dll
+ 2008-04-13 16:10:49 86,016 ------w c:\windows\ServicePackFiles\i386\mscorld.dll
+ 2007-12-17 11:58:42 1,998,848 ------w c:\windows\ServicePackFiles\i386\mscorlib.dll
+ 2008-04-13 16:10:53 94,208 ------w c:\windows\ServicePackFiles\i386\mscorpe.dll
+ 2008-04-13 16:10:53 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
+ 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
+ 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.dll
+ 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
+ 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
+ 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
+ 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
+ 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
+ 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
+ 2008-04-13 16:10:55 46,592 ------w c:\windows\ServicePackFiles\i386\mscorsec.dll
+ 2008-04-13 16:10:55 69,632 ------w c:\windows\ServicePackFiles\i386\mscorsn.dll
+ 2007-12-17 11:58:53 2,273,280 ------w c:\windows\ServicePackFiles\i386\mscorsvr.dll
+ 2008-04-13 16:10:58 8,704 ------w c:\windows\ServicePackFiles\i386\mscortim.dll
+ 2007-12-17 11:59:26 2,281,472 ------w c:\windows\ServicePackFiles\i386\mscorwks.dll
+ 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
+ 2008-04-14 02:18:25 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
+ 2008-04-14 02:18:25 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll
+ 2008-04-14 02:18:25 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
+ 2008-04-14 02:18:25 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
+ 2008-04-14 02:18:25 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
+ 2008-04-14 02:18:25 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
+ 2008-04-14 02:18:25 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
+ 2008-04-14 02:18:25 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
+ 2008-04-14 02:18:25 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
+ 2007-03-28 12:54:35 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
+ 2008-04-14 02:18:25 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
+ 2007-03-28 12:54:35 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
+ 2008-04-14 02:18:25 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
+ 2008-04-14 02:18:25 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
+ 2008-04-14 02:18:25 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
+ 2007-03-28 12:54:35 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
+ 2008-04-14 02:18:25 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
+ 2008-04-14 02:18:25 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
+ 2008-04-14 02:18:25 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
+ 2007-03-28 12:54:35 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
+ 2008-04-14 02:18:25 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
+ 2008-04-14 02:18:25 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
+ 2008-04-14 02:18:25 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
+ 2008-04-14 02:18:25 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
+ 2008-04-14 02:18:25 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
+ 2008-04-14 02:19:04 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
+ 2008-04-14 02:18:25 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
+ 2008-04-14 02:18:25 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
+ 2008-04-14 02:18:25 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
+ 2008-04-14 02:18:26 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
+ 2008-04-14 02:18:26 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
+ 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys
+ 2008-03-25 04:50:28 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
+ 2008-03-25 04:50:30 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
+ 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
+ 2008-04-14 02:18:26 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
+ 2008-04-14 02:18:26 1,003,008 ------w c:\windows\ServicePackFiles\i386\msgina.dll
+ 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
+ 2008-04-14 02:18:26 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
+ 2008-04-14 02:18:26 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
+ 2008-04-14 02:18:26 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
+ 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
+ 2008-04-14 02:18:26 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
+ 2008-04-14 02:19:19 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv
+ 2008-04-14 02:19:19 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv
+ 2008-04-14 02:19:04 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
+ 2008-04-14 02:18:26 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
+ 2008-04-14 02:18:26 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
+ 2008-04-14 01:51:03 57,344 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
+ 2008-04-14 02:18:26 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll
+ 2008-04-14 02:18:26 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
+ 2008-04-14 02:18:26 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
+ 2008-04-14 02:18:26 251,392 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
+ 2008-04-14 02:19:04 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
+ 2008-04-14 02:18:26 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
+ 2008-04-14 02:18:26 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
+ 2008-04-14 02:19:04 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
+ 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
+ 2008-04-14 02:18:26 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
+ 2008-04-14 02:18:26 381,440 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
+ 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
+ 2008-04-14 02:19:04 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
+ 2008-04-14 02:18:26 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll
+ 2008-03-25 04:50:34 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
+ 2008-03-25 04:50:40 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
+ 2008-03-25 04:51:02 187,168 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
+ 2008-04-14 02:18:26 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
+ 2008-03-25 04:50:42 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
+ 2008-03-25 04:50:42 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
+ 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
+ 2008-04-14 02:18:27 25,600 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
+ 2008-03-25 04:50:44 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
+ 2008-04-14 02:18:27 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
+ 2008-04-14 02:18:27 170,496 ------w c:\windows\ServicePackFiles\i386\msmqocm.dll
+ 2008-04-14 02:19:04 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
+ 2004-07-17 09:33:36 11,071,456 ------w c:\windows\ServicePackFiles\i386\msncli.exe
+ 2008-04-14 02:18:27 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
+ 2004-07-17 09:33:36 907,480 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
+ 2008-04-14 02:18:27 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
+ 2008-04-14 02:18:27 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
+ 2008-04-14 02:18:27 566,272 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
+ 2008-04-14 02:18:27 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
+ 2008-04-14 02:18:27 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
+ 2008-04-14 02:18:27 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll
+ 2008-04-14 02:18:27 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
+ 2008-04-14 01:54:02 2,515,456 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
+ 2008-04-14 02:18:27 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
+ 2008-04-14 02:19:05 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
+ 2007-03-28 12:54:37 24,576 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
+ 2008-04-14 02:18:27 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
+ 2008-04-14 02:19:05 346,624 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
+ 2008-04-14 02:18:27 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
+ 2008-03-25 04:50:45 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
+ 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
+ 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
+ 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
+ 2008-04-14 02:18:27 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
+ 2008-03-25 04:50:47 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
+ 2008-03-25 04:50:49 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
+ 2008-03-25 04:50:52 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
+ 2008-04-14 02:18:27 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
+ 2008-04-14 02:18:27 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
+ 2008-04-14 02:18:27 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
+ 2008-04-14 01:54:26 81,920 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
+ 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
+ 2008-04-14 02:18:27 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
+ 2008-04-14 02:18:28 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
+ 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
+ 2008-04-14 02:18:28 279,552 ------w c:\windows\ServicePackFiles\i386\mstask.dll
+ 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
+ 2008-03-25 04:50:55 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
+ 2008-04-14 02:18:28 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll
+ 2008-04-14 02:19:05 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
+ 2008-04-14 02:18:28 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
+ 2008-04-14 02:18:28 195,584 ------w c:\windows\ServicePackFiles\i386\msutb.dll
+ 2008-04-14 02:18:28 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
+ 2008-04-14 02:18:28 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
+ 2008-04-14 02:18:28 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
+ 2008-04-14 02:18:28 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
+ 2008-04-14 02:18:28 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
+ 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
+ 2008-04-14 02:18:28 122,368 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
+ 2008-04-14 02:18:28 1,434,112 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
+ 2008-04-14 02:18:28 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
+ 2008-03-25 04:50:57 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
+ 2008-04-14 02:18:28 204,800 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
+ 2008-04-14 02:18:28 248,320 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
+ 2008-03-25 04:51:03 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
+ 2008-04-14 02:18:28 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
+ 2008-03-25 04:50:58 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
+ 2008-04-14 02:18:28 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
+ 2008-04-14 02:18:28 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
+ 2008-04-14 02:18:28 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
+ 2008-04-14 02:18:28 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
+ 2004-08-04 03:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
+ 2004-08-04 03:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys
+ 2008-04-14 02:19:05 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
+ 2008-04-14 02:18:28 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
+ 2008-04-14 02:18:28 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
+ 2008-04-14 02:18:28 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
+ 2008-04-14 02:18:28 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
+ 2008-04-14 02:18:28 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
+ 2008-04-14 02:18:28 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
+ 2004-08-04 03:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys
+ 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys
+ 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
+ 2008-04-14 02:18:28 91,136 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
+ 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
+ 2008-04-14 02:18:28 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
+ 2008-04-14 02:18:28 30,720 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
+ 2008-04-14 02:18:28 200,192 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
+ 2008-04-14 02:19:05 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
+ 2008-04-14 02:19:05 55,296 ------w c:\windows\ServicePackFiles\i386\narrator.exe
+ 2008-04-14 02:18:28 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
+ 2008-04-14 02:18:28 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
+ 2008-04-14 02:18:28 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
+ 2008-04-14 02:18:28 18,432 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
+ 2008-04-14 02:19:05 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
+ 2008-04-14 02:18:28 19,456 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
+ 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys
+ 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
+ 2008-04-14 02:18:28 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
+ 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
+ 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
+ 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
+ 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
+ 2008-04-14 02:19:05 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
+ 2008-04-14 02:19:05 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
+ 2008-04-14 02:18:28 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
+ 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys
+ 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
+ 2008-04-14 02:18:28 632,832 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
+ 2008-04-14 02:19:05 115,200 ------w c:\windows\ServicePackFiles\i386\netdde.exe
+ 2004-08-03 20:10:58 126,976 ------w c:\windows\ServicePackFiles\i386\netfxocm.dll
+ 2007-12-17 11:59:53 82,976 ------w c:\windows\ServicePackFiles\i386\netfxupdate.exe
+ 2008-04-14 02:18:28 142,336 ------w c:\windows\ServicePackFiles\i386\netid.dll
+ 2008-04-14 02:18:28 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
+ 2008-04-14 02:18:28 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
+ 2008-04-14 02:18:28 77,824 ------w c:\windows\ServicePackFiles\i386\netoc.dll
+ 2008-04-14 02:18:28 880,640 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
+ 2008-04-14 02:18:28 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll
+ 2008-04-14 02:22:22 332,288 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
+ 2008-04-14 02:19:05 87,552 ------w c:\windows\ServicePackFiles\i386\netsh.exe
+ 2008-04-14 02:18:28 1,713,664 ------w c:\windows\ServicePackFiles\i386\netshell.dll
+ 2008-04-14 02:19:06 38,912 ------w c:\windows\ServicePackFiles\i386\netstat.exe
+ 2008-04-14 02:18:28 82,944 ------w c:\windows\ServicePackFiles\i386\netui0.dll
+ 2008-04-14 02:18:28 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
+ 2004-08-19 20:32:12 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys
+ 2008-04-14 02:18:28 249,856 ------w c:\windows\ServicePackFiles\i386\newdev.dll
+ 2008-04-13 16:11:06 147,456 ------w c:\windows\ServicePackFiles\i386\ngen.exe
+ 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
+ 2008-04-14 02:18:28 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
+ 2008-04-14 02:18:28 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
+ 2008-04-14 02:18:28 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
+ 2008-04-14 02:18:28 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
+ 2008-04-14 02:18:28 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
+ 2008-04-14 02:18:28 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
+ 2008-04-14 02:18:28 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
+ 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
+ 2008-04-14 02:18:28 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
+ 2008-04-14 02:18:28 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
+ 2008-04-14 02:19:06 70,144 ------w c:\windows\ServicePackFiles\i386\notepad.exe
+ 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys
+ 2008-04-14 02:19:06 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
+ 2008-04-14 02:18:28 55,296 ------w c:\windows\ServicePackFiles\i386\npptools.dll
+ 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
+ 2008-04-14 02:18:28 45,056 ------w c:\windows\ServicePackFiles\i386\nsepm.dll
+ 2008-04-14 02:19:06 79,872 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
+ 2008-04-14 02:19:07 1,233,408 ------w c:\windows\ServicePackFiles\i386\ntbackup.exe
+ 2004-08-03 20:38:34 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com
+ 2008-04-14 02:17:59 730,624 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
+ 2008-04-14 02:18:28 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
+ 2008-04-14 02:18:28 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
+ 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
+ 2004-08-03 20:45:24 34,016 ------w c:\windows\ServicePackFiles\i386\ntio.sys
+ 2004-08-03 20:45:16 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys
+ 2004-08-03 20:45:12 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys
+ 2004-08-03 20:45:16 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys
+ 2004-08-03 20:45:14 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys
+ 2008-04-14 01:57:01 2,147,840 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
+ 2008-04-14 01:57:08 2,068,224 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
+ 2008-04-14 01:57:13 2,026,496 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
+ 2008-04-14 02:18:29 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
+ 2008-04-14 02:18:29 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
+ 2008-04-14 02:18:29 119,808 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
+ 2008-04-14 02:18:29 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
+ 2008-04-14 02:18:29 180,224 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
+ 2008-04-14 02:18:29 495,104 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
+ 2008-04-14 02:18:29 437,760 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
+ 2004-08-04 03:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
+ 2008-04-14 02:18:29 63,488 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
+ 2008-04-14 01:57:30 2,191,360 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
+ 2008-04-14 02:18:29 92,160 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
+ 2008-04-14 02:18:29 144,896 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
+ 2008-04-14 02:19:07 421,888 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
+ 2008-04-14 02:18:29 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
+ 2008-04-14 02:18:29 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
+ 2004-08-04 03:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys
+ 2008-04-14 02:18:29 64,000 ------w c:\windows\ServicePackFiles\i386\nwapi32.dll
+ 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
+ 2008-04-14 02:18:29 144,384 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
+ 2008-04-13 18:34:12 163,584 ------w c:\windows\ServicePackFiles\i386\nwrdr.sys
+ 2008-04-14 02:18:29 65,536 ------w c:\windows\ServicePackFiles\i386\nwwks.dll
+ 2008-04-14 02:18:30 271,360 ------w c:\windows\ServicePackFiles\i386\oakley.dll
+ 2008-04-14 02:18:30 288,768 ------w c:\windows\ServicePackFiles\i386\objsel.dll
+ 2008-04-13 18:40:26 481,792 ------w c:\windows\ServicePackFiles\i386\obrs0c0a.dll
+ 2008-04-14 02:18:32 97,280 ------w c:\windows\ServicePackFiles\i386\occache.dll
+ 2008-04-14 02:18:32 15,872 ------w c:\windows\ServicePackFiles\i386\ocgen.dll
+ 2008-04-14 02:18:32 68,608 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll
+ 2008-04-14 02:18:32 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll
+ 2004-07-17 09:36:44 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll
+ 2008-04-14 02:18:33 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll
+ 2008-04-14 02:18:33 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll
+ 2008-04-14 02:19:07 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe
+ 2008-04-14 02:18:33 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll
+ 2008-04-14 02:18:33 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll
+ 2008-04-14 02:19:07 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe
+ 2008-04-14 02:18:33 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll
+ 2008-04-14 02:18:33 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll
+ 2008-04-14 02:18:33 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll
+ 2007-03-28 12:54:47 98,304 ------w c:\windows\ServicePackFiles\i386\odbcint.dll
+ 2008-04-14 02:17:21 61,471 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll
+ 2008-04-14 02:18:33 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll
+ 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll
+ 2008-04-14 02:18:33 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll
+ 2008-04-14 02:18:33 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll
+ 2008-04-14 02:18:33 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll
+ 2008-04-14 02:18:33 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll
+ 2008-04-14 02:18:33 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll
+ 2008-04-14 02:18:33 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll
+ 2008-04-14 02:18:33 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll
+ 2008-04-14 02:19:07 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe
+ 2008-04-14 02:18:33 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll
+ 2008-04-14 02:18:33 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll
+ 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys
+ 2008-04-14 02:18:33 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll
+ 2008-04-14 02:18:33 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll
+ 2008-04-14 02:18:33 75,264 ------w c:\windows\ServicePackFiles\i386\olecli32.dll
+ 2008-04-14 02:18:33 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll
+ 2008-04-14 02:18:33 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll
+ 2008-04-14 02:18:33 73,728 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll
+ 2008-04-14 02:18:33 124,416 ------w c:\windows\ServicePackFiles\i386\oledlg.dll
+ 2008-04-14 02:18:33 109,056 ------w c:\windows\ServicePackFiles\i386\oleprn.dll
+ 2008-04-14 02:18:33 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll
+ 2008-04-14 02:18:33 144,896 ------w c:\windows\ServicePackFiles\i386\onex.dll
+ 2008-04-14 02:19:07 51,712 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe
+ 2008-04-14 02:18:33 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll
+ 2008-04-14 02:19:07 70,656 ------w c:\windows\ServicePackFiles\i386\opnfiles.exe
+ 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe
+ 2008-04-14 02:19:08 216,064 ------w c:\windows\ServicePackFiles\i386\osk.exe
+ 2008-04-13 18:31:51 231,424 ------w c:\windows\ServicePackFiles\i386\osloader.exe
+ 2008-04-14 02:18:33 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll
+ 2008-04-14 02:18:33 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll
+ 2008-04-14 02:18:33 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
+ 2008-04-14 02:18:33 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll
+ 2008-04-14 02:18:33 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
+ 2008-04-14 02:18:33 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll
+ 2008-04-14 01:58:34 46,976 ------w c:\windows\ServicePackFiles\i386\p3.sys
+ 2008-04-14 02:19:08 59,392 ------w c:\windows\ServicePackFiles\i386\packager.exe
+ 2008-04-14 01:58:36 80,256 ------w c:\windows\ServicePackFiles\i386\parport.sys
+ 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys
+ 2008-04-14 02:18:33 69,120 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll
+ 2004-08-04 03:31:24 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys
+ 2008-04-14 02:18:33 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll
+ 2008-04-14 02:18:33 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll
+ 2008-04-14 01:58:40 68,992 ------w c:\windows\ServicePackFiles\i386\pci.sys
+ 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys
+ 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll
+ 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll
+ 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll
+ 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll
+ 2008-04-14 01:58:42 120,448 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys
+ 2004-08-04 03:06:18 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys
+ 2008-04-14 02:18:33 286,720 ------w c:\windows\ServicePackFiles\i386\pdh.dll
+ 2008-04-13 16:11:06 20,480 ------w c:\windows\ServicePackFiles\i386\perfcounter.dll
+ 2008-04-14 02:18:33 41,984 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll
+ 2008-04-14 02:18:33 27,136 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll
+ 2008-04-14 02:19:08 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe
+ 2008-04-14 02:18:33 18,432 ------w c:\windows\ServicePackFiles\i386\perfnet.dll
+ 2008-04-14 02:18:33 26,112 ------w c:\windows\ServicePackFiles\i386\perfos.dll
+ 2008-04-14 02:18:33 35,328 ------w c:\windows\ServicePackFiles\i386\perfproc.dll
+ 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys
+ 2008-04-14 02:17:24 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll
+ 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys
+ 2008-04-14 02:17:24 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll
+ 2008-04-14 02:18:33 172,032 ------w c:\windows\ServicePackFiles\i386\photowiz.dll
+ 2008-04-14 02:18:33 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll
+ 2008-04-14 02:17:50 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll
+ 2008-04-14 02:19:08 284,160 ------w c:\windows\ServicePackFiles\i386\pinball.exe
+ 2008-04-14 02:19:08 19,456 ------w c:\windows\ServicePackFiles\i386\ping.exe
+ 2008-04-14 02:18:33 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll
+ 2008-04-14 02:18:33 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll
+ 2008-04-14 02:18:33 53,760 ------w c:\windows\ServicePackFiles\i386\plotui.dll
+ 2008-04-14 02:18:33 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll
+ 2008-04-14 02:18:33 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll
+ 2008-04-14 02:18:33 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
+ 2008-04-14 02:18:33 92,672 ------w c:\windows\ServicePackFiles\i386\policman.dll
+ 2008-04-14 02:18:33 105,984 ------w c:\windows\ServicePackFiles\i386\polstore.dll
+ 2008-04-13 19:19:41 146,048 ------w c:\windows\ServicePackFiles\i386\portcls.sys
+ 2008-04-14 02:19:08 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe
+ 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys
+ 2008-04-14 02:18:33 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll
+ 2008-04-13 18:41:00 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys
+ 2008-04-14 02:18:33 574,976 ------w c:\windows\ServicePackFiles\i386\printui.dll
+ 2008-04-14 01:50:16 40,064 ------w c:\windows\ServicePackFiles\i386\processr.sys
+ 2008-04-14 02:18:33 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll
+ 2008-04-14 02:19:08 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe
+ 2008-04-14 02:19:08 50,688 ------w c:\windows\ServicePackFiles\i386\proquota.exe
+ 2008-04-14 02:18:33 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll
+ 2008-04-14 02:19:08 9,728 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe
+ 2008-04-14 02:18:33 728,576 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll
+ 2008-04-14 02:18:33 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll
+ 2008-04-14 02:18:33 98,304 ------w c:\windows\ServicePackFiles\i386\psbase.dll
+ 2008-04-13 18:56:38 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys
+ 2008-04-14 02:18:33 543,232 ------w c:\windows\ServicePackFiles\i386\pscript5.dll
+ 2008-04-14 02:18:33 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll
+ 2008-04-14 02:18:33 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll
+ 2008-04-14 02:18:33 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll
+ 2008-04-14 02:18:33 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll
+ 2008-04-14 02:18:33 7,680 ------w c:\windows\ServicePackFiles\i386\pwsdata.dll
+ 2008-04-14 02:18:33 150,528 ------w c:\windows\ServicePackFiles\i386\qagent.dll
+ 2008-04-14 02:18:33 293,888 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll
+ 2008-04-14 02:18:33 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll
+ 2008-04-14 02:18:33 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll
+ 2008-04-14 02:18:33 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll
+ 2008-04-14 02:18:33 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll
+ 2008-04-14 02:18:33 387,072 ------w c:\windows\ServicePackFiles\i386\qdvd.dll
+ 2008-04-14 02:18:33 563,200 ------w c:\windows\ServicePackFiles\i386\qedit.dll
+ 2008-04-13 17:21:32 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll
+ 2008-04-13 18:40:52 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys
+ 2008-04-14 02:18:33 409,088 ------w c:\windows\ServicePackFiles\i386\qmgr.dll
+ 2008-04-14 02:18:33 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
+ 2008-04-14 02:19:08 20,480 ------w c:\windows\ServicePackFiles\i386\qprocess.exe
+ 2008-04-14 02:18:33 1,294,336 ------w c:\windows\ServicePackFiles\i386\quartz.dll
+ 2008-04-14 02:18:33 1,440,256 ------w c:\windows\ServicePackFiles\i386\query.dll
+ 2008-04-14 02:18:33 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll
+ 2008-04-14 02:18:33 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll
+ 2008-04-13 18:41:23 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys
+ 2008-04-14 02:18:33 7,680 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll
+ 2008-04-14 02:18:33 237,568 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll
+ 2008-04-14 02:18:33 88,576 ------w c:\windows\ServicePackFiles\i386\rasauto.dll
+ 2008-04-14 02:18:33 79,872 ------w c:\windows\ServicePackFiles\i386\raschap.dll
+ 2008-04-14 02:18:33 677,888 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll
+ 2008-04-13 19:19:43 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys
+ 2008-04-14 02:18:33 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll
+ 2008-04-14 02:18:34 186,368 ------w c:\windows\ServicePackFiles\i386\rasmans.dll
+ 2008-04-14 02:19:08 57,344 ------w c:\windows\ServicePackFiles\i386\rasphone.exe
+ 2008-04-14 02:18:34 210,944 ------w c:\windows\ServicePackFiles\i386\rasppp.dll
+ 2008-04-13 18:57:32 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys
+ 2008-04-13 19:19:48 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys
+ 2008-04-14 02:18:34 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll
+ 2008-04-14 02:18:34 16,384 ------w c:\windows\ServicePackFiles\i386\rassapi.dll
+ 2008-04-14 02:18:34 58,368 ------w c:\windows\ServicePackFiles\i386\rastapi.dll
+ 2008-04-14 02:18:34 150,528 ------w c:\windows\ServicePackFiles\i386\rastls.dll
+ 2008-04-14 02:18:34 102,912 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
+ 2008-04-14 02:19:08 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe
+ 2008-04-14 02:19:09 23,040 ------w c:\windows\ServicePackFiles\i386\rcp.exe
+ 2008-04-13 19:28:39 175,744 ------w c:\windows\ServicePackFiles\i386\rdbss.sys
+ 2008-04-14 02:18:34 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll
+ 2008-04-14 02:19:09 62,976 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe
+ 2008-04-14 02:19:44 92,424 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll
+ 2008-04-13 18:32:51 196,224 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys
+ 2008-04-14 02:18:34 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll
+ 2008-04-14 02:19:44 139,656 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys
+ 2008-04-14 02:19:44 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll
+ 2008-04-14 02:19:09 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe
+ 2008-04-14 02:19:09 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe
+ 2004-08-04 03:41:40 13,776 ------w c:\windows\ServicePackFiles\i386\recagent.sys
+ 2008-04-14 01:51:30 58,880 ------w c:\windows\ServicePackFiles\i386\redbook.sys
+ 2004-08-03 20:48:48 3,346 ------w c:\windows\ServicePackFiles\i386\redir.exe
+ 2008-04-14 02:19:09 52,224 ------w c:\windows\ServicePackFiles\i386\reg.exe
+ 2008-04-14 02:18:34 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll
+ 2007-06-27 12:57:33 28,672 ------w c:\windows\ServicePackFiles\i386\regasm.exe
+ 2007-06-27 12:57:36 32,768 ------w c:\windows\ServicePackFiles\i386\regcode.dll
+ 2008-04-14 02:19:09 152,064 ------w c:\windows\ServicePackFiles\i386\regedit.exe
+ 2008-04-14 02:18:34 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll
+ 2007-06-27 12:57:41 11,264 ------w c:\windows\ServicePackFiles\i386\regsvcs.exe
+ 2008-04-14 02:19:09 11,776 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe
+ 2008-04-14 02:18:34 401,408 ------w c:\windows\ServicePackFiles\i386\regwizc.dll
+ 2008-04-14 02:18:34 61,440 ------w c:\windows\ServicePackFiles\i386\remotepg.dll
+ 2008-04-14 02:18:34 178,176 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll
+ 2008-04-14 02:18:34 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll
+ 2008-04-14 02:19:09 15,360 ------w c:\windows\ServicePackFiles\i386\rexec.exe
+ 2008-04-13 18:46:32 59,136 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys
+ 2008-04-14 02:18:34 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll
+ 2008-04-14 02:18:34 124,416 ------w c:\windows\ServicePackFiles\i386\riafres.dll
+ 2008-04-14 02:18:34 12,288 ------w c:\windows\ServicePackFiles\i386\riafui1.dll
+ 2008-04-14 02:18:34 12,288 ------w c:\windows\ServicePackFiles\i386\riafui2.dll
+ 2008-04-14 02:18:34 433,664 ------w c:\windows\ServicePackFiles\i386\riched20.dll
+ 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys
+ 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismp.sys
+ 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys
+ 2008-04-14 01:52:07 79,360 ------w c:\windows\ServicePackFiles\i386\rocket.sys
+ 2008-04-14 02:18:34 4,096 ------w c:\windows\ServicePackFiles\i386\rpcref.dll
+ 2008-04-14 02:18:34 584,704 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll
+ 2008-04-14 02:18:34 399,360 ------w c:\windows\ServicePackFiles\i386\rpcss.dll
+ 2008-04-14 02:18:34 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll
+ 2008-04-13 17:37:57 208,384 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll
+ 2008-04-14 02:19:09 16,384 ------w c:\windows\ServicePackFiles\i386\rsh.exe
+ 2008-04-14 02:18:34 40,448 ------w c:\windows\ServicePackFiles\i386\rshx32.dll
+ 2008-04-14 02:18:34 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll
+ 2008-04-14 02:19:09 107,520 ------w c:\windows\ServicePackFiles\i386\rsnotify.exe
+ 2008-04-14 02:19:09 382,976 ------w c:\windows\ServicePackFiles\i386\rstrui.exe
+ 2008-04-14 02:18:34 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll
+ 2008-04-14 02:19:10 77,824 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe
+ 2008-04-14 02:18:34 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll
+ 2004-08-04 03:31:34 20,992 ------w c:\windows\ServicePackFiles\i386\rtl8139.sys
+ 2008-04-14 02:18:34 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll
+ 2008-04-14 02:19:10 33,280 ------w c:\windows\ServicePackFiles\i386\rundll32.exe
+ 2008-04-14 02:19:10 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe
+ 2008-04-14 02:18:34 28,160 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll
+ 2008-04-14 02:18:34 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll
+ 2008-04-14 02:18:34 28,160 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll
+ 2008-04-14 02:18:34 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll
+ 2008-04-14 02:18:34 9,728 ------w c:\windows\ServicePackFiles\i386\rwnh.dll
+ 2008-04-14 02:18:34 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll
+ 2004-08-04 03:29:52 166,912 ------w c:\windows\ServicePackFiles\i386\s3gnbm.sys
+ 2008-04-14 02:18:34 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll
+ 2008-04-14 02:18:34 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll
+ 2008-04-14 02:18:35 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll
+ 2008-04-14 02:18:35 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll
+ 2008-04-14 02:18:35 429,056 ------w c:\windows\ServicePackFiles\i386\samsrv.dll
+ 2008-04-14 02:18:35 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll
+ 2008-04-14 02:19:10 13,824 ------w c:\windows\ServicePackFiles\i386\savedump.exe
+ 2008-04-14 02:18:35 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll
+ 2008-04-14 02:18:35 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll
+ 2008-04-13 18:40:48 43,904 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys
+ 2008-04-14 02:18:35 70,656 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll
+ 2008-04-14 02:19:10 99,840 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe
+ 2004-08-03 20:31:44 169,984 ------w c:\windows\ServicePackFiles\i386\sccbase.dll
+ 2008-04-14 02:18:35 171,520 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll
+ 2008-04-14 02:18:35 185,856 ------w c:\windows\ServicePackFiles\i386\scecli.dll
+ 2008-04-14 02:18:35 325,120 ------w c:\windows\ServicePackFiles\i386\scesrv.dll
+ 2008-04-14 02:18:35 144,384 ------w c:\windows\ServicePackFiles\i386\schannel.dll
+ 2008-04-14 02:18:35 193,536 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll
+ 2008-04-14 02:18:35 22,016 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll
+ 2008-04-14 02:19:10 36,352 ------w c:\windows\ServicePackFiles\i386\scrcons.exe
+ 2008-04-14 02:18:35 217,088 ------w c:\windows\ServicePackFiles\i386\script.dll
+ 2008-04-14 02:18:35 200,704 ------w c:\windows\ServicePackFiles\i386\scripta.dll
+ 2008-04-14 02:19:18 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr
+ 2008-04-14 02:18:35 180,224 ------w c:\windows\ServicePackFiles\i386\scrobj.dll
+ 2008-04-14 02:18:35 172,032 ------w c:\windows\ServicePackFiles\i386\scrrun.dll
+ 2008-04-13 18:40:30 96,384 ------w c:\windows\ServicePackFiles\i386\scsiport.sys
+ 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys
+ 2008-04-14 02:19:10 128,000 ------w c:\windows\ServicePackFiles\i386\sctasks.exe
+ 2008-04-14 02:19:10 78,336 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe
+ 2008-04-13 18:36:44 79,232 ------w c:\windows\ServicePackFiles\i386\sdbus.sys
+ 2008-04-14 02:18:35 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll
+ 2007-11-13 10:25:53 20,480 ------w c:\windows\ServicePackFiles\i386\secdrv.sys
+ 2008-04-14 02:19:10 19,456 ------w c:\windows\ServicePackFiles\i386\secedit.exe
+ 2008-04-14 02:18:35 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll
+ 2006-12-31 12:57:08 4,569 ------w c:\windows\ServicePackFiles\i386\secupd.dat
+ 2008-04-14 02:18:35 56,320 ------w c:\windows\ServicePackFiles\i386\secur32.dll
+ 2008-04-14 02:18:35 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll
+ 2008-04-14 02:18:35 29,696 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll
+ 2008-04-14 02:18:35 55,296 ------w c:\windows\ServicePackFiles\i386\sendmail.dll
+ 2008-04-14 02:18:35 39,424 ------w c:\windows\ServicePackFiles\i386\sens.dll
+ 2008-04-14 02:18:35 7,168 ------w c:\windows\ServicePackFiles\i386\sensapi.dll
+ 2008-04-14 02:18:35 221,696 ------w c:\windows\ServicePackFiles\i386\seo.dll
+ 2008-04-13 18:40:12 15,744 ------w c:\windows\ServicePackFiles\i386\serenum.sys
+ 2008-04-14 01:53:17 65,792 ------w c:\windows\ServicePackFiles\i386\serial.sys
+ 2008-04-14 02:18:35 56,832 ------w c:\windows\ServicePackFiles\i386\servdeps.dll
+ 2008-04-14 02:19:10 109,056 ------w c:\windows\ServicePackFiles\i386\services.exe
+ 2008-04-14 02:19:10 143,360 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe
+ 2008-04-14 02:19:10 32,256 ------w c:\windows\ServicePackFiles\i386\sethc.exe
+ 2007-12-17 11:59:54 66,592 ------w c:\windows\ServicePackFiles\i386\setregni.exe
+ 2008-04-14 02:19:10 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe
+ 2008-04-14 02:19:10 73,728 ------w c:\windows\ServicePackFiles\i386\setup50.exe
+ 2008-04-14 12:48:36 1,000,960 ------w c:\windows\ServicePackFiles\i386\setupapi.dll
+ 2008-04-14 02:19:11 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe
+ 2008-04-14 02:18:35 101,888 ------w c:\windows\ServicePackFiles\i386\setupqry.dll
+ 2008-04-14 02:18:35 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll
+ 2008-04-14 02:18:35 141,824 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll
+ 2008-04-14 02:18:35 1,572,352 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll
+ 2008-04-13 18:40:47 11,904 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys
+ 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys
+ 2008-04-13 18:40:47 11,008 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys
+ 2008-04-13 18:40:48 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys
+ 2008-04-14 01:53:49 565,760 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll
+ 2008-04-14 02:18:36 1,499,648 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll
+ 2008-04-14 02:18:36 8,503,296 ------w c:\windows\ServicePackFiles\i386\shell32.dll
+ 2008-04-14 02:18:36 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll
+ 2008-04-14 02:18:36 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll
+ 2008-04-14 02:18:36 65,024 ------w c:\windows\ServicePackFiles\i386\shimeng.dll
+ 2008-04-14 02:18:36 440,320 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll
+ 2008-04-14 02:18:36 474,624 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll
+ 2008-04-14 02:19:11 45,056 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe
+ 2008-04-14 02:19:11 78,848 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe
+ 2008-04-14 02:18:36 28,160 ------w c:\windows\ServicePackFiles\i386\shscrap.dll
+ 2008-04-14 02:18:36 135,168 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll
+ 2008-04-14 02:18:36 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll
+ 2008-04-14 02:19:11 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe
+ 2008-04-14 02:19:11 19,968 ------w c:\windows\ServicePackFiles\i386\shutdown.exe
+ 2008-04-14 02:18:36 13,824 ------w c:\windows\ServicePackFiles\i386\sigtab.dll
+ 2008-04-14 02:19:11 71,168 ------w c:\windows\ServicePackFiles\i386\sigverif.exe
+ 2008-04-14 02:18:36 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll
+ 2008-04-13 18:36:39 40,960 ------w c:\windows\ServicePackFiles\i386\sisagp.sys
+ 2004-08-03 21:31:36 32,768 ------w c:\windows\ServicePackFiles\i386\sisnic.sys
+ 2008-04-14 02:19:11 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe
+ 2004-08-04 03:31:42 63,547 ------w c:\windows\ServicePackFiles\i386\sla30nd5.sys
+ 2008-04-14 02:18:36 25,600 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll
+ 2004-08-03 20:31:44 306,176 ------w c:\windows\ServicePackFiles\i386\slbcsp.dll
+ 2008-04-14 02:18:36 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll
+ 2008-04-14 02:18:36 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll
+ 2008-04-14 02:18:36 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll
+ 2008-04-14 02:18:36 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll
+ 2008-04-13 18:46:23 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys
+ 2004-08-04 03:41:42 129,535 ------w c:\windows\ServicePackFiles\i386\slnt7554.sys
+ 2004-08-04 03:41:44 404,990 ------w c:\windows\ServicePackFiles\i386\slntamr.sys
+ 2004-08-04 03:41:46 95,424 ------w c:\windows\ServicePackFiles\i386\slnthal.sys
+ 2008-04-14 02:19:11 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe
+ 2008-04-14 02:19:11 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe
+ 2004-08-04 03:41:46 13,240 ------w c:\windows\ServicePackFiles\i386\slwdmsup.sys
+ 2008-04-13 18:36:34 5,888 ------w c:\windows\ServicePackFiles\i386\smbali.sys
+ 2008-04-13 18:36:33 16,000 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys
+ 2008-04-13 18:36:33 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys
+ 2008-04-14 02:19:11 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe
+ 2008-04-14 02:19:11 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe
+ 2008-04-14 02:18:36 368,640 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll
+ 2008-04-14 02:19:11 92,160 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe
+ 2008-04-14 02:19:11 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe
+ 2008-04-14 02:18:36 189,952 ------w c:\windows\ServicePackFiles\i386\smtpadm.dll
+ 2008-04-14 02:18:36 10,752 ------w c:\windows\ServicePackFiles\i386\smtpapi.dll
+ 2008-04-14 02:18:36 2,134,528 ------w c:\windows\ServicePackFiles\i386\smtpsnap.dll
+ 2008-04-14 02:18:36 464,896 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll
+ 2008-04-14 02:19:12 132,608 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe
+ 2008-04-14 02:18:36 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll
+ 2008-04-14 02:19:12 33,280 ------w c:\windows\ServicePackFiles\i386\snmp.exe
+ 2008-04-14 02:18:36 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll
+ 2008-04-14 02:18:36 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll
+ 2008-04-14 02:18:36 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll
+ 2008-04-14 02:18:36 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll
+ 2008-04-14 02:18:36 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll
+ 2008-04-14 02:18:36 183,808 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll
+ 2008-04-14 02:18:36 39,936 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll
+ 2008-04-14 02:19:12 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe
+ 2008-04-14 02:18:36 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll
+ 2008-04-13 18:40:52 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys
+ 2008-04-13 18:46:07 25,344 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys
+ 2008-04-14 02:19:12 25,088 ------w c:\windows\ServicePackFiles\i386\sort.exe
+ 2008-04-14 02:19:12 7,680 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
+ 2008-04-13 16:43:18 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll
+ 2008-04-14 02:19:12 539,136 ------w c:\windows\ServicePackFiles\i386\spider.exe
+ 2008-04-13 18:43:31 12,800 ------w c:\windows\ServicePackFiles\i386\spiisupd.exe
+ 2008-04-13 18:45:07 6,272 ------w c:\windows\ServicePackFiles\i386\splitter.sys
+ 2008-04-14 12:49:14 11,264 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe
+ 2008-04-14 02:18:36 75,264 ------w c:\windows\ServicePackFiles\i386\spoolss.dll
+ 2008-04-14 02:19:12 57,856 ------w c:\windows\ServicePackFiles\i386\spoolsv.exe
+ 2008-04-13 18:35:09 196,096 ------w c:\windows\ServicePackFiles\i386\spra0403.dll
+ 2008-04-13 18:35:11 196,096 ------w c:\windows\ServicePackFiles\i386\sprs0c0a.dll
+ 2008-04-13 18:36:24 2,966,528 ------w c:\windows\ServicePackFiles\i386\sprt0c0a.dll
+ 2008-04-13 18:39:11 764,416 ------w c:\windows\ServicePackFiles\i386\spru0c0a.dll
+ 2008-04-14 02:18:43 272,384 ------w c:\windows\ServicePackFiles\i386\sptip.dll
+ 2008-04-14 02:19:12 20,992 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe
+ 2008-04-14 02:18:43 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll
+ 2008-04-14 02:18:43 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll
+ 2008-04-14 02:18:43 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll
+ 2008-04-14 02:18:43 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll
+ 2008-04-14 02:18:43 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
+ 2008-04-14 02:18:43 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll
+ 2008-04-14 02:18:43 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
+ 2008-04-14 01:58:43 73,472 ------w c:\windows\ServicePackFiles\i386\sr.sys
+ 2008-04-14 02:18:43 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll
+ 2008-04-14 02:18:43 727,102 ------w c:\windows\ServicePackFiles\i386\srchui.dll
+ 2008-04-14 02:18:43 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll
+ 2008-04-14 02:18:44 241,152 ------w c:\windows\ServicePackFiles\i386\srrstr.dll
+ 2008-04-14 02:18:44 171,520 ------w c:\windows\ServicePackFiles\i386\srsvc.dll
+ 2008-04-13 19:15:11 334,848 ------w c:\windows\ServicePackFiles\i386\srv.sys
+ 2008-04-14 02:18:44 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll
+ 2008-04-14 02:19:18 708,608 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr
+ 2008-04-14 02:19:18 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr
+ 2008-04-14 02:18:44 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll
+ 2008-04-14 02:18:44 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
+ 2008-04-14 02:19:19 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr
+ 2008-04-14 02:18:44 45,568 ------w c:\windows\ServicePackFiles\i386\ssinc51.dll
+ 2008-04-14 02:19:19 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr
+ 2008-04-14 02:19:19 47,616 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr
+ 2008-04-14 02:19:19 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr
+ 2008-04-14 02:18:44 46,592 ------w c:\windows\ServicePackFiles\i386\sspifilt.dll
+ 2008-04-14 02:19:19 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr
+ 2008-04-14 02:19:19 14,848 ------w c:\windows\ServicePackFiles\i386\ssstars.scr
+ 2008-04-14 02:19:19 684,032 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr
+ 2008-04-14 02:18:44 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll
+ 2008-04-14 02:18:44 8,192 ------w c:\windows\ServicePackFiles\i386\staxmem.dll
+ 2008-04-14 02:18:44 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll
+ 2008-04-14 02:18:44 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll
+ 2008-04-14 02:18:44 68,608 ------w c:\windows\ServicePackFiles\i386\sti.dll
+ 2008-04-14 02:18:44 137,728 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll
+ 2008-04-14 02:19:12 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe
+ 2008-04-14 02:18:44 122,368 ------w c:\windows\ServicePackFiles\i386\stobject.dll
+ 2008-04-14 02:18:44 76,288 ------w c:\windows\ServicePackFiles\i386\storprop.dll
+ 2008-04-13 18:45:15 49,408 ------w c:\windows\ServicePackFiles\i386\stream.sys
+ 2008-04-13 18:46:21 15,232 ------w c:\windows\ServicePackFiles\i386\streamip.sys
+ 2008-04-14 02:18:44 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll
+ 2008-04-14 02:19:12 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
+ 2008-04-14 02:19:12 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
+ 2008-04-14 02:18:44 47,104 ------w c:\windows\ServicePackFiles\i386\svcext51.dll
+ 2008-04-14 02:19:12 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe
+ 2008-04-13 18:39:53 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys
+ 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys
+ 2008-04-14 02:18:44 715,776 ------w c:\windows\ServicePackFiles\i386\sxs.dll
+ 2007-12-17 11:59:56 1,179,648 ------w c:\windows\ServicePackFiles\i386\sy52106.dll
+ 2008-04-14 02:18:44 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll
+ 2008-04-14 02:18:44 195,072 ------w c:\windows\ServicePackFiles\i386\syncui.dll
+ 2008-04-13 19:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys
+ 2008-04-14 02:19:12 73,728 ------w c:\windows\ServicePackFiles\i386\sysinfo.exe
+ 2008-04-14 02:18:44 193,536 ------w c:\windows\ServicePackFiles\i386\sysmod.dll
+ 2008-04-14 02:18:44 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll
+ 2008-04-14 02:19:13 107,520 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe
+ 2008-04-14 02:18:44 1,009,664 ------w c:\windows\ServicePackFiles\i386\syssetup.dll
+ 2007-06-27 12:57:55 77,824 ------w c:\windows\ServicePackFiles\i386\system.configuration.install.dll
+ 2007-06-27 12:58:00 1,179,648 ------w c:\windows\ServicePackFiles\i386\system.data.dll
+ 2007-06-27 12:58:10 1,695,744 ------w c:\windows\ServicePackFiles\i386\system.design.dll
+ 2007-06-27 12:58:18 86,016 ------w c:\windows\ServicePackFiles\i386\system.directoryservices.dll
+ 2007-06-27 12:58:21 65,536 ------w c:\windows\ServicePackFiles\i386\system.drawing.design.dll
+ 2007-06-27 12:58:26 462,848 ------w c:\windows\ServicePackFiles\i386\system.drawing.dll
+ 2007-06-27 12:58:31 212,992 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll
+ 2008-04-13 16:11:22 48,640 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
+ 2007-06-27 12:58:39 352,256 ------w c:\windows\ServicePackFiles\i386\system.management.dll
+ 2007-06-27 12:58:43 241,664 ------w c:\windows\ServicePackFiles\i386\system.messaging.dll
+ 2007-06-27 12:58:55 311,296 ------w c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll
+ 2007-06-27 12:59:02 131,072 ------w c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
+ 2007-06-27 12:59:05 77,824 ------w c:\windows\ServicePackFiles\i386\system.security.dll
+ 2007-06-27 12:59:10 126,976 ------w c:\windows\ServicePackFiles\i386\system.serviceprocess.dll
+ 2007-12-17 12:00:01 1,200,128 ------w c:\windows\ServicePackFiles\i386\system.web.dll
+ 2007-06-27 12:59:21 61,440 ------w c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
+ 2007-06-27 12:59:25 507,904 ------w c:\windows\ServicePackFiles\i386\system.web.services.dll
+ 2007-06-27 12:59:34 2,002,944 ------w c:\windows\ServicePackFiles\i386\system.windows.forms.dll
+ 2007-06-27 12:59:48 1,302,528 ------w c:\windows\ServicePackFiles\i386\system.xml.dll
+ 2008-04-14 02:18:44 117,760 ------w c:\windows\ServicePackFiles\i386\t2embed.dll
+ 2008-04-14 02:18:44 34,304 ------w c:\windows\ServicePackFiles\i386\tabletoc.dll
+ 2008-04-13 18:40:50 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys
+ 2008-04-14 02:18:44 860,160 ------w c:\windows\ServicePackFiles\i386\tapi3.dll
+ 2008-04-14 02:18:44 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll
+ 2008-04-14 02:18:44 249,856 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll
+ 2008-04-14 02:19:13 78,848 ------w c:\windows\ServicePackFiles\i386\taskkill.exe
+ 2008-04-14 02:19:13 79,872 ------w c:\windows\ServicePackFiles\i386\tasklist.exe
+ 2008-04-14 02:19:13 141,312 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe
+ 2008-04-13 19:20:16 361,344 ------w c:\windows\ServicePackFiles\i386\tcpip.sys
+ 2008-04-13 19:00:02 225,664 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys
+ 2008-04-14 02:18:44 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll
+ 2008-04-14 02:18:44 46,592 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll
+ 2008-04-14 02:18:44 46,592 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll
+ 2008-04-14 02:19:13 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe
+ 2003-04-15 02:14:58 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll
+ 2008-04-13 19:00:05 19,072 ------w c:\windows\ServicePackFiles\i386\tdi.sys
+ 2008-04-14 02:19:42 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys
+ 2008-04-14 02:19:43 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys
+ 2008-04-14 02:19:13 77,824 ------w c:\windows\ServicePackFiles\i386\telnet.exe
+ 2008-04-14 02:19:42 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys
+ 2008-04-14 02:18:44 358,912 ------w c:\windows\ServicePackFiles\i386\termmgr.dll
+ 2008-04-14 02:18:44 296,960 ------w c:\windows\ServicePackFiles\i386\termsrv.dll
+ 2008-04-13 18:40:50 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys
+ 2008-04-14 02:18:44 390,656 ------w c:\windows\ServicePackFiles\i386\themeui.dll
+ 2008-04-14 02:19:13 63,488 ------w c:\windows\ServicePackFiles\i386\tlntadmn.exe
+ 2008-04-14 02:19:13 79,360 ------w c:\windows\ServicePackFiles\i386\tlntsess.exe
+ 2008-04-14 02:19:13 74,240 ------w c:\windows\ServicePackFiles\i386\tlntsvr.exe
+ 2008-04-14 02:18:44 7,168 ------w c:\windows\ServicePackFiles\i386\tlntsvrp.dll
+ 2007-12-17 12:00:05 66,592 ------w c:\windows\ServicePackFiles\i386\togac.exe
+ 2008-04-14 02:18:44 33,792 ------w c:\windows\ServicePackFiles\i386\tools.dll
+ 2008-04-14 02:19:13 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe
+ 2008-04-14 02:19:13 82,944 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe
+ 2008-04-14 02:19:13 260,608 ------w c:\windows\ServicePackFiles\i386\tracerpt.exe
+ 2008-04-14 02:19:14 13,312 ------w c:\windows\ServicePackFiles\i386\tracert.exe
+ 2008-04-14 02:19:18 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com
+ 2008-04-14 02:18:44 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll
+ 2008-04-14 02:18:44 90,112 ------w c:\windows\ServicePackFiles\i386\trkwks.dll
+ 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat
+ 2008-04-14 02:18:44 93,696 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
+ 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs
+ 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs
+ 2008-04-14 02:18:06 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll
+ 2008-04-14 02:19:43 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll
+ 2008-04-14 02:18:44 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll
+ 2008-04-14 02:18:44 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll
+ 2008-04-14 02:18:44 131,584 ------w c:\windows\ServicePackFiles\i386\tsoc.dll
+ 2008-04-14 02:18:45 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll
+ 2008-04-14 02:18:45 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll
+ 2008-04-14 01:49:52 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll
+ 2008-04-14 02:18:45 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll
+ 2008-04-13 18:56:01 12,288 ------w c:\windows\ServicePackFiles\i386\tunmp.sys
+ 2008-04-14 02:18:45 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll
+ 2008-04-14 02:18:45 57,856 ------w c:\windows\ServicePackFiles\i386\twext.dll
+ 2008-04-14 02:18:45 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll
+ 2008-04-14 02:19:14 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe
+ 2008-04-13 18:36:40 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys
+ 2008-04-13 18:32:36 66,048 ------w c:\windows\ServicePackFiles\i386\udfs.sys
+ 2008-04-14 02:18:45 26,624 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll
+ 2008-04-14 02:18:45 103,936 ------w c:\windows\ServicePackFiles\i386\uihelper.dll
+ 2008-04-14 02:18:45 310,784 ------w c:\windows\ServicePackFiles\i386\ulib.dll
+ 2008-04-14 02:18:45 36,864 ------w c:\windows\ServicePackFiles\i386\umandlg.dll
+ 2008-04-14 02:18:45 124,416 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
+ 2008-04-14 02:18:45 373,248 ------w c:\windows\ServicePackFiles\i386\unidrv.dll
+ 2008-04-14 02:18:45 744,448 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll
+ 2008-04-14 02:18:45 78,848 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll
+ 2008-04-14 02:18:45 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll
+ 2007-05-15 08:08:53 761,344 ------w c:\windows\ServicePackFiles\i386\unires.dll
+ 2008-04-14 02:18:45 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll
+ 2008-04-13 18:39:46 384,768 ------w c:\windows\ServicePackFiles\i386\update.sys
+ 2008-04-14 02:19:14 151,040 ------w c:\windows\ServicePackFiles\i386\uploadm.exe
+ 2008-04-14 02:18:45 133,632 ------w c:\windows\ServicePackFiles\i386\upnp.dll
+ 2008-04-14 02:19:14 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe
+ 2008-04-14 02:18:45 186,368 ------w c:\windows\ServicePackFiles\i386\upnphost.dll
+ 2008-04-14 02:18:45 240,128 ------w c:\windows\ServicePackFiles\i386\upnpui.dll
+ 2008-04-14 02:19:14 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe
+ 2008-04-14 02:18:45 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll
+ 2008-04-14 02:18:45 620,544 ------w c:\windows\ServicePackFiles\i386\urlmon.dll
+ 2004-08-19 20:27:08 32,384 ------w c:\windows\ServicePackFiles\i386\usb101et.sys
+ 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023.sys
+ 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys
+ 2008-04-13 18:45:12 60,032 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys
+ 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys
+ 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys
+ 2008-04-13 18:45:39 32,128 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys
+ 2008-04-13 18:45:35 30,208 ------w c:\windows\ServicePackFiles\i386\usbehci.sys
+ 2008-04-13 18:45:37 59,520 ------w c:\windows\ServicePackFiles\i386\usbhub.sys
+ 2008-04-13 18:45:43 15,872 ------w c:\windows\ServicePackFiles\i386\usbintel.sys
+ 2008-04-14 02:18:45 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll
+ 2008-04-13 18:45:35 17,152 ------w c:\windows\ServicePackFiles\i386\usbohci.sys
+ 2008-04-13 18:45:36 143,872 ------w c:\windows\ServicePackFiles\i386\usbport.sys
+ 2008-04-13 18:47:37 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys
+ 2008-04-13 18:45:34 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys
+ 2008-04-13 18:45:36 26,112 ------w c:\windows\ServicePackFiles\i386\usbser.sys
+ 2008-04-13 18:45:38 26,368 ------w c:\windows\ServicePackFiles\i386\usbstor.sys
+ 2008-04-13 18:45:35 20,608 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys
+ 2008-04-14 02:18:45 77,824 ------w c:\windows\ServicePackFiles\i386\usbui.dll
+ 2008-04-13 18:46:20 121,984 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys
+ 2008-04-14 02:18:45 579,584 ------w c:\windows\ServicePackFiles\i386\user32.dll
+ 2008-04-14 02:18:45 733,184 ------w c:\windows\ServicePackFiles\i386\userenv.dll
+ 2008-04-14 02:19:14 26,624 ------w c:\windows\ServicePackFiles\i386\userinit.exe
+ 2008-04-14 02:18:45 406,016 ------w c:\windows\ServicePackFiles\i386\usp10.dll
+ 2008-04-14 02:19:14 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe
+ 2008-04-14 02:18:45 220,160 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll
+ 2008-04-14 02:18:45 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll
+ 2007-06-27 12:59:58 716,800 ------w c:\windows\ServicePackFiles\i386\vbc.exe
+ 2008-04-13 16:11:44 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll
+ 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll
+ 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.dll
+ 2008-04-13 16:11:45 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.es.dll
+ 2008-04-13 16:11:45 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll
+ 2008-04-13 16:11:45 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll
+ 2008-04-13 16:11:45 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.it.dll
+ 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll
+ 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll
+ 2008-04-14 02:18:45 434,176 ------w c:\windows\ServicePackFiles\i386\vbscript.dll
+ 2008-04-14 02:18:45 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll
+ 2008-04-14 02:18:45 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll
+ 2008-04-14 02:18:45 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll
+ 2008-04-14 02:19:14 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe
+ 2008-04-14 02:18:45 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll
+ 2008-04-14 02:18:45 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll
+ 2008-04-14 02:18:45 54,784 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
+ 2008-04-13 18:44:40 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys
+ 2008-04-14 02:18:45 851,968 ------w c:\windows\ServicePackFiles\i386\vgx.dll
+ 2008-04-13 18:36:40 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys
+ 2008-04-13 18:40:31 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys
+ 2008-04-13 18:44:40 81,664 ------w c:\windows\ServicePackFiles\i386\videoprt.sys
+ 2008-04-14 02:18:45 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll
+ 2008-04-14 01:51:16 53,248 ------w c:\windows\ServicePackFiles\i386\volsnap.sys
+ 2008-04-13 16:11:47 999,424 ------w c:\windows\ServicePackFiles\i386\vsavb7rt.dll
+ 2008-04-14 02:18:45 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll
+ 2008-04-14 02:19:14 293,888 ------w c:\windows\ServicePackFiles\i386\vssvc.exe
+ 2008-04-14 02:18:45 177,152 ------w c:\windows\ServicePackFiles\i386\w32time.dll
+ 2008-04-14 02:18:45 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll
+ 2008-04-14 02:18:45 368,640 ------w c:\windows\ServicePackFiles\i386\w3svc.dll
+ 2008-04-14 02:18:45 495,616 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll
+ 2008-04-14 02:19:14 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe
+ 2008-04-14 02:18:45 510,976 ------w c:\windows\ServicePackFiles\i386\wab32.dll
+ 2008-04-14 01:51:26 261,632 ------w c:\windows\ServicePackFiles\i386\wab32res.dll
+ 2008-04-14 02:18:45 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll
+ 2008-04-14 02:18:45 85,504 ------w c:\windows\ServicePackFiles\i386\wabimp.dll
+ 2008-04-14 02:19:14 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe
+ 2008-04-13 18:43:55 14,208 ------w c:\windows\ServicePackFiles\i386\wacompen.sys
+ 2004-08-04 03:29:38 12,415 ------w c:\windows\ServicePackFiles\i386\wadv01nt.sys
+ 2004-08-04 03:29:38 12,127 ------w c:\windows\ServicePackFiles\i386\wadv02nt.sys
+ 2004-08-04 03:29:38 11,775 ------w c:\windows\ServicePackFiles\i386\wadv05nt.sys
+ 2004-08-04 03:29:40 11,807 ------w c:\windows\ServicePackFiles\i386\wadv07nt.sys
+ 2004-08-04 03:29:40 11,295 ------w c:\windows\ServicePackFiles\i386\wadv08nt.sys
+ 2004-08-04 03:29:42 11,871 ------w c:\windows\ServicePackFiles\i386\wadv09nt.sys
+ 2004-08-04 03:29:42 11,935 ------w c:\windows\ServicePackFiles\i386\wadv11nt.sys
+ 2008-04-14 02:18:45 77,824 ------w c:\windows\ServicePackFiles\i386\wam51.dll
+ 2008-04-14 02:18:45 53,248 ------w c:\windows\ServicePackFiles\i386\wamreg51.dll
+ 2008-04-13 18:57:21 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys
+ 2008-04-13 18:44:59 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys
+ 2004-08-04 03:29:42 29,311 ------w c:\windows\ServicePackFiles\i386\watv01nt.sys
+ 2004-08-04 03:29:44 19,551 ------w c:\windows\ServicePackFiles\i386\watv02nt.sys
+ 2004-08-04 03:29:44 33,599 ------w c:\windows\ServicePackFiles\i386\watv04nt.sys
+ 2004-08-04 03:29:46 22,271 ------w c:\windows\ServicePackFiles\i386\watv06nt.sys
+ 2004-08-04 03:29:46 25,471 ------w c:\windows\ServicePackFiles\i386\watv10nt.sys
+ 2008-04-14 02:18:45 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll
+ 2008-04-14 02:18:45 200,192 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll
+ 2008-04-14 02:18:45 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll
+ 2008-04-14 02:18:46 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll
+ 2008-04-14 02:18:46 531,968 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll
+ 2008-04-14 02:18:46 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll
+ 2008-04-14 02:18:46 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll
+ 2008-04-14 02:18:46 44,032 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll
+ 2008-04-14 02:18:46 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll
+ 2008-04-14 02:18:46 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll
+ 2008-04-14 02:19:15 119,296 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe
+ 2008-04-14 02:18:46 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll
+ 2008-04-14 01:51:48 32,000 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys
+ 2004-08-04 03:29:46 23,615 ------w c:\windows\ServicePackFiles\i386\wch7xxnt.sys
+ 2008-04-14 02:18:46 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll
+ 2008-04-14 02:19:19 23,552 ------w c:\windows\ServicePackFiles\i386\wdmaud.drv
+ 2008-04-13 19:17:18 83,072 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys
+ 2008-04-14 02:18:46 280,576 ------w c:\windows\ServicePackFiles\i386\webcheck.dll
+ 2008-04-14 02:18:46 68,096 ------w c:\windows\ServicePackFiles\i386\webclnt.dll
+ 2008-04-14 02:18:46 136,192 ------w c:\windows\ServicePackFiles\i386\webvw.dll
+ 2008-04-14 02:19:15 66,560 ------w c:\windows\ServicePackFiles\i386\wextract.exe
+ 2008-04-14 02:19:15 435,200 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
+ 2008-04-14 02:18:46 461,312 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll
+ 2008-04-14 02:18:46 124,928 ------w c:\windows\ServicePackFiles\i386\wiadss.dll
+ 2008-04-14 02:18:46 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll
+ 2008-04-14 02:18:46 334,336 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll
+ 2008-04-14 02:18:46 592,384 ------w c:\windows\ServicePackFiles\i386\wiashext.dll
+ 2008-04-14 02:18:46 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll
+ 2008-04-14 02:18:46 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll
+ 2008-04-14 02:18:46 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll
+ 2008-04-14 01:52:22 1,845,760 ------w c:\windows\ServicePackFiles\i386\win32k.sys
+ 2008-04-14 02:18:46 102,912 ------w c:\windows\ServicePackFiles\i386\win32spl.dll
+ 2008-04-13 16:48:53 1,647,616 ------w c:\windows\ServicePackFiles\i386\winbrand.dll
+ 2008-04-14 02:19:15 286,720 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe
+ 2008-04-14 02:18:46 354,304 ------w c:\windows\ServicePackFiles\i386\winhttp.dll
+ 2008-04-14 02:18:46 668,672 ------w c:\windows\ServicePackFiles\i386\wininet.dll
+ 2008-04-14 02:18:46 32,256 ------w c:\windows\ServicePackFiles\i386\winipsec.dll
+ 2008-04-14 02:19:15 510,976 ------w c:\windows\ServicePackFiles\i386\winlogon.exe
+ 2008-04-14 02:18:46 180,224 ------w c:\windows\ServicePackFiles\i386\winmm.dll
+ 2004-08-03 20:51:20 5,120 ------w c:\windows\ServicePackFiles\i386\winnls.dll
+ 2008-04-14 02:17:52 763,904 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll
+ 2008-04-14 02:18:46 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll
+ 2008-04-14 02:18:46 100,352 ------w c:\windows\ServicePackFiles\i386\winscard.dll
+ 2008-04-14 02:18:46 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll
+ 2008-04-14 02:19:19 146,944 ------w c:\windows\ServicePackFiles\i386\winspool.drv
+ 2008-04-14 02:18:46 293,888 ------w c:\windows\ServicePackFiles\i386\winsrv.dll
+ 2008-04-14 02:18:46 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll
+ 2008-04-14 02:18:46 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll
+ 2008-04-14 02:19:16 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe
+ 2008-04-14 02:18:46 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll
+ 2008-04-14 02:18:46 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll
+ 2008-04-14 02:18:46 172,544 ------w c:\windows\ServicePackFiles\i386\wldap32.dll
+ 2004-08-04 03:31:28 154,624 ------w c:\windows\ServicePackFiles\i386\wlluc48.sys
+ 2008-04-14 02:18:46 93,696 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll
+ 2008-04-14 02:17:54 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll
+ 2008-04-13 18:36:38 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys
+ 2008-04-14 02:19:16 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe
+ 2008-04-14 01:53:21 7,680 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll
+ 2008-04-14 02:18:46 88,576 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
+ 2008-04-14 02:19:16 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
+ 2008-04-14 02:19:16 366,592 ------w c:\windows\ServicePackFiles\i386\wmic.exe
+ 2008-04-14 02:18:46 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll
+ 2008-04-14 02:18:46 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll
+ 2008-04-14 02:18:46 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll
+ 2008-04-14 02:18:46 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll
+ 2008-04-14 02:18:46 61,952 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll
+ 2008-04-14 02:18:46 62,464 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll
+ 2008-04-14 02:18:46 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll
+ 2008-04-14 02:18:47 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
+ 2008-04-14 02:19:16 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe
+ 2008-04-14 02:18:47 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll
+ 2008-04-14 02:18:47 145,408 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll
+ 2008-04-14 02:18:47 98,816 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll
+ 2008-04-14 02:18:47 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll
+ 2008-04-14 02:18:47 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll
+ 2008-04-14 02:18:47 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll
+ 2008-04-14 02:18:47 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll
+ 2008-04-14 02:18:47 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
+ 2008-04-14 02:18:47 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
+ 2008-04-14 02:18:47 4,283,392 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll
+ 2008-04-14 02:18:47 6,144 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll
+ 2008-04-14 02:18:47 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll
+ 2008-04-14 02:19:16 218,112 ------w c:\windows\ServicePackFiles\i386\wordpad.exe
+ 2008-04-14 02:18:47 265,216 ------w c:\windows\ServicePackFiles\i386\wow32.dll
+ 2008-04-14 02:19:17 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe
+ 2008-04-14 02:19:17 11,776 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe
+ 2008-04-14 02:18:47 82,432 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll
+ 2008-04-14 02:18:47 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll
+ 2008-04-14 02:19:17 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe
+ 2008-04-14 02:19:17 155,648 ------w c:\windows\ServicePackFiles\i386\wscript.exe
+ 2008-04-14 02:18:47 80,896 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll
+ 2008-04-14 02:18:47 618,496 ------w c:\windows\ServicePackFiles\i386\wsecedit.dll
+ 2008-04-14 02:18:47 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll
+ 2008-04-14 02:18:47 36,864 ------w c:\windows\ServicePackFiles\i386\wshcon.dll
+ 2008-04-14 02:18:47 90,112 ------w c:\windows\ServicePackFiles\i386\wshext.dll
+ 2008-04-14 02:18:47 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll
+ 2008-04-14 02:18:47 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll
+ 2008-04-14 02:18:47 11,264 ------w c:\windows\ServicePackFiles\i386\wshrm.dll
+ 2008-04-14 02:18:47 19,456 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll
+ 2004-08-04 03:29:48 12,063 ------w c:\windows\ServicePackFiles\i386\wsiintxx.sys
+ 2008-04-14 02:18:47 41,984 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll
+ 2008-04-14 02:18:47 25,600 ------w c:\windows\ServicePackFiles\i386\wsock32.dll
+ 2008-04-13 18:46:24 19,200 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys
+ 2008-04-14 02:18:47 51,200 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll
+ 2008-04-14 02:18:47 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll
+ 2008-04-14 02:18:47 431,616 ------w c:\windows\ServicePackFiles\i386\wuapi.dll
+ 2008-04-14 02:19:17 112,128 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe
+ 2008-04-14 02:19:17 168,960 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe
+ 2008-04-14 02:18:48 1,135,616 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll
+ 2008-04-14 02:18:48 184,320 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll
+ 2008-04-14 02:18:48 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll
+ 2008-04-14 02:18:48 113,664 ------w c:\windows\ServicePackFiles\i386\wucltui.dll
+ 2008-04-14 02:18:48 32,256 ------w c:\windows\ServicePackFiles\i386\wups.dll
+ 2008-04-14 02:18:48 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll
+ 2004-08-04 03:29:50 19,455 ------w c:\windows\ServicePackFiles\i386\wvchntxx.sys
+ 2008-04-14 02:18:48 384,000 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll
+ 2008-04-14 02:18:48 52,736 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll
+ 2008-04-14 02:18:48 484,352 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll
+ 2008-04-14 02:18:48 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll
+ 2008-04-14 02:19:17 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe
+ 2004-07-17 09:39:02 177,272 ------w c:\windows\ServicePackFiles\i386\xenroll.dll
+ 2008-04-14 02:18:48 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll
+ 2008-04-14 02:18:48 129,024 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll
+ 2008-04-14 02:18:48 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll
+ 2008-04-14 02:18:48 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll
+ 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe
+ 2008-04-14 02:18:48 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll
+ 2008-04-14 02:18:48 116,736 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
+ 2008-04-14 02:18:48 340,480 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll
+ 2008-04-14 02:18:20 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
+ 2008-04-14 02:18:26 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
+ 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
+ 2008-04-14 02:19:04 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
+ 2008-04-14 02:19:11 32,866 ------w c:\windows\slrundll.exe
- 2004-08-19 13:42:16 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
+ 2008-04-14 02:18:26 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
- 2004-08-19 13:42:26 58,434 ----a-w c:\windows\srchasst\srchctls.dll
+ 2008-04-14 02:18:43 58,434 ----a-w c:\windows\srchasst\srchctls.dll
- 2004-08-19 13:42:28 726,590 ----a-w c:\windows\srchasst\srchui.dll
+ 2008-04-14 02:18:43 727,102 ----a-w c:\windows\srchasst\srchui.dll
- 2004-08-19 13:43:26 146,944 ----a-w c:\windows\system\WINSPOOL.DRV
+ 2008-04-14 02:19:19 146,944 ----a-w c:\windows\system\winspool.drv
- 2006-08-16 11:59:05 100,352 ----a-w c:\windows\system32\6to4svc.dll
+ 2008-04-14 02:18:18 100,352 ----a-w c:\windows\system32\6to4svc.dll
+ 2008-04-14 02:18:18 136,192 ------w c:\windows\system32\aaclient.dll
- 2004-08-19 13:42:36 188,416 ----a-w c:\windows\system32\accwiz.exe
+ 2008-04-14 02:18:49 188,928 ----a-w c:\windows\system32\accwiz.exe
- 2004-08-19 13:41:40 117,248 ----a-w c:\windows\system32\aclui.dll
+ 2008-04-14 02:18:18 118,272 ----a-w c:\windows\system32\aclui.dll
- 2004-08-19 13:41:40 194,048 ----a-w c:\windows\system32\activeds.dll
+ 2008-04-14 02:18:18 193,536 ----a-w c:\windows\system32\activeds.dll
- 2004-08-19 13:42:36 4,096 ----a-w c:\windows\system32\actmovie.exe
+ 2008-04-14 02:18:49 4,096 ----a-w c:\windows\system32\actmovie.exe
- 2004-08-19 13:41:42 101,888 ----a-w c:\windows\system32\actxprxy.dll
+ 2008-04-14 02:18:18 98,304 ----a-w c:\windows\system32\actxprxy.dll
- 2004-08-19 13:41:42 61,440 ----a-w c:\windows\system32\admparse.dll
+ 2007-08-13 22:39:20 71,680 ----a-w c:\windows\system32\admparse.dll
- 2004-08-19 13:41:42 175,616 ----a-w c:\windows\system32\adsldp.dll
+ 2008-04-14 02:18:18 175,616 ----a-w c:\windows\system32\adsldp.dll
- 2004-08-19 13:41:42 143,360 ----a-w c:\windows\system32\adsldpc.dll
+ 2008-04-14 02:18:18 143,360 ----a-w c:\windows\system32\adsldpc.dll
- 2004-08-19 13:41:42 68,096 ----a-w c:\windows\system32\adsmsext.dll
+ 2008-04-14 02:18:18 68,096 ----a-w c:\windows\system32\adsmsext.dll
- 2004-08-19 13:41:42 263,680 ----a-w c:\windows\system32\adsnt.dll
+ 2008-04-14 02:18:18 263,680 ----a-w c:\windows\system32\adsnt.dll
- 2002-09-10 12:00:00 109,568 ----a-w c:\windows\system32\adsnw.dll
+ 2008-04-14 02:18:18 123,392 ----a-w c:\windows\system32\adsnw.dll
- 2004-08-19 13:41:42 684,544 ----a-w c:\windows\system32\advapi32.dll
+ 2008-04-14 02:18:18 685,056 ----a-w c:\windows\system32\advapi32.dll
- 2004-08-19 13:41:42 101,376 ----a-w c:\windows\system32\advpack.dll
+ 2007-08-13 22:39:00 123,904 ----a-w c:\windows\system32\advpack.dll
- 2004-08-19 13:42:36 98,304 ----a-w c:\windows\system32\ahui.exe
+ 2008-04-14 02:18:49 98,304 ----a-w c:\windows\system32\ahui.exe
- 2004-08-19 13:42:36 44,544 ----a-w c:\windows\system32\alg.exe
+ 2008-04-14 02:18:49 44,544 ----a-w c:\windows\system32\alg.exe
- 2004-08-19 13:41:44 17,408 ----a-w c:\windows\system32\alrsvc.dll
+ 2008-04-14 02:18:19 17,408 ----a-w c:\windows\system32\alrsvc.dll
- 2004-08-19 13:41:44 70,656 ----a-w c:\windows\system32\amstream.dll
+ 2008-04-14 02:18:19 70,656 ----a-w c:\windows\system32\amstream.dll
- 2004-08-19 13:41:44 126,976 ----a-w c:\windows\system32\apphelp.dll
+ 2008-04-14 02:18:19 125,952 ----a-w c:\windows\system32\apphelp.dll
- 2004-08-19 13:41:44 175,104 ----a-w c:\windows\system32\appmgmts.dll
+ 2008-04-14 02:18:19 175,104 ----a-w c:\windows\system32\appmgmts.dll
- 2004-08-19 13:41:44 300,032 ----a-w c:\windows\system32\appmgr.dll
+ 2008-04-14 02:18:19 300,032 ----a-w c:\windows\system32\appmgr.dll
- 2004-08-19 13:38:16 8,704 ----a-w c:\windows\system32\asferror.dll
+ 2008-04-14 01:50:00 8,704 ----a-w c:\windows\system32\asferror.dll
- 2004-08-19 13:42:36 30,720 ----a-w c:\windows\system32\asr_fmt.exe
+ 2008-04-14 02:18:49 30,720 ----a-w c:\windows\system32\asr_fmt.exe
- 2004-08-19 13:42:36 32,768 ----a-w c:\windows\system32\asr_pfu.exe
+ 2008-04-14 02:18:49 32,768 ----a-w c:\windows\system32\asr_pfu.exe
- 2004-08-19 13:41:46 65,024 ----a-w c:\windows\system32\asycfilt.dll
+ 2008-04-14 02:18:19 65,024 ----a-w c:\windows\system32\asycfilt.dll
- 2004-08-19 13:42:36 25,600 ----a-w c:\windows\system32\at.exe
+ 2008-04-14 02:18:49 25,600 ----a-w c:\windows\system32\at.exe
- 2004-08-19 14:41:46 229,376 ----a-w c:\windows\system32\ati2cqag.dll
+ 2008-04-14 02:18:19 229,376 ----a-w c:\windows\system32\ati2cqag.dll
+ 2008-04-14 02:18:19 377,984 ------w c:\windows\system32\ati2dvaa.dll
- 2004-08-19 14:41:46 201,728 ----a-w c:\windows\system32\ati2dvag.dll
+ 2008-04-14 02:18:19 201,728 ----a-w c:\windows\system32\ati2dvag.dll
- 2004-08-19 14:41:46 870,784 ----a-w c:\windows\system32\ati3d1ag.dll
+ 2008-04-14 02:18:19 870,784 ----a-w c:\windows\system32\ati3d1ag.dll
- 2004-08-19 14:41:46 1,888,992 ----a-w c:\windows\system32\ati3duag.dll
+ 2008-04-14 02:18:19 1,888,992 ----a-w c:\windows\system32\ati3duag.dll
+ 2008-04-14 02:18:19 32,768 ------w c:\windows\system32\ativtmxx.dll
- 2004-08-19 14:41:46 516,768 ----a-w c:\windows\system32\ativvaxx.dll
+ 2008-04-14 02:18:19 516,768 ----a-w c:\windows\system32\ativvaxx.dll
- 2004-08-19 13:41:46 58,880 ----a-w c:\windows\system32\atl.dll
+ 2008-04-14 02:18:19 58,880 ----a-w c:\windows\system32\atl.dll
- 2004-08-19 13:42:36 11,264 ----a-w c:\windows\system32\atmadm.exe
+ 2008-04-14 02:18:49 11,264 ----a-w c:\windows\system32\atmadm.exe
- 2004-08-19 13:38:18 285,696 ----a-w c:\windows\system32\atmfd.dll
+ 2008-04-14 02:16:20 285,696 ----a-w c:\windows\system32\atmfd.dll
- 2004-08-19 13:41:46 30,208 ----a-w c:\windows\system32\atmlib.dll
+ 2008-04-14 02:18:19 30,208 ----a-w c:\windows\system32\atmlib.dll
- 2002-09-10 12:00:00 11,264 ----a-w c:\windows\system32\attrib.exe
+ 2008-04-14 02:18:49 12,288 ----a-w c:\windows\system32\attrib.exe
- 2004-08-19 13:41:46 42,496 ----a-w c:\windows\system32\audiosrv.dll
+ 2008-04-14 02:18:19 42,496 ----a-w c:\windows\system32\audiosrv.dll
- 2004-08-19 13:42:36 14,336 ----a-w c:\windows\system32\auditusr.exe
+ 2008-04-14 02:18:49 14,336 ----a-w c:\windows\system32\auditusr.exe
- 2005-03-02 18:10:34 56,832 ----a-w c:\windows\system32\authz.dll
+ 2008-04-14 02:18:19 62,464 ----a-w c:\windows\system32\authz.dll
- 2004-08-19 13:42:36 624,128 ----a-w c:\windows\system32\autochk.exe
+ 2008-04-14 02:18:49 624,128 ----a-w c:\windows\system32\autochk.exe
- 2004-08-19 13:42:38 637,952 ----a-w c:\windows\system32\autoconv.exe
+ 2008-04-14 02:18:50 637,952 ----a-w c:\windows\system32\autoconv.exe
- 2004-08-19 13:42:38 615,936 ----a-w c:\windows\system32\autofmt.exe
+ 2008-04-14 02:18:50 615,936 ----a-w c:\windows\system32\autofmt.exe
- 2004-08-19 13:42:38 11,264 ----a-w c:\windows\system32\autolfn.exe
+ 2008-04-14 02:18:50 11,264 ----a-w c:\windows\system32\autolfn.exe
- 2004-08-19 13:41:46 85,504 ----a-w c:\windows\system32\avifil32.dll
+ 2008-04-14 02:18:19 85,504 ----a-w c:\windows\system32\avifil32.dll
+ 2008-04-14 02:18:19 233,472 ------w c:\windows\system32\azroles.dll
- 2004-08-19 13:41:46 52,736 ----a-w c:\windows\system32\basesrv.dll
+ 2008-04-14 02:18:19 52,736 ----a-w c:\windows\system32\basesrv.dll
- 2004-08-19 13:41:48 28,672 ----a-w c:\windows\system32\batmeter.dll
+ 2008-04-14 02:18:19 29,184 ----a-w c:\windows\system32\batmeter.dll
- 2004-08-19 13:41:48 8,704 ----a-w c:\windows\system32\batt.dll
+ 2008-04-14 02:18:19 8,704 ----a-w c:\windows\system32\batt.dll
- 2004-08-19 13:41:48 17,408 ----a-w c:\windows\system32\bidispl.dll
+ 2008-04-14 02:18:19 17,408 ----a-w c:\windows\system32\bidispl.dll
+ 2008-04-14 02:18:33 409,088 ------w c:\windows\system32\bits\qmgr.dll
- 2004-08-19 13:41:48 8,192 ----a-w c:\windows\system32\bitsprx2.dll
+ 2008-04-14 02:18:19 8,192 ----a-w c:\windows\system32\bitsprx2.dll
- 2004-08-19 13:41:48 7,168 ----a-w c:\windows\system32\bitsprx3.dll
+ 2008-04-14 02:18:19 7,168 ----a-w c:\windows\system32\bitsprx3.dll
+ 2008-04-14 02:18:19 7,168 ------w c:\windows\system32\bitsprx4.dll
- 2004-08-19 13:42:38 71,680 ----a-w c:\windows\system32\blastcln.exe
+ 2008-04-14 02:18:50 71,680 ----a-w c:\windows\system32\blastcln.exe
- 2002-09-10 12:00:00 146,432 ----a-w c:\windows\system32\bootcfg.exe
+ 2008-04-14 02:18:51 152,576 ----a-w c:\windows\system32\bootcfg.exe
- 2004-08-19 13:38:18 68,608 ----a-w c:\windows\system32\browselc.dll
+ 2008-04-14 01:51:37 68,608 ----a-w c:\windows\system32\browselc.dll
- 2004-08-19 13:41:48 77,312 ----a-w c:\windows\system32\browser.dll
+ 2008-04-14 02:18:19 77,824 ----a-w c:\windows\system32\browser.dll
- 2008-06-23 15:39:59 1,023,488 ----a-w c:\windows\system32\browseui.dll
+ 2008-04-14 02:18:19 1,025,024 ----a-w c:\windows\system32\browseui.dll
- 2004-08-19 13:41:48 78,336 ----a-w c:\windows\system32\browsewm.dll
+ 2008-04-14 02:18:19 78,336 ----a-w c:\windows\system32\browsewm.dll
- 2004-08-19 13:41:48 20,992 ----a-w c:\windows\system32\bthci.dll
+ 2008-04-14 02:18:19 20,992 ----a-w c:\windows\system32\bthci.dll
- 2004-08-19 13:41:48 30,208 ----a-w c:\windows\system32\bthserv.dll
+ 2008-04-14 02:18:19 30,208 ----a-w c:\windows\system32\bthserv.dll
- 2004-08-19 13:41:48 50,688 ----a-w c:\windows\system32\btpanui.dll
+ 2008-04-14 02:18:19 50,688 ----a-w c:\windows\system32\btpanui.dll
- 2004-08-19 13:41:48 59,904 ----a-w c:\windows\system32\cabinet.dll
+ 2008-04-14 02:18:19 60,416 ----a-w c:\windows\system32\cabinet.dll
- 2004-08-19 13:41:48 84,992 ----a-w c:\windows\system32\cabview.dll
+ 2008-04-14 02:18:19 84,992 ----a-w c:\windows\system32\cabview.dll
- 2002-09-10 12:00:00 18,944 ----a-w c:\windows\system32\cacls.exe
+ 2008-04-14 02:18:51 20,480 ----a-w c:\windows\system32\cacls.exe
- 2004-08-19 13:41:48 50,688 ----a-w c:\windows\system32\camocx.dll
+ 2008-04-14 02:18:19 50,688 ----a-w c:\windows\system32\camocx.dll
- 2002-09-10 12:00:00 145,920 ----a-w c:\windows\system32\capesnpn.dll
+ 2008-04-14 02:18:19 153,088 ----a-w c:\windows\system32\capesnpn.dll
- 2005-07-26 04:39:54 225,792 ----a-w c:\windows\system32\catsrv.dll
+ 2008-04-14 02:18:19 226,304 ----a-w c:\windows\system32\catsrv.dll
- 2004-08-19 13:41:50 85,504 ----a-w c:\windows\system32\catsrvps.dll
+ 2008-04-14 02:18:19 85,504 ----a-w c:\windows\system32\catsrvps.dll
- 2005-07-26 04:39:54 625,152 ----a-w c:\windows\system32\catsrvut.dll
+ 2008-04-14 02:18:20 625,664 ----a-w c:\windows\system32\catsrvut.dll
- 2008-06-23 15:39:59 151,552 ----a-w c:\windows\system32\cdfview.dll
+ 2008-04-14 02:18:20 151,552 ----a-w c:\windows\system32\cdfview.dll
- 2007-07-30 23:19:20 92,504 ----a-w c:\windows\system32\cdm.dll
+ 2008-07-19 02:10:48 94,920 ----a-w c:\windows\system32\cdm.dll
- 2005-09-10 01:55:12 2,067,968 ----a-w c:\windows\system32\cdosys.dll
+ 2008-04-14 02:18:20 2,091,520 ----a-w c:\windows\system32\cdosys.dll
- 2004-08-19 13:41:50 199,680 ----a-w c:\windows\system32\certcli.dll
+ 2008-04-14 02:18:20 199,680 ----a-w c:\windows\system32\certcli.dll
- 2004-08-19 13:41:50 465,408 ----a-w c:\windows\system32\certmgr.dll
+ 2008-04-14 02:18:20 465,408 ----a-w c:\windows\system32\certmgr.dll
- 2004-08-19 13:41:52 39,424 ----a-w c:\windows\system32\cfgbkend.dll
+ 2008-04-14 02:18:20 39,424 ----a-w c:\windows\system32\cfgbkend.dll
- 2004-08-19 13:38:22 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
+ 2008-04-14 02:16:23 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
- 2002-09-10 12:00:00 109,568 ----a-w c:\windows\system32\cic.dll
+ 2008-04-14 02:18:20 148,480 ----a-w c:\windows\system32\cic.dll
- 2006-06-22 05:13:49 69,120 ----a-w c:\windows\system32\ciodm.dll
+ 2008-04-14 02:18:20 69,120 ----a-w c:\windows\system32\ciodm.dll
- 2004-08-19 13:42:40 57,344 ----a-w c:\windows\system32\cipher.exe
+ 2008-04-14 02:18:51 57,856 ----a-w c:\windows\system32\cipher.exe
- 2004-08-19 13:42:40 5,632 ----a-w c:\windows\system32\cisvc.exe
+ 2008-04-14 02:18:51 5,632 ----a-w c:\windows\system32\cisvc.exe
- 2005-07-26 04:39:54 110,080 ----a-w c:\windows\system32\clbcatex.dll
+ 2008-04-14 02:18:20 110,592 ----a-w c:\windows\system32\clbcatex.dll
- 2005-07-26 04:39:55 498,688 ----a-w c:\windows\system32\clbcatq.dll
+ 2008-04-14 02:18:20 498,688 ----a-w c:\windows\system32\clbcatq.dll
- 2004-08-19 13:42:40 65,024 ----a-w c:\windows\system32\cleanmgr.exe
+ 2008-04-14 02:18:52 65,024 ----a-w c:\windows\system32\cleanmgr.exe
- 2004-08-19 13:41:52 77,824 ----a-w c:\windows\system32\cliconfg.dll
+ 2008-04-14 02:18:20 77,824 ----a-w c:\windows\system32\cliconfg.dll
- 2004-08-19 13:42:40 20,480 ----a-w c:\windows\system32\cliconfg.exe
+ 2008-04-14 02:18:52 20,480 ----a-w c:\windows\system32\cliconfg.exe
- 2004-08-19 13:42:40 104,448 ----a-w c:\windows\system32\clipbrd.exe
+ 2008-04-14 02:18:52 104,448 ----a-w c:\windows\system32\clipbrd.exe
- 2004-08-19 13:42:40 33,280 ----a-w c:\windows\system32\clipsrv.exe
+ 2008-04-14 02:18:52 33,280 ----a-w c:\windows\system32\clipsrv.exe
- 2004-08-19 13:41:52 57,856 ----a-w c:\windows\system32\clusapi.dll
+ 2008-04-14 02:18:20 58,368 ----a-w c:\windows\system32\clusapi.dll
- 2004-08-19 13:41:52 15,872 ----a-w c:\windows\system32\cmcfg32.dll
+ 2008-04-14 02:18:20 15,872 ----a-w c:\windows\system32\cmcfg32.dll
- 2004-08-19 13:42:40 402,944 ----a-w c:\windows\system32\cmd.exe
+ 2008-04-14 02:18:52 403,456 ----a-w c:\windows\system32\cmd.exe
- 2004-08-19 13:41:52 349,696 ----a-w c:\windows\system32\cmdial32.dll
+ 2008-04-14 02:18:20 350,720 ----a-w c:\windows\system32\cmdial32.dll
- 2004-08-19 13:42:40 47,104 ----a-w c:\windows\system32\cmdl32.exe
+ 2008-04-14 02:18:52 25,600 ----a-w c:\windows\system32\cmdl32.exe
- 2004-08-19 13:42:40 40,448 ----a-w c:\windows\system32\cmmon32.exe
+ 2008-04-14 02:18:52 40,448 ----a-w c:\windows\system32\cmmon32.exe
- 2004-08-19 13:41:54 188,416 ----a-w c:\windows\system32\cmprops.dll
+ 2008-04-14 02:18:20 188,416 ----a-w c:\windows\system32\cmprops.dll
- 2004-08-19 13:41:54 13,824 ----a-w c:\windows\system32\cmsetACL.dll
+ 2008-04-14 02:18:20 13,312 ----a-w c:\windows\system32\cmsetacl.dll
- 2004-08-19 13:42:40 65,536 ----a-w c:\windows\system32\cmstp.exe
+ 2008-04-14 02:18:53 65,536 ----a-w c:\windows\system32\cmstp.exe
- 2004-08-19 13:41:54 40,960 ----a-w c:\windows\system32\cmutil.dll
+ 2008-04-14 02:18:20 40,960 ----a-w c:\windows\system32\cmutil.dll
- 2004-08-19 13:56:12 50,176 ----a-w c:\windows\system32\cnbjmon.dll
+ 2008-04-14 02:18:20 50,176 ----a-w c:\windows\system32\cnbjmon.dll
- 2005-07-26 04:39:55 60,416 ----a-w c:\windows\system32\colbact.dll
+ 2008-04-14 02:18:20 60,416 ----a-w c:\windows\system32\colbact.dll
- 2005-07-26 04:39:56 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
+ 2008-04-14 02:18:20 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
- 2004-08-19 13:42:40 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
+ 2008-04-14 02:18:53 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
- 2002-09-10 12:00:00 5,120 ----a-w c:\windows\system32\Com\comrereg.exe
+ 2008-04-14 02:18:53 6,144 ----a-w c:\windows\system32\Com\comrereg.exe
- 2002-09-10 12:00:00 25,600 ----a-w c:\windows\system32\comaddin.dll
+ 2008-04-14 02:18:20 28,160 ----a-w c:\windows\system32\comaddin.dll
- 2006-08-25 15:46:29 617,472 ----a-w c:\windows\system32\comctl32.dll
+ 2008-04-14 02:18:20 617,472 ----a-w c:\windows\system32\comctl32.dll
- 2004-08-19 13:41:54 280,576 ----a-w c:\windows\system32\comdlg32.dll
+ 2008-04-14 02:18:20 281,088 ----a-w c:\windows\system32\comdlg32.dll
- 2004-08-19 13:41:54 253,440 ----a-w c:\windows\system32\compatUI.dll
+ 2008-04-14 02:18:20 253,440 ----a-w c:\windows\system32\compatui.dll
- 2004-08-19 13:41:54 230,912 ----a-w c:\windows\system32\compstui.dll
+ 2008-04-14 02:18:20 230,912 ----a-w c:\windows\system32\compstui.dll
- 2005-07-26 04:39:56 97,792 ----a-w c:\windows\system32\comrepl.dll
+ 2008-04-14 02:18:20 97,792 ----a-w c:\windows\system32\comrepl.dll
- 2004-08-19 13:41:56 837,120 ----a-w c:\windows\system32\comres.dll
+ 2008-04-14 02:18:20 837,120 ----a-w c:\windows\system32\comres.dll
+ 2008-04-13 18:43:32 9,728 ------w c:\windows\system32\comsdupd.exe
- 2002-09-10 12:00:00 147,456 ----a-w c:\windows\system32\comsnap.dll
+ 2008-04-14 02:18:20 167,424 ----a-w c:\windows\system32\comsnap.dll
- 2005-07-26 04:39:57 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
+ 2008-04-14 02:18:20 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
- 2005-07-26 04:39:57 540,160 ----a-w c:\windows\system32\comuid.dll
+ 2008-04-14 02:18:20 539,648 ----a-w c:\windows\system32\comuid.dll
+ 2008-09-28 19:08:36 78,924 ----a-w c:\windows\system32\config\systemprofile\Configuración local\Archivos temporales de Internet\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat
- 2008-09-28 05:12:07 409,600 ----a-w c:\windows\system32\config\systemprofile\Configuración local\Historial\History.IE5\index.dat
+ 2008-09-28 20:32:44 409,600 ----a-w c:\windows\system32\config\systemprofile\Configuración local\Historial\History.IE5\index.dat
+ 2008-09-28 19:24:17 32,768 --sha-w c:\windows\system32\config\systemprofile\Configuración local\Historial\History.IE5\MSHist012008092820080929\index.dat
- 2008-09-28 05:12:07 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2008-09-28 20:32:44 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2002-09-10 12:00:00 346,112 ----a-w c:\windows\system32\confmsp.dll
+ 2008-04-14 02:18:20 358,400 ----a-w c:\windows\system32\confmsp.dll
- 2004-08-19 13:42:42 27,648 ----a-w c:\windows\system32\conime.exe
+ 2008-04-14 02:18:53 27,648 ----a-w c:\windows\system32\conime.exe
- 2004-08-19 13:41:56 35,328 ----a-w c:\windows\system32\corpol.dll
+ 2008-04-14 02:18:20 35,328 ----a-w c:\windows\system32\corpol.dll
+ 2008-04-14 02:18:20 12,800 ------w c:\windows\system32\credssp.dll
- 2004-08-19 13:41:56 165,376 ----a-w c:\windows\system32\credui.dll
+ 2008-04-14 02:18:20 165,376 ----a-w c:\windows\system32\credui.dll
- 2004-08-19 13:41:56 603,648 ----a-w c:\windows\system32\crypt32.dll
+ 2008-04-14 02:18:20 605,184 ----a-w c:\windows\system32\crypt32.dll
- 2004-08-19 13:41:58 75,264 ----a-w c:\windows\system32\cryptdlg.dll
+ 2008-04-14 02:18:20 75,264 ----a-w c:\windows\system32\cryptdlg.dll
- 2004-08-19 13:41:58 33,280 ----a-w c:\windows\system32\cryptdll.dll
+ 2008-04-14 02:18:20 33,280 ----a-w c:\windows\system32\cryptdll.dll
- 2004-08-19 13:41:58 54,272 ----a-w c:\windows\system32\cryptext.dll
+ 2008-04-14 02:18:20 54,272 ----a-w c:\windows\system32\cryptext.dll
- 2004-08-19 13:41:58 63,488 ----a-w c:\windows\system32\cryptnet.dll
+ 2008-04-14 02:18:20 64,512 ----a-w c:\windows\system32\cryptnet.dll
- 2004-08-19 13:41:58 60,416 ----a-w c:\windows\system32\cryptsvc.dll
+ 2008-04-14 02:18:20 62,464 ----a-w c:\windows\system32\cryptsvc.dll
- 2004-08-19 13:41:58 528,384 ----a-w c:\windows\system32\cryptui.dll
+ 2008-04-14 02:18:20 528,384 ----a-w c:\windows\system32\cryptui.dll
- 2004-08-19 13:41:58 102,400 ----a-w c:\windows\system32\cscdll.dll
+ 2008-04-14 02:18:20 102,400 ----a-w c:\windows\system32\cscdll.dll
- 2004-08-19 13:42:42 98,304 ----a-w c:\windows\system32\cscript.exe
+ 2008-04-14 02:18:53 139,264 ----a-w c:\windows\system32\cscript.exe
- 2004-08-19 13:41:58 332,800 ----a-w c:\windows\system32\cscui.dll
+ 2008-04-14 02:18:20 332,800 ----a-w c:\windows\system32\cscui.dll
- 2004-08-19 13:41:58 32,768 ----a-w c:\windows\system32\csrsrv.dll
+ 2008-04-14 02:18:20 32,256 ----a-w c:\windows\system32\csrsrv.dll
- 2004-08-19 13:42:42 6,144 ----a-w c:\windows\system32\csrss.exe
+ 2008-04-14 02:18:53 6,144 ----a-w c:\windows\system32\csrss.exe
- 2004-08-19 13:42:42 15,360 ----a-w c:\windows\system32\ctfmon.exe
+ 2008-04-14 02:18:53 15,360 ----a-w c:\windows\system32\ctfmon.exe
- 2004-08-19 13:42:00 1,179,648 ----a-w c:\windows\system32\d3d8.dll
+ 2008-04-14 02:18:20 1,179,648 ----a-w c:\windows\system32\d3d8.dll
- 2004-08-19 13:42:00 8,192 ----a-w c:\windows\system32\d3d8thk.dll
+ 2008-04-14 02:18:20 8,192 ----a-w c:\windows\system32\d3d8thk.dll
- 2004-08-19 13:42:00 1,689,088 ----a-w c:\windows\system32\d3d9.dll
+ 2008-04-14 02:18:20 1,689,088 ----a-w c:\windows\system32\d3d9.dll
- 2004-08-19 13:42:00 825,344 ----a-w c:\windows\system32\d3dim700.dll
+ 2008-04-14 02:18:20 824,320 ----a-w c:\windows\system32\d3dim700.dll
- 2008-06-23 15:40:00 1,056,256 ----a-w c:\windows\system32\danim.dll
+ 2008-04-14 02:18:20 1,056,256 ----a-w c:\windows\system32\danim.dll
- 2004-08-19 13:42:00 54,784 ----a-w c:\windows\system32\dataclen.dll
+ 2008-04-14 02:18:20 54,784 ----a-w c:\windows\system32\dataclen.dll
- 2002-09-10 12:00:00 152,064 ----a-w c:\windows\system32\datime.dll
+ 2008-04-14 02:18:20 165,376 ----a-w c:\windows\system32\datime.dll
- 2004-08-19 13:42:00 25,088 ----a-w c:\windows\system32\davclnt.dll
+ 2008-04-14 02:18:20 25,600 ----a-w c:\windows\system32\davclnt.dll
- 2004-08-19 13:42:00 640,000 ----a-w c:\windows\system32\dbghelp.dll
+ 2008-04-14 02:18:20 640,000 ----a-w c:\windows\system32\dbghelp.dll
- 2004-08-19 13:42:00 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll
+ 2008-04-14 02:18:20 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll
- 2004-08-19 13:42:00 110,592 ----a-w c:\windows\system32\dbnetlib.dll
+ 2008-04-14 02:18:20 110,592 ----a-w c:\windows\system32\dbnetlib.dll
- 2004-08-19 13:42:00 28,672 ----a-w c:\windows\system32\dbnmpntw.dll
+ 2008-04-14 02:18:20 28,672 ----a-w c:\windows\system32\dbnmpntw.dll
- 2004-08-19 13:58:52 1,788 ----a-w c:\windows\system32\Dcache.bin
+ 2008-04-14 02:34:37 1,804 ----a-w c:\windows\system32\dcache.bin
- 2004-08-19 13:42:00 8,704 ----a-w c:\windows\system32\dciman32.dll
+ 2008-04-14 02:18:20 8,704 ----a-w c:\windows\system32\dciman32.dll
- 2002-09-10 12:00:00 5,120 ----a-w c:\windows\system32\dcomcnfg.exe
+ 2008-04-14 02:18:54 6,144 ----a-w c:\windows\system32\dcomcnfg.exe
- 2004-08-19 13:42:42 32,256 ----a-w c:\windows\system32\ddeshare.exe
+ 2008-04-14 02:18:54 32,256 ----a-w c:\windows\system32\ddeshare.exe
- 2004-08-19 13:42:00 266,240 ----a-w c:\windows\system32\ddraw.dll
+ 2008-04-14 02:18:20 279,552 ----a-w c:\windows\system32\ddraw.dll
- 2004-08-19 13:42:00 27,136 ----a-w c:\windows\system32\ddrawex.dll
+ 2008-04-14 02:18:20 27,136 ----a-w c:\windows\system32\ddrawex.dll
- 2004-08-19 13:42:42 25,088 ----a-w c:\windows\system32\defrag.exe
+ 2008-04-14 02:18:54 25,088 ----a-w c:\windows\system32\defrag.exe
- 2004-08-19 13:42:02 59,904 ----a-w c:\windows\system32\devenum.dll
+ 2008-04-14 02:18:20 59,904 ----a-w c:\windows\system32\devenum.dll
- 2004-08-19 13:42:02 289,280 ----a-w c:\windows\system32\devmgr.dll
+ 2008-04-14 02:18:20 289,280 ----a-w c:\windows\system32\devmgr.dll
- 2004-08-19 13:42:42 82,432 ----a-w c:\windows\system32\dfrgfat.exe
+ 2008-04-14 02:18:54 82,944 ----a-w c:\windows\system32\dfrgfat.exe
- 2004-08-19 13:42:42 104,960 ----a-w c:\windows\system32\dfrgntfs.exe
+ 2008-04-14 02:18:54 105,472 ----a-w c:\windows\system32\dfrgntfs.exe
- 2004-08-19 13:42:02 38,912 ----a-w c:\windows\system32\dfrgsnap.dll
+ 2008-04-14 02:18:20 39,424 ----a-w c:\windows\system32\dfrgsnap.dll
- 2004-08-19 13:42:02 123,904 ----a-w c:\windows\system32\dfrgui.dll
+ 2008-04-14 02:18:20 124,416 ----a-w c:\windows\system32\dfrgui.dll
- 2004-08-19 13:42:02 28,672 ----a-w c:\windows\system32\dfsshlex.dll
+ 2008-04-14 02:18:20 28,672 ----a-w c:\windows\system32\dfsshlex.dll
- 2004-08-19 13:42:02 114,176 ----a-w c:\windows\system32\dgnet.dll
+ 2008-04-14 02:18:20 114,176 ----a-w c:\windows\system32\dgnet.dll
- 2006-05-19 13:18:51 111,616 ----a-w c:\windows\system32\dhcpcsvc.dll
+ 2008-04-14 02:18:20 126,976 ----a-w c:\windows\system32\dhcpcsvc.dll
- 2002-09-10 12:00:00 406,016 ----a-w c:\windows\system32\dhcpmon.dll
+ 2008-04-14 02:18:20 415,744 ----a-w c:\windows\system32\dhcpmon.dll
+ 2008-04-14 02:18:20 48,640 ------w c:\windows\system32\dhcpqec.dll
- 2004-08-19 13:42:44 85,504 ----a-w c:\windows\system32\diantz.exe
+ 2008-04-14 02:18:54 87,040 ----a-w c:\windows\system32\diantz.exe
- 2004-08-19 13:42:02 68,608 ----a-w c:\windows\system32\digest.dll
+ 2008-04-14 02:18:20 68,608 ----a-w c:\windows\system32\digest.dll
+ 2008-04-14 02:18:20 19,456 ------w c:\windows\system32\dimsntfy.dll
+ 2008-04-14 02:18:20 39,936 ------w c:\windows\system32\dimsroam.dll
- 2004-08-19 13:42:02 167,936 ----a-w c:\windows\system32\dinput.dll
+ 2008-04-14 02:18:20 167,936 ----a-w c:\windows\system32\dinput.dll
- 2004-08-19 13:42:02 190,976 ----a-w c:\windows\system32\dinput8.dll
+ 2008-04-14 02:18:20 190,976 ----a-w c:\windows\system32\dinput8.dll
- 2002-09-10 12:00:00 1,502,208 ----a-w c:\windows\system32\diskcopy.dll
+ 2008-04-14 02:18:20 1,504,768 ----a-w c:\windows\system32\diskcopy.dll
- 2004-08-19 13:42:44 167,424 ----a-w c:\windows\system32\diskpart.exe
+ 2008-04-14 02:18:54 167,424 ----a-w c:\windows\system32\diskpart.exe
- 2002-09-10 12:00:00 45,083 ----a-w c:\windows\system32\dispex.dll
+ 2008-04-14 02:18:20 32,768 ----a-w c:\windows\system32\dispex.dll
- 2004-08-19 13:41:42 61,440 -c--a-w c:\windows\system32\dllcache\admparse.dll
+ 2007-08-13 22:39:20 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll
- 2004-08-19 13:41:42 101,376 -c--a-w c:\windows\system32\dllcache\advpack.dll
+ 2007-08-13 22:39:00 123,904 -c--a-w c:\windows\system32\dllcache\advpack.dll
- 2008-06-20 10:44:38 138,368 -c--a-w c:\windows\system32\dllcache\afd.sys
+ 2008-06-20 11:40:08 138,496 -c----w c:\windows\system32\dllcache\afd.sys
- 2004-08-19 13:38:16 8,704 -c--a-w c:\windows\system32\dllcache\asferror.dll
+ 2008-04-14 01:50:00 8,704 -c--a-w c:\windows\system32\dllcache\asferror.dll
- 2008-06-14 17:59:52 272,512 -c----w c:\windows\system32\dllcache\bthport.sys
+ 2008-06-14 17:33:37 272,512 -c----w c:\windows\system32\dllcache\bthport.sys
- 2007-07-30 23:19:20 92,504 -c--a-w c:\windows\system32\dllcache\cdm.dll
+ 2008-07-19 02:10:48 94,920 -c--a-w c:\windows\system32\dllcache\cdm.dll
- 2004-08-03 20:31:52 97,792 -c--a-w c:\windows\system32\dllcache\chtmbx.dll
+ 2008-04-14 02:16:23 97,792 -c--a-w c:\windows\system32\dllcache\chtmbx.dll
- 2004-08-03 20:31:54 56,320 -c--a-w c:\windows\system32\dllcache\chtskdic.dll
+ 2008-04-14 02:16:23 56,320 -c--a-w c:\windows\system32\dllcache\chtskdic.dll
- 2004-08-03 20:31:54 173,568 -c--a-w c:\windows\system32\dllcache\chtskf.dll
+ 2008-04-14 02:16:23 173,568 -c--a-w c:\windows\system32\dllcache\chtskf.dll
- 2004-08-03 20:31:54 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll
+ 2008-04-14 02:16:23 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll
- 2004-08-19 13:41:58 28,672 -c--a-w c:\windows\system32\dllcache\custsat.dll
+ 2007-08-13 22:54:10 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll
+ 2008-04-14 02:18:54 294,912 -c----w c:\windows\system32\dllcache\dlimport.exe
- 2008-06-20 17:41:07 148,992 -c--a-w c:\windows\system32\dllcache\dnsapi.dll
+ 2008-06-20 17:47:55 147,968 -c----w c:\windows\system32\dllcache\dnsapi.dll
- 2004-08-19 13:40:16 97,280 -c--a-w c:\windows\system32\dllcache\dpcdll.dll
+ 2008-04-14 02:17:32 103,424 -c----w c:\windows\system32\dllcache\dpcdll.dll
- 2006-08-24 17:17:24 499,766 -c--a-w c:\windows\system32\dllcache\dxmasf.dll
+ 2008-04-14 02:18:20 499,766 -c--a-w c:\windows\system32\dllcache\dxmasf.dll
- 2008-06-23 15:40:00 357,888 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-08-13 22:35:46 346,624 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-06-23 15:40:00 205,312 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2007-08-13 22:35:38 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
- 2008-07-07 20:31:19 253,952 -c--a-w c:\windows\system32\dllcache\es.dll
+ 2008-07-07 20:27:59 253,952 -c----w c:\windows\system32\dllcache\es.dll
- 2008-06-23 15:40:00 55,808 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2007-08-13 22:54:10 131,584 -c--a-w c:\windows\system32\dllcache\extmgr.dll
- 2004-08-19 13:42:10 38,912 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
+ 2007-08-13 22:18:02 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
- 2002-09-10 12:00:00 13,463,552 -c--a-w c:\windows\system32\dllcache\hwxjpn.dll
+ 2008-04-14 02:16:45 13,463,552 -c--a-w c:\windows\system32\dllcache\hwxjpn.dll
- 2004-08-19 13:42:50 34,304 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-13 22:39:06 54,784 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-19 13:42:10 139,264 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
+ 2007-08-13 22:39:26 152,064 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-19 13:42:10 221,184 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
+ 2007-08-13 22:39:54 229,376 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
- 2002-09-10 12:00:00 241,664 -c--a-w c:\windows\system32\dllcache\ieakui.dll
+ 2007-08-13 21:56:54 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
- 2004-08-19 13:42:10 323,584 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
+ 2007-08-13 22:39:50 382,976 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-06-23 09:49:29 18,432 -c--a-w c:\windows\system32\dllcache\iedw.exe
+ 2007-08-13 22:44:02 69,120 -c--a-w c:\windows\system32\dllcache\iedw.exe
- 2008-06-23 15:40:01 251,392 -c--a-w c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-13 22:54:10 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll
- 2004-08-19 13:42:10 49,152 -c--a-w c:\windows\system32\dllcache\iernonce.dll
+ 2007-08-13 22:39:10 43,008 -c--a-w c:\windows\system32\dllcache\iernonce.dll
- 2004-08-19 13:42:10 63,488 -c--a-w c:\windows\system32\dllcache\iesetup.dll
+ 2007-08-13 22:39:12 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll
- 2004-08-19 13:42:50 93,184 -c--a-w c:\windows\system32\dllcache\iexplore.exe
+ 2007-08-13 22:43:56 622,080 -c--a-w c:\windows\system32\dllcache\iexplore.exe
- 2004-08-03 21:04:38 106,496 -c--a-w c:\windows\system32\dllcache\imekrcic.dll
+ 2008-04-14 02:16:47 106,496 -c--a-w c:\windows\system32\dllcache\imekrcic.dll
- 2004-08-03 21:04:34 86,016 -c--a-w c:\windows\system32\dllcache\imekrmbx.dll
+ 2008-04-14 02:16:47 86,016 -c--a-w c:\windows\system32\dllcache\imekrmbx.dll
- 2004-08-19 13:42:10 35,840 -c--a-w c:\windows\system32\dllcache\imgutil.dll
+ 2007-08-13 22:36:06 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll
- 2004-08-03 20:31:50 811,064 -c--a-w c:\windows\system32\dllcache\imjp81k.dll
+ 2008-04-14 02:16:48 811,064 -c--a-w c:\windows\system32\dllcache\imjp81k.dll
- 2004-08-03 20:31:52 368,696 -c--a-w c:\windows\system32\dllcache\imjpcic.dll
+ 2008-04-14 02:16:48 368,696 -c--a-w c:\windows\system32\dllcache\imjpcic.dll
- 2004-08-03 20:31:52 716,856 -c--a-w c:\windows\system32\dllcache\imjpcus.dll
+ 2008-04-14 02:16:48 716,856 -c--a-w c:\windows\system32\dllcache\imjpcus.dll
- 2004-08-03 20:31:54 81,976 -c--a-w c:\windows\system32\dllcache\imjpdct.dll
+ 2008-04-14 02:16:48 81,976 -c--a-w c:\windows\system32\dllcache\imjpdct.dll
- 2004-08-03 20:32:16 274,489 -c--a-w c:\windows\system32\dllcache\imjputyc.dll
+ 2008-04-14 02:16:48 274,489 -c--a-w c:\windows\system32\dllcache\imjputyc.dll
- 2004-08-03 20:32:28 102,456 -c--a-w c:\windows\system32\dllcache\imlang.dll
+ 2008-04-14 02:16:48 102,456 -c--a-w c:\windows\system32\dllcache\imlang.dll
- 2002-09-10 12:00:00 315,452 -c--a-w c:\windows\system32\dllcache\imskf.dll
+ 2008-04-14 02:16:48 315,455 -c--a-w c:\windows\system32\dllcache\imskf.dll
- 2008-04-11 18:51:06 683,520 -c--a-w c:\windows\system32\dllcache\inetcomm.dll
+ 2008-04-11 19:05:25 691,712 -c----w c:\windows\system32\dllcache\inetcomm.dll
- 2008-06-23 15:40:01 96,768 -c--a-w c:\windows\system32\dllcache\inseng.dll
+ 2007-08-13 22:39:02 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll
- 2008-06-23 15:40:01 16,384 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2007-08-13 22:54:10 27,136 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-19 13:42:14 22,528 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-13 22:44:18 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
- 2004-08-19 13:42:54 786,432 -c--a-w c:\windows\system32\dllcache\migrate.exe
+ 2008-04-14 02:19:02 786,432 -c--a-w c:\windows\system32\dllcache\migrate.exe
- 2004-08-19 13:42:16 310,272 -c--a-w c:\windows\system32\dllcache\mp43dmod.dll
+ 2008-04-14 02:18:24 310,272 -c--a-w c:\windows\system32\dllcache\mp43dmod.dll
- 2004-08-19 13:42:16 384,512 -c--a-w c:\windows\system32\dllcache\mp4sdmod.dll
+ 2008-04-14 02:18:24 384,512 -c--a-w c:\windows\system32\dllcache\mp4sdmod.dll
- 2004-08-19 13:42:16 240,640 -c--a-w c:\windows\system32\dllcache\mpg4dmod.dll
+ 2008-04-14 02:18:24 240,640 -c--a-w c:\windows\system32\dllcache\mpg4dmod.dll
- 2004-08-19 13:42:58 124,928 -c--a-w c:\windows\system32\dllcache\mplay32.exe
+ 2008-04-14 02:19:04 124,928 -c--a-w c:\windows\system32\dllcache\mplay32.exe
- 2004-08-19 13:42:58 4,639 -c--a-w c:\windows\system32\dllcache\mplayer2.exe
+ 2008-04-14 02:19:04 4,639 -c--a-w c:\windows\system32\dllcache\mplayer2.exe
- 2004-08-19 13:42:16 368,640 -c--a-w c:\windows\system32\dllcache\mpvis.dll
+ 2008-04-14 02:18:24 368,640 -c--a-w c:\windows\system32\dllcache\mpvis.dll
- 2008-05-01 14:31:45 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
+ 2008-05-01 14:36:24 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
- 2008-06-24 16:23:35 74,240 -c--a-w c:\windows\system32\dllcache\mscms.dll
+ 2008-06-24 16:44:02 74,240 -c----w c:\windows\system32\dllcache\mscms.dll
- 2004-08-19 13:39:26 4,126 -c--a-w c:\windows\system32\dllcache\msdxmlc.dll
+ 2008-04-14 02:17:04 4,126 -c--a-w c:\windows\system32\dllcache\msdxmlc.dll
- 2004-08-19 13:42:58 29,184 -c--a-w c:\windows\system32\dllcache\mshta.exe
+ 2007-08-13 22:32:30 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe
- 2008-06-23 15:40:03 3,080,704 -c--a-w c:\windows\system32\dllcache\mshtml.dll
+ 2007-08-13 22:54:12 3,578,368 -c--a-w c:\windows\system32\dllcache\mshtml.dll
- 2008-06-23 15:40:04 449,024 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2007-08-13 22:54:10 475,648 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
- 2004-08-19 13:39:30 57,344 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 22:01:12 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
- 2002-09-10 12:00:00 146,432 -c--a-w c:\windows\system32\dllcache\msls31.dll
+ 2007-08-13 22:54:10 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll
- 2008-06-23 15:40:04 146,432 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2007-08-13 22:44:26 192,000 -c--a-w c:\windows\system32\dllcache\msrating.dll
- 2008-06-23 15:40:05 532,480 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2007-08-13 22:54:10 670,720 -c--a-w c:\windows\system32\dllcache\mstime.dll
- 2008-06-20 17:41:07 248,320 -c--a-w c:\windows\system32\dllcache\mswsock.dll
+ 2008-06-20 17:47:55 248,320 -c----w c:\windows\system32\dllcache\mswsock.dll
+ 2008-04-14 02:18:28 1,306,624 -c----w c:\windows\system32\dllcache\msxml6.dll
+ 2008-04-14 01:55:00 90,624 -c----w c:\windows\system32\dllcache\msxml6r.dll
- 2004-08-19 13:43:30 226,816 -c--a-w c:\windows\system32\dllcache\npdrmv2.dll
+ 2008-04-14 02:19:23 226,816 -c--a-w c:\windows\system32\dllcache\npdrmv2.dll
- 2005-11-29 21:27:06 364,544 -c--a-w c:\windows\system32\dllcache\npdsplay.dll
+ 2008-04-14 02:18:28 364,544 -c--a-w c:\windows\system32\dllcache\npdsplay.dll
- 2004-08-19 13:42:20 10,240 -c--a-w c:\windows\system32\dllcache\npwmsdrm.dll
+ 2008-04-14 02:18:28 10,240 -c--a-w c:\windows\system32\dllcache\npwmsdrm.dll
- 2004-08-19 13:42:22 97,280 -c--a-w c:\windows\system32\dllcache\occache.dll
+ 2007-08-13 22:44:06 101,376 -c--a-w c:\windows\system32\dllcache\occache.dll
- 2004-08-03 20:32:12 15,872 -c--a-w c:\windows\system32\dllcache\padrs404.dll
+ 2008-04-14 02:17:23 15,872 -c--a-w c:\windows\system32\dllcache\padrs404.dll
- 2004-08-03 20:31:50 15,360 -c--a-w c:\windows\system32\dllcache\padrs804.dll
+ 2008-04-14 02:17:23 15,360 -c--a-w c:\windows\system32\dllcache\padrs804.dll
- 2004-08-19 13:38:40 24,064 -c--a-w c:\windows\system32\dllcache\pidgen.dll
+ 2008-04-14 02:16:34 24,064 -c----w c:\windows\system32\dllcache\pidgen.dll
- 2004-08-03 20:31:50 175,104 -c--a-w c:\windows\system32\dllcache\pintlcsa.dll
+ 2008-04-14 02:17:24 175,104 -c--a-w c:\windows\system32\dllcache\pintlcsa.dll
- 2004-08-03 20:31:50 53,760 -c--a-w c:\windows\system32\dllcache\pintlcsd.dll
+ 2008-04-14 02:17:24 53,760 -c--a-w c:\windows\system32\dllcache\pintlcsd.dll
- 2004-08-03 20:31:50 70,144 -c--a-w c:\windows\system32\dllcache\pintlphr.exe
+ 2008-04-13 16:43:36 70,144 -c--a-w c:\windows\system32\dllcache\pintlphr.exe
- 2004-08-03 20:31:50 67,584 -c--a-w c:\windows\system32\dllcache\pmigrate.dll
+ 2008-04-14 02:17:24 67,584 -c--a-w c:\windows\system32\dllcache\pmigrate.dll
- 2008-06-23 15:40:05 39,424 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2007-08-13 22:36:12 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
- 2008-05-07 05:15:31 1,293,824 -c--a-w c:\windows\system32\dllcache\quartz.dll
+ 2008-05-07 05:11:47 1,294,336 -c----w c:\windows\system32\dllcache\quartz.dll
- 2008-05-08 12:28:49 202,752 -c--a-w c:\windows\system32\dllcache\rmcast.sys
+ 2008-05-08 14:02:52 203,136 -c----w c:\windows\system32\dllcache\rmcast.sys
- 2004-08-19 13:43:10 778,240 -c--a-w c:\windows\system32\dllcache\setup_wm.exe
+ 2008-04-14 02:19:11 778,240 -c--a-w c:\windows\system32\dllcache\setup_wm.exe
- 2004-08-19 13:42:26 152,576 -c--a-w c:\windows\system32\dllcache\shmedia.dll
+ 2008-04-14 02:18:36 153,088 -c--a-w c:\windows\system32\dllcache\shmedia.dll
- 2006-08-24 17:19:40 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll
+ 2008-04-14 02:18:44 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll
- 2008-06-20 10:45:13 360,320 -c--a-w c:\windows\system32\dllcache\tcpip.sys
+ 2008-06-20 11:51:12 361,600 -c----w c:\windows\system32\dllcache\tcpip.sys
- 2008-06-20 09:52:06 225,920 -c--a-w c:\windows\system32\dllcache\tcpip6.sys
+ 2008-06-20 11:08:27 225,856 -c----w c:\windows\system32\dllcache\tcpip6.sys
- 2004-08-03 20:32:14 10,240 -c--a-w c:\windows\system32\dllcache\tmigrate.dll
+ 2008-04-14 02:17:42 10,240 -c--a-w c:\windows\system32\dllcache\tmigrate.dll
- 2004-08-03 21:04:12 76,288 -c--a-w c:\windows\system32\dllcache\uniime.dll
+ 2008-04-14 02:17:43 76,288 -c--a-w c:\windows\system32\dllcache\uniime.dll
- 2004-08-19 13:43:14 208,896 -c--a-w c:\windows\system32\dllcache\unregmp2.exe
+ 2008-04-14 02:19:14 208,896 -c--a-w c:\windows\system32\dllcache\unregmp2.exe
- 2004-08-19 13:42:28 37,888 -c--a-w c:\windows\system32\dllcache\url.dll
+ 2007-08-13 22:44:30 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
- 2008-06-23 15:40:08 616,960 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2007-08-13 22:54:10 1,162,240 -c--a-w c:\windows\system32\dllcache\urlmon.dll
- 2007-06-26 13:56:57 851,968 -c--a-w c:\windows\system32\dllcache\vgx.dll
+ 2008-05-27 17:25:03 765,952 -c--a-w c:\windows\system32\dllcache\vgx.dll
- 2004-08-03 20:32:36 426,041 -c--a-w c:\windows\system32\dllcache\voicepad.dll
+ 2008-04-14 02:17:46 426,041 -c--a-w c:\windows\system32\dllcache\voicepad.dll
- 2004-08-03 20:32:36 86,073 -c--a-w c:\windows\system32\dllcache\voicesub.dll
+ 2008-04-14 02:17:46 86,073 -c--a-w c:\windows\system32\dllcache\voicesub.dll
- 2004-08-19 13:42:30 280,576 -c--a-w c:\windows\system32\dllcache\webcheck.dll
+ 2007-08-13 22:54:10 231,424 -c--a-w c:\windows\system32\dllcache\webcheck.dll
- 2008-06-23 15:40:09 662,016 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2007-08-13 22:54:10 818,688 -c--a-w c:\windows\system32\dllcache\wininet.dll
- 2004-08-19 13:41:16 200,704 -c--a-w c:\windows\system32\dllcache\wmerror.dll
+ 2008-04-14 01:53:19 200,704 -c--a-w c:\windows\system32\dllcache\wmerror.dll
- 2007-04-30 06:22:16 4,734,976 -c--a-w c:\windows\system32\dllcache\wmp.dll
+ 2008-04-14 02:18:47 4,874,240 -c--a-w c:\windows\system32\dllcache\wmp.dll
- 2004-08-19 13:42:32 114,688 -c--a-w c:\windows\system32\dllcache\wmpasf.dll
+ 2008-04-14 02:18:47 114,688 -c--a-w c:\windows\system32\dllcache\wmpasf.dll
- 2004-08-19 13:42:32 98,304 -c--a-w c:\windows\system32\dllcache\wmpband.dll
+ 2008-04-14 02:18:47 98,304 -c--a-w c:\windows\system32\dllcache\wmpband.dll
- 2004-08-19 13:42:32 20,480 -c--a-w c:\windows\system32\dllcache\wmpcd.dll
+ 2008-04-14 02:18:47 20,480 -c--a-w c:\windows\system32\dllcache\wmpcd.dll
- 2004-08-19 13:42:32 20,480 -c--a-w c:\windows\system32\dllcache\wmpcore.dll
+ 2008-04-14 02:18:47 20,480 -c--a-w c:\windows\system32\dllcache\wmpcore.dll
- 2004-08-19 13:42:32 233,472 -c--a-w c:\windows\system32\dllcache\wmpdxm.dll
+ 2008-04-14 02:18:47 233,472 -c--a-w c:\windows\system32\dllcache\wmpdxm.dll
- 2004-08-19 13:43:18 73,728 -c--a-w c:\windows\system32\dllcache\wmplayer.exe
+ 2008-04-14 02:19:16 73,728 -c--a-w c:\windows\system32\dllcache\wmplayer.exe
- 2004-08-19 13:41:26 2,977,792 -c--a-w c:\windows\system32\dllcache\wmploc.dll
+ 2008-04-14 01:54:40 2,977,792 -c--a-w c:\windows\system32\dllcache\wmploc.dll
- 2004-08-19 13:42:32 221,184 -c--a-w c:\windows\system32\dllcache\wmpns.dll
+ 2008-04-14 02:18:47 221,184 -c--a-w c:\windows\system32\dllcache\wmpns.dll
- 2004-08-19 13:42:32 102,400 -c--a-w c:\windows\system32\dllcache\wmpshell.dll
+ 2008-04-14 02:18:47 102,400 -c--a-w c:\windows\system32\dllcache\wmpshell.dll
- 2004-08-19 13:42:32 20,480 -c--a-w c:\windows\system32\dllcache\wmpui.dll
+ 2008-04-14 02:18:47 20,480 -c--a-w c:\windows\system32\dllcache\wmpui.dll
- 2004-08-19 13:42:32 115,200 -c--a-w c:\windows\system32\dllcache\wmsdmoe.dll
+ 2008-04-14 02:18:47 115,200 -c--a-w c:\windows\system32\dllcache\wmsdmoe.dll
- 2004-08-19 13:42:32 303,616 -c--a-w c:\windows\system32\dllcache\wmstream.dll
+ 2008-04-14 02:18:47 303,616 -c--a-w c:\windows\system32\dllcache\wmstream.dll
- 2007-07-30 23:19:36 549,720 -c--a-w c:\windows\system32\dllcache\wuapi.dll
+ 2008-07-19 02:09:44 563,912 -c--a-w c:\windows\system32\dllcache\wuapi.dll
- 2007-07-30 23:19:16 53,080 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
+ 2008-07-19 02:10:42 53,448 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
- 2007-07-30 23:19:42 1,712,984 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
+ 2008-07-19 02:09:42 1,811,656 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
- 2007-07-30 23:19:32 325,976 -c--a-w c:\windows\system32\dllcache\wucltui.dll
+ 2008-07-19 02:09:46 325,832 -c--a-w c:\windows\system32\dllcache\wucltui.dll
- 2007-07-30 23:18:40 33,624 -c--a-w c:\windows\system32\dllcache\wups.dll
+ 2008-07-19 02:10:20 36,552 -c--a-w c:\windows\system32\dllcache\wups.dll
- 2007-07-30 23:19:28 203,096 -c--a-w c:\windows\system32\dllcache\wuweb.dll
+ 2008-07-19 02:09:44 205,000 -c--a-w c:\windows\system32\dllcache\wuweb.dll
- 2004-08-19 13:42:44 5,120 ----a-w c:\windows\system32\dllhost.exe
+ 2008-04-14 02:18:55 5,120 ----a-w c:\windows\system32\dllhost.exe
- 2004-08-19 13:42:44 225,792 ----a-w c:\windows\system32\dmadmin.exe
+ 2008-04-14 02:18:55 225,792 ----a-w c:\windows\system32\dmadmin.exe
- 2004-08-19 13:42:02 28,672 ----a-w c:\windows\system32\dmband.dll
+ 2008-04-14 02:18:20 28,672 ----a-w c:\windows\system32\dmband.dll
- 2004-08-19 13:42:02 61,440 ----a-w c:\windows\system32\dmcompos.dll
+ 2008-04-14 02:18:20 61,440 ----a-w c:\windows\system32\dmcompos.dll
- 2002-09-10 12:00:00 273,920 ----a-w c:\windows\system32\dmdlgs.dll
+ 2008-04-14 02:18:20 285,184 ----a-w c:\windows\system32\dmdlgs.dll
- 2004-08-19 13:42:02 200,704 ----a-w c:\windows\system32\dmdskmgr.dll
+ 2008-04-14 02:18:20 200,704 ----a-w c:\windows\system32\dmdskmgr.dll
- 2004-08-19 13:42:02 181,248 ----a-w c:\windows\system32\dmime.dll
+ 2008-04-14 02:18:20 181,248 ----a-w c:\windows\system32\dmime.dll
- 2004-08-19 13:42:02 35,840 ----a-w c:\windows\system32\dmloader.dll
+ 2008-04-14 02:18:20 35,840 ----a-w c:\windows\system32\dmloader.dll
- 2004-08-19 13:42:44 15,872 ----a-w c:\windows\system32\dmremote.exe
+ 2008-04-14 02:18:55 15,872 ----a-w c:\windows\system32\dmremote.exe
- 2004-08-19 13:42:02 82,432 ----a-w c:\windows\system32\dmscript.dll
+ 2008-04-14 02:18:20 82,432 ----a-w c:\windows\system32\dmscript.dll
- 2004-08-19 13:42:02 24,064 ----a-w c:\windows\system32\dmserver.dll
+ 2008-04-14 02:18:20 24,064 ----a-w c:\windows\system32\dmserver.dll
- 2004-08-19 13:42:02 105,984 ----a-w c:\windows\system32\dmstyle.dll
+ 2008-04-14 02:18:20 105,984 ----a-w c:\windows\system32\dmstyle.dll
- 2004-08-19 13:42:02 103,424 ----a-w c:\windows\system32\dmsynth.dll
+ 2008-04-14 02:18:20 103,424 ----a-w c:\windows\system32\dmsynth.dll
- 2004-08-19 13:42:02 104,448 ----a-w c:\windows\system32\dmusic.dll
+ 2008-04-14 02:18:20 104,448 ----a-w c:\windows\system32\dmusic.dll
- 2004-08-19 13:56:12 57,344 ----a-w c:\windows\system32\dmutil.dll
+ 2008-04-14 02:18:20 57,344 ----a-w c:\windows\system32\dmutil.dll
- 2008-06-20 17:41:07 148,992 ----a-w c:\windows\system32\dnsapi.dll
+ 2008-06-20 17:47:55 147,968 ----a-w c:\windows\system32\dnsapi.dll
- 2008-02-20 05:35:06 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
+ 2008-04-14 02:18:20 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
- 2004-08-19 13:42:04 48,640 ----a-w c:\windows\system32\docprop2.dll
+ 2008-04-14 02:18:20 48,640 ----a-w c:\windows\system32\docprop2.dll
+ 2008-04-14 02:18:20 26,624 ------w c:\windows\system32\dot3api.dll
+ 2008-04-14 02:18:20 59,904 ------w c:\windows\system32\dot3cfg.dll
+ 2008-04-14 02:18:20 9,216 ------w c:\windows\system32\dot3dlg.dll
+ 2008-04-14 02:18:20 39,936 ------w c:\windows\system32\dot3gpclnt.dll
+ 2008-04-14 02:18:20 56,832 ------w c:\windows\system32\dot3msm.dll
+ 2008-04-14 02:18:20 133,120 ------w c:\windows\system32\dot3svc.dll
+ 2008-04-14 02:18:20 651,264 ------w c:\windows\system32\dot3ui.dll
- 2004-08-19 13:40:16 97,280 ----a-w c:\windows\system32\dpcdll.dll
+ 2008-04-14 02:17:32 103,424 ----a-w c:\windows\system32\dpcdll.dll
- 2004-08-19 13:42:44 30,208 ----a-w c:\windows\system32\dplaysvr.exe
+ 2008-04-14 02:18:55 29,696 ----a-w c:\windows\system32\dplaysvr.exe
- 2004-08-19 13:42:04 229,888 ----a-w c:\windows\system32\dplayx.dll
+ 2008-04-14 02:18:20 229,888 ----a-w c:\windows\system32\dplayx.dll
- 2004-08-19 13:42:04 24,064 ----a-w c:\windows\system32\dpmodemx.dll
+ 2008-04-14 02:18:20 24,064 ----a-w c:\windows\system32\dpmodemx.dll
- 2004-08-19 13:38:36 3,584 ----a-w c:\windows\system32\dpnaddr.dll
+ 2008-04-14 02:16:32 3,072 ----a-w c:\windows\system32\dpnaddr.dll
- 2004-08-19 13:42:04 375,296 ----a-w c:\windows\system32\dpnet.dll
+ 2008-04-14 02:18:20 375,296 ----a-w c:\windows\system32\dpnet.dll
- 2004-08-19 13:42:04 35,328 ----a-w c:\windows\system32\dpnhpast.dll
+ 2008-04-14 02:18:20 35,328 ----a-w c:\windows\system32\dpnhpast.dll
- 2004-08-19 13:42:04 60,928 ----a-w c:\windows\system32\dpnhupnp.dll
+ 2008-04-14 02:18:20 60,928 ----a-w c:\windows\system32\dpnhupnp.dll
- 2004-08-19 13:38:36 3,584 ----a-w c:\windows\system32\dpnlobby.dll
+ 2008-04-14 02:16:32 3,072 ----a-w c:\windows\system32\dpnlobby.dll
- 2004-08-19 13:42:44 18,432 ----a-w c:\windows\system32\dpnsvr.exe
+ 2008-04-14 02:18:55 18,432 ----a-w c:\windows\system32\dpnsvr.exe
- 2004-08-19 13:42:04 21,504 ----a-w c:\windows\system32\dpvacm.dll
+ 2008-04-14 02:18:20 21,504 ----a-w c:\windows\system32\dpvacm.dll
- 2004-08-19 13:42:04 213,504 ----a-w c:\windows\system32\dpvoice.dll
+ 2008-04-14 02:18:20 213,504 ----a-w c:\windows\system32\dpvoice.dll
- 2004-08-19 13:42:44 83,456 ----a-w c:\windows\system32\dpvsetup.exe
+ 2008-04-14 02:18:55 83,456 ----a-w c:\windows\system32\dpvsetup.exe
- 2004-08-19 13:42:04 116,736 ----a-w c:\windows\system32\dpvvox.dll
+ 2008-04-14 02:18:20 116,736 ----a-w c:\windows\system32\dpvvox.dll
- 2004-08-19 13:42:04 57,856 ----a-w c:\windows\system32\dpwsockx.dll
+ 2008-04-14 02:18:20 57,856 ----a-w c:\windows\system32\dpwsockx.dll
- 2002-09-10 12:00:00 59,904 ----a-w c:\windows\system32\driverquery.exe
+ 2008-04-14 02:18:55 64,512 ----a-w c:\windows\system32\driverquery.exe
- 2004-08-19 13:18:16 189,056 ----a-w c:\windows\system32\drivers\acpi.sys
+ 2008-04-14 01:48:46 189,056 ----a-w c:\windows\system32\drivers\acpi.sys
- 2008-08-25 20:24:40 31,872 ----a-w c:\windows\system32\drivers\Adg82.sys
+ 2008-09-28 20:13:47 32,256 ----a-w c:\windows\system32\drivers\Adg82.sys
+ 2008-04-14 02:18:18 4,255 ------w c:\windows\system32\drivers\adv01nt5.dll
+ 2008-04-14 02:18:18 3,967 ------w c:\windows\system32\drivers\adv02nt5.dll
+ 2008-04-14 02:18:18 3,615 ------w c:\windows\system32\drivers\adv05nt5.dll
+ 2008-04-14 02:18:18 3,647 ------w c:\windows\system32\drivers\adv07nt5.dll
+ 2008-04-14 02:18:18 3,135 ------w c:\windows\system32\drivers\adv08nt5.dll
+ 2008-04-14 02:18:18 3,711 ------w c:\windows\system32\drivers\adv09nt5.dll
+ 2008-04-14 02:18:18 3,775 ------w c:\windows\system32\drivers\adv11nt5.dll
- 2006-02-15 00:22:26 142,464 ----a-w c:\windows\system32\drivers\aec.sys
+ 2008-04-13 16:39:23 142,592 ----a-w c:\windows\system32\drivers\aec.sys
- 2008-06-20 10:44:38 138,368 ----a-w c:\windows\system32\drivers\afd.sys
+ 2008-06-20 11:40:08 138,496 ----a-w c:\windows\system32\drivers\afd.sys
+ 2008-04-13 18:36:38 42,368 ------w c:\windows\system32\drivers\agp440.sys
+ 2008-04-13 18:36:39 44,928 ------w c:\windows\system32\drivers\agpcpq.sys
+ 2008-04-13 18:36:38 42,752 ------w c:\windows\system32\drivers\alim1541.sys
+ 2008-04-13 18:36:39 43,008 ------w c:\windows\system32\drivers\amdagp.sys
- 2004-08-19 13:56:12 41,216 ----a-w c:\windows\system32\drivers\amdk6.sys
+ 2008-04-14 01:49:41 41,600 ----a-w c:\windows\system32\drivers\amdk6.sys
- 2004-08-19 13:56:12 41,600 ----a-w c:\windows\system32\drivers\amdk7.sys
+ 2008-04-14 01:49:41 41,984 ----a-w c:\windows\system32\drivers\amdk7.sys
- 2004-08-19 13:56:12 60,800 ----a-w c:\windows\system32\drivers\arp1394.sys
+ 2008-04-13 18:51:25 60,800 ----a-w c:\windows\system32\drivers\arp1394.sys
- 2004-08-03 21:05:04 14,336 ----a-w c:\windows\system32\drivers\asyncmac.sys
+ 2008-04-13 18:57:27 14,336 ----a-w c:\windows\system32\drivers\asyncmac.sys
- 2004-08-03 20:59:44 95,360 ----a-w c:\windows\system32\drivers\atapi.sys
+ 2008-04-13 18:40:30 96,512 ----a-w c:\windows\system32\drivers\atapi.sys
+ 2004-08-04 03:29:30 56,623 ------w c:\windows\system32\drivers\ati1btxx.sys
+ 2004-08-04 03:29:30 11,615 ------w c:\windows\system32\drivers\ati1mdxx.sys
+ 2004-08-04 03:29:30 12,047 ------w c:\windows\system32\drivers\ati1pdxx.sys
+ 2004-08-04 03:29:32 30,671 ------w c:\windows\system32\drivers\ati1raxx.sys
+ 2004-08-04 03:29:32 63,663 ------w c:\windows\system32\drivers\ati1rvxx.sys
+ 2004-08-04 03:29:32 26,367 ------w c:\windows\system32\drivers\ati1snxx.sys
+ 2004-08-04 03:29:32 21,343 ------w c:\windows\system32\drivers\ati1ttxx.sys
+ 2004-08-04 03:29:32 36,463 ------w c:\windows\system32\drivers\ati1tuxx.sys
+ 2004-08-04 03:29:32 29,455 ------w c:\windows\system32\drivers\ati1xbxx.sys
+ 2004-08-04 03:29:32 34,735 ------w c:\windows\system32\drivers\ati1xsxx.sys
+ 2004-08-19 20:20:12 327,168 ------w c:\windows\system32\drivers\ati2mtaa.sys
+ 2004-08-04 03:29:28 57,856 ------w c:\windows\system32\drivers\atinbtxx.sys
+ 2004-08-04 03:29:30 13,824 ------w c:\windows\system32\drivers\atinmdxx.sys
+ 2004-08-04 03:29:30 14,336 ------w c:\windows\system32\drivers\atinpdxx.sys
+ 2004-08-04 03:29:30 52,224 ------w c:\windows\system32\drivers\atinraxx.sys
+ 2004-08-04 03:29:32 104,960 ------w c:\windows\system32\drivers\atinrvxx.sys
+ 2004-08-04 03:29:32 28,672 ------w c:\windows\system32\drivers\atinsnxx.sys
+ 2004-08-04 03:29:32 13,824 ------w c:\windows\system32\drivers\atinttxx.sys
+ 2004-08-04 03:29:32 73,216 ------w c:\windows\system32\drivers\atintuxx.sys
+ 2004-08-04 03:29:32 31,744 ------w c:\windows\system32\drivers\atinxbxx.sys
+ 2004-08-04 03:29:32 63,488 ------w c:\windows\system32\drivers\atinxsxx.sys
- 2004-08-03 20:58:32 59,904 ----a-w c:\windows\system32\drivers\atmarpc.sys
+ 2008-04-13 18:51:25 59,904 ----a-w c:\windows\system32\drivers\atmarpc.sys
- 2004-08-03 20:58:36 55,936 ----a-w c:\windows\system32\drivers\atmlane.sys
+ 2008-04-13 18:51:30 55,808 ----a-w c:\windows\system32\drivers\atmlane.sys
+ 2008-04-14 02:18:19 21,183 ------w c:\windows\system32\drivers\atv01nt5.dll
+ 2008-04-14 02:18:19 11,359 ------w c:\windows\system32\drivers\atv02nt5.dll
+ 2008-04-14 02:18:19 25,471 ------w c:\windows\system32\drivers\atv04nt5.dll
+ 2008-04-14 02:18:19 14,143 ------w c:\windows\system32\drivers\atv06nt5.dll
+ 2008-04-14 02:18:19 17,279 ------w c:\windows\system32\drivers\atv10nt5.dll
- 2004-08-03 20:59:58 71,552 ----a-w c:\windows\system32\drivers\bridge.sys
+ 2008-04-13 18:53:23 71,552 ----a-w c:\windows\system32\drivers\bridge.sys
+ 2008-04-13 18:46:33 17,024 ------w c:\windows\system32\drivers\bthenum.sys
+ 2008-04-13 18:46:33 37,888 ------w c:\windows\system32\drivers\bthmodem.sys
+ 2008-04-13 18:51:34 101,120 ------w c:\windows\system32\drivers\bthpan.sys
- 2008-06-14 17:59:52 272,512 ------w c:\windows\system32\drivers\bthport.sys
+ 2008-06-14 17:33:37 272,512 ------w c:\windows\system32\drivers\bthport.sys
+ 2008-04-13 18:46:31 36,480 ------w c:\windows\system32\drivers\bthprint.sys
+ 2008-04-13 18:46:29 18,944 ------w c:\windows\system32\drivers\bthusb.sys
- 2004-08-03 21:14:12 63,744 ----a-w c:\windows\system32\drivers\cdfs.sys
+ 2008-04-13 19:14:21 63,744 ----a-w c:\windows\system32\drivers\cdfs.sys
- 2004-08-03 20:59:54 49,536 ----a-w c:\windows\system32\drivers\cdrom.sys
+ 2008-04-13 18:40:46 62,976 ----a-w c:\windows\system32\drivers\cdrom.sys
+ 2008-04-14 02:18:20 15,423 ------w c:\windows\system32\drivers\ch7xxnt5.dll
- 2004-08-03 21:14:28 49,664 ----a-w c:\windows\system32\drivers\classpnp.sys
+ 2008-04-13 19:16:22 49,536 ----a-w c:\windows\system32\drivers\classpnp.sys
- 2004-08-19 13:56:12 40,704 ----a-w c:\windows\system32\drivers\crusoe.sys
+ 2008-04-14 01:54:26 40,960 ----a-w c:\windows\system32\drivers\crusoe.sys
- 2004-08-03 20:59:56 36,352 ----a-w c:\windows\system32\drivers\disk.sys
+ 2008-04-13 18:40:47 36,352 ----a-w c:\windows\system32\drivers\disk.sys
- 2004-08-03 20:59:54 14,208 ----a-w c:\windows\system32\drivers\diskdump.sys
+ 2008-04-13 18:40:44 14,208 ----a-w c:\windows\system32\drivers\diskdump.sys
- 2004-08-19 13:28:34 800,256 ----a-w c:\windows\system32\drivers\dmboot.sys
+ 2008-04-14 01:55:42 800,256 ----a-w c:\windows\system32\drivers\dmboot.sys
- 2004-08-19 13:28:40 154,240 ----a-w c:\windows\system32\drivers\dmio.sys
+ 2008-04-14 01:55:45 154,240 ----a-w c:\windows\system32\drivers\dmio.sys
- 2004-08-04 04:07:40 52,864 ----a-w c:\windows\system32\drivers\DMusic.sys
+ 2008-04-13 18:45:01 52,864 ----a-w c:\windows\system32\drivers\dmusic.sys
- 2004-08-04 04:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
+ 2008-04-13 18:45:14 60,160 ----a-w c:\windows\system32\drivers\drmk.sys
- 2004-08-04 04:07:58 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
+ 2008-04-13 18:45:13 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
- 2004-08-03 21:00:56 71,040 ----a-w c:\windows\system32\drivers\dxg.sys
+ 2008-04-13 18:38:29 71,168 ----a-w c:\windows\system32\drivers\dxg.sys
- 2004-08-03 21:14:18 143,360 ----a-w c:\windows\system32\drivers\fastfat.sys
+ 2008-04-13 19:14:29 143,744 ----a-w c:\windows\system32\drivers\fastfat.sys
- 2004-08-03 20:59:28 27,392 ----a-w c:\windows\system32\drivers\fdc.sys
+ 2008-04-13 18:40:25 27,392 ----a-w c:\windows\system32\drivers\fdc.sys
- 2002-09-10 12:00:00 35,072 ----a-w c:\windows\system32\drivers\fips.sys
+ 2008-04-14 01:50:12 44,672 ----a-w c:\windows\system32\drivers\fips.sys
- 2004-08-03 20:59:28 20,480 ----a-w c:\windows\system32\drivers\flpydisk.sys
+ 2008-04-13 18:40:25 20,480 ----a-w c:\windows\system32\drivers\flpydisk.sys
- 2006-08-21 09:14:58 128,896 ----a-w c:\windows\system32\drivers\fltmgr.sys
+ 2008-04-13 18:32:59 129,792 ----a-w c:\windows\system32\drivers\fltmgr.sys
+ 2008-04-13 18:36:40 46,464 ------w c:\windows\system32\drivers\gagp30kx.sys
- 2004-08-03 22:08:22 10,624 ----a-w c:\windows\system32\drivers\gameenum.sys
+ 2008-04-13 18:45:29 10,624 ----a-w c:\windows\system32\drivers\gameenum.sys
+ 2008-04-13 16:36:05 144,384 ------w c:\windows\system32\drivers\hdaudbus.sys
+ 2008-04-14 01:51:52 25,728 ------w c:\windows\system32\drivers\hidbth.sys
- 2004-08-03 21:08:20 36,224 ----a-w c:\windows\system32\drivers\hidclass.sys
+ 2008-04-13 18:45:26 36,864 ----a-w c:\windows\system32\drivers\hidclass.sys
+ 2008-04-13 18:45:26 19,200 ------w c:\windows\system32\drivers\hidir.sys
- 2004-08-03 21:08:18 24,960 ----a-w c:\windows\system32\drivers\hidparse.sys
+ 2008-04-13 18:45:22 24,960 ----a-w c:\windows\system32\drivers\hidparse.sys
+ 2004-08-04 03:41:48 220,032 ------w c:\windows\system32\drivers\hsfbs2s2.sys
+ 2004-08-04 03:41:50 685,056 ------w c:\windows\system32\drivers\hsfcxts2.sys
+ 2004-08-04 03:41:56 1,041,536 ------w c:\windows\system32\drivers\hsfdpsp2.sys
- 2006-03-17 00:33:10 262,784 ----a-w c:\windows\system32\drivers\http.sys
+ 2008-04-13 18:53:53 264,832 ----a-w c:\windows\system32\drivers\http.sys
- 2004-08-19 13:23:42 53,760 ----a-w c:\windows\system32\drivers\i8042prt.sys
+ 2008-04-14 01:52:35 53,504 ----a-w c:\windows\system32\drivers\i8042prt.sys
- 2004-08-03 21:00:16 41,856 ----a-w c:\windows\system32\drivers\imapi.sys
+ 2008-04-13 18:40:58 42,112 ----a-w c:\windows\system32\drivers\imapi.sys
- 2004-08-19 13:26:22 40,320 ----a-w c:\windows\system32\drivers\intelppm.sys
+ 2008-04-14 01:54:06 40,576 ----a-w c:\windows\system32\drivers\intelppm.sys
- 2004-08-03 21:00:08 29,056 ----a-w c:\windows\system32\drivers\ip6fw.sys
+ 2008-04-13 18:53:34 36,608 ----a-w c:\windows\system32\drivers\ip6fw.sys
- 2004-08-03 21:04:46 20,992 ----a-w c:\windows\system32\drivers\ipinip.sys
+ 2008-04-13 18:57:07 20,864 ----a-w c:\windows\system32\drivers\ipinip.sys
- 2004-09-29 22:28:37 134,912 ----a-w c:\windows\system32\drivers\ipnat.sys
+ 2008-04-13 18:57:15 152,832 ----a-w c:\windows\system32\drivers\ipnat.sys
- 2004-08-03 21:14:30 74,752 ----a-w c:\windows\system32\drivers\ipsec.sys
+ 2008-04-13 19:19:42 75,264 ----a-w c:\windows\system32\drivers\ipsec.sys
+ 2008-04-13 18:45:34 46,592 ------w c:\windows\system32\drivers\irbus.sys
- 2004-08-03 21:00:48 11,264 ----a-w c:\windows\system32\drivers\irenum.sys
+ 2008-04-13 18:54:28 11,264 ----a-w c:\windows\system32\drivers\irenum.sys
- 2002-09-10 12:00:00 36,352 ----a-w c:\windows\system32\drivers\isapnp.sys
+ 2008-04-14 01:54:46 37,760 ----a-w c:\windows\system32\drivers\isapnp.sys
- 2004-08-19 13:28:04 25,088 ----a-w c:\windows\system32\drivers\kbdclass.sys
+ 2008-04-14 01:55:09 25,088 ----a-w c:\windows\system32\drivers\kbdclass.sys
- 2006-06-14 08:47:45 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys
+ 2008-04-13 18:45:09 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys
- 2004-08-04 04:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys
+ 2008-04-13 19:16:36 141,056 ----a-w c:\windows\system32\drivers\ks.sys
- 2004-08-03 20:59:48 92,032 ----a-w c:\windows\system32\drivers\ksecdd.sys
+ 2008-04-13 18:31:43 92,288 ----a-w c:\windows\system32\drivers\ksecdd.sys
+ 2004-08-04 03:41:56 11,868 ------w c:\windows\system32\drivers\mdmxsdk.sys
- 2004-08-19 13:56:12 63,744 ----a-w c:\windows\system32\drivers\mf.sys
+ 2008-04-13 18:36:41 63,744 ----a-w c:\windows\system32\drivers\mf.sys
- 2004-08-19 13:56:12 30,336 ----a-w c:\windows\system32\drivers\modem.sys
+ 2008-04-14 01:49:07 30,336 ----a-w c:\windows\system32\drivers\modem.sys
- 2004-08-19 13:56:12 23,552 ----a-w c:\windows\system32\drivers\mouclass.sys
+ 2008-04-14 01:49:12 23,552 ----a-w c:\windows\system32\drivers\mouclass.sys
- 2004-08-03 20:58:32 42,240 ----a-w c:\windows\system32\drivers\mountmgr.sys
+ 2008-04-13 18:39:46 42,368 ----a-w c:\windows\system32\drivers\mountmgr.sys
- 2007-07-06 10:05:47 72,960 ----a-w c:\windows\system32\drivers\mqac.sys
+ 2008-04-13 18:39:44 92,544 ----a-w c:\windows\system32\drivers\mqac.sys
- 2007-12-18 09:51:35 179,584 ----a-w c:\windows\system32\drivers\mrxdav.sys
+ 2008-04-13 18:32:44 180,608 ----a-w c:\windows\system32\drivers\mrxdav.sys
- 2006-05-05 09:41:45 453,120 ----a-w c:\windows\system32\drivers\mrxsmb.sys
+ 2008-04-13 19:17:01 456,576 ----a-w c:\windows\system32\drivers\mrxsmb.sys
- 2004-08-03 21:00:42 19,072 ----a-w c:\windows\system32\drivers\msfs.sys
+ 2008-04-13 18:32:39 19,072 ----a-w c:\windows\system32\drivers\msfs.sys
- 2004-08-03 21:04:14 35,072 ----a-w c:\windows\system32\drivers\msgpc.sys
+ 2008-04-13 18:56:32 35,072 ----a-w c:\windows\system32\drivers\msgpc.sys
- 2004-08-04 03:58:42 7,552 ----a-w c:\windows\system32\drivers\MSKSSRV.sys
+ 2008-04-13 18:39:52 7,552 ----a-w c:\windows\system32\drivers\mskssrv.sys
- 2004-08-04 03:58:40 5,376 ----a-w c:\windows\system32\drivers\MSPCLOCK.sys
+ 2008-04-13 18:39:50 5,376 ----a-w c:\windows\system32\drivers\mspclock.sys
- 2004-08-04 03:58:42 4,992 ----a-w c:\windows\system32\drivers\MSPQM.sys
+ 2008-04-13 18:39:51 4,992 ----a-w c:\windows\system32\drivers\mspqm.sys
- 2004-08-19 13:56:12 15,488 ----a-w c:\windows\system32\drivers\mssmbios.sys
+ 2008-04-13 18:36:46 15,488 ----a-w c:\windows\system32\drivers\mssmbios.sys
+ 2004-08-04 03:41:40 126,686 ------w c:\windows\system32\drivers\mtlmnt5.sys
+ 2004-08-04 03:41:38 1,309,184 ------w c:\windows\system32\drivers\mtlstrm.sys
+ 2004-08-04 03:29:38 452,736 ------w c:\windows\system32\drivers\mtxparhm.sys
- 2004-08-03 21:15:22 107,904 ----a-w c:\windows\system32\drivers\mup.sys
+ 2008-04-13 19:17:05 105,344 ----a-w c:\windows\system32\drivers\mup.sys
+ 2008-04-13 18:43:55 12,672 ------w c:\windows\system32\drivers\mutohpen.sys
- 2004-08-03 21:14:30 182,912 ----a-w c:\windows\system32\drivers\ndis.sys
+ 2008-04-13 19:20:37 182,656 ----a-w c:\windows\system32\drivers\ndis.sys
- 2002-09-10 12:00:00 9,600 ----a-w c:\windows\system32\drivers\ndistapi.sys
+ 2008-04-13 18:57:27 10,112 ----a-w c:\windows\system32\drivers\ndistapi.sys
- 2004-08-19 13:56:12 12,928 ----a-w c:\windows\system32\drivers\ndisuio.sys
+ 2008-04-13 18:55:58 14,592 ----a-w c:\windows\system32\drivers\ndisuio.sys
- 2004-08-03 21:14:32 91,776 ----a-w c:\windows\system32\drivers\ndiswan.sys
+ 2008-04-13 19:20:42 91,520 ----a-w c:\windows\system32\drivers\ndiswan.sys
- 2002-09-10 12:00:00 38,016 ----a-w c:\windows\system32\drivers\ndproxy.sys
+ 2008-04-13 18:57:29 40,576 ----a-w c:\windows\system32\drivers\ndproxy.sys
- 2004-08-03 21:03:22 34,560 ----a-w c:\windows\system32\drivers\netbios.sys
+ 2008-04-13 18:56:02 34,688 ----a-w c:\windows\system32\drivers\netbios.sys
- 2004-08-03 21:14:38 162,816 ----a-w c:\windows\system32\drivers\netbt.sys
+ 2008-04-13 19:21:00 162,816 ----a-w c:\windows\system32\drivers\netbt.sys
- 2004-08-19 13:56:12 61,824 ----a-w c:\windows\system32\drivers\nic1394.sys
+ 2008-04-13 18:51:25 61,824 ----a-w c:\windows\system32\drivers\nic1394.sys
- 2004-08-03 20:59:52 40,320 ----a-w c:\windows\system32\drivers\nmnt.sys
+ 2008-04-13 18:53:09 40,320 ----a-w c:\windows\system32\drivers\nmnt.sys
- 2004-08-03 21:00:44 30,848 ----a-w c:\windows\system32\drivers\npfs.sys
+ 2008-04-13 18:32:39 30,848 ----a-w c:\windows\system32\drivers\npfs.sys
- 2007-02-09 11:10:35 574,464 ----a-w c:\windows\system32\drivers\ntfs.sys
+ 2008-04-13 19:15:53 574,976 ----a-w c:\windows\system32\drivers\ntfs.sys
+ 2004-08-04 03:41:40 180,360 ------w c:\windows\system32\drivers\ntmtlfax.sys
+ 2004-08-04 03:29:56 1,897,408 ------w c:\windows\system32\drivers\nv4_mini.sys
- 2004-08-03 21:03:36 88,448 ----a-w c:\windows\system32\drivers\nwlnkipx.sys
+ 2008-04-13 18:56:06 88,320 ----a-w c:\windows\system32\drivers\nwlnkipx.sys
- 2006-10-13 10:23:15 163,584 ----a-w c:\windows\system32\drivers\nwrdr.sys
+ 2008-04-13 18:34:12 163,584 ----a-w c:\windows\system32\drivers\nwrdr.sys
- 2004-08-19 13:56:12 46,720 ----a-w c:\windows\system32\drivers\p3.sys
+ 2008-04-14 01:58:34 46,976 ----a-w c:\windows\system32\drivers\p3.sys
- 2004-08-19 13:56:12 80,256 ----a-w c:\windows\system32\drivers\parport.sys
+ 2008-04-14 01:58:36 80,256 ----a-w c:\windows\system32\drivers\parport.sys
- 2002-09-10 12:00:00 18,688 ----a-w c:\windows\system32\drivers\partmgr.sys
+ 2008-04-13 18:40:49 19,712 ----a-w c:\windows\system32\drivers\partmgr.sys
- 2004-08-19 13:18:16 68,992 ----a-w c:\windows\system32\drivers\pci.sys
+ 2008-04-14 01:58:40 68,992 ----a-w c:\windows\system32\drivers\pci.sys
- 2004-08-03 20:59:42 25,088 ----a-w c:\windows\system32\drivers\pciidex.sys
+ 2008-04-13 18:40:29 24,960 ----a-w c:\windows\system32\drivers\pciidex.sys
- 2004-08-19 13:18:20 120,192 ----a-w c:\windows\system32\drivers\pcmcia.sys
+ 2008-04-14 01:58:42 120,448 ----a-w c:\windows\system32\drivers\pcmcia.sys
- 2004-08-04 04:15:50 145,792 ----a-w c:\windows\system32\drivers\portcls.sys
+ 2008-04-13 19:19:41 146,048 ----a-w c:\windows\system32\drivers\portcls.sys
- 2004-08-19 13:56:12 39,552 ----a-w c:\windows\system32\drivers\processr.sys
+ 2008-04-14 01:50:16 40,064 ----a-w c:\windows\system32\drivers\processr.sys
- 2004-08-03 21:04:20 69,120 ----a-w c:\windows\system32\drivers\psched.sys
+ 2008-04-13 18:56:38 69,120 ----a-w c:\windows\system32\drivers\psched.sys
- 2004-08-03 21:14:24 51,328 ----a-w c:\windows\system32\drivers\rasl2tp.sys
+ 2008-04-13 19:19:43 51,328 ----a-w c:\windows\system32\drivers\rasl2tp.sys
- 2004-08-03 21:05:08 41,472 ----a-w c:\windows\system32\drivers\raspppoe.sys
+ 2008-04-13 18:57:32 41,472 ----a-w c:\windows\system32\drivers\raspppoe.sys
- 2004-08-03 21:14:28 48,384 ----a-w c:\windows\system32\drivers\raspptp.sys
+ 2008-04-13 19:19:48 48,384 ----a-w c:\windows\system32\drivers\raspptp.sys
- 2006-05-05 09:47:57 174,592 ----a-w c:\windows\system32\drivers\rdbss.sys
+ 2008-04-13 19:28:39 175,744 ----a-w c:\windows\system32\drivers\rdbss.sys
- 2004-08-04 04:01:16 196,864 ----a-w c:\windows\system32\drivers\rdpdr.sys
+ 2008-04-13 18:32:51 196,224 ----a-w c:\windows\system32\drivers\rdpdr.sys
- 2005-06-10 04:11:21 139,528 ----a-w c:\windows\system32\drivers\rdpwd.sys
+ 2008-04-14 02:19:44 139,656 ----a-w c:\windows\system32\drivers\rdpwd.sys
+ 2004-08-04 03:41:40 13,776 ------w c:\windows\system32\drivers\recagent.sys
- 2004-08-19 14:21:20 58,624 ----a-w c:\windows\system32\drivers\redbook.sys
+ 2008-04-14 01:51:30 58,880 ----a-w c:\windows\system32\drivers\redbook.sys
+ 2008-04-13 18:46:32 59,136 ------w c:\windows\system32\drivers\rfcomm.sys
- 2008-05-08 12:28:49 202,752 ----a-w c:\windows\system32\drivers\rmcast.sys
+ 2008-05-08 14:02:52 203,136 ----a-w c:\windows\system32\drivers\rmcast.sys
- 2004-08-03 21:04:32 30,080 ----a-w c:\windows\system32\drivers\rndismp.sys
+ 2008-04-13 18:56:49 30,592 ----a-w c:\windows\system32\drivers\rndismp.sys
+ 2008-04-13 18:56:49 30,592 ------w c:\windows\system32\drivers\rndismpx.sys
+ 2004-08-04 03:29:52 166,912 ------w c:\windows\system32\drivers\s3gnbm.sys
- 2004-08-03 20:59:42 96,256 ----a-w c:\windows\system32\drivers\scsiport.sys
+ 2008-04-13 18:40:30 96,384 ----a-w c:\windows\system32\drivers\scsiport.sys
- 2004-08-03 21:07:48 67,584 ----a-w c:\windows\system32\drivers\sdbus.sys
+ 2008-04-13 18:36:44 79,232 ----a-w c:\windows\system32\drivers\sdbus.sys
- 2004-08-03 20:59:08 15,488 ----a-w c:\windows\system32\drivers\serenum.sys
+ 2008-04-13 18:40:12 15,744 ----a-w c:\windows\system32\drivers\serenum.sys
- 2004-08-19 13:23:46 66,176 ----a-w c:\windows\system32\drivers\serial.sys
+ 2008-04-14 01:53:17 65,792 ----a-w c:\windows\system32\drivers\serial.sys
- 2004-08-03 20:59:56 11,136 ----a-w c:\windows\system32\drivers\sffdisk.sys
+ 2008-04-13 18:40:47 11,904 ----a-w c:\windows\system32\drivers\sffdisk.sys
+ 2008-04-13 18:40:48 10,240 ------w c:\windows\system32\drivers\sffp_mmc.sys
- 2004-08-03 20:59:56 10,240 ----a-w c:\windows\system32\drivers\sffp_sd.sys
+ 2008-04-13 18:40:47 11,008 ----a-w c:\windows\system32\drivers\sffp_sd.sys
- 2004-08-03 20:59:56 11,392 ----a-w c:\windows\system32\drivers\sfloppy.sys
+ 2008-04-13 18:40:48 11,392 ----a-w c:\windows\system32\drivers\sfloppy.sys
+ 2008-04-14 02:18:36 3,901 ------w c:\windows\system32\drivers\siint5.dll
+ 2008-04-13 18:36:39 40,960 ------w c:\windows\system32\drivers\sisagp.sys
+ 2004-08-04 03:41:42 129,535 ------w c:\windows\system32\drivers\slnt7554.sys
+ 2004-08-04 03:41:44 404,990 ------w c:\windows\system32\drivers\slntamr.sys
+ 2004-08-04 03:41:46 95,424 ------w c:\windows\system32\drivers\slnthal.sys
+ 2004-08-04 03:41:46 13,240 ------w c:\windows\system32\drivers\slwdmsup.sys
+ 2008-04-13 18:36:34 5,888 ------w c:\windows\system32\drivers\smbali.sys
- 2004-08-19 13:56:12 25,472 ----a-w c:\windows\system32\drivers\sonydcam.sys
+ 2008-04-13 18:46:07 25,344 ----a-w c:\windows\system32\drivers\sonydcam.sys
- 2006-06-14 08:47:46 6,400 ----a-w c:\windows\system32\drivers\splitter.sys
+ 2008-04-13 18:45:07 6,272 ----a-w c:\windows\system32\drivers\splitter.sys
- 2004-08-19 13:33:36 73,600 ----a-w c:\windows\system32\drivers\sr.sys
+ 2008-04-14 01:58:43 73,472 ----a-w c:\windows\system32\drivers\sr.sys
- 2006-08-14 10:34:41 332,928 ----a-w c:\windows\system32\drivers\srv.sys
+ 2008-04-13 19:15:11 334,848 ----a-w c:\windows\system32\drivers\srv.sys
- 2004-08-04 04:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys
+ 2008-04-13 18:45:15 49,408 ----a-w c:\windows\system32\drivers\stream.sys
- 2004-08-19 13:56:12 4,352 ----a-w c:\windows\system32\drivers\swenum.sys
+ 2008-04-13 18:39:53 4,352 ----a-w c:\windows\system32\drivers\swenum.sys
- 2001-08-18 03:00:52 54,272 ----a-w c:\windows\system32\drivers\swmidi.sys
+ 2008-04-13 18:45:09 56,576 ----a-w c:\windows\system32\drivers\swmidi.sys
- 2004-08-04 04:15:56 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys
+ 2008-04-13 19:15:55 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys
- 2004-08-03 21:00:00 14,976 ----a-w c:\windows\system32\drivers\tape.sys
+ 2008-04-13 18:40:50 14,976 ----a-w c:\windows\system32\drivers\tape.sys
- 2008-06-20 10:45:13 360,320 ----a-w c:\windows\system32\drivers\tcpip.sys
+ 2008-06-20 11:51:12 361,600 ----a-w c:\windows\system32\drivers\tcpip.sys
- 2008-06-20 09:52:06 225,920 ----a-w c:\windows\system32\drivers\tcpip6.sys
+ 2008-06-20 11:08:27 225,856 ----a-w c:\windows\system32\drivers\tcpip6.sys
- 2004-08-03 21:07:50 18,560 ----a-w c:\windows\system32\drivers\tdi.sys
+ 2008-04-13 19:00:05 19,072 ----a-w c:\windows\system32\drivers\tdi.sys
- 2004-08-19 13:43:38 12,040 ----a-w c:\windows\system32\drivers\tdpipe.sys
+ 2008-04-14 02:19:42 12,040 ----a-w c:\windows\system32\drivers\tdpipe.sys
- 2004-08-19 13:43:38 21,896 ----a-w c:\windows\system32\drivers\tdtcp.sys
+ 2008-04-14 02:19:43 21,896 ----a-w c:\windows\system32\drivers\tdtcp.sys
- 2004-08-19 20:43:36 40,840 ----a-w c:\windows\system32\drivers\termdd.sys
+ 2008-04-14 02:19:42 40,840 ----a-w c:\windows\system32\drivers\termdd.sys
- 2004-08-19 13:56:12 12,416 ----a-w c:\windows\system32\drivers\tunmp.sys
+ 2008-04-13 18:56:01 12,288 ----a-w c:\windows\system32\drivers\tunmp.sys
- 2004-08-03 22:07:44 44,672 ----a-w c:\windows\system32\drivers\UAGP35.SYS
+ 2008-04-13 18:36:40 44,672 ----a-w c:\windows\system32\drivers\uagp35.sys
- 2004-08-03 21:00:32 66,176 ----a-w c:\windows\system32\drivers\udfs.sys
+ 2008-04-13 18:32:36 66,048 ----a-w c:\windows\system32\drivers\udfs.sys
- 2004-08-03 20:58:34 209,408 ----a-w c:\windows\system32\drivers\update.sys
+ 2008-04-13 18:39:46 384,768 ----a-w c:\windows\system32\drivers\update.sys
- 2004-08-03 21:04:34 12,672 ----a-w c:\windows\system32\drivers\usb8023.sys
+ 2008-04-13 18:56:49 12,800 ----a-w c:\windows\system32\drivers\usb8023.sys
+ 2008-04-13 18:56:49 12,800 ------w c:\windows\system32\drivers\usb8023x.sys
- 2002-09-10 12:00:00 23,808 ----a-w c:\windows\system32\drivers\usbcamd.sys
+ 2008-04-13 18:45:40 25,600 ----a-w c:\windows\system32\drivers\usbcamd.sys
- 2002-09-10 12:00:00 23,936 ----a-w c:\windows\system32\drivers\usbcamd2.sys
+ 2008-04-13 18:45:41 25,728 ----a-w c:\windows\system32\drivers\usbcamd2.sys
- 2004-08-03 21:08:38 26,624 ----a-w c:\windows\system32\drivers\usbehci.sys
+ 2008-04-13 18:45:35 30,208 ----a-w c:\windows\system32\drivers\usbehci.sys
- 2004-08-03 21:08:44 57,600 ----a-w c:\windows\system32\drivers\usbhub.sys
+ 2008-04-13 18:45:37 59,520 ----a-w c:\windows\system32\drivers\usbhub.sys
- 2004-08-19 13:56:12 16,000 ----a-w c:\windows\system32\drivers\usbintel.sys
+ 2008-04-13 18:45:43 15,872 ----a-w c:\windows\system32\drivers\usbintel.sys
- 2004-08-03 21:08:38 17,024 ----a-w c:\windows\system32\drivers\usbohci.sys
+ 2008-04-13 18:45:35 17,152 ----a-w c:\windows\system32\drivers\usbohci.sys
- 2004-08-03 21:08:44 142,976 ----a-w c:\windows\system32\drivers\usbport.sys
+ 2008-04-13 18:45:36 143,872 ----a-w c:\windows\system32\drivers\usbport.sys
- 2004-08-04 03:01:26 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys
+ 2008-04-13 18:47:37 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys
- 2004-08-04 02:58:46 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys
+ 2008-04-13 18:45:34 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys
- 2004-08-04 04:08:48 26,496 ----a-w c:\windows\system32\drivers\USBSTOR.SYS
+ 2008-04-13 18:45:38 26,368 ----a-w c:\windows\system32\drivers\usbstor.sys
+ 2008-04-13 18:46:20 121,984 ------w c:\windows\system32\drivers\usbvideo.sys
+ 2008-04-14 02:18:45 11,325 ------w c:\windows\system32\drivers\vchnt5.dll
- 2004-08-03 21:07:08 20,992 ----a-w c:\windows\system32\drivers\vga.sys
+ 2008-04-13 18:44:40 20,992 ----a-w c:\windows\system32\drivers\vga.sys
+ 2008-04-13 18:36:40 42,240 ------w c:\windows\system32\drivers\viaagp.sys
- 2004-08-03 21:07:06 79,744 ----a-w c:\windows\system32\drivers\videoprt.sys
+ 2008-04-13 18:44:40 81,664 ----a-w c:\windows\system32\drivers\videoprt.sys
- 2004-08-19 13:28:08 53,248 ----a-w c:\windows\system32\drivers\volsnap.sys
+ 2008-04-14 01:51:16 53,248 ----a-w c:\windows\system32\drivers\volsnap.sys
+ 2008-04-13 18:43:55 14,208 ------w c:\windows\system32\drivers\wacompen.sys
+ 2004-08-04 03:29:40 11,807 ------w c:\windows\system32\drivers\wadv07nt.sys
+ 2004-08-04 03:29:40 11,295 ------w c:\windows\system32\drivers\wadv08nt.sys
+ 2004-08-04 03:29:42 11,871 ------w c:\windows\system32\drivers\wadv09nt.sys
+ 2004-08-04 03:29:42 11,935 ------w c:\windows\system32\drivers\wadv11nt.sys
- 2004-08-03 21:04:58 34,560 ----a-w c:\windows\system32\drivers\wanarp.sys
+ 2008-04-13 18:57:21 34,560 ----a-w c:\windows\system32\drivers\wanarp.sys
+ 2004-08-04 03:29:46 22,271 ------w c:\windows\system32\drivers\watv06nt.sys
+ 2004-08-04 03:29:46 25,471 ------w c:\windows\system32\drivers\watv10nt.sys
- 2006-06-14 09:00:45 82,944 ----a-w c:\windows\system32\drivers\wdmaud.sys
+ 2008-04-13 19:17:18 83,072 ----a-w c:\windows\system32\drivers\wdmaud.sys
- 2004-08-19 13:42:04 14,336 ----a-w c:\windows\system32\drprov.dll
+ 2008-04-14 02:18:20 14,336 ----a-w c:\windows\system32\drprov.dll
- 2004-08-19 13:42:04 16,384 ----a-w c:\windows\system32\ds32gt.dll
+ 2008-04-14 02:18:20 16,384 ----a-w c:\windows\system32\ds32gt.dll
- 2004-08-19 13:42:04 181,760 ----a-w c:\windows\system32\dsdmo.dll
+ 2008-04-14 02:18:20 181,248 ----a-w c:\windows\system32\dsdmo.dll
- 2004-08-19 13:42:04 74,752 ----a-w c:\windows\system32\dsdmoprp.dll
+ 2008-04-14 02:18:20 74,752 ----a-w c:\windows\system32\dsdmoprp.dll
- 2004-08-19 13:42:04 93,184 ----a-w c:\windows\system32\dskquota.dll
+ 2008-04-14 02:18:20 93,184 ----a-w c:\windows\system32\dskquota.dll
- 2002-09-10 12:00:00 148,480 ----a-w c:\windows\system32\dskquoui.dll
+ 2008-04-14 02:18:20 159,744 ----a-w c:\windows\system32\dskquoui.dll
- 2004-08-19 13:42:06 367,616 ----a-w c:\windows\system32\dsound.dll
+ 2008-04-14 02:18:20 367,616 ----a-w c:\windows\system32\dsound.dll
- 2004-08-19 13:42:06 1,294,336 ----a-w c:\windows\system32\dsound3d.dll
+ 2008-04-14 02:18:20 1,293,824 ----a-w c:\windows\system32\dsound3d.dll
- 2004-08-19 13:42:06 144,896 ----a-w c:\windows\system32\dsprop.dll
+ 2008-04-14 02:18:20 145,408 ----a-w c:\windows\system32\dsprop.dll
- 2004-08-19 13:38:38 4,096 ----a-w c:\windows\system32\dsprpres.dll
+ 2008-04-14 01:56:41 4,096 ----a-w c:\windows\system32\dsprpres.dll
- 2004-08-19 13:42:06 240,640 ----a-w c:\windows\system32\dsquery.dll
+ 2008-04-14 02:18:20 240,128 ----a-w c:\windows\system32\dsquery.dll
- 2004-08-19 13:42:06 52,224 ----a-w c:\windows\system32\dssec.dll
+ 2008-04-14 02:18:20 52,224 ----a-w c:\windows\system32\dssec.dll
- 2004-08-03 20:31:44 137,216 ----a-w c:\windows\system32\dssenh.dll
+ 2008-04-13 17:37:57 138,752 ----a-w c:\windows\system32\dssenh.dll
- 2004-08-19 13:42:06 113,664 ----a-w c:\windows\system32\dsuiext.dll
+ 2008-04-14 02:18:20 113,664 ----a-w c:\windows\system32\dsuiext.dll
- 2004-08-19 13:42:06 19,456 ----a-w c:\windows\system32\dswave.dll
+ 2008-04-14 02:18:20 19,456 ----a-w c:\windows\system32\dswave.dll
- 2004-08-19 13:42:44 10,752 ----a-w c:\windows\system32\dumprep.exe
+ 2008-04-14 02:18:55 10,752 ----a-w c:\windows\system32\dumprep.exe
- 2004-08-19 13:42:06 304,128 ----a-w c:\windows\system32\duser.dll
+ 2008-04-14 02:18:20 304,128 ----a-w c:\windows\system32\duser.dll
- 2004-08-19 13:42:44 17,920 ----a-w c:\windows\system32\dvdupgrd.exe
+ 2008-04-14 02:18:55 17,920 ----a-w c:\windows\system32\dvdupgrd.exe
- 2004-08-19 13:42:44 180,224 ----a-w c:\windows\system32\dwwin.exe
+ 2008-04-14 02:18:55 180,224 ----a-w c:\windows\system32\dwwin.exe
- 2004-08-19 13:42:06 619,008 ----a-w c:\windows\system32\dx7vb.dll
+ 2008-04-14 02:18:20 619,008 ----a-w c:\windows\system32\dx7vb.dll
- 2004-08-19 13:42:06 1,227,264 ----a-w c:\windows\system32\dx8vb.dll
+ 2008-04-14 02:18:20 1,227,264 ----a-w c:\windows\system32\dx8vb.dll
- 2004-08-19 13:42:46 1,298,432 ----a-w c:\windows\system32\dxdiag.exe
+ 2008-04-14 02:18:56 1,298,432 ----a-w c:\windows\system32\dxdiag.exe
- 2004-08-19 13:42:06 2,113,536 ----a-w c:\windows\system32\dxdiagn.dll
+ 2008-04-14 02:18:20 2,113,536 ----a-w c:\windows\system32\dxdiagn.dll
- 2006-08-24 17:17:24 499,766 ----a-w c:\windows\system32\dxmasf.dll
+ 2008-04-14 02:18:20 499,766 ----a-w c:\windows\system32\dxmasf.dll
- 2008-06-23 15:40:00 357,888 ----a-w c:\windows\system32\dxtmsft.dll
+ 2007-08-13 22:35:46 346,624 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-06-23 15:40:00 205,312 ----a-w c:\windows\system32\dxtrans.dll
+ 2007-08-13 22:35:38 214,528 ----a-w c:\windows\system32\dxtrans.dll
+ 2008-04-14 02:18:20 30,720 ------w c:\windows\system32\eapolqec.dll
+ 2008-04-14 02:18:20 184,832 ------w c:\windows\system32\eapp3hst.dll
+ 2008-04-14 02:18:20 126,976 ------w c:\windows\system32\eappcfg.dll
+ 2008-04-14 02:18:21 94,720 ------w c:\windows\system32\eappgnui.dll
+ 2008-04-14 02:18:21 179,712 ------w c:\windows\system32\eapphost.dll
+ 2008-04-14 02:18:21 40,960 ------w c:\windows\system32\eappprxy.dll
+ 2008-04-14 02:18:21 59,392 ------w c:\windows\system32\eapqec.dll
+ 2008-04-14 02:18:21 33,792 ------w c:\windows\system32\eapsvc.dll
- 2004-08-19 13:42:06 27,136 ----a-w c:\windows\system32\efsadu.dll
+ 2008-04-14 02:18:21 27,136 ----a-w c:\windows\system32\efsadu.dll
- 2004-08-19 13:42:08 186,368 ----a-w c:\windows\system32\els.dll
+ 2008-04-14 02:18:21 186,368 ----a-w c:\windows\system32\els.dll
- 2004-08-19 13:42:08 20,480 ----a-w c:\windows\system32\encapi.dll
+ 2008-04-14 02:18:21 20,480 ----a-w c:\windows\system32\encapi.dll
- 2004-08-19 13:42:08 186,368 ----a-w c:\windows\system32\encdec.dll
+ 2008-04-14 02:18:21 186,880 ----a-w c:\windows\system32\encdec.dll
- 2004-08-19 13:42:08 23,040 ----a-w c:\windows\system32\ersvc.dll
+ 2008-04-14 02:18:21 23,040 ----a-w c:\windows\system32\ersvc.dll
- 2008-07-07 20:31:19 253,952 ----a-w c:\windows\system32\es.dll
+ 2008-07-07 20:27:59 253,952 ----a-w c:\windows\system32\es.dll
+ 2008-04-14 02:18:24 16,384 ------w c:\windows\system32\es\microsoft.managementconsole.resources.dll
+ 2008-04-14 02:18:24 36,864 ------w c:\windows\system32\es\mmcex.resources.dll
+ 2008-04-14 02:18:24 5,120 ------w c:\windows\system32\es\mmcfxcommon.resources.dll
- 2005-10-20 22:26:00 1,095,168 ----a-w c:\windows\system32\esent.dll
+ 2008-04-14 02:18:21 1,095,168 ----a-w c:\windows\system32\esent.dll
- 2004-08-19 13:42:46 195,072 ----a-w c:\windows\system32\eudcedit.exe
+ 2008-04-14 02:18:56 195,072 ----a-w c:\windows\system32\eudcedit.exe
- 2004-08-19 13:42:46 52,224 ----a-w c:\windows\system32\eventcreate.exe
+ 2008-04-14 02:18:56 52,736 ----a-w c:\windows\system32\eventcreate.exe
- 2004-08-19 13:42:08 55,808 ----a-w c:\windows\system32\eventlog.dll
+ 2008-04-14 02:18:21 56,320 ----a-w c:\windows\system32\eventlog.dll
- 2002-09-10 12:00:00 81,408 ----a-w c:\windows\system32\eventtriggers.exe
+ 2008-04-14 02:18:56 86,528 ----a-w c:\windows\system32\eventtriggers.exe
- 2004-08-19 13:42:08 380,957 ----a-w c:\windows\system32\expsrv.dll
+ 2008-04-14 02:18:21 380,445 ----a-w c:\windows\system32\expsrv.dll
- 2008-06-23 15:40:00 55,808 ----a-w c:\windows\system32\extmgr.dll
+ 2007-08-13 22:54:10 131,584 ----a-w c:\windows\system32\extmgr.dll
- 2004-08-19 13:42:48 45,568 ----a-w c:\windows\system32\extrac32.exe
+ 2008-04-14 02:18:57 24,064 ----a-w c:\windows\system32\extrac32.exe
- 2002-09-10 12:00:00 121,856 ----a-w c:\windows\system32\exts.dll
+ 2008-04-14 02:18:21 125,952 ----a-w c:\windows\system32\exts.dll
- 2004-08-19 13:42:08 80,896 ----a-w c:\windows\system32\faultrep.dll
+ 2008-04-14 02:18:21 80,896 ----a-w c:\windows\system32\faultrep.dll
+ 2008-04-14 02:18:57 20,992 ------w c:\windows\system32\faxpatch.exe
- 2002-09-10 12:00:00 118,784 ----a-w c:\windows\system32\fde.dll
+ 2008-04-14 02:18:21 125,952 ----a-w c:\windows\system32\fde.dll
- 2004-08-19 13:42:08 75,776 ----a-w c:\windows\system32\fdeploy.dll
+ 2008-04-14 02:18:21 75,776 ----a-w c:\windows\system32\fdeploy.dll
- 2004-08-19 13:42:08 21,504 ----a-w c:\windows\system32\feclient.dll
+ 2008-04-14 02:18:21 21,504 ----a-w c:\windows\system32\feclient.dll
- 2004-08-19 13:42:08 345,600 ----a-w c:\windows\system32\filemgmt.dll
+ 2008-04-14 02:18:21 345,600 ----a-w c:\windows\system32\filemgmt.dll
- 2004-08-19 13:42:48 28,672 ----a-w c:\windows\system32\findstr.exe
+ 2008-04-14 02:18:57 28,672 ----a-w c:\windows\system32\findstr.exe
- 2004-08-19 13:42:08 88,576 ----a-w c:\windows\system32\fldrclnr.dll
+ 2008-04-14 02:18:21 88,576 ----a-w c:\windows\system32\fldrclnr.dll
- 2006-08-21 12:27:46 16,896 ----a-w c:\windows\system32\fltlib.dll
+ 2008-04-14 02:18:21 16,896 ----a-w c:\windows\system32\fltlib.dll
- 2006-08-21 09:14:58 23,040 ----a-w c:\windows\system32\fltmc.exe
+ 2008-04-14 02:18:57 23,040 ----a-w c:\windows\system32\fltmc.exe
- 1999-10-18 08:01:42 1,129,232 ----a-w c:\windows\system32\FM20.DLL
+ 2003-09-25 16:07:00 1,139,472 ----a-w c:\windows\system32\FM20.DLL
- 2001-03-01 15:45:52 28,944 ----a-w c:\windows\system32\FM20ESN.DLL
+ 2003-10-29 19:03:56 28,160 ----a-w c:\windows\system32\FM20ESN.DLL
- 2008-08-27 20:08:51 232,776 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2008-09-28 18:44:22 233,576 ----a-w c:\windows\system32\FNTCACHE.DAT
- 2004-08-19 13:42:08 385,024 ----a-w c:\windows\system32\fontext.dll
+ 2008-04-14 02:18:21 385,024 ----a-w c:\windows\system32\fontext.dll
- 2005-10-17 21:21:06 80,896 ----a-w c:\windows\system32\fontsub.dll
+ 2008-04-14 02:18:21 80,896 ----a-w c:\windows\system32\fontsub.dll
- 2004-08-19 13:42:48 21,504 ----a-w c:\windows\system32\fontview.exe
+ 2008-04-14 02:18:57 21,504 ----a-w c:\windows\system32\fontview.exe
- 2002-09-10 12:00:00 7,680 ----a-w c:\windows\system32\forcedos.exe
+ 2008-04-14 02:18:57 8,192 ----a-w c:\windows\system32\forcedos.exe
- 2002-09-10 12:00:00 25,600 ----a-w c:\windows\system32\format.com
+ 2008-04-14 02:19:18 29,696 ----a-w c:\windows\system32\format.com
- 2004-08-19 13:38:48 9,344 ----a-w c:\windows\system32\framebuf.dll
+ 2008-04-14 02:16:40 9,344 ----a-w c:\windows\system32\framebuf.dll
- 2004-08-19 13:42:48 193,024 ----a-w c:\windows\system32\fsquirt.exe
+ 2008-04-14 02:18:57 193,024 ----a-w c:\windows\system32\fsquirt.exe
- 2004-08-19 13:42:48 45,568 ----a-w c:\windows\system32\ftp.exe
+ 2008-04-14 02:18:58 45,568 ----a-w c:\windows\system32\ftp.exe
- 2004-08-19 13:42:08 60,416 ----a-w c:\windows\system32\fwcfg.dll
+ 2008-04-14 02:18:21 60,416 ----a-w c:\windows\system32\fwcfg.dll
- 2008-02-20 06:51:29 282,624 ----a-w c:\windows\system32\gdi32.dll
+ 2008-04-14 02:18:21 285,184 ----a-w c:\windows\system32\gdi32.dll
- 2002-09-10 12:00:00 57,344 ----a-w c:\windows\system32\getmac.exe
+ 2008-04-14 02:18:58 61,952 ----a-w c:\windows\system32\getmac.exe
- 2004-08-19 13:42:08 123,904 ----a-w c:\windows\system32\glu32.dll
+ 2008-04-14 02:18:21 123,904 ----a-w c:\windows\system32\glu32.dll
- 2004-08-19 13:42:10 574,976 ----a-w c:\windows\system32\gpedit.dll
+ 2008-04-14 02:18:21 574,976 ----a-w c:\windows\system32\gpedit.dll
- 2004-08-19 13:38:52 10,240 ----a-w c:\windows\system32\gpkrsrc.dll
+ 2008-04-14 01:51:24 10,240 ----a-w c:\windows\system32\gpkrsrc.dll
- 2004-08-19 13:42:50 123,392 ----a-w c:\windows\system32\gpresult.exe
+ 2008-04-14 02:18:58 124,416 ----a-w c:\windows\system32\gpresult.exe
- 2004-08-19 13:42:10 201,728 ----a-w c:\windows\system32\gptext.dll
+ 2008-04-14 02:18:21 202,752 ----a-w c:\windows\system32\gptext.dll
- 2004-08-19 13:42:50 39,424 ----a-w c:\windows\system32\grpconv.exe
+ 2008-04-14 02:18:58 39,424 ----a-w c:\windows\system32\grpconv.exe
- 2004-08-19 13:42:10 614,912 ----a-w c:\windows\system32\h323msp.dll
+ 2008-04-14 02:18:21 614,912 ----a-w c:\windows\system32\h323msp.dll
- 2004-08-03 20:59:10 131,968 ----a-w c:\windows\system32\hal.dll
+ 2008-04-13 18:31:28 131,840 ----a-w c:\windows\system32\HAL.DLL
- 2004-08-19 13:42:10 7,168 ----a-w c:\windows\system32\hccoin.dll
+ 2008-04-14 02:18:21 7,168 ----a-w c:\windows\system32\hccoin.dll
- 2002-09-10 12:00:00 15,872 ----a-w c:\windows\system32\help.exe
+ 2008-04-14 02:18:58 16,896 ----a-w c:\windows\system32\help.exe
- 2005-05-27 02:08:05 41,472 ----a-w c:\windows\system32\hhsetup.dll
+ 2008-04-14 02:18:21 41,472 ----a-w c:\windows\system32\hhsetup.dll
- 2004-08-19 13:56:12 20,992 ----a-w c:\windows\system32\hid.dll
+ 2008-04-14 02:18:21 20,992 ----a-w c:\windows\system32\hid.dll
- 2006-07-21 08:28:15 72,704 ----a-w c:\windows\system32\hlink.dll
+ 2008-04-14 02:18:21 72,704 ----a-w c:\windows\system32\hlink.dll
- 2004-08-19 13:42:10 347,136 ----a-w c:\windows\system32\hnetcfg.dll
+ 2008-04-14 02:18:21 347,136 ----a-w c:\windows\system32\hnetcfg.dll
- 2004-08-19 13:42:10 334,336 ----a-w c:\windows\system32\hnetwiz.dll
+ 2008-04-14 02:18:21 334,336 ----a-w c:\windows\system32\hnetwiz.dll
- 2004-08-19 13:42:10 145,920 ----a-w c:\windows\system32\hotplug.dll
+ 2008-04-14 02:18:21 145,920 ----a-w c:\windows\system32\hotplug.dll
+ 2008-04-14 02:18:21 32,285 ------w c:\windows\system32\hsfcisp2.dll
- 2004-08-19 13:42:10 24,576 ----a-w c:\windows\system32\httpapi.dll
+ 2008-04-14 02:18:21 24,576 ----a-w c:\windows\system32\httpapi.dll
- 2004-08-19 13:42:10 43,008 ----a-w c:\windows\system32\htui.dll
+ 2008-04-14 02:18:22 43,008 ----a-w c:\windows\system32\htui.dll
- 2004-11-17 17:42:32 353,280 ----a-w c:\windows\system32\hypertrm.dll
+ 2008-04-14 02:18:22 353,280 ----a-w c:\windows\system32\hypertrm.dll
- 2004-08-19 13:42:10 119,808 ----a-w c:\windows\system32\iasrad.dll
+ 2008-04-14 02:18:22 119,808 ----a-w c:\windows\system32\iasrad.dll
- 2004-08-19 13:42:10 11,264 ----a-w c:\windows\system32\icaapi.dll
+ 2008-04-14 02:18:22 11,264 ----a-w c:\windows\system32\icaapi.dll
+ 2007-08-13 22:36:26 61,952 ------w c:\windows\system32\icardie.dll
- 2004-08-19 13:42:10 80,384 ----a-w c:\windows\system32\iccvid.dll
+ 2008-04-14 02:18:22 80,384 ----a-w c:\windows\system32\iccvid.dll
- 2005-06-29 01:49:43 254,976 ----a-w c:\windows\system32\icm32.dll
+ 2008-04-14 02:18:22 254,976 ----a-w c:\windows\system32\icm32.dll
- 2004-08-19 13:38:58 3,584 ----a-w c:\windows\system32\icmp.dll
+ 2008-04-14 02:16:45 3,584 ----a-w c:\windows\system32\icmp.dll
- 2004-08-19 13:42:10 73,728 ----a-w c:\windows\system32\icwdial.dll
+ 2008-04-14 02:18:22 73,728 ----a-w c:\windows\system32\icwdial.dll
- 2004-08-19 13:42:10 65,536 ----a-w c:\windows\system32\icwphbk.dll
+ 2008-04-14 02:18:22 65,536 ----a-w c:\windows\system32\icwphbk.dll
+ 2006-06-29 12:05:44 26,112 ------w c:\windows\system32\idndl.dll
- 2004-08-19 13:42:10 121,856 ----a-w c:\windows\system32\idq.dll
+ 2008-04-14 02:18:22 121,856 ----a-w c:\windows\system32\idq.dll
- 2004-08-19 13:42:50 34,304 ----a-w c:\windows\system32\ie4uinit.exe
+ 2007-08-13 22:39:06 54,784 ----a-w c:\windows\system32\ie4uinit.exe
- 2004-08-19 13:42:10 139,264 ----a-w c:\windows\system32\ieakeng.dll
+ 2007-08-13 22:39:26 152,064 ----a-w c:\windows\system32\ieakeng.dll
- 2004-08-19 13:42:10 221,184 ----a-w c:\windows\system32\ieaksie.dll
+ 2007-08-13 22:39:54 229,376 ----a-w c:\windows\system32\ieaksie.dll
- 2002-09-10 12:00:00 241,664 ----a-w c:\windows\system32\ieakui.dll
+ 2007-08-13 21:56:54 161,792 ----a-w c:\windows\system32\ieakui.dll
+ 2007-02-12 20:10:12 2,451,312 ------w c:\windows\system32\ieapfltr.dat
+ 2007-07-11 16:27:48 383,488 ------w c:\windows\system32\ieapfltr.dll
- 2004-08-19 13:42:10 323,584 ----a-w c:\windows\system32\iedkcs32.dll
+ 2007-08-13 22:39:50 382,976 ----a-w c:\windows\system32\iedkcs32.dll
- 2004-08-19 13:42:10 81,920 ----a-w c:\windows\system32\ieencode.dll
+ 2008-04-14 02:18:22 81,920 ----a-w c:\windows\system32\ieencode.dll
+ 2007-08-13 22:54:10 6,049,280 ------w c:\windows\system32\ieframe.dll
- 2008-06-23 15:40:01 251,392 ----a-w c:\windows\system32\iepeers.dll
+ 2007-08-13 22:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll
- 2004-08-19 13:42:10 49,152 ----a-w c:\windows\system32\iernonce.dll
+ 2007-08-13 22:39:10 43,008 ----a-w c:\windows\system32\iernonce.dll
+ 2007-08-13 22:34:04 266,752 ------w c:\windows\system32\iertutil.dll
- 2004-08-19 13:42:10 63,488 ----a-w c:\windows\system32\iesetup.dll
+ 2007-08-13 22:39:12 55,296 ----a-w c:\windows\system32\iesetup.dll
+ 2007-08-13 22:39:10 13,312 ----a-w c:\windows\system32\ieudinit.exe
+ 2007-08-13 22:54:10 180,736 ------w c:\windows\system32\ieui.dll
- 2004-08-19 13:42:50 114,688 ----a-w c:\windows\system32\iexpress.exe
+ 2008-04-14 02:18:59 114,688 ----a-w c:\windows\system32\iexpress.exe
- 2004-08-19 13:42:10 140,800 ----a-w c:\windows\system32\ifmon.dll
+ 2008-04-14 02:18:22 140,800 ----a-w c:\windows\system32\ifmon.dll
- 2004-08-19 13:42:10 8,192 ----a-w c:\windows\system32\igmpagnt.dll
+ 2008-04-14 02:18:22 8,192 ----a-w c:\windows\system32\igmpagnt.dll
- 2004-08-19 13:42:10 81,920 ----a-w c:\windows\system32\ils.dll
+ 2008-04-14 02:18:22 81,920 ----a-w c:\windows\system32\ils.dll
- 2004-08-19 13:42:10 144,384 ----a-w c:\windows\system32\imagehlp.dll
+ 2008-04-14 02:18:22 144,384 ----a-w c:\windows\system32\imagehlp.dll
- 2004-08-19 13:42:52 150,016 ----a-w c:\windows\system32\imapi.exe
+ 2008-04-14 02:18:59 150,528 ----a-w c:\windows\system32\imapi.exe
- 2004-08-19 13:42:10 36,921 ----a-w c:\windows\system32\imeshare.dll
+ 2008-04-14 02:18:22 36,921 ----a-w c:\windows\system32\imeshare.dll
- 2004-08-19 13:42:10 35,840 ----a-w c:\windows\system32\imgutil.dll
+ 2007-08-13 22:36:06 36,352 ----a-w c:\windows\system32\imgutil.dll
- 2004-08-19 13:42:10 110,080 ----a-w c:\windows\system32\imm32.dll
+ 2008-04-14 02:18:22 110,080 ----a-w c:\windows\system32\imm32.dll
- 2004-08-19 13:42:10 282,624 ----a-w c:\windows\system32\inetcfg.dll
+ 2008-04-14 02:18:22 282,624 ----a-w c:\windows\system32\inetcfg.dll
- 2008-04-11 18:51:06 683,520 ----a-w c:\windows\system32\inetcomm.dll
+ 2008-04-11 19:05:25 691,712 ----a-w c:\windows\system32\inetcomm.dll
- 2004-08-19 13:42:10 33,280 ----a-w c:\windows\system32\inetmib1.dll
+ 2008-04-14 02:18:23 32,768 ----a-w c:\windows\system32\inetmib1.dll
- 2004-08-19 13:42:10 75,264 ----a-w c:\windows\system32\inetpp.dll
+ 2008-04-14 02:18:23 75,264 ----a-w c:\windows\system32\inetpp.dll
- 2004-08-19 13:42:10 16,384 ----a-w c:\windows\system32\inetppui.dll
+ 2008-04-14 02:18:23 16,384 ----a-w c:\windows\system32\inetppui.dll
- 2004-08-19 13:39:04 50,176 ----a-w c:\windows\system32\inetres.dll
+ 2008-04-14 01:53:43 50,176 ----a-w c:\windows\system32\inetres.dll
+ 2008-04-14 02:18:35 221,696 ------w c:\windows\system32\inetsrv\seo.dll
+ 2008-04-14 02:18:36 189,952 ------w c:\windows\system32\inetsrv\smtpadm.dll
+ 2008-04-14 02:18:36 2,134,528 ------w c:\windows\system32\inetsrv\smtpsnap.dll
- 2004-08-19 13:42:10 147,456 ----a-w c:\windows\system32\initpki.dll
+ 2008-04-14 02:18:23 147,456 ----a-w c:\windows\system32\initpki.dll
- 2004-08-19 13:42:12 125,952 ----a-w c:\windows\system32\input.dll
+ 2008-04-14 02:18:23 125,952 ----a-w c:\windows\system32\input.dll
- 2008-06-23 15:40:01 96,768 ----a-w c:\windows\system32\inseng.dll
+ 2007-08-13 22:39:02 92,672 ----a-w c:\windows\system32\inseng.dll
- 2004-08-19 13:42:52 57,856 ----a-w c:\windows\system32\ipconfig.exe
+ 2008-04-14 02:19:00 57,856 ----a-w c:\windows\system32\ipconfig.exe
- 2006-05-19 13:18:51 95,232 ----a-w c:\windows\system32\iphlpapi.dll
+ 2008-04-14 02:18:23 95,232 ----a-w c:\windows\system32\iphlpapi.dll
- 2002-09-10 12:00:00 164,352 ----a-w c:\windows\system32\ipmontr.dll
+ 2008-04-14 02:18:23 171,520 ----a-w c:\windows\system32\ipmontr.dll
- 2004-08-19 13:42:14 332,288 ----a-w c:\windows\system32\ipnathlp.dll
+ 2008-04-14 02:18:23 332,288 ----a-w c:\windows\system32\ipnathlp.dll
- 2004-08-19 13:42:14 354,304 ----a-w c:\windows\system32\ippromon.dll
+ 2008-04-14 02:18:23 354,304 ----a-w c:\windows\system32\ippromon.dll
- 2002-09-10 12:00:00 169,984 ----a-w c:\windows\system32\iprtrmgr.dll
+ 2008-04-14 02:18:23 177,152 ----a-w c:\windows\system32\iprtrmgr.dll
- 2004-08-19 13:42:14 358,400 ----a-w c:\windows\system32\ipsecsnp.dll
+ 2008-04-14 02:18:23 358,400 ----a-w c:\windows\system32\ipsecsnp.dll
- 2004-08-19 13:42:14 183,808 ----a-w c:\windows\system32\ipsecsvc.dll
+ 2008-04-14 02:18:23 184,832 ----a-w c:\windows\system32\ipsecsvc.dll
- 2004-08-19 13:42:14 387,072 ----a-w c:\windows\system32\ipsmsnap.dll
+ 2008-04-14 02:18:23 387,072 ----a-w c:\windows\system32\ipsmsnap.dll
- 2004-08-19 13:42:52 53,760 ----a-w c:\windows\system32\ipv6.exe
+ 2008-04-14 02:19:00 53,760 ----a-w c:\windows\system32\ipv6.exe
- 2004-08-19 13:42:14 59,904 ----a-w c:\windows\system32\ipv6mon.dll
+ 2008-04-14 02:18:23 59,904 ----a-w c:\windows\system32\ipv6mon.dll
- 2004-08-19 13:42:52 24,576 ----a-w c:\windows\system32\ipxroute.exe
+ 2008-04-14 02:19:00 24,576 ----a-w c:\windows\system32\ipxroute.exe
- 2002-09-10 12:00:00 20,992 ----a-w c:\windows\system32\ipxwan.dll
+ 2008-04-14 02:18:23 22,016 ----a-w c:\windows\system32\ipxwan.dll
- 2004-08-19 13:42:14 120,320 ----a-w c:\windows\system32\ir41_qc.dll
+ 2008-04-14 02:18:23 120,320 ----a-w c:\windows\system32\ir41_qc.dll
- 2004-08-19 13:42:14 338,432 ----a-w c:\windows\system32\ir41_qcx.dll
+ 2008-04-14 02:18:24 338,432 ----a-w c:\windows\system32\ir41_qcx.dll
- 2004-08-19 13:42:14 755,200 ----a-w c:\windows\system32\ir50_32.dll
+ 2008-04-14 02:18:24 755,200 ----a-w c:\windows\system32\ir50_32.dll
- 2004-08-19 13:42:14 200,192 ----a-w c:\windows\system32\ir50_qc.dll
+ 2008-04-14 02:18:24 200,192 ----a-w c:\windows\system32\ir50_qc.dll
- 2004-08-19 13:42:14 183,808 ----a-w c:\windows\system32\ir50_qcx.dll
+ 2008-04-14 02:18:24 183,808 ----a-w c:\windows\system32\ir50_qcx.dll
- 2004-08-19 13:42:14 86,016 ----a-w c:\windows\system32\isign32.dll
+ 2008-04-14 02:18:24 86,016 ----a-w c:\windows\system32\isign32.dll
- 2004-08-19 13:42:14 32,768 ----a-w c:\windows\system32\isrdbg32.dll
+ 2008-04-14 02:18:24 32,768 ----a-w c:\windows\system32\isrdbg32.dll
- 2005-05-27 02:08:05 155,136 ----a-w c:\windows\system32\itircl.dll
+ 2008-04-14 02:18:24 155,136 ----a-w c:\windows\system32\itircl.dll
- 2005-05-27 02:08:05 137,216 ----a-w c:\windows\system32\itss.dll
+ 2008-04-14 02:18:24 138,240 ----a-w c:\windows\system32\itss.dll
- 2004-08-19 13:42:14 54,784 ----a-w c:\windows\system32\ixsso.dll
+ 2008-04-14 02:18:24 54,784 ----a-w c:\windows\system32\ixsso.dll
- 2004-08-19 13:56:12 47,616 ----a-w c:\windows\system32\iyuv_32.dll
+ 2008-04-14 02:18:24 47,616 ----a-w c:\windows\system32\iyuv_32.dll
- 2006-06-01 18:48:51 163,840 ----a-w c:\windows\system32\jgdw400.dll
+ 2008-04-14 02:18:24 163,840 ----a-w c:\windows\system32\jgdw400.dll
- 2006-06-01 18:48:51 27,648 ----a-w c:\windows\system32\jgpl400.dll
+ 2008-04-14 02:18:24 27,648 ----a-w c:\windows\system32\jgpl400.dll
- 2007-12-18 14:42:03 450,560 ----a-w c:\windows\system32\jscript.dll
+ 2008-04-14 02:18:24 512,000 ----a-w c:\windows\system32\jscript.dll
- 2008-06-23 15:40:01 16,384 ----a-w c:\windows\system32\jsproxy.dll
+ 2007-08-13 22:54:10 27,136 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\system32\kbdbhc.dll
- 2004-08-19 13:39:10 7,168 ----a-w c:\windows\system32\kbdfi1.dll
+ 2008-04-14 02:16:54 7,168 ----a-w c:\windows\system32\kbdfi1.dll
- 2004-08-19 13:39:10 6,144 ----a-w c:\windows\system32\kbdinbe1.dll
+ 2008-04-14 02:16:54 6,144 ----a-w c:\windows\system32\kbdinbe1.dll
- 2004-08-19 13:39:10 6,656 ----a-w c:\windows\system32\kbdinben.dll
+ 2008-04-14 02:16:54 6,144 ----a-w c:\windows\system32\kbdinben.dll
- 2004-08-19 13:39:10 6,656 ----a-w c:\windows\system32\kbdinmal.dll
+ 2008-04-14 02:16:54 6,656 ----a-w c:\windows\system32\kbdinmal.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\system32\kbdiultn.dll
- 2004-08-19 13:39:10 5,632 ----a-w c:\windows\system32\kbdmaori.dll
+ 2008-04-14 02:16:54 5,632 ----a-w c:\windows\system32\kbdmaori.dll
- 2004-08-19 13:39:10 6,144 ----a-w c:\windows\system32\kbdmlt47.dll
+ 2008-04-14 02:16:54 6,144 ----a-w c:\windows\system32\kbdmlt47.dll
- 2004-08-19 13:39:10 6,144 ----a-w c:\windows\system32\kbdmlt48.dll
+ 2008-04-14 02:16:54 6,144 ----a-w c:\windows\system32\kbdmlt48.dll
- 2002-09-10 12:00:00 7,168 ----a-w c:\windows\system32\kbdnec.dll
+ 2008-04-14 02:16:54 7,168 ----a-w c:\windows\system32\kbdnec.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\system32\kbdnepr.dll
- 2004-08-19 13:39:10 7,168 ----a-w c:\windows\system32\kbdno1.dll
+ 2008-04-14 02:16:54 7,168 ----a-w c:\windows\system32\kbdno1.dll
+ 2008-04-14 02:16:54 6,144 ------w c:\windows\system32\kbdpash.dll
- 2004-08-19 13:39:10 7,680 ----a-w c:\windows\system32\kbdsmsfi.dll
+ 2008-04-14 02:16:54 7,680 ----a-w c:\windows\system32\kbdsmsfi.dll
- 2004-08-19 13:39:10 7,680 ----a-w c:\windows\system32\kbdsmsno.dll
+ 2008-04-14 02:16:54 7,680 ----a-w c:\windows\system32\kbdsmsno.dll
- 2004-08-19 13:39:10 7,168 ----a-w c:\windows\system32\kbdukx.dll
+ 2008-04-14 02:16:54 7,168 ----a-w c:\windows\system32\kbdukx.dll
- 2004-08-03 20:59:24 7,424 ----a-w c:\windows\system32\kd1394.dll
+ 2008-04-13 18:31:35 7,424 ----a-w c:\windows\system32\kd1394.dll
- 2005-06-15 17:50:46 295,936 ----a-w c:\windows\system32\kerberos.dll
+ 2008-04-14 02:18:24 299,520 ----a-w c:\windows\system32\kerberos.dll
- 2007-04-16 15:54:21 1,037,824 ----a-w c:\windows\system32\kernel32.dll
+ 2008-04-14 02:18:24 1,042,944 ----a-w c:\windows\system32\kernel32.dll
- 2004-08-19 13:42:14 155,136 ----a-w c:\windows\system32\keymgr.dll
+ 2008-04-14 02:18:24 155,136 ----a-w c:\windows\system32\keymgr.dll
+ 2008-04-14 02:18:24 61,440 ------w c:\windows\system32\kmsvc.dll
- 2004-08-19 20:42:14 4,096 ----a-w c:\windows\system32\ksuser.dll
+ 2008-04-14 02:18:24 4,096 ----a-w c:\windows\system32\ksuser.dll
+ 2008-04-14 02:18:24 37,376 ------w c:\windows\system32\l2gpstore.dll
- 2004-08-19 13:42:14 424,448 ----a-w c:\windows\system32\licdll.dll
+ 2008-04-14 12:48:26 424,448 ----a-w c:\windows\system32\licdll.dll
- 2004-08-19 13:42:14 22,528 ----a-w c:\windows\system32\licmgr10.dll
+ 2007-08-13 22:44:18 40,960 ----a-w c:\windows\system32\licmgr10.dll
- 2004-08-19 13:42:14 58,880 ----a-w c:\windows\system32\licwmi.dll
+ 2008-04-14 02:18:24 58,880 ----a-w c:\windows\system32\licwmi.dll
- 2005-09-01 01:43:36 19,968 ----a-w c:\windows\system32\linkinfo.dll
+ 2008-04-14 02:18:24 19,968 ----a-w c:\windows\system32\linkinfo.dll
- 2004-08-19 13:42:14 13,824 ----a-w c:\windows\system32\lmhsvc.dll
+ 2008-04-14 02:18:24 13,824 ----a-w c:\windows\system32\lmhsvc.dll
- 2004-08-19 13:42:14 399,872 ----a-w c:\windows\system32\lmrt.dll
+ 2008-04-14 02:18:24 399,872 ----a-w c:\windows\system32\lmrt.dll
- 2004-08-19 13:42:14 100,864 ----a-w c:\windows\system32\loadperf.dll
+ 2008-04-14 02:18:24 100,864 ----a-w c:\windows\system32\loadperf.dll
- 2004-08-19 13:42:14 224,768 ----a-w c:\windows\system32\localsec.dll
+ 2008-04-14 02:18:24 224,768 ----a-w c:\windows\system32\localsec.dll
- 2004-08-19 13:42:14 343,552 ----a-w c:\windows\system32\localspl.dll
+ 2008-04-14 02:18:24 345,088 ----a-w c:\windows\system32\localspl.dll
- 2004-08-19 13:42:14 11,776 ----a-w c:\windows\system32\localui.dll
+ 2008-04-14 02:18:24 11,776 ----a-w c:\windows\system32\localui.dll
- 2004-08-19 13:42:52 75,264 ----a-w c:\windows\system32\locator.exe
+ 2008-04-14 02:19:01 75,264 ----a-w c:\windows\system32\locator.exe
- 2004-08-19 13:42:52 61,952 ----a-w c:\windows\system32\logman.exe
+ 2008-04-14 02:19:01 61,952 ----a-w c:\windows\system32\logman.exe
- 2004-08-19 13:43:24 220,672 ----a-w c:\windows\system32\logon.scr
+ 2008-04-14 02:19:18 220,672 ----a-w c:\windows\system32\logon.scr
- 2004-08-19 13:42:54 515,584 ----a-w c:\windows\system32\logonui.exe
+ 2008-04-14 02:19:01 515,584 ----a-w c:\windows\system32\logonui.exe
- 2004-08-19 13:42:14 22,016 ----a-w c:\windows\system32\lpk.dll
+ 2008-04-14 02:18:24 22,016 ----a-w c:\windows\system32\lpk.dll
- 2004-08-19 13:42:14 10,240 ----a-w c:\windows\system32\lprhelp.dll
+ 2008-04-14 02:18:24 10,240 ----a-w c:\windows\system32\lprhelp.dll
- 2007-11-07 09:28:35 726,528 ----a-w c:\windows\system32\lsasrv.dll
+ 2008-04-14 02:18:24 732,672 ----a-w c:\windows\system32\lsasrv.dll
- 2004-08-19 13:42:54 13,312 ----a-w c:\windows\system32\lsass.exe
+ 2008-04-14 02:19:01 13,312 ----a-w c:\windows\system32\lsass.exe
- 2004-08-19 13:42:54 73,216 ----a-w c:\windows\system32\magnify.exe
+ 2008-04-14 02:19:01 73,216 ----a-w c:\windows\system32\magnify.exe
- 2004-08-19 13:42:54 85,504 ----a-w c:\windows\system32\makecab.exe
+ 2008-04-14 02:19:01 57,344 ----a-w c:\windows\system32\makecab.exe
- 2004-08-19 13:42:14 14,848 ----a-w c:\windows\system32\mcastmib.dll
+ 2008-04-14 02:18:24 14,336 ----a-w c:\windows\system32\mcastmib.dll
- 2004-08-19 13:42:14 85,504 ----a-w c:\windows\system32\mciavi32.dll
+ 2008-04-14 02:18:24 85,504 ----a-w c:\windows\system32\mciavi32.dll
- 2004-08-19 13:42:14 35,328 ----a-w c:\windows\system32\mciqtz32.dll
+ 2008-04-14 02:18:24 35,328 ----a-w c:\windows\system32\mciqtz32.dll
- 2004-08-19 13:42:14 23,040 ----a-w c:\windows\system32\mciseq.dll
+ 2008-04-14 02:18:24 23,040 ----a-w c:\windows\system32\mciseq.dll
- 2004-08-19 13:42:14 23,552 ----a-w c:\windows\system32\mciwave.dll
+ 2008-04-14 02:18:24 23,552 ----a-w c:\windows\system32\mciwave.dll
- 2004-08-19 13:42:14 119,296 ----a-w c:\windows\system32\mdminst.dll
+ 2008-04-14 02:18:24 119,296 ----a-w c:\windows\system32\mdminst.dll
+ 2008-04-14 02:18:24 86,016 ------w c:\windows\system32\mdmxsdk.dll
- 2007-03-08 15:36:30 40,960 ----a-w c:\windows\system32\mf3216.dll
+ 2008-04-14 02:18:24 40,960 ----a-w c:\windows\system32\mf3216.dll
- 2006-11-01 19:18:28 927,504 ----a-w c:\windows\system32\mfc40u.dll
+ 2008-04-14 02:18:24 927,504 ----a-w c:\windows\system32\mfc40u.dll
- 2004-08-19 13:42:14 1,028,096 ----a-w c:\windows\system32\mfc42.dll
+ 2008-04-14 02:18:24 1,028,096 ----a-w c:\windows\system32\mfc42.dll
- 2004-08-19 13:42:14 22,528 ----a-w c:\windows\system32\mfcsubs.dll
+ 2008-04-14 02:18:24 22,528 ----a-w c:\windows\system32\mfcsubs.dll
- 2004-08-19 13:42:14 14,848 ----a-w c:\windows\system32\mgmtapi.dll
+ 2008-04-14 02:18:24 14,848 ----a-w c:\windows\system32\mgmtapi.dll
+ 2008-04-14 02:18:24 184,320 ------w c:\windows\system32\microsoft.managementconsole.dll
- 2004-08-19 13:42:14 18,944 ----a-w c:\windows\system32\midimap.dll
+ 2008-04-14 02:18:24 18,944 ----a-w c:\windows\system32\midimap.dll
- 2004-08-19 13:42:16 60,928 ----a-w c:\windows\system32\miglibnt.dll
+ 2008-04-14 02:18:24 60,928 ----a-w c:\windows\system32\miglibnt.dll
- 2002-09-10 12:00:00 18,944 ----a-w c:\windows\system32\mimefilt.dll
+ 2008-04-14 02:18:24 29,696 ----a-w c:\windows\system32\mimefilt.dll
- 2004-08-19 13:42:16 586,240 ----a-w c:\windows\system32\mlang.dll
+ 2008-04-14 02:18:24 586,240 ----a-w c:\windows\system32\mlang.dll
- 2004-08-19 13:42:54 816,128 ----a-w c:\windows\system32\mmc.exe
+ 2008-04-14 02:19:03 1,415,168 ----a-w c:\windows\system32\mmc.exe
- 2004-08-19 13:42:16 76,288 ----a-w c:\windows\system32\mmcbase.dll
+ 2008-04-14 02:18:24 168,960 ----a-w c:\windows\system32\mmcbase.dll
+ 2008-04-14 02:18:24 397,312 ------w c:\windows\system32\mmcex.dll
+ 2008-04-14 02:18:24 106,496 ------w c:\windows\system32\mmcfxcommon.dll
- 2004-08-19 13:42:16 1,197,568 ----a-w c:\windows\system32\mmcndmgr.dll
+ 2008-04-14 02:18:24 1,878,016 ----a-w c:\windows\system32\mmcndmgr.dll
+ 2008-04-14 02:19:03 33,792 ------w c:\windows\system32\mmcperf.exe
- 2004-08-19 13:42:16 50,688 ----a-w c:\windows\system32\mmcshext.dll
+ 2008-04-14 02:18:24 61,440 ----a-w c:\windows\system32\mmcshext.dll
- 2004-08-19 13:42:16 17,920 ----a-w c:\windows\system32\mmfutil.dll
+ 2008-04-14 02:18:24 17,920 ----a-w c:\windows\system32\mmfutil.dll
- 2004-08-19 13:42:16 34,560 ----a-w c:\windows\system32\mnmdd.dll
+ 2008-04-14 02:18:24 34,560 ----a-w c:\windows\system32\mnmdd.dll
- 2004-08-19 13:42:56 32,768 ----a-w c:\windows\system32\mnmsrvc.exe
+ 2008-04-14 02:19:03 32,768 ----a-w c:\windows\system32\mnmsrvc.exe
- 2004-08-19 13:42:16 209,408 ----a-w c:\windows\system32\mobsync.dll
+ 2008-04-14 02:18:24 209,408 ----a-w c:\windows\system32\mobsync.dll
- 2004-08-19 13:42:56 143,872 ----a-w c:\windows\system32\mobsync.exe
+ 2008-04-14 02:19:03 143,872 ----a-w c:\windows\system32\mobsync.exe
- 2004-08-19 13:42:16 151,040 ----a-w c:\windows\system32\modemui.dll
+ 2008-04-14 02:18:24 151,040 ----a-w c:\windows\system32\modemui.dll
- 2002-09-10 12:00:00 15,872 ----a-w c:\windows\system32\more.com
+ 2008-04-14 02:19:18 16,896 ----a-w c:\windows\system32\more.com
- 2004-08-19 13:39:18 216,064 ----a-w c:\windows\system32\moricons.dll
+ 2008-04-13 16:45:30 216,064 ----a-w c:\windows\system32\moricons.dll
- 2004-08-19 13:42:16 310,272 ----a-w c:\windows\system32\mp43dmod.dll
+ 2008-04-14 02:18:24 310,272 ----a-w c:\windows\system32\mp43dmod.dll
- 2004-08-19 13:42:16 384,512 ----a-w c:\windows\system32\mp4sdmod.dll
+ 2008-04-14 02:18:24 384,512 ----a-w c:\windows\system32\mp4sdmod.dll
- 2004-08-19 13:42:16 240,640 ----a-w c:\windows\system32\mpg4dmod.dll
+ 2008-04-14 02:18:24 240,640 ----a-w c:\windows\system32\mpg4dmod.dll
- 2004-08-19 13:42:58 124,928 ----a-w c:\windows\system32\mplay32.exe
+ 2008-04-14 02:19:04 124,928 ----a-w c:\windows\system32\mplay32.exe
- 2004-08-19 13:42:16 59,904 ----a-w c:\windows\system32\mpr.dll
+ 2008-04-14 02:18:24 59,904 ----a-w c:\windows\system32\mpr.dll
- 2004-08-19 13:42:16 87,040 ----a-w c:\windows\system32\mprapi.dll
+ 2008-04-14 02:18:24 87,040 ----a-w c:\windows\system32\mprapi.dll
- 2002-09-10 12:00:00 49,152 ----a-w c:\windows\system32\mprdim.dll
+ 2008-04-14 02:18:24 53,248 ----a-w c:\windows\system32\mprdim.dll
- 2007-07-06 12:50:55 138,240 ----a-w c:\windows\system32\mqad.dll
+ 2008-04-14 02:18:24 138,240 ----a-w c:\windows\system32\mqad.dll
- 2004-08-19 13:42:58 19,968 ----a-w c:\windows\system32\mqbkup.exe
+ 2008-04-14 02:19:04 19,968 ----a-w c:\windows\system32\mqbkup.exe
- 2007-07-06 12:50:55 47,104 ----a-w c:\windows\system32\mqdscli.dll
+ 2008-04-14 02:18:24 47,616 ----a-w c:\windows\system32\mqdscli.dll
- 2007-07-06 12:50:55 16,896 ----a-w c:\windows\system32\mqise.dll
+ 2008-04-14 02:18:24 16,896 ----a-w c:\windows\system32\mqise.dll
- 2004-08-19 13:42:16 89,088 ----a-w c:\windows\system32\mqlogmgr.dll
+ 2008-04-14 02:18:24 89,088 ----a-w c:\windows\system32\mqlogmgr.dll
- 2004-08-19 13:42:16 225,280 ----a-w c:\windows\system32\mqoa.dll
+ 2008-04-14 02:18:24 225,280 ----a-w c:\windows\system32\mqoa.dll
- 2007-07-06 12:50:55 660,992 ----a-w c:\windows\system32\mqqm.dll
+ 2008-04-14 02:18:24 663,040 ----a-w c:\windows\system32\mqqm.dll
- 2007-07-06 12:50:55 177,152 ----a-w c:\windows\system32\mqrt.dll
+ 2008-04-14 02:18:24 177,152 ----a-w c:\windows\system32\mqrt.dll
- 2004-08-19 13:42:16 123,392 ----a-w c:\windows\system32\mqrtdep.dll
+ 2008-04-14 02:18:24 123,904 ----a-w c:\windows\system32\mqrtdep.dll
- 2007-07-06 12:50:55 95,744 ----a-w c:\windows\system32\mqsec.dll
+ 2008-04-14 02:18:24 95,744 ----a-w c:\windows\system32\mqsec.dll
- 2004-08-19 13:42:16 517,632 ----a-w c:\windows\system32\mqsnap.dll
+ 2008-04-14 02:18:24 517,632 ----a-w c:\windows\system32\mqsnap.dll
- 2004-08-19 13:42:58 4,608 ----a-w c:\windows\system32\mqsvc.exe
+ 2008-04-14 02:19:04 4,608 ----a-w c:\windows\system32\mqsvc.exe
- 2004-08-19 13:42:58 117,248 ----a-w c:\windows\system32\mqtgsvc.exe
+ 2008-04-14 02:19:04 117,248 ----a-w c:\windows\system32\mqtgsvc.exe
- 2004-08-19 13:42:16 186,880 ----a-w c:\windows\system32\mqtrig.dll
+ 2008-04-14 02:18:24 187,392 ----a-w c:\windows\system32\mqtrig.dll
- 2007-07-06 12:50:55 48,640 ----a-w c:\windows\system32\mqupgrd.dll
+ 2008-04-14 02:18:24 49,152 ----a-w c:\windows\system32\mqupgrd.dll
- 2007-07-06 12:50:55 521,216 ----a-w c:\windows\system32\mqutil.dll
+ 2008-04-14 02:18:24 521,216 ----a-w c:\windows\system32\mqutil.dll
- 2008-05-29 23:35:11 17,486,968 ----a-w c:\windows\system32\MRT.exe
+ 2008-08-05 15:11:02 15,888,504 ----a-w c:\windows\system32\MRT.exe
- 2004-08-19 13:42:16 72,192 ----a-w c:\windows\system32\msacm32.dll
+ 2008-04-14 02:18:24 71,680 ----a-w c:\windows\system32\msacm32.dll
- 2004-08-19 13:39:22 3,584 ----a-w c:\windows\system32\msafd.dll
+ 2008-04-14 02:17:02 3,584 ----a-w c:\windows\system32\msafd.dll
- 2004-08-19 13:42:16 86,016 ----a-w c:\windows\system32\msapsspc.dll
+ 2008-04-14 02:18:25 86,016 ----a-w c:\windows\system32\msapsspc.dll
- 2004-08-19 13:42:16 57,344 ----a-w c:\windows\system32\msasn1.dll
+ 2008-04-14 02:18:25 57,344 ----a-w c:\windows\system32\msasn1.dll
- 2008-06-24 16:23:35 74,240 ----a-w c:\windows\system32\mscms.dll
+ 2008-06-24 16:44:02 74,240 ----a-w c:\windows\system32\mscms.dll
- 2004-08-19 13:42:16 69,632 ----a-w c:\windows\system32\msconf.dll
+ 2008-04-14 02:18:25 69,632 ----a-w c:\windows\system32\msconf.dll
- 2004-08-19 13:39:24 12,288 ----a-w c:\windows\system32\mscpx32r.dLL
+ 2008-04-13 17:26:07 12,288 ----a-w c:\windows\system32\mscpx32r.dll
- 2004-08-19 13:42:16 36,864 ----a-w c:\windows\system32\mscpxl32.dLL
+ 2008-04-14 02:18:25 36,864 ----a-w c:\windows\system32\mscpxl32.dll
- 2004-08-19 13:42:16 294,400 ----a-w c:\windows\system32\MSCTF.dll
+ 2008-04-14 02:18:25 297,984 ----a-w c:\windows\system32\msctf.dll
- 2004-08-19 13:42:16 69,120 ----a-w c:\windows\system32\MSCTFP.dll
+ 2008-04-14 02:18:25 68,608 ----a-w c:\windows\system32\msctfp.dll
- 2004-08-19 13:42:16 118,784 ----a-w c:\windows\system32\msdadiag.dll
+ 2008-04-14 02:18:25 118,784 ----a-w c:\windows\system32\msdadiag.dll
- 2004-08-19 13:42:16 151,552 ----a-w c:\windows\system32\msdart.dll
+ 2008-04-14 02:18:25 151,552 ----a-w c:\windows\system32\msdart.dll
- 2004-08-19 13:42:16 14,336 ----a-w c:\windows\system32\msdmo.dll
+ 2008-04-14 02:18:25 14,336 ----a-w c:\windows\system32\msdmo.dll
- 2004-08-19 13:42:58 6,144 ----a-w c:\windows\system32\msdtc.exe
+ 2008-04-14 02:19:04 6,144 ----a-w c:\windows\system32\msdtc.exe
- 2004-08-19 13:42:16 58,880 ----a-w c:\windows\system32\msdtclog.dll
+ 2008-04-14 02:18:25 58,880 ----a-w c:\windows\system32\msdtclog.dll
- 2006-03-01 19:43:59 426,496 ----a-w c:\windows\system32\msdtcprx.dll
+ 2008-04-14 02:18:25 427,008 ----a-w c:\windows\system32\msdtcprx.dll
- 2006-03-01 19:44:00 956,416 ----a-w c:\windows\system32\msdtctm.dll
+ 2008-04-14 02:18:26 956,928 ----a-w c:\windows\system32\msdtctm.dll
- 2006-03-01 19:44:00 161,280 ----a-w c:\windows\system32\msdtcuiu.dll
+ 2008-04-14 02:18:26 161,792 ----a-w c:\windows\system32\msdtcuiu.dll
- 2004-08-19 13:39:26 4,126 ----a-w c:\windows\system32\msdxmlc.dll
+ 2008-04-14 02:17:04 4,126 ----a-w c:\windows\system32\msdxmlc.dll
+ 2007-08-13 22:54:10 458,752 ------w c:\windows\system32\msfeeds.dll
+ 2007-08-13 22:54:10 50,688 ------w c:\windows\system32\msfeedsbs.dll
+ 2007-08-13 22:36:40 12,288 ------w c:\windows\system32\msfeedssync.exe
- 2006-11-27 14:54:16 539,136 ----a-w c:\windows\system32\msftedit.dll
+ 2008-04-14 02:18:26 539,136 ----a-w c:\windows\system32\msftedit.dll
- 2004-08-19 13:42:16 999,936 ----a-w c:\windows\system32\msgina.dll
+ 2008-04-14 02:18:26 1,003,008 ----a-w c:\windows\system32\msgina.dll
- 2004-08-19 13:42:16 33,792 ----a-w c:\windows\system32\msgsvc.dll
+ 2008-04-14 02:18:26 33,792 ----a-w c:\windows\system32\msgsvc.dll
- 2004-08-19 13:43:26 188,416 ----a-w c:\windows\system32\msh261.drv
+ 2008-04-14 02:19:19 188,416 ----a-w c:\windows\system32\msh261.drv
- 2004-08-19 13:56:12 294,912 ----a-w c:\windows\system32\msh263.drv
+ 2008-04-14 02:19:19 294,912 ----a-w c:\windows\system32\msh263.drv
- 2004-08-19 13:42:58 29,184 ----a-w c:\windows\system32\mshta.exe
+ 2007-08-13 22:32:30 45,568 ----a-w c:\windows\system32\mshta.exe
- 2008-06-23 15:40:03 3,080,704 ----a-w c:\windows\system32\mshtml.dll
+ 2007-08-13 22:54:12 3,578,368 ----a-w c:\windows\system32\mshtml.dll
- 2008-06-23 15:40:04 449,024 ----a-w c:\windows\system32\mshtmled.dll
+ 2007-08-13 22:54:10 475,648 ----a-w c:\windows\system32\mshtmled.dll
- 2004-08-19 13:39:30 57,344 ----a-w c:\windows\system32\mshtmler.dll
+ 2007-08-13 22:01:12 48,128 ----a-w c:\windows\system32\mshtmler.dll
- 2007-04-18 16:14:22 2,854,400 ----a-w c:\windows\system32\msi.dll
+ 2008-04-14 02:18:26 2,843,136 ----a-w c:\windows\system32\msi.dll
- 2004-08-19 13:42:16 51,712 ----a-w c:\windows\system32\msident.dll
+ 2008-04-14 02:18:26 51,712 ----a-w c:\windows\system32\msident.dll
- 2004-08-19 13:42:16 6,656 ----a-w c:\windows\system32\msidle.dll
+ 2008-04-14 02:18:26 6,656 ----a-w c:\windows\system32\msidle.dll
- 2004-08-19 13:42:16 251,392 ----a-w c:\windows\system32\msieftp.dll
+ 2008-04-14 02:18:26 251,392 ----a-w c:\windows\system32\msieftp.dll
- 2005-05-04 19:45:36 78,848 ----a-w c:\windows\system32\msiexec.exe
+ 2008-04-14 02:19:04 78,848 ----a-w c:\windows\system32\msiexec.exe
- 2005-05-04 19:45:36 271,360 ----a-w c:\windows\system32\msihnd.dll
+ 2008-04-14 02:18:26 271,360 ----a-w c:\windows\system32\msihnd.dll
- 2004-08-19 13:42:16 4,608 ----a-w c:\windows\system32\msimg32.dll
+ 2008-04-14 02:18:26 4,608 ----a-w c:\windows\system32\msimg32.dll
- 2005-05-04 19:45:36 884,736 ----a-w c:\windows\system32\msimsg.dll
+ 2008-04-13 15:39:43 884,736 ----a-w c:\windows\system32\msimsg.dll
- 2004-08-19 13:42:16 159,232 ----a-w c:\windows\system32\MSIMTF.dll
+ 2008-04-14 02:18:26 159,232 ----a-w c:\windows\system32\msimtf.dll
- 2005-05-04 19:45:36 15,360 ----a-w c:\windows\system32\msisip.dll
+ 2008-04-14 02:18:26 15,360 ----a-w c:\windows\system32\msisip.dll
- 2004-08-19 13:42:18 25,600 ----a-w c:\windows\system32\mslbui.dll
+ 2008-04-14 02:18:27 25,600 ----a-w c:\windows\system32\mslbui.dll
- 2002-09-10 12:00:00 146,432 ----a-w c:\windows\system32\msls31.dll
+ 2007-08-13 22:54:10 156,160 ----a-w c:\windows\system32\msls31.dll
- 2004-08-19 13:42:18 290,816 ----a-w c:\windows\system32\msnsspc.dll
+ 2008-04-14 02:18:27 290,816 ----a-w c:\windows\system32\msnsspc.dll
- 2004-08-19 13:42:18 252,928 ----a-w c:\windows\system32\msoeacct.dll
+ 2008-04-14 02:18:27 252,928 ----a-w c:\windows\system32\msoeacct.dll
- 2004-08-19 13:42:18 105,984 ----a-w c:\windows\system32\msoert2.dll
+ 2008-04-14 02:18:27 105,984 ----a-w c:\windows\system32\msoert2.dll
- 2004-08-19 13:39:42 24,576 ----a-w c:\windows\system32\msorc32r.dll
+ 2007-03-28 12:54:37 24,576 ----a-w c:\windows\system32\msorc32r.dll
- 2004-08-19 13:42:18 143,360 ----a-w c:\windows\system32\msorcl32.dll
+ 2008-04-14 02:18:27 143,360 ----a-w c:\windows\system32\msorcl32.dll
- 2004-08-19 13:43:00 346,624 ----a-w c:\windows\system32\mspaint.exe
+ 2008-04-14 02:19:05 346,624 ----a-w c:\windows\system32\mspaint.exe
- 2004-08-19 13:42:18 30,208 ----a-w c:\windows\system32\mspatcha.dll
+ 2008-04-14 02:18:27 29,696 ----a-w c:\windows\system32\mspatcha.dll
- 2004-08-19 13:39:42 48,128 ----a-w c:\windows\system32\msprivs.dll
+ 2008-04-13 16:23:31 48,128 ----a-w c:\windows\system32\msprivs.dll
- 2008-06-23 15:40:04 146,432 ----a-w c:\windows\system32\msrating.dll
+ 2007-08-13 22:44:26 192,000 ----a-w c:\windows\system32\msrating.dll
- 2004-08-19 13:42:18 11,264 ----a-w c:\windows\system32\msrle32.dll
+ 2008-04-14 02:18:27 11,264 ----a-w c:\windows\system32\msrle32.dll
- 2004-08-19 13:42:18 134,656 ----a-w c:\windows\system32\mssap.dll
+ 2008-04-14 02:18:27 134,656 ----a-w c:\windows\system32\mssap.dll
+ 2008-04-14 02:18:27 155,136 ------w c:\windows\system32\mssha.dll
+ 2008-04-14 01:54:26 81,920 ------w c:\windows\system32\msshavmsg.dll
- 2004-08-19 13:42:18 279,552 ----a-w c:\windows\system32\mstask.dll
+ 2008-04-14 02:18:28 279,552 ----a-w c:\windows\system32\mstask.dll
- 2008-06-23 15:40:05 532,480 ----a-w c:\windows\system32\mstime.dll
+ 2007-08-13 22:54:10 670,720 ----a-w c:\windows\system32\mstime.dll
- 2004-08-19 13:43:00 12,288 ----a-w c:\windows\system32\mstinit.exe
+ 2008-04-14 02:19:05 12,288 ----a-w c:\windows\system32\mstinit.exe
- 2004-08-19 13:42:18 115,712 ----a-w c:\windows\system32\mstlsapi.dll
+ 2008-04-14 02:18:28 116,224 ----a-w c:\windows\system32\mstlsapi.dll
- 2004-08-19 13:19:12 409,088 ----a-w c:\windows\system32\mstsc.exe
+ 2008-04-14 02:19:00 677,888 ----a-w c:\windows\system32\mstsc.exe
- 2004-08-03 20:59:44 655,360 ----a-w c:\windows\system32\mstscax.dll
+ 2008-04-14 02:18:24 2,061,824 ----a-w c:\windows\system32\mstscax.dll
- 2004-08-19 13:42:18 195,584 ----a-w c:\windows\system32\msutb.dll
+ 2008-04-14 02:18:28 195,584 ----a-w c:\windows\system32\msutb.dll
- 2004-08-19 13:42:18 129,536 ----a-w c:\windows\system32\msv1_0.dll
+ 2008-04-14 02:18:28 132,608 ----a-w c:\windows\system32\msv1_0.dll
- 2004-02-24 02:42:40 1,386,496 ----a-w c:\windows\system32\msvbvm60.dll
+ 2008-04-14 02:18:28 1,384,479 ----a-w c:\windows\system32\msvbvm60.dll
- 2004-08-19 13:42:18 54,784 ----a-w c:\windows\system32\msvcirt.dll
+ 2008-04-14 02:18:28 57,344 ----a-w c:\windows\system32\msvcirt.dll
- 2004-08-19 13:42:18 413,696 ----a-w c:\windows\system32\msvcp60.dll
+ 2008-04-14 02:18:28 413,696 ----a-w c:\windows\system32\msvcp60.dll
- 2004-08-19 13:42:18 343,040 ----a-w c:\windows\system32\msvcrt.dll
+ 2008-04-14 02:18:28 343,040 ----a-w c:\windows\system32\msvcrt.dll
- 2004-08-03 20:58:26 61,440 ----a-w c:\windows\system32\msvcrt40.dll
+ 2008-04-13 18:30:46 61,440 ----a-w c:\windows\system32\msvcrt40.dll
- 2004-08-19 13:42:18 121,856 ----a-w c:\windows\system32\msvfw32.dll
+ 2008-04-14 02:18:28 122,368 ----a-w c:\windows\system32\msvfw32.dll
- 2004-08-19 13:42:18 1,433,600 ----a-w c:\windows\system32\msvidctl.dll
+ 2008-04-14 02:18:28 1,434,112 ----a-w c:\windows\system32\msvidctl.dll
- 2004-08-19 13:42:18 72,704 ----a-w c:\windows\system32\msw3prt.dll
+ 2008-04-14 02:18:28 72,704 ----a-w c:\windows\system32\msw3prt.dll
- 2004-08-19 13:42:20 204,800 ----a-w c:\windows\system32\mswebdvd.dll
+ 2008-04-14 02:18:28 204,800 ----a-w c:\windows\system32\mswebdvd.dll
- 2008-06-20 17:41:07 248,320 ----a-w c:\windows\system32\mswsock.dll
+ 2008-06-20 17:47:55 248,320 ----a-w c:\windows\system32\mswsock.dll
- 2004-08-19 13:42:20 506,368 ----a-w c:\windows\system32\msxml.dll
+ 2008-04-14 02:18:28 506,368 ----a-w c:\windows\system32\msxml.dll
- 2004-08-19 13:42:20 701,440 ----a-w c:\windows\system32\msxml2.dll
+ 2008-04-14 02:18:28 701,440 ----a-w c:\windows\system32\msxml2.dll
- 2007-06-26 06:09:15 1,104,896 ----a-w c:\windows\system32\msxml3.dll
+ 2008-04-14 02:18:28 1,104,896 ----a-w c:\windows\system32\msxml3.dll
+ 2008-04-14 02:18:28 1,306,624 ------w c:\windows\system32\msxml6.dll
+ 2008-04-14 01:55:00 90,624 ------w c:\windows\system32\msxml6r.dll
- 2004-08-19 13:56:12 17,408 ----a-w c:\windows\system32\msyuv.dll
+ 2008-04-14 02:18:28 16,896 ----a-w c:\windows\system32\msyuv.dll
- 2006-03-01 19:44:00 66,560 ----a-w c:\windows\system32\mtxclu.dll
+ 2008-04-14 02:18:28 66,560 ----a-w c:\windows\system32\mtxclu.dll
- 2002-09-10 12:00:00 20,480 ----a-w c:\windows\system32\mtxdm.dll
+ 2008-04-14 02:18:28 30,720 ----a-w c:\windows\system32\mtxdm.dll
- 2002-09-10 12:00:00 4,096 ----a-w c:\windows\system32\mtxex.dll
+ 2008-04-14 02:18:28 4,096 ----a-w c:\windows\system32\mtxex.dll
- 2002-09-10 12:00:00 25,088 ----a-w c:\windows\system32\mtxlegih.dll
+ 2008-04-14 02:18:28 34,304 ----a-w c:\windows\system32\mtxlegih.dll
- 2006-03-01 19:44:00 91,136 ----a-w c:\windows\system32\mtxoci.dll
+ 2008-04-14 02:18:28 91,648 ----a-w c:\windows\system32\mtxoci.dll
+ 2008-04-14 02:18:28 1,737,856 ------w c:\windows\system32\mtxparhd.dll
- 2004-08-19 13:40:30 196,096 ----a-w c:\windows\system32\mui\0403\xpsp1res.dll
+ 2008-04-13 18:35:09 196,096 ----a-w c:\windows\system32\mui\0403\xpsp1res.dll
- 2004-08-19 13:42:20 91,136 ----a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 02:18:28 91,136 ----a-w c:\windows\system32\mydocs.dll
+ 2008-04-14 02:18:28 30,720 ------w c:\windows\system32\napipsec.dll
+ 2008-04-14 02:18:28 200,192 ------w c:\windows\system32\napmontr.dll
+ 2008-04-14 02:19:05 176,640 ------w c:\windows\system32\napstat.exe
- 2004-08-19 13:43:00 55,296 ----a-w c:\windows\system32\narrator.exe
+ 2008-04-14 02:19:05 55,296 ----a-w c:\windows\system32\narrator.exe
- 2004-08-19 13:42:20 36,352 ----a-w c:\windows\system32\ncobjapi.dll
+ 2008-04-14 02:18:28 36,352 ----a-w c:\windows\system32\ncobjapi.dll
- 2004-08-19 13:42:20 18,432 ----a-w c:\windows\system32\nddeapi.dll
+ 2008-04-14 02:18:28 18,432 ----a-w c:\windows\system32\nddeapi.dll
- 2004-08-19 13:43:00 4,096 ----a-w c:\windows\system32\nddeapir.exe
+ 2008-04-14 02:19:05 4,096 ----a-w c:\windows\system32\nddeapir.exe
- 2004-08-19 13:42:20 19,456 ----a-w c:\windows\system32\nddenb32.dll
+ 2008-04-14 02:18:28 19,456 ----a-w c:\windows\system32\nddenb32.dll
- 2004-08-19 13:43:00 42,496 ----a-w c:\windows\system32\net.exe
+ 2008-04-14 02:19:05 42,496 ----a-w c:\windows\system32\net.exe
- 2004-08-19 13:43:00 124,928 ----a-w c:\windows\system32\net1.exe
+ 2008-04-14 02:19:05 124,928 ----a-w c:\windows\system32\net1.exe
- 2006-08-17 12:29:42 332,288 ----a-w c:\windows\system32\netapi32.dll
+ 2008-04-14 02:18:28 337,408 ----a-w c:\windows\system32\netapi32.dll
- 2004-08-19 13:42:20 632,320 ----a-w c:\windows\system32\netcfgx.dll
+ 2008-04-14 02:18:28 632,832 ----a-w c:\windows\system32\netcfgx.dll
- 2004-08-19 13:43:00 115,200 ----a-w c:\windows\system32\netdde.exe
+ 2008-04-14 02:19:05 115,200 ----a-w c:\windows\system32\netdde.exe
- 2004-08-19 13:42:20 142,336 ----a-w c:\windows\system32\netid.dll
+ 2008-04-14 02:18:28 142,336 ----a-w c:\windows\system32\netid.dll
- 2004-08-19 13:42:20 407,040 ----a-w c:\windows\system32\netlogon.dll
+ 2008-04-14 02:18:28 407,040 ----a-w c:\windows\system32\netlogon.dll
- 2005-08-22 18:34:57 197,632 ----a-w c:\windows\system32\netman.dll
+ 2008-04-14 02:18:28 198,144 ----a-w c:\windows\system32\netman.dll
- 2004-08-19 13:42:20 880,640 ----a-w c:\windows\system32\netplwiz.dll
+ 2008-04-14 02:18:28 880,640 ----a-w c:\windows\system32\netplwiz.dll
- 2004-08-19 13:42:20 12,288 ----a-w c:\windows\system32\netrap.dll
+ 2008-04-14 02:18:28 11,776 ----a-w c:\windows\system32\netrap.dll
- 2004-08-19 13:46:12 331,776 ----a-w c:\windows\system32\netsetup.exe
+ 2008-04-14 02:22:22 332,288 ----a-w c:\windows\system32\netsetup.exe
- 2004-08-19 13:43:00 87,552 ----a-w c:\windows\system32\netsh.exe
+ 2008-04-14 02:19:05 87,552 ----a-w c:\windows\system32\netsh.exe
- 2004-08-19 13:42:20 1,717,760 ----a-w c:\windows\system32\netshell.dll
+ 2008-04-14 02:18:28 1,713,664 ----a-w c:\windows\system32\netshell.dll
- 2004-08-19 13:43:00 38,912 ----a-w c:\windows\system32\netstat.exe
+ 2008-04-14 02:19:06 38,912 ----a-w c:\windows\system32\netstat.exe
- 2004-08-19 13:42:20 82,944 ----a-w c:\windows\system32\netui0.dll
+ 2008-04-14 02:18:28 82,944 ----a-w c:\windows\system32\netui0.dll
- 2004-08-19 13:42:20 245,760 ----a-w c:\windows\system32\netui1.dll
+ 2008-04-14 02:18:28 245,760 ----a-w c:\windows\system32\netui1.dll
- 2004-08-19 13:42:20 250,368 ----a-w c:\windows\system32\newdev.dll
+ 2008-04-14 02:18:28 249,856 ----a-w c:\windows\system32\newdev.dll
- 2004-08-19 13:42:20 103,936 ----a-w c:\windows\system32\nlhtml.dll
+ 2008-04-14 02:18:28 98,304 ----a-w c:\windows\system32\nlhtml.dll
+ 2006-06-28 21:59:26 24,576 ------w c:\windows\system32\nlsdl.dll
- 2004-08-19 13:42:20 28,672 ----a-w c:\windows\system32\nmmkcert.dll
+ 2008-04-14 02:18:28 28,672 ----a-w c:\windows\system32\nmmkcert.dll
+ 2006-06-29 12:05:44 23,552 ------w c:\windows\system32\normaliz.dll
- 2004-08-19 13:43:00 70,144 ----a-w c:\windows\system32\notepad.exe
+ 2008-04-14 02:19:06 70,144 ----a-w c:\windows\system32\notepad.exe
- 2004-08-19 13:42:20 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll
+ 2008-04-14 02:18:28 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll
- 2004-08-19 13:43:00 15,360 ----a-w c:\windows\system32\npp\nppagent.exe
+ 2008-04-14 02:19:06 15,360 ----a-w c:\windows\system32\npp\nppagent.exe
- 2004-08-19 13:42:20 55,296 ----a-w c:\windows\system32\npptools.dll
+ 2008-04-14 02:18:28 55,296 ----a-w c:\windows\system32\npptools.dll
- 2004-08-19 13:43:02 79,872 ----a-w c:\windows\system32\nslookup.exe
+ 2008-04-14 02:19:06 79,872 ----a-w c:\windows\system32\nslookup.exe
- 2004-08-19 13:43:04 1,232,896 ----a-w c:\windows\system32\ntbackup.exe
+ 2008-04-14 02:19:07 1,233,408 ----a-w c:\windows\system32\ntbackup.exe
- 2004-08-19 13:41:32 732,672 ----a-w c:\windows\system32\ntdll.dll
+ 2008-04-14 02:17:59 730,624 ----a-w c:\windows\system32\ntdll.dll
- 2004-08-19 13:42:20 67,072 ----a-w c:\windows\system32\ntdsapi.dll
+ 2008-04-14 02:18:28 67,072 ----a-w c:\windows\system32\ntdsapi.dll
- 2007-02-28 16:02:37 2,060,032 ----a-w c:\windows\system32\ntkrnlpa.exe
+ 2008-04-14 01:57:08 2,068,224 ----a-w c:\windows\system32\ntkrnlpa.exe
- 2004-08-19 13:42:20 43,520 ----a-w c:\windows\system32\ntlanman.dll
+ 2008-04-14 02:18:29 44,032 ----a-w c:\windows\system32\ntlanman.dll
- 2004-08-19 13:42:20 8,192 ----a-w c:\windows\system32\ntlsapi.dll
+ 2008-04-14 02:18:29 8,192 ----a-w c:\windows\system32\ntlsapi.dll
- 2004-08-19 13:42:20 119,808 ----a-w c:\windows\system32\ntmarta.dll
+ 2008-04-14 02:18:29 119,808 ----a-w c:\windows\system32\ntmarta.dll
- 2004-08-19 13:42:20 40,960 ----a-w c:\windows\system32\ntmsapi.dll
+ 2008-04-14 02:18:29 40,960 ----a-w c:\windows\system32\ntmsapi.dll
- 2004-08-19 13:42:22 180,224 ----a-w c:\windows\system32\ntmsdba.dll
+ 2008-04-14 02:18:29 180,224 ----a-w c:\windows\system32\ntmsdba.dll
- 2004-08-19 13:42:22 495,104 ----a-w c:\windows\system32\ntmsmgr.dll
+ 2008-04-14 02:18:29 495,104 ----a-w c:\windows\system32\ntmsmgr.dll
- 2004-08-19 13:42:22 437,760 ----a-w c:\windows\system32\ntmssvc.dll
+ 2008-04-14 02:18:29 437,760 ----a-w c:\windows\system32\ntmssvc.dll
- 2007-02-28 16:02:33 2,182,784 ----a-w c:\windows\system32\ntoskrnl.exe
+ 2008-04-14 01:57:30 2,191,360 ----a-w c:\windows\system32\ntoskrnl.exe
- 2004-08-19 13:42:22 92,160 ----a-w c:\windows\system32\ntprint.dll
+ 2008-04-14 02:18:29 92,160 ----a-w c:\windows\system32\ntprint.dll
- 2004-08-19 13:42:22 144,896 ----a-w c:\windows\system32\ntshrui.dll
+ 2008-04-14 02:18:29 144,896 ----a-w c:\windows\system32\ntshrui.dll
- 2004-08-19 13:43:04 420,864 ----a-w c:\windows\system32\ntvdm.exe
+ 2008-04-14 02:19:07 421,888 ----a-w c:\windows\system32\ntvdm.exe
- 2002-09-10 12:00:00 13,312 ----a-w c:\windows\system32\ntvdmd.dll
+ 2008-04-14 02:18:29 15,360 ----a-w c:\windows\system32\ntvdmd.dll
+ 2008-04-14 02:18:29 4,274,816 ------w c:\windows\system32\nv4_disp.dll
- 2006-10-13 12:36:47 64,000 ----a-w c:\windows\system32\nwapi32.dll
+ 2008-04-14 02:18:29 64,000 ----a-w c:\windows\system32\nwapi32.dll
- 2006-10-13 12:36:47 144,384 ----a-w c:\windows\system32\nwprovau.dll
+ 2008-04-14 02:18:29 144,384 ----a-w c:\windows\system32\nwprovau.dll
- 2006-10-13 12:36:47 65,536 ----a-w c:\windows\system32\nwwks.dll
+ 2008-04-14 02:18:29 65,536 ----a-w c:\windows\system32\nwwks.dll
- 2004-08-19 13:42:22 267,776 ----a-w c:\windows\system32\oakley.dll
+ 2008-04-14 02:18:30 271,360 ----a-w c:\windows\system32\oakley.dll
- 2004-08-19 13:42:22 288,256 ----a-w c:\windows\system32\objsel.dll
+ 2008-04-14 02:18:30 288,768 ----a-w c:\windows\system32\objsel.dll
- 2004-08-19 13:42:22 97,280 ----a-w c:\windows\system32\occache.dll
+ 2007-08-13 22:44:06 101,376 ----a-w c:\windows\system32\occache.dll
- 2002-09-10 12:00:00 61,952 ----a-w c:\windows\system32\ocmanage.dll
+ 2008-04-14 02:18:32 68,608 ----a-w c:\windows\system32\ocmanage.dll
- 2004-08-19 13:42:22 249,856 ----a-w c:\windows\system32\odbc32.dll
+ 2008-04-14 02:18:33 249,856 ----a-w c:\windows\system32\odbc32.dll
- 2004-08-19 13:42:22 16,384 ----a-w c:\windows\system32\odbc32gt.dll
+ 2008-04-14 02:18:33 16,384 ----a-w c:\windows\system32\odbc32gt.dll
- 2004-08-19 13:43:04 32,768 ----a-w c:\windows\system32\odbcad32.exe
+ 2008-04-14 02:19:07 32,768 ----a-w c:\windows\system32\odbcad32.exe
- 2004-08-19 13:42:22 24,576 ----a-w c:\windows\system32\odbcbcp.dll
+ 2008-04-14 02:18:33 24,576 ----a-w c:\windows\system32\odbcbcp.dll
- 2004-08-19 13:42:22 135,168 ----a-w c:\windows\system32\odbcconf.dll
+ 2008-04-14 02:18:33 135,168 ----a-w c:\windows\system32\odbcconf.dll
- 2004-08-19 13:43:04 69,632 ----a-w c:\windows\system32\odbcconf.exe
+ 2008-04-14 02:19:07 69,632 ----a-w c:\windows\system32\odbcconf.exe
- 2004-08-19 13:42:22 106,496 ----a-w c:\windows\system32\odbccp32.dll
+ 2008-04-14 02:18:33 106,496 ----a-w c:\windows\system32\odbccp32.dll
- 2004-08-19 13:42:22 65,536 ----a-w c:\windows\system32\odbccr32.dll
+ 2008-04-14 02:18:33 65,536 ----a-w c:\windows\system32\odbccr32.dll
- 2004-08-19 13:42:22 65,536 ----a-w c:\windows\system32\odbccu32.dll
+ 2008-04-14 02:18:33 65,536 ----a-w c:\windows\system32\odbccu32.dll
- 2004-08-19 13:40:00 98,304 ----a-w c:\windows\system32\odbcint.dll
+ 2007-03-28 12:54:47 98,304 ----a-w c:\windows\system32\odbcint.dll
- 2004-08-19 13:40:00 61,712 ----a-w c:\windows\system32\odbcji32.dll
+ 2008-04-14 02:17:21 61,471 ----a-w c:\windows\system32\odbcji32.dll
- 2004-08-19 13:42:22 278,559 ----a-w c:\windows\system32\odbcjt32.dll
+ 2008-04-14 02:18:33 278,559 ----a-w c:\windows\system32\odbcjt32.dll
- 2004-08-19 13:40:00 12,288 ----a-w c:\windows\system32\odbcp32r.dll
+ 2008-04-13 17:26:05 12,288 ----a-w c:\windows\system32\odbcp32r.dll
- 2004-08-19 13:42:22 147,456 ----a-w c:\windows\system32\odbctrac.dll
+ 2008-04-14 02:18:33 147,456 ----a-w c:\windows\system32\odbctrac.dll
- 2004-08-19 13:42:22 20,511 ----a-w c:\windows\system32\oddbse32.dll
+ 2008-04-14 02:18:33 20,511 ----a-w c:\windows\system32\oddbse32.dll
- 2004-08-19 13:42:22 20,510 ----a-w c:\windows\system32\odexl32.dll
+ 2008-04-14 02:18:33 20,510 ----a-w c:\windows\system32\odexl32.dll
- 2004-08-19 13:42:22 20,510 ----a-w c:\windows\system32\odfox32.dll
+ 2008-04-14 02:18:33 20,510 ----a-w c:\windows\system32\odfox32.dll
- 2004-08-19 13:42:22 20,510 ----a-w c:\windows\system32\odpdx32.dll
+ 2008-04-14 02:18:33 20,510 ----a-w c:\windows\system32\odpdx32.dll
- 2004-08-19 13:42:22 20,511 ----a-w c:\windows\system32\odtext32.dll
+ 2008-04-14 02:18:33 20,511 ----a-w c:\windows\system32\odtext32.dll
- 2004-08-19 13:42:22 120,832 ----a-w c:\windows\system32\offfilt.dll
+ 2008-04-14 02:18:33 192,000 ----a-w c:\windows\system32\offfilt.dll
- 2005-07-26 04:40:00 1,284,608 ----a-w c:\windows\system32\ole32.dll
+ 2008-04-14 02:18:33 1,287,168 ----a-w c:\windows\system32\ole32.dll
- 2007-12-04 18:41:03 550,912 ----a-w c:\windows\system32\oleaut32.dll
+ 2008-04-14 02:18:33 551,936 ----a-w c:\windows\system32\oleaut32.dll
- 2005-07-26 04:40:00 75,264 ----a-w c:\windows\system32\olecli32.dll
+ 2008-04-14 02:18:33 75,264 ----a-w c:\windows\system32\olecli32.dll
- 2005-07-26 04:40:00 37,888 ----a-w c:\windows\system32\olecnv32.dll
+ 2008-04-14 02:18:33 37,376 ----a-w c:\windows\system32\olecnv32.dll
- 2006-10-16 16:14:42 124,416 ----a-w c:\windows\system32\oledlg.dll
+ 2008-04-14 02:18:33 124,416 ----a-w c:\windows\system32\oledlg.dll
- 2004-08-19 13:42:22 109,056 ----a-w c:\windows\system32\oleprn.dll
+ 2008-04-14 02:18:33 109,056 ----a-w c:\windows\system32\oleprn.dll
- 2004-08-19 13:42:22 83,456 ----a-w c:\windows\system32\olepro32.dll
+ 2008-04-14 02:18:33 84,992 ----a-w c:\windows\system32\olepro32.dll
+ 2008-04-14 02:18:33 144,896 ------w c:\windows\system32\onex.dll
- 2004-08-19 13:42:18 122,880 ----a-w c:\windows\system32\oobe\msobcomm.dll
+ 2008-04-14 02:18:27 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll
- 2004-08-19 13:42:18 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll
+ 2008-04-14 02:18:27 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll
- 2004-08-19 13:42:18 563,200 ----a-w c:\windows\system32\oobe\msobmain.dll
+ 2008-04-14 02:18:27 566,272 ----a-w c:\windows\system32\oobe\msobmain.dll
- 2004-08-19 13:42:18 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll
+ 2008-04-14 02:18:27 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll
- 2004-08-19 13:42:18 18,944 ----a-w c:\windows\system32\oobe\msobweb.dll
+ 2008-04-14 02:18:27 19,456 ----a-w c:\windows\system32\oobe\msobweb.dll
- 2002-09-10 12:00:00 28,160 ----a-w c:\windows\system32\oobe\msoobe.exe
+ 2008-04-14 02:19:05 29,184 ----a-w c:\windows\system32\oobe\msoobe.exe
- 2004-08-19 13:43:04 51,712 ----a-w c:\windows\system32\oobe\oobebaln.exe
+ 2008-04-14 02:19:07 51,712 ----a-w c:\windows\system32\oobe\oobebaln.exe
- 2004-08-19 13:43:04 70,656 ----a-w c:\windows\system32\openfiles.exe
+ 2008-04-14 02:19:07 70,656 ----a-w c:\windows\system32\openfiles.exe
- 2004-08-19 13:42:22 713,728 ----a-w c:\windows\system32\opengl32.dll
+ 2008-04-14 02:18:33 713,728 ----a-w c:\windows\system32\opengl32.dll
- 2004-08-19 13:43:06 216,064 ----a-w c:\windows\system32\osk.exe
+ 2008-04-14 02:19:08 216,064 ----a-w c:\windows\system32\osk.exe
- 2004-08-19 13:42:22 67,584 ----a-w c:\windows\system32\osuninst.dll
+ 2008-04-14 02:18:33 67,584 ----a-w c:\windows\system32\osuninst.dll
- 2004-08-19 13:42:22 116,224 ----a-w c:\windows\system32\p2p.dll
+ 2008-04-14 02:18:33 153,600 ----a-w c:\windows\system32\p2p.dll
- 2004-08-19 13:42:22 86,016 ----a-w c:\windows\system32\p2pgasvc.dll
+ 2008-04-14 02:18:33 105,472 ----a-w c:\windows\system32\p2pgasvc.dll
- 2004-08-19 13:42:22 312,320 ----a-w c:\windows\system32\p2pgraph.dll
+ 2008-04-14 02:18:33 313,856 ----a-w c:\windows\system32\p2pgraph.dll
- 2004-08-19 13:42:22 88,064 ----a-w c:\windows\system32\p2pnetsh.dll
+ 2008-04-14 02:18:33 115,712 ----a-w c:\windows\system32\p2pnetsh.dll
- 2004-08-19 13:42:22 526,848 ----a-w c:\windows\system32\p2psvc.dll
+ 2008-04-14 02:18:33 554,496 ----a-w c:\windows\system32\p2psvc.dll
- 2004-08-19 13:43:06 59,392 ----a-w c:\windows\system32\packager.exe
+ 2008-04-14 02:19:08 59,392 ----a-w c:\windows\system32\packager.exe
- 2004-08-19 13:42:22 64,512 ----a-w c:\windows\system32\pautoenr.dll
+ 2008-04-14 02:18:33 69,120 ----a-w c:\windows\system32\pautoenr.dll
- 2004-08-19 13:42:22 286,208 ----a-w c:\windows\system32\pdh.dll
+ 2008-04-14 02:18:33 286,720 ----a-w c:\windows\system32\pdh.dll
- 2008-09-05 13:16:00 52,764 ----a-w c:\windows\system32\perfc009.dat
+ 2008-09-28 18:50:26 52,764 ----a-w c:\windows\system32\perfc009.dat
- 2008-09-05 13:16:01 68,696 ----a-w c:\windows\system32\perfc00A.dat
+ 2008-09-28 18:50:27 68,696 ----a-w c:\windows\system32\perfc00A.dat
- 2004-08-19 13:42:22 41,984 ----a-w c:\windows\system32\perfctrs.dll
+ 2008-04-14 02:18:33 41,984 ----a-w c:\windows\system32\perfctrs.dll
- 2004-08-19 13:42:22 27,136 ----a-w c:\windows\system32\perfdisk.dll
+ 2008-04-14 02:18:33 27,136 ----a-w c:\windows\system32\perfdisk.dll
- 2008-09-05 13:16:01 380,350 ----a-w c:\windows\system32\perfh009.dat
+ 2008-09-28 18:50:27 380,350 ----a-w c:\windows\system32\perfh009.dat
- 2008-09-05 13:16:02 439,680 ----a-w c:\windows\system32\perfh00A.dat
+ 2008-09-28 18:50:27 439,680 ----a-w c:\windows\system32\perfh00A.dat
- 2004-08-19 13:43:06 15,872 ----a-w c:\windows\system32\perfmon.exe
+ 2008-04-14 02:19:08 15,872 ----a-w c:\windows\system32\perfmon.exe
- 2002-09-10 12:00:00 17,408 ----a-w c:\windows\system32\perfnet.dll
+ 2008-04-14 02:18:33 18,432 ----a-w c:\windows\system32\perfnet.dll
- 2004-08-19 13:42:22 26,112 ----a-w c:\windows\system32\perfos.dll
+ 2008-04-14 02:18:33 26,112 ----a-w c:\windows\system32\perfos.dll
- 2004-08-19 13:42:22 35,328 ----a-w c:\windows\system32\perfproc.dll
+ 2008-04-14 02:18:33 35,328 ----a-w c:\windows\system32\perfproc.dll
+ 2008-04-14 02:18:33 412,160 ------w c:\windows\system32\photometadatahandler.dll
- 2004-08-19 13:42:22 172,032 ----a-w c:\windows\system32\photowiz.dll
+ 2008-04-14 02:18:33 172,032 ----a-w c:\windows\system32\photowiz.dll
- 2004-08-19 13:56:12 35,328 ----a-w c:\windows\system32\pid.dll
+ 2008-04-14 02:18:33 35,328 ----a-w c:\windows\system32\pid.dll
- 2004-08-19 13:38:40 24,064 ----a-w c:\windows\system32\pidgen.dll
+ 2008-04-14 02:16:34 24,064 ----a-w c:\windows\system32\pidgen.dll
- 2004-08-19 13:43:06 19,456 ----a-w c:\windows\system32\ping.exe
+ 2008-04-14 02:19:08 19,456 ----a-w c:\windows\system32\ping.exe
- 2004-08-19 13:56:12 15,360 ----a-w c:\windows\system32\pjlmon.dll
+ 2008-04-14 02:18:33 15,360 ----a-w c:\windows\system32\pjlmon.dll
- 2008-06-23 15:40:05 39,424 ----a-w c:\windows\system32\pngfilt.dll
+ 2007-08-13 22:36:12 44,544 ----a-w c:\windows\system32\pngfilt.dll
- 2004-08-19 13:42:22 48,640 ----a-w c:\windows\system32\pnrpnsp.dll
+ 2008-04-14 02:18:33 58,880 ----a-w c:\windows\system32\pnrpnsp.dll
- 2004-08-19 13:42:22 105,984 ----a-w c:\windows\system32\polstore.dll
+ 2008-04-14 02:18:33 105,984 ----a-w c:\windows\system32\polstore.dll
- 2004-08-19 13:43:06 49,152 ----a-w c:\windows\system32\powercfg.exe
+ 2008-04-14 02:19:08 49,152 ----a-w c:\windows\system32\powercfg.exe
- 2004-08-19 13:42:22 17,408 ----a-w c:\windows\system32\powrprof.dll
+ 2008-04-14 02:18:33 17,408 ----a-w c:\windows\system32\powrprof.dll
- 2004-08-19 13:42:22 574,976 ----a-w c:\windows\system32\printui.dll
+ 2008-04-14 02:18:33 574,976 ----a-w c:\windows\system32\printui.dll
- 2004-08-19 13:42:22 27,648 ----a-w c:\windows\system32\profmap.dll
+ 2008-04-14 02:18:33 27,648 ----a-w c:\windows\system32\profmap.dll
- 2004-08-19 13:43:06 109,568 ----a-w c:\windows\system32\progman.exe
+ 2008-04-14 02:19:08 109,568 ----a-w c:\windows\system32\progman.exe
- 2004-08-19 13:43:06 50,688 ----a-w c:\windows\system32\proquota.exe
+ 2008-04-14 02:19:08 50,688 ----a-w c:\windows\system32\proquota.exe
- 2004-08-19 13:43:06 9,728 ----a-w c:\windows\system32\proxycfg.exe
+ 2008-04-14 02:19:08 9,728 ----a-w c:\windows\system32\proxycfg.exe
- 2004-08-19 13:42:22 23,040 ------w c:\windows\system32\psapi.dll
+ 2008-04-14 02:18:33 23,040 ----a-w c:\windows\system32\psapi.dll
- 2004-08-19 13:42:22 98,304 ----a-w c:\windows\system32\psbase.dll
+ 2008-04-14 02:18:33 98,304 ----a-w c:\windows\system32\psbase.dll
- 2004-08-19 13:42:22 43,520 ----a-w c:\windows\system32\pstorec.dll
+ 2008-04-14 02:18:33 43,520 ----a-w c:\windows\system32\pstorec.dll
- 2004-08-19 13:42:22 34,816 ----a-w c:\windows\system32\pstorsvc.dll
+ 2008-04-14 02:18:33 34,304 ----a-w c:\windows\system32\pstorsvc.dll
+ 2008-04-14 02:18:33 150,528 ------w c:\windows\system32\qagent.dll
+ 2008-04-14 02:18:33 293,888 ------w c:\windows\system32\qagentrt.dll
- 2004-08-19 13:42:22 192,512 ----a-w c:\windows\system32\qcap.dll
+ 2008-04-14 02:18:33 192,512 ----a-w c:\windows\system32\qcap.dll
+ 2008-04-14 02:18:33 62,464 ------w c:\windows\system32\qcliprov.dll
- 2004-08-19 13:42:22 279,040 ----a-w c:\windows\system32\qdv.dll
+ 2008-04-14 02:18:33 279,040 ----a-w c:\windows\system32\qdv.dll
- 2004-08-19 13:42:22 386,048 ----a-w c:\windows\system32\qdvd.dll
+ 2008-04-14 02:18:33 387,072 ----a-w c:\windows\system32\qdvd.dll
- 2004-08-19 13:42:22 563,200 ----a-w c:\windows\system32\qedit.dll
+ 2008-04-14 02:18:33 563,200 ----a-w c:\windows\system32\qedit.dll
- 2004-08-19 13:40:06 733,696 ----a-w c:\windows\system32\qedwipes.dll
+ 2008-04-13 17:21:32 733,696 ----a-w c:\windows\system32\qedwipes.dll
- 2004-08-19 13:42:22 382,464 ----a-w c:\windows\system32\qmgr.dll
+ 2008-04-14 02:18:33 409,088 ----a-w c:\windows\system32\qmgr.dll
- 2004-08-19 13:42:22 18,944 ----a-w c:\windows\system32\qmgrprxy.dll
+ 2008-04-14 02:18:33 18,944 ----a-w c:\windows\system32\qmgrprxy.dll
- 2004-08-19 13:43:06 20,480 ----a-w c:\windows\system32\qprocess.exe
+ 2008-04-14 02:19:08 20,480 ----a-w c:\windows\system32\qprocess.exe
- 2008-05-07 05:15:31 1,293,824 ----a-w c:\windows\system32\quartz.dll
+ 2008-05-07 05:11:47 1,294,336 ----a-w c:\windows\system32\quartz.dll
- 2006-06-22 05:13:50 1,440,256 ----a-w c:\windows\system32\query.dll
+ 2008-04-14 02:18:33 1,440,256 ----a-w c:\windows\system32\query.dll
+ 2008-04-14 02:18:33 76,800 ------w c:\windows\system32\qutil.dll
- 2004-08-19 13:42:22 43,520 ----a-w c:\windows\system32\racpldlg.dll
+ 2008-04-14 02:18:33 43,520 ----a-w c:\windows\system32\racpldlg.dll
- 2006-06-26 17:41:27 8,192 ----a-w c:\windows\system32\rasadhlp.dll
+ 2008-04-14 02:18:33 7,680 ----a-w c:\windows\system32\rasadhlp.dll
- 2004-08-19 13:42:22 237,056 ----a-w c:\windows\system32\rasapi32.dll
+ 2008-04-14 02:18:33 237,568 ----a-w c:\windows\system32\rasapi32.dll
- 2004-08-19 13:42:22 89,088 ----a-w c:\windows\system32\rasauto.dll
+ 2008-04-14 02:18:33 88,576 ----a-w c:\windows\system32\rasauto.dll
- 2004-08-19 13:42:22 69,632 ----a-w c:\windows\system32\raschap.dll
+ 2008-04-14 02:18:33 79,872 ----a-w c:\windows\system32\raschap.dll
- 2004-08-19 13:42:22 677,376 ----a-w c:\windows\system32\rasdlg.dll
+ 2008-04-14 02:18:33 677,888 ----a-w c:\windows\system32\rasdlg.dll
- 2004-08-19 13:42:22 61,440 ----a-w c:\windows\system32\rasman.dll
+ 2008-04-14 02:18:33 61,440 ----a-w c:\windows\system32\rasman.dll
- 2006-06-22 10:48:10 181,248 ----a-w c:\windows\system32\rasmans.dll
+ 2008-04-14 02:18:34 186,368 ----a-w c:\windows\system32\rasmans.dll
- 2004-08-19 13:43:06 57,344 ----a-w c:\windows\system32\rasphone.exe
+ 2008-04-14 02:19:08 57,344 ----a-w c:\windows\system32\rasphone.exe
- 2004-08-19 13:42:22 206,336 ----a-w c:\windows\system32\rasppp.dll
+ 2008-04-14 02:18:34 210,944 ----a-w c:\windows\system32\rasppp.dll
+ 2008-04-14 02:18:34 61,952 ------w c:\windows\system32\rasqec.dll
- 2004-08-19 13:42:22 16,896 ----a-w c:\windows\system32\rassapi.dll
+ 2008-04-14 02:18:34 16,384 ----a-w c:\windows\system32\rassapi.dll
- 2004-08-19 13:42:22 58,880 ----a-w c:\windows\system32\rastapi.dll
+ 2008-04-14 02:18:34 58,368 ----a-w c:\windows\system32\rastapi.dll
- 2004-08-19 13:42:22 112,640 ----a-w c:\windows\system32\rastls.dll
+ 2008-04-14 02:18:34 150,528 ----a-w c:\windows\system32\rastls.dll
- 2004-08-19 13:42:22 102,912 ----a-w c:\windows\system32\rcbdyctl.dll
+ 2008-04-14 02:18:34 102,912 ----a-w c:\windows\system32\rcbdyctl.dll
- 2004-08-19 13:43:06 35,840 ----a-w c:\windows\system32\rcimlby.exe
+ 2008-04-14 02:19:08 35,840 ----a-w c:\windows\system32\rcimlby.exe
- 2004-08-19 13:43:06 23,040 ----a-w c:\windows\system32\rcp.exe
+ 2008-04-14 02:19:09 23,040 ----a-w c:\windows\system32\rcp.exe
- 2004-08-19 13:42:22 147,968 ----a-w c:\windows\system32\rdchost.dll
+ 2008-04-14 02:18:34 147,968 ----a-w c:\windows\system32\rdchost.dll
- 2004-08-19 13:43:06 62,464 ----a-w c:\windows\system32\rdpclip.exe
+ 2008-04-14 02:19:09 62,976 ----a-w c:\windows\system32\rdpclip.exe
- 2004-08-19 13:43:38 92,168 ----a-w c:\windows\system32\rdpdd.dll
+ 2008-04-14 02:19:44 92,424 ----a-w c:\windows\system32\rdpdd.dll
- 2004-08-19 13:42:22 19,968 ----a-w c:\windows\system32\rdpsnd.dll
+ 2008-04-14 02:18:34 19,968 ----a-w c:\windows\system32\rdpsnd.dll
- 2004-08-19 13:43:38 87,176 ----a-w c:\windows\system32\rdpwsx.dll
+ 2008-04-14 02:19:44 87,176 ----a-w c:\windows\system32\rdpwsx.dll
- 2004-08-19 13:43:06 13,824 ----a-w c:\windows\system32\rdsaddin.exe
+ 2008-04-14 02:19:09 13,824 ----a-w c:\windows\system32\rdsaddin.exe
- 2004-08-19 13:43:06 67,072 ----a-w c:\windows\system32\rdshost.exe
+ 2008-04-14 02:19:09 67,072 ----a-w c:\windows\system32\rdshost.exe
- 2004-08-19 13:43:06 52,224 ----a-w c:\windows\system32\reg.exe
+ 2008-04-14 02:19:09 52,224 ----a-w c:\windows\system32\reg.exe
- 2004-08-19 13:42:22 49,664 ----a-w c:\windows\system32\regapi.dll
+ 2008-04-14 02:18:34 49,664 ----a-w c:\windows\system32\regapi.dll
- 2004-08-19 13:42:22 59,904 ----a-w c:\windows\system32\regsvc.dll
+ 2008-04-14 02:18:34 59,904 ----a-w c:\windows\system32\regsvc.dll
- 2004-08-19 13:43:06 11,776 ----a-w c:\windows\system32\regsvr32.exe
+ 2008-04-14 02:19:09 11,776 ----a-w c:\windows\system32\regsvr32.exe
- 2004-08-19 13:42:22 401,408 ----a-w c:\windows\system32\regwizc.dll
+ 2008-04-14 02:18:34 401,408 ----a-w c:\windows\system32\regwizc.dll
+ 2004-08-19 14:41:46 229,376 ----a-w c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\ati2cqag.dll
+ 2004-08-19 14:41:46 201,728 ----a-w c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\ati2dvag.dll
+ 2004-08-19 14:20:16 701,440 ----a-w c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\ati2mtag.sys
+ 2004-08-19 14:41:46 870,784 ----a-w c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\ati3d1ag.dll
+ 2004-08-19 14:41:46 1,888,992 ----a-w c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\ati3duag.dll
+ 2004-08-19 14:41:46 516,768 ----a-w c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\ativvaxx.dll
+ 2004-08-19 13:56:12 41,600 ----a-w c:\windows\system32\ReinstallBackups\0001\DriverFiles\i386\amdk7.sys
+ 2004-08-03 22:07:44 44,672 ----a-w c:\windows\system32\ReinstallBackups\0002\DriverFiles\i386\UAGP35.SYS
- 2004-08-19 13:42:22 61,440 ----a-w c:\windows\system32\remotepg.dll
+ 2008-04-14 02:18:34 61,440 ----a-w c:\windows\system32\remotepg.dll
- 2004-08-19 13:43:08 382,976 ----a-w c:\windows\system32\Restore\rstrui.exe
+ 2008-04-14 02:19:09 382,976 ----a-w c:\windows\system32\Restore\rstrui.exe
- 2004-08-19 13:42:22 58,880 ----a-w c:\windows\system32\resutils.dll
+ 2008-04-14 02:18:34 58,880 ----a-w c:\windows\system32\resutils.dll
- 2004-08-19 13:43:08 15,360 ----a-w c:\windows\system32\rexec.exe
+ 2008-04-14 02:19:09 15,360 ----a-w c:\windows\system32\rexec.exe
+ 2008-04-14 02:18:34 290,304 ------w c:\windows\system32\rhttpaa.dll
- 2006-11-27 14:54:17 433,152 ----a-w c:\windows\system32\riched20.dll
+ 2008-04-14 02:18:34 433,664 ----a-w c:\windows\system32\riched20.dll
- 2007-07-09 13:11:11 584,192 ----a-w c:\windows\system32\rpcrt4.dll
+ 2008-04-14 02:18:34 584,704 ----a-w c:\windows\system32\rpcrt4.dll
- 2005-07-26 04:40:01 397,824 ----a-w c:\windows\system32\rpcss.dll
+ 2008-04-14 02:18:34 399,360 ----a-w c:\windows\system32\rpcss.dll
- 2004-08-03 20:31:44 152,576 ----a-w c:\windows\system32\rsaenh.dll
+ 2008-04-13 17:37:57 208,384 ----a-w c:\windows\system32\rsaenh.dll
- 2004-08-19 13:43:08 16,384 ----a-w c:\windows\system32\rsh.exe
+ 2008-04-14 02:19:09 16,384 ----a-w c:\windows\system32\rsh.exe
- 2004-08-19 13:42:22 40,448 ----a-w c:\windows\system32\rshx32.dll
+ 2008-04-14 02:18:34 40,448 ----a-w c:\windows\system32\rshx32.dll
- 2004-08-19 13:42:22 18,944 ----a-w c:\windows\system32\rsmps.dll
+ 2008-04-14 02:18:34 18,944 ----a-w c:\windows\system32\rsmps.dll
- 2004-08-19 13:43:08 107,520 ----a-w c:\windows\system32\rsnotify.exe
+ 2008-04-14 02:19:09 107,520 ----a-w c:\windows\system32\rsnotify.exe
- 2002-09-10 12:00:00 90,112 ----a-w c:\windows\system32\rsvpsp.dll
+ 2008-04-14 02:18:34 92,672 ----a-w c:\windows\system32\rsvpsp.dll
- 2004-08-19 13:43:08 77,824 ----a-w c:\windows\system32\rtcshare.exe
+ 2008-04-14 02:19:10 77,824 ----a-w c:\windows\system32\rtcshare.exe
- 2004-08-19 13:42:22 31,744 ----a-w c:\windows\system32\rtipxmib.dll
+ 2008-04-14 02:18:34 31,744 ----a-w c:\windows\system32\rtipxmib.dll
- 2004-08-19 13:42:22 44,032 ----a-w c:\windows\system32\rtutils.dll
+ 2008-04-14 02:18:34 44,032 ----a-w c:\windows\system32\rtutils.dll
- 2004-08-19 13:43:08 33,280 ----a-w c:\windows\system32\rundll32.exe
+ 2008-04-14 02:19:10 33,280 ----a-w c:\windows\system32\rundll32.exe
- 2004-08-19 13:43:08 14,336 ----a-w c:\windows\system32\runonce.exe
+ 2008-04-14 02:19:10 14,336 ----a-w c:\windows\system32\runonce.exe
+ 2008-04-14 02:18:34 9,728 ------w c:\windows\system32\rwnh.dll
+ 2008-04-14 02:18:34 397,056 ------w c:\windows\system32\s3gnb.dll
- 2004-08-19 13:42:22 43,520 ----a-w c:\windows\system32\safrcdlg.dll
+ 2008-04-14 02:18:34 43,520 ----a-w c:\windows\system32\safrcdlg.dll
- 2004-08-19 13:42:22 29,696 ----a-w c:\windows\system32\safrdm.dll
+ 2008-04-14 02:18:34 29,696 ----a-w c:\windows\system32\safrdm.dll
- 2004-08-19 13:42:22 45,568 ----a-w c:\windows\system32\safrslv.dll
+ 2008-04-14 02:18:35 45,568 ----a-w c:\windows\system32\safrslv.dll
- 2004-08-19 13:42:22 64,000 ----a-w c:\windows\system32\samlib.dll
+ 2008-04-14 02:18:35 64,000 ----a-w c:\windows\system32\samlib.dll
- 2004-08-19 13:42:22 429,056 ----a-w c:\windows\system32\samsrv.dll
+ 2008-04-14 02:18:35 429,056 ----a-w c:\windows\system32\samsrv.dll
- 2004-08-19 13:43:08 13,824 ----a-w c:\windows\system32\savedump.exe
+ 2008-04-14 02:19:10 13,824 ----a-w c:\windows\system32\savedump.exe
- 2004-08-19 13:42:22 270,848 ----a-w c:\windows\system32\sbe.dll
+ 2008-04-14 02:18:35 270,848 ----a-w c:\windows\system32\sbe.dll
- 2004-08-19 13:42:22 159,232 ----a-w c:\windows\system32\sbeio.dll
+ 2008-04-14 02:18:35 159,232 ----a-w c:\windows\system32\sbeio.dll
- 2004-08-19 13:42:22 70,656 ----a-w c:\windows\system32\scarddlg.dll
+ 2008-04-14 02:18:35 70,656 ----a-w c:\windows\system32\scarddlg.dll
- 2004-08-19 13:43:08 99,840 ----a-w c:\windows\system32\scardsvr.exe
+ 2008-04-14 02:19:10 99,840 ----a-w c:\windows\system32\scardsvr.exe
- 2004-08-19 13:42:24 171,520 ----a-w c:\windows\system32\sccsccp.dll
+ 2008-04-14 02:18:35 171,520 ----a-w c:\windows\system32\sccsccp.dll
- 2004-08-19 13:42:24 184,832 ----a-w c:\windows\system32\scecli.dll
+ 2008-04-14 02:18:35 185,856 ----a-w c:\windows\system32\scecli.dll
- 2004-08-19 13:42:24 324,096 ----a-w c:\windows\system32\scesrv.dll
+ 2008-04-14 02:18:35 325,120 ----a-w c:\windows\system32\scesrv.dll
- 2007-04-25 14:22:37 144,896 ----a-w c:\windows\system32\schannel.dll
+ 2008-04-14 02:18:35 144,384 ----a-w c:\windows\system32\schannel.dll
- 2004-08-19 13:42:24 192,000 ----a-w c:\windows\system32\schedsvc.dll
+ 2008-04-14 02:18:35 193,536 ----a-w c:\windows\system32\schedsvc.dll
- 2004-08-19 13:43:08 128,000 ----a-w c:\windows\system32\schtasks.exe
+ 2008-04-14 02:19:10 128,000 ----a-w c:\windows\system32\schtasks.exe
- 2004-08-19 13:42:24 22,016 ----a-w c:\windows\system32\sclgntfy.dll
+ 2008-04-14 02:18:35 22,016 ----a-w c:\windows\system32\sclgntfy.dll
- 2004-08-19 13:43:24 9,216 ----a-w c:\windows\system32\scrnsave.scr
+ 2008-04-14 02:19:18 9,216 ----a-w c:\windows\system32\scrnsave.scr
- 2004-08-19 13:42:24 159,744 ----a-w c:\windows\system32\scrobj.dll
+ 2008-04-14 02:18:35 180,224 ----a-w c:\windows\system32\scrobj.dll
- 2004-08-19 13:42:24 151,552 ----a-w c:\windows\system32\scrrun.dll
+ 2008-04-14 02:18:35 172,032 ----a-w c:\windows\system32\scrrun.dll
- 2004-08-19 13:43:08 78,336 ----a-w c:\windows\system32\sdbinst.exe
+ 2008-04-14 02:19:10 78,336 ----a-w c:\windows\system32\sdbinst.exe
- 2004-08-19 13:42:24 29,184 ----a-w c:\windows\system32\sdhcinst.dll
+ 2008-04-14 02:18:35 29,184 ----a-w c:\windows\system32\sdhcinst.dll
- 2004-08-19 13:43:08 18,944 ----a-w c:\windows\system32\secedit.exe
+ 2008-04-14 02:19:10 19,456 ----a-w c:\windows\system32\secedit.exe
- 2004-08-19 13:42:24 18,944 ----a-w c:\windows\system32\seclogon.dll
+ 2008-04-14 02:18:35 18,944 ----a-w c:\windows\system32\seclogon.dll
- 2004-08-19 13:42:24 55,808 ----a-w c:\windows\system32\secur32.dll
+ 2008-04-14 02:18:35 56,320 ----a-w c:\windows\system32\secur32.dll
- 2004-08-19 13:42:24 5,632 ----a-w c:\windows\system32\security.dll
+ 2008-04-14 02:18:35 5,632 ----a-w c:\windows\system32\security.dll
- 2004-08-19 13:42:24 29,696 ----a-w c:\windows\system32\sendcmsg.dll
+ 2008-04-14 02:18:35 29,696 ----a-w c:\windows\system32\sendcmsg.dll
- 2004-08-19 13:42:24 55,296 ----a-w c:\windows\system32\sendmail.dll
+ 2008-04-14 02:18:35 55,296 ----a-w c:\windows\system32\sendmail.dll
- 2004-08-19 13:42:24 38,912 ----a-w c:\windows\system32\sens.dll
+ 2008-04-14 02:18:35 39,424 ----a-w c:\windows\system32\sens.dll
- 2004-08-19 13:42:24 6,656 ----a-w c:\windows\system32\sensapi.dll
+ 2008-04-14 02:18:35 7,168 ----a-w c:\windows\system32\sensapi.dll
- 2004-08-19 13:42:24 56,832 ----a-w c:\windows\system32\servdeps.dll
+ 2008-04-14 02:18:35 56,832 ----a-w c:\windows\system32\servdeps.dll
- 2004-08-19 13:43:10 108,544 ----a-w c:\windows\system32\services.exe
+ 2008-04-14 02:19:10 109,056 ----a-w c:\windows\system32\services.exe
- 2004-08-19 13:43:10 142,848 ----a-w c:\windows\system32\sessmgr.exe
+ 2008-04-14 02:19:10 143,360 ----a-w c:\windows\system32\sessmgr.exe
- 2004-08-19 13:43:10 32,256 ----a-w c:\windows\system32\sethc.exe
+ 2008-04-14 02:19:10 32,256 ----a-w c:\windows\system32\sethc.exe
- 2004-08-19 13:43:10 23,040 ----a-w c:\windows\system32\setup.exe
+ 2008-04-14 02:19:10 23,040 ----a-w c:\windows\system32\setup.exe
- 2002-09-10 12:00:00 259,584 ----a-w c:\windows\system32\Setup\comsetup.dll
+ 2008-04-14 02:18:20 274,944 ----a-w c:\windows\system32\Setup\comsetup.dll
- 2004-08-19 13:42:08 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
+ 2008-04-14 02:18:21 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
- 2004-08-19 13:42:08 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
+ 2008-04-14 02:18:21 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
- 2004-08-19 13:39:02 507,392 ----a-w c:\windows\system32\Setup\iis.dll
+ 2008-04-14 02:16:47 507,392 ----a-w c:\windows\system32\Setup\iis.dll
- 2002-09-10 12:00:00 118,784 ----a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2008-04-14 02:18:22 126,464 ----a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2008-04-14 02:18:24 8,192 ----a-w c:\windows\system32\Setup\koc.dll
- 2004-08-19 13:42:14 16,896 ----a-w c:\windows\system32\Setup\medctroc.dll
+ 2008-04-14 02:18:24 16,896 ----a-w c:\windows\system32\Setup\medctroc.dll
- 2002-09-10 12:00:00 82,432 ----a-w c:\windows\system32\Setup\msdtcstp.dll
+ 2008-04-14 02:18:25 90,112 ----a-w c:\windows\system32\Setup\msdtcstp.dll
- 2004-08-19 13:42:16 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
+ 2008-04-14 02:18:26 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
- 2004-08-19 13:42:18 169,984 ----a-w c:\windows\system32\Setup\msmqocm.dll
+ 2008-04-14 02:18:27 170,496 ----a-w c:\windows\system32\Setup\msmqocm.dll
- 2004-08-19 13:42:20 77,824 ----a-w c:\windows\system32\Setup\netoc.dll
+ 2008-04-14 02:18:28 77,824 ----a-w c:\windows\system32\Setup\netoc.dll
- 2004-08-19 13:42:22 63,488 ----a-w c:\windows\system32\Setup\ntoc.dll
+ 2008-04-14 02:18:29 63,488 ----a-w c:\windows\system32\Setup\ntoc.dll
- 2004-08-19 13:42:22 15,872 ----a-w c:\windows\system32\Setup\ocgen.dll
+ 2008-04-14 02:18:32 15,872 ----a-w c:\windows\system32\Setup\ocgen.dll
- 2004-08-19 13:42:22 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
+ 2008-04-14 02:18:32 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
- 2004-08-19 13:42:26 101,888 ----a-w c:\windows\system32\Setup\setupqry.dll
+ 2008-04-14 02:18:35 101,888 ----a-w c:\windows\system32\Setup\setupqry.dll
- 2004-08-19 13:42:28 34,304 ----a-w c:\windows\system32\Setup\tabletoc.dll
+ 2008-04-14 02:18:44 34,304 ----a-w c:\windows\system32\Setup\tabletoc.dll
- 2004-08-19 13:42:28 123,392 ----a-w c:\windows\system32\Setup\tsoc.dll
+ 2008-04-14 02:18:44 131,584 ----a-w c:\windows\system32\Setup\tsoc.dll
- 2004-08-19 13:42:26 999,424 ----a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 12:48:36 1,000,960 ----a-w c:\windows\system32\setupapi.dll
+ 2008-04-14 02:19:11 32,768 ------w c:\windows\system32\setupn.exe
- 2004-08-19 13:42:26 5,120 ----a-w c:\windows\system32\sfc.dll
+ 2008-04-14 02:18:35 5,120 ----a-w c:\windows\system32\sfc.dll
- 2004-08-19 13:42:26 141,824 ----a-w c:\windows\system32\sfc_os.dll
+ 2008-04-14 02:18:35 141,824 ----a-w c:\windows\system32\sfc_os.dll
- 2004-08-19 13:42:26 1,548,800 ----a-w c:\windows\system32\sfcfiles.dll
+ 2008-04-14 02:18:35 1,572,352 ----a-w c:\windows\system32\sfcfiles.dll
- 2004-08-19 13:40:20 565,760 ----a-w c:\windows\system32\shdoclc.dll
+ 2008-04-14 01:53:49 565,760 ----a-w c:\windows\system32\shdoclc.dll
- 2008-06-23 15:40:07 1,495,040 ----a-w c:\windows\system32\shdocvw.dll
+ 2008-04-14 02:18:36 1,499,648 ----a-w c:\windows\system32\shdocvw.dll
- 2007-10-25 16:56:23 8,496,640 ----a-w c:\windows\system32\shell32.dll
+ 2008-04-14 02:18:36 8,503,296 ----a-w c:\windows\system32\shell32.dll
- 2004-08-19 13:42:26 25,088 ----a-w c:\windows\system32\shfolder.dll
+ 2008-04-14 02:18:36 25,088 ----a-w c:\windows\system32\shfolder.dll
- 2004-08-19 13:42:26 68,096 ----a-w c:\windows\system32\shgina.dll
+ 2008-04-14 02:18:36 68,096 ----a-w c:\windows\system32\shgina.dll
- 2004-08-19 13:42:26 65,536 ----a-w c:\windows\system32\shimeng.dll
+ 2008-04-14 02:18:36 65,024 ----a-w c:\windows\system32\shimeng.dll
- 2004-08-19 13:42:26 440,320 ----a-w c:\windows\system32\shimgvw.dll
+ 2008-04-14 02:18:36 440,320 ----a-w c:\windows\system32\shimgvw.dll
- 2008-06-23 15:40:08 474,624 ----a-w c:\windows\system32\shlwapi.dll
+ 2008-04-14 02:18:36 474,624 ----a-w c:\windows\system32\shlwapi.dll
- 2004-08-19 13:42:26 152,576 ----a-w c:\windows\system32\shmedia.dll
+ 2008-04-14 02:18:36 153,088 ----a-w c:\windows\system32\shmedia.dll
- 2004-08-19 13:43:10 42,496 ----a-w c:\windows\system32\shmgrate.exe
+ 2008-04-14 02:19:11 45,056 ----a-w c:\windows\system32\shmgrate.exe
- 2004-08-19 13:43:10 78,848 ----a-w c:\windows\system32\shrpubw.exe
+ 2008-04-14 02:19:11 78,848 ----a-w c:\windows\system32\shrpubw.exe
- 2004-08-19 13:42:26 28,160 ----a-w c:\windows\system32\shscrap.dll
+ 2008-04-14 02:18:36 28,160 ----a-w c:\windows\system32\shscrap.dll
- 2006-12-19 21:49:47 134,656 ----a-w c:\windows\system32\shsvcs.dll
+ 2008-04-14 02:18:36 135,168 ----a-w c:\windows\system32\shsvcs.dll
- 2004-08-19 13:43:10 20,480 ----a-w c:\windows\system32\shutdown.exe
+ 2008-04-14 02:19:11 19,968 ----a-w c:\windows\system32\shutdown.exe
- 2004-08-19 13:42:26 13,824 ----a-w c:\windows\system32\sigtab.dll
+ 2008-04-14 02:18:36 13,824 ----a-w c:\windows\system32\sigtab.dll
- 2004-08-19 13:43:10 71,168 ----a-w c:\windows\system32\sigverif.exe
+ 2008-04-14 02:19:11 71,168 ----a-w c:\windows\system32\sigverif.exe
- 2004-08-19 13:43:10 26,112 ----a-w c:\windows\system32\skeys.exe
+ 2008-04-14 02:19:11 26,112 ----a-w c:\windows\system32\skeys.exe
- 2004-08-19 13:42:26 25,600 ----a-w c:\windows\system32\slayerxp.dll
+ 2008-04-14 02:18:36 25,600 ----a-w c:\windows\system32\slayerxp.dll
- 2004-08-19 13:42:26 98,304 ----a-w c:\windows\system32\slbiop.dll
+ 2008-04-14 02:18:36 98,304 ----a-w c:\windows\system32\slbiop.dll
+ 2008-04-14 02:18:36 73,832 ------w c:\windows\system32\slcoinst.dll
+ 2008-04-14 02:18:36 286,792 ------w c:\windows\system32\slextspk.dll
+ 2008-04-14 02:18:36 188,508 ------w c:\windows\system32\slgen.dll
+ 2008-04-14 02:19:11 32,866 ------w c:\windows\system32\slrundll.exe
+ 2008-04-14 02:19:11 73,796 ------w c:\windows\system32\slserv.exe
- 2004-08-19 13:43:10 8,192 ----a-w c:\windows\system32\smbinst.exe
+ 2008-04-14 02:19:11 8,192 ----a-w c:\windows\system32\smbinst.exe
- 2004-08-19 13:42:26 369,152 ----a-w c:\windows\system32\smlogcfg.dll
+ 2008-04-14 02:18:36 368,640 ----a-w c:\windows\system32\smlogcfg.dll
- 2004-08-19 13:43:10 92,160 ----a-w c:\windows\system32\smlogsvc.exe
+ 2008-04-14 02:19:11 92,160 ----a-w c:\windows\system32\smlogsvc.exe
- 2004-08-19 13:43:10 50,688 ----a-w c:\windows\system32\smss.exe
+ 2008-04-14 02:19:11 50,688 ----a-w c:\windows\system32\smss.exe
+ 2008-04-14 02:18:36 10,752 ------w c:\windows\system32\smtpapi.dll
- 2004-08-19 13:43:12 132,608 ----a-w c:\windows\system32\sndrec32.exe
+ 2008-04-14 02:19:12 132,608 ----a-w c:\windows\system32\sndrec32.exe
- 2004-08-19 13:42:26 18,944 ----a-w c:\windows\system32\snmpapi.dll
+ 2008-04-14 02:18:36 18,944 ----a-w c:\windows\system32\snmpapi.dll
- 2004-08-19 13:42:26 183,808 ----a-w c:\windows\system32\snmpsnap.dll
+ 2008-04-14 02:18:36 183,808 ----a-w c:\windows\system32\snmpsnap.dll
+ 2008-07-19 02:10:20 36,552 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-07-19 02:10:40 45,768 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
- 2002-09-10 12:00:00 24,064 ----a-w c:\windows\system32\sort.exe
+ 2008-04-14 02:19:12 25,088 ----a-w c:\windows\system32\sort.exe
+ 2008-04-14 02:19:12 7,680 ----a-w c:\windows\system32\spdwnwxp.exe
- 2004-08-19 13:43:12 539,136 ----a-w c:\windows\system32\spider.exe
+ 2008-04-14 02:19:12 539,136 ----a-w c:\windows\system32\spider.exe
- 2004-08-03 20:59:36 12,800 ----a-w c:\windows\system32\spiisupd.exe
+ 2008-04-13 18:43:31 12,800 ----a-w c:\windows\system32\spiisupd.exe
- 2004-08-19 13:43:12 11,776 ----a-w c:\windows\system32\spnpinst.exe
+ 2008-04-14 12:49:14 11,264 ----a-w c:\windows\system32\spnpinst.exe
- 2004-08-19 13:42:26 74,752 ----a-w c:\windows\system32\spoolss.dll
+ 2008-04-14 02:18:36 75,264 ----a-w c:\windows\system32\spoolss.dll
- 2005-06-10 23:53:32 57,856 ----a-w c:\windows\system32\spoolsv.exe
+ 2008-04-14 02:19:12 57,856 ----a-w c:\windows\system32\spoolsv.exe
- 2006-10-09 02:53:36 23,856 ----a-w c:\windows\system32\spupdsvc.exe
+ 2007-08-11 01:47:10 26,488 ----a-w c:\windows\system32\spupdsvc.exe
+ 2008-04-14 02:19:12 20,992 ------w c:\windows\system32\spupdwxp.exe
- 2004-08-19 13:42:26 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
+ 2008-04-14 02:18:43 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
- 2004-08-19 13:42:26 180,800 ----a-w c:\windows\system32\sqlunirl.dll
+ 2008-04-14 02:18:43 180,800 ----a-w c:\windows\system32\sqlunirl.dll
- 2004-08-19 13:42:28 67,584 ----a-w c:\windows\system32\srclient.dll
+ 2008-04-14 02:18:43 67,584 ----a-w c:\windows\system32\srclient.dll
- 2004-08-19 13:42:28 241,152 ----a-w c:\windows\system32\srrstr.dll
+ 2008-04-14 02:18:44 241,152 ----a-w c:\windows\system32\srrstr.dll
- 2004-08-19 13:42:28 171,008 ----a-w c:\windows\system32\srsvc.dll
+ 2008-04-14 02:18:44 171,520 ----a-w c:\windows\system32\srsvc.dll
- 2004-12-07 19:34:00 96,768 ----a-w c:\windows\system32\srvsvc.dll
+ 2008-04-14 02:18:44 96,768 ----a-w c:\windows\system32\srvsvc.dll
- 2004-08-19 13:43:24 708,608 ----a-w c:\windows\system32\ss3dfo.scr
+ 2008-04-14 02:19:18 708,608 ----a-w c:\windows\system32\ss3dfo.scr
- 2004-08-19 13:43:24 19,968 ----a-w c:\windows\system32\ssbezier.scr
+ 2008-04-14 02:19:18 19,968 ----a-w c:\windows\system32\ssbezier.scr
- 2004-08-19 13:42:28 34,816 ----a-w c:\windows\system32\ssdpapi.dll
+ 2008-04-14 02:18:44 34,816 ----a-w c:\windows\system32\ssdpapi.dll
- 2004-08-19 13:42:28 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
+ 2008-04-14 02:18:44 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
- 2004-08-19 13:43:26 393,216 ----a-w c:\windows\system32\ssflwbox.scr
+ 2008-04-14 02:19:19 393,216 ----a-w c:\windows\system32\ssflwbox.scr
- 2004-08-19 13:43:26 20,992 ----a-w c:\windows\system32\ssmarque.scr
+ 2008-04-14 02:19:19 20,992 ----a-w c:\windows\system32\ssmarque.scr
- 2004-08-19 13:43:26 47,616 ----a-w c:\windows\system32\ssmypics.scr
+ 2008-04-14 02:19:19 47,616 ----a-w c:\windows\system32\ssmypics.scr
- 2004-08-19 13:43:26 18,944 ----a-w c:\windows\system32\ssmyst.scr
+ 2008-04-14 02:19:19 18,944 ----a-w c:\windows\system32\ssmyst.scr
- 2004-08-19 13:43:26 610,304 ----a-w c:\windows\system32\sspipes.scr
+ 2008-04-14 02:19:19 610,304 ----a-w c:\windows\system32\sspipes.scr
- 2004-08-19 13:43:26 14,848 ----a-w c:\windows\system32\ssstars.scr
+ 2008-04-14 02:19:19 14,848 ----a-w c:\windows\system32\ssstars.scr
- 2004-08-19 13:43:26 684,032 ----a-w c:\windows\system32\sstext3d.scr
+ 2008-04-14 02:19:19 684,032 ----a-w c:\windows\system32\sstext3d.scr
- 2002-09-10 12:00:00 54,272 ----a-w c:\windows\system32\stclient.dll
+ 2008-04-14 02:18:44 59,392 ----a-w c:\windows\system32\stclient.dll
- 2004-08-19 13:42:28 68,096 ----a-w c:\windows\system32\sti.dll
+ 2008-04-14 02:18:44 68,608 ----a-w c:\windows\system32\sti.dll
- 2004-08-19 13:42:28 137,728 ----a-w c:\windows\system32\sti_ci.dll
+ 2008-04-14 02:18:44 137,728 ----a-w c:\windows\system32\sti_ci.dll
- 2004-08-19 13:43:12 14,848 ----a-w c:\windows\system32\stimon.exe
+ 2008-04-14 02:19:12 14,848 ----a-w c:\windows\system32\stimon.exe
- 2004-08-19 13:42:28 122,368 ----a-w c:\windows\system32\stobject.dll
+ 2008-04-14 02:18:44 122,368 ----a-w c:\windows\system32\stobject.dll
- 2004-08-19 14:42:28 76,288 ----a-w c:\windows\system32\storprop.dll
+ 2008-04-14 02:18:44 76,288 ----a-w c:\windows\system32\storprop.dll
- 2006-08-24 17:19:40 246,814 ----a-w c:\windows\system32\strmdll.dll
+ 2008-04-14 02:18:44 246,814 ----a-w c:\windows\system32\strmdll.dll
- 2004-08-19 13:42:28 75,776 ----a-w c:\windows\system32\strmfilt.dll
+ 2008-04-14 02:18:44 75,776 ----a-w c:\windows\system32\strmfilt.dll
- 2004-08-19 13:43:12 14,336 ----a-w c:\windows\system32\svchost.exe
+ 2008-04-14 02:19:12 14,336 ----a-w c:\windows\system32\svchost.exe
- 2006-10-20 01:38:50 716,288 ----a-w c:\windows\system32\sxs.dll
+ 2008-04-14 02:18:44 715,776 ----a-w c:\windows\system32\sxs.dll
- 2004-08-19 13:42:28 57,856 ----a-w c:\windows\system32\synceng.dll
+ 2008-04-14 02:18:44 57,856 ----a-w c:\windows\system32\synceng.dll
- 2004-08-19 13:42:28 195,072 ----a-w c:\windows\system32\syncui.dll
+ 2008-04-14 02:18:44 195,072 ----a-w c:\windows\system32\syncui.dll
- 2004-08-19 13:43:12 107,520 ----a-w c:\windows\system32\sysocmgr.exe
+ 2008-04-14 02:19:13 107,520 ----a-w c:\windows\system32\sysocmgr.exe
- 2004-08-19 13:42:28 1,001,472 ----a-w c:\windows\system32\syssetup.dll
+ 2008-04-14 02:18:44 1,009,664 ----a-w c:\windows\system32\syssetup.dll
- 2002-09-10 12:00:00 70,144 ----a-w c:\windows\system32\systeminfo.exe
+ 2008-04-14 02:19:12 73,728 ----a-w c:\windows\system32\systeminfo.exe
- 2005-10-17 21:21:06 118,272 ----a-w c:\windows\system32\t2embed.dll
+ 2008-04-14 02:18:44 117,760 ----a-w c:\windows\system32\t2embed.dll
- 2004-08-19 13:42:28 860,160 ----a-w c:\windows\system32\tapi3.dll
+ 2008-04-14 02:18:44 860,160 ----a-w c:\windows\system32\tapi3.dll
- 2004-08-19 13:42:28 181,760 ----a-w c:\windows\system32\tapi32.dll
+ 2008-04-14 02:18:44 181,760 ----a-w c:\windows\system32\tapi32.dll
- 2005-07-08 16:29:01 249,344 ----a-w c:\windows\system32\tapisrv.dll
+ 2008-04-14 02:18:44 249,856 ----a-w c:\windows\system32\tapisrv.dll
- 2002-09-10 12:00:00 74,752 ----a-w c:\windows\system32\taskkill.exe
+ 2008-04-14 02:19:13 78,848 ----a-w c:\windows\system32\taskkill.exe
- 2002-09-10 12:00:00 74,240 ----a-w c:\windows\system32\tasklist.exe
+ 2008-04-14 02:19:13 79,872 ----a-w c:\windows\system32\tasklist.exe
- 2004-08-19 13:43:14 141,312 ----a-w c:\windows\system32\taskmgr.exe
+ 2008-04-14 02:19:13 141,312 ----a-w c:\windows\system32\taskmgr.exe
- 2004-08-19 13:42:28 14,848 ----a-w c:\windows\system32\tcpmib.dll
+ 2008-04-14 02:18:44 14,848 ----a-w c:\windows\system32\tcpmib.dll
- 2004-08-19 13:42:28 46,592 ----a-w c:\windows\system32\tcpmon.dll
+ 2008-04-14 02:18:44 46,592 ----a-w c:\windows\system32\tcpmon.dll
- 2004-08-19 13:42:28 46,592 ----a-w c:\windows\system32\tcpmonui.dll
+ 2008-04-14 02:18:44 46,592 ----a-w c:\windows\system32\tcpmonui.dll
- 2005-05-11 02:30:02 77,824 ----a-w c:\windows\system32\telnet.exe
+ 2008-04-14 02:19:13 77,824 ----a-w c:\windows\system32\telnet.exe
- 2004-08-19 13:42:28 358,912 ----a-w c:\windows\system32\termmgr.dll
+ 2008-04-14 02:18:44 358,912 ----a-w c:\windows\system32\termmgr.dll
- 2004-08-19 13:42:28 296,960 ----a-w c:\windows\system32\termsrv.dll
+ 2008-04-14 02:18:44 296,960 ----a-w c:\windows\system32\termsrv.dll
- 2004-08-19 13:42:28 390,656 ----a-w c:\windows\system32\themeui.dll
+ 2008-04-14 02:18:44 390,656 ----a-w c:\windows\system32\themeui.dll
- 2004-08-19 13:43:14 63,488 ----a-w c:\windows\system32\tlntadmn.exe
+ 2008-04-14 02:19:13 63,488 ----a-w c:\windows\system32\tlntadmn.exe
- 2004-08-19 13:43:14 79,360 ----a-w c:\windows\system32\tlntsess.exe
+ 2008-04-14 02:19:13 79,360 ----a-w c:\windows\system32\tlntsess.exe
- 2004-08-19 13:43:14 74,240 ----a-w c:\windows\system32\tlntsvr.exe
+ 2008-04-14 02:19:13 74,240 ----a-w c:\windows\system32\tlntsvr.exe
- 2004-08-19 13:42:28 7,168 ----a-w c:\windows\system32\tlntsvrp.dll
+ 2008-04-14 02:18:44 7,168 ----a-w c:\windows\system32\tlntsvrp.dll
- 2004-08-19 13:43:14 347,136 ----a-w c:\windows\system32\tourstart.exe
+ 2008-04-14 02:19:13 347,136 ----a-w c:\windows\system32\tourstart.exe
- 2004-08-19 13:43:14 260,608 ----a-w c:\windows\system32\tracerpt.exe
+ 2008-04-14 02:19:13 260,608 ----a-w c:\windows\system32\tracerpt.exe
- 2004-08-19 13:43:14 13,312 ----a-w c:\windows\system32\tracert.exe
+ 2008-04-14 02:19:14 13,312 ----a-w c:\windows\system32\tracert.exe
- 2002-09-10 12:00:00 11,264 ----a-w c:\windows\system32\tree.com
+ 2008-04-14 02:19:18 12,800 ----a-w c:\windows\system32\tree.com
- 2004-08-19 13:42:28 90,624 ----a-w c:\windows\system32\trkwks.dll
+ 2008-04-14 02:18:44 90,112 ----a-w c:\windows\system32\trkwks.dll
- 2004-08-19 13:42:28 93,696 ----a-w c:\windows\system32\tscfgwmi.dll
+ 2008-04-14 02:18:44 93,696 ----a-w c:\windows\system32\tscfgwmi.dll
- 2004-08-19 13:43:38 12,168 ----a-w c:\windows\system32\tsddd.dll
+ 2008-04-14 02:19:43 12,168 ----a-w c:\windows\system32\tsddd.dll
+ 2008-04-14 02:18:44 53,248 ------w c:\windows\system32\tsgqec.dll
+ 2008-04-14 02:18:45 50,688 ------w c:\windows\system32\tspkg.dll
- 2004-08-19 13:42:28 44,032 ----a-w c:\windows\system32\twext.dll
+ 2008-04-14 02:18:45 57,856 ----a-w c:\windows\system32\twext.dll
- 2005-07-26 04:40:01 101,376 ----a-w c:\windows\system32\txflog.dll
+ 2008-04-14 02:18:45 101,376 ----a-w c:\windows\system32\txflog.dll
- 2008-07-14 11:09:18 62,976 ------w c:\windows\system32\tzchange.exe
+ 2008-04-14 02:19:14 60,416 ------w c:\windows\system32\tzchange.exe
- 2004-08-19 13:42:28 25,600 ----a-w c:\windows\system32\udhisapi.dll
+ 2008-04-14 02:18:45 26,624 ----a-w c:\windows\system32\udhisapi.dll
- 2004-08-19 13:42:28 310,784 ----a-w c:\windows\system32\ulib.dll
+ 2008-04-14 02:18:45 310,784 ----a-w c:\windows\system32\ulib.dll
- 2004-08-19 13:42:28 36,864 ----a-w c:\windows\system32\umandlg.dll
+ 2008-04-14 02:18:45 36,864 ----a-w c:\windows\system32\umandlg.dll
- 2005-08-23 03:39:10 124,416 ----a-w c:\windows\system32\umpnpmgr.dll
+ 2008-04-14 02:18:45 124,416 ----a-w c:\windows\system32\umpnpmgr.dll
- 2004-08-19 13:42:28 78,848 ----a-w c:\windows\system32\unimdmat.dll
+ 2008-04-14 02:18:45 78,848 ----a-w c:\windows\system32\unimdmat.dll
- 2004-08-19 13:42:28 13,824 ----a-w c:\windows\system32\uniplat.dll
+ 2008-04-14 02:18:45 13,824 ----a-w c:\windows\system32\uniplat.dll
- 2004-08-19 13:42:28 316,416 ----a-w c:\windows\system32\untfs.dll
+ 2008-04-14 02:18:45 316,416 ----a-w c:\windows\system32\untfs.dll
- 2004-08-19 13:42:28 132,608 ----a-w c:\windows\system32\upnp.dll
+ 2008-04-14 02:18:45 133,632 ----a-w c:\windows\system32\upnp.dll
- 2004-08-19 13:43:14 16,896 ----a-w c:\windows\system32\upnpcont.exe
+ 2008-04-14 02:19:14 16,896 ----a-w c:\windows\system32\upnpcont.exe
- 2007-02-05 20:18:39 185,344 ----a-w c:\windows\system32\upnphost.dll
+ 2008-04-14 02:18:45 186,368 ----a-w c:\windows\system32\upnphost.dll
- 2004-08-19 13:42:28 240,128 ----a-w c:\windows\system32\upnpui.dll
+ 2008-04-14 02:18:45 240,128 ----a-w c:\windows\system32\upnpui.dll
- 2004-08-19 13:43:14 18,432 ----a-w c:\windows\system32\ups.exe
+ 2008-04-14 02:19:14 18,432 ----a-w c:\windows\system32\ups.exe
- 2004-08-19 13:42:28 37,888 ----a-w c:\windows\system32\url.dll
+ 2007-08-13 22:44:30 105,984 ----a-w c:\windows\system32\url.dll
- 2008-06-23 15:40:08 616,960 ----a-w c:\windows\system32\urlmon.dll
+ 2007-08-13 22:54:10 1,162,240 ----a-w c:\windows\system32\urlmon.dll
- 2004-08-19 13:42:28 16,896 ----a-w c:\windows\system32\usbmon.dll
+ 2008-04-14 02:18:45 16,896 ----a-w c:\windows\system32\usbmon.dll
- 2004-08-19 14:42:28 77,824 ----a-w c:\windows\system32\usbui.dll
+ 2008-04-14 02:18:45 77,824 ----a-w c:\windows\system32\usbui.dll
- 2007-03-08 15:36:30 578,560 ----a-w c:\windows\system32\user32.dll
+ 2008-04-14 02:18:45 579,584 ----a-w c:\windows\system32\user32.dll
- 2004-08-19 13:42:28 729,600 ----a-w c:\windows\system32\userenv.dll
+ 2008-04-14 02:18:45 733,184 ----a-w c:\windows\system32\userenv.dll
- 2004-08-19 13:43:14 25,088 ----a-w c:\windows\system32\userinit.exe
+ 2008-04-14 02:19:14 26,624 ----a-w c:\windows\system32\userinit.exe
+ 2008-04-13 16:44:16 17,920 ------w c:\windows\system32\usmt\cobramsg.dll
- 2004-08-19 13:42:10 124,928 ----a-w c:\windows\system32\usmt\guitrn.dll
+ 2008-04-14 02:18:21 134,144 ----a-w c:\windows\system32\usmt\guitrn.dll
+ 2008-04-14 02:18:21 115,712 ------w c:\windows\system32\usmt\guitrna.dll
- 2004-08-19 13:42:10 4,096 ----a-w c:\windows\system32\usmt\iconlib.dll
+ 2008-04-13 16:44:29 2,560 ----a-w c:\windows\system32\usmt\iconlib.dll
- 2004-08-19 13:42:14 19,968 ----a-w c:\windows\system32\usmt\log.dll
+ 2008-04-14 02:18:24 19,968 ----a-w c:\windows\system32\usmt\log.dll
- 2004-08-19 13:42:14 201,216 ----a-w c:\windows\system32\usmt\migism.dll
+ 2008-04-14 02:18:24 274,432 ----a-w c:\windows\system32\usmt\migism.dll
+ 2008-04-14 02:18:24 261,120 ------w c:\windows\system32\usmt\migisma.dll
- 2004-08-19 13:42:54 103,936 ----a-w c:\windows\system32\usmt\migload.exe
+ 2008-04-14 02:19:01 104,448 ----a-w c:\windows\system32\usmt\migload.exe
- 2004-08-19 13:42:54 246,272 ----a-w c:\windows\system32\usmt\migwiz.exe
+ 2008-04-14 02:19:02 251,392 ----a-w c:\windows\system32\usmt\migwiz.exe
+ 2008-04-14 02:19:02 247,296 ------w c:\windows\system32\usmt\migwiza.exe
- 2004-08-19 13:42:24 204,288 ----a-w c:\windows\system32\usmt\script.dll
+ 2008-04-14 02:18:35 217,088 ----a-w c:\windows\system32\usmt\script.dll
+ 2008-04-14 02:18:35 200,704 ------w c:\windows\system32\usmt\scripta.dll
- 2004-08-19 13:42:28 169,472 ----a-w c:\windows\system32\usmt\sysmod.dll
+ 2008-04-14 02:18:44 193,536 ----a-w c:\windows\system32\usmt\sysmod.dll
+ 2008-04-14 02:18:44 173,568 ------w c:\windows\system32\usmt\sysmoda.dll
- 2004-08-19 13:42:28 406,528 ----a-w c:\windows\system32\usp10.dll
+ 2008-04-14 02:18:45 406,016 ----a-w c:\windows\system32\usp10.dll
- 2004-08-19 13:43:14 50,176 ----a-w c:\windows\system32\utilman.exe
+ 2008-04-14 02:19:14 50,176 ----a-w c:\windows\system32\utilman.exe
- 2004-08-19 13:42:28 220,160 ----a-w c:\windows\system32\uxtheme.dll
+ 2008-04-14 02:18:45 220,160 ----a-w c:\windows\system32\uxtheme.dll
- 2004-08-19 13:42:28 30,749 ----a-w c:\windows\system32\vbajet32.dll
+ 2008-04-14 02:18:45 30,749 ----a-w c:\windows\system32\vbajet32.dll
- 2007-12-18 14:42:03 417,792 ----a-w c:\windows\system32\vbscript.dll
+ 2008-04-14 02:18:45 434,176 ----a-w c:\windows\system32\vbscript.dll
- 2004-08-19 13:42:28 26,112 ----a-w c:\windows\system32\vdmdbg.dll
+ 2008-04-14 02:18:45 26,112 ----a-w c:\windows\system32\vdmdbg.dll
- 2004-08-19 13:42:28 51,712 ----a-w c:\windows\system32\vdmredir.dll
+ 2008-04-14 02:18:45 51,712 ----a-w c:\windows\system32\vdmredir.dll
- 2006-03-17 00:38:01 28,672 ------w c:\windows\system32\verclsid.exe
+ 2008-04-14 02:19:14 28,672 ------w c:\windows\system32\verclsid.exe
- 2002-09-10 12:00:00 13,312 ----a-w c:\windows\system32\verifier.dll
+ 2008-04-14 02:18:45 26,624 ----a-w c:\windows\system32\verifier.dll
- 2004-08-19 13:42:28 18,944 ----a-w c:\windows\system32\version.dll
+ 2008-04-14 02:18:45 18,944 ----a-w c:\windows\system32\version.dll
- 2004-08-19 13:42:28 430,592 ----a-w c:\windows\system32\vssapi.dll
+ 2008-04-14 02:18:45 430,592 ----a-w c:\windows\system32\vssapi.dll
- 2004-08-19 13:43:14 293,888 ----a-w c:\windows\system32\vssvc.exe
+ 2008-04-14 02:19:14 293,888 ----a-w c:\windows\system32\vssvc.exe
- 2004-08-19 13:42:28 176,640 ----a-w c:\windows\system32\w32time.dll
+ 2008-04-14 02:18:45 177,152 ----a-w c:\windows\system32\w32time.dll
- 2004-08-19 13:42:28 15,872 ----a-w c:\windows\system32\w3ssl.dll
+ 2008-04-14 02:18:45 15,872 ----a-w c:\windows\system32\w3ssl.dll
- 2004-08-03 21:07:34 17,664 ----a-w c:\windows\system32\watchdog.sys
+ 2008-04-13 18:44:59 17,664 ----a-w c:\windows\system32\watchdog.sys
- 2002-09-10 12:00:00 208,896 ----a-w c:\windows\system32\wavemsp.dll
+ 2008-04-14 02:18:45 215,552 ----a-w c:\windows\system32\wavemsp.dll
- 2004-08-19 13:41:52 1,352,704 ----a-w c:\windows\system32\wbem\cimwin32.dll
+ 2008-04-14 02:18:20 1,359,360 ----a-w c:\windows\system32\wbem\cimwin32.dll
- 2004-08-19 13:42:08 45,568 ----a-w c:\windows\system32\wbem\CmdEvTgProv.dll
+ 2008-04-14 02:18:21 45,056 ----a-w c:\windows\system32\wbem\cmdevtgprov.dll
- 2004-08-19 13:42:08 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
+ 2008-04-14 02:18:21 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
- 2004-08-19 13:42:08 22,016 ----a-w c:\windows\system32\wbem\evntrprv.dll
+ 2008-04-14 02:18:21 21,504 ----a-w c:\windows\system32\wbem\evntrprv.dll
- 2004-08-19 13:42:08 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
+ 2008-04-14 02:18:21 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
- 2004-08-19 13:42:08 185,856 ----a-w c:\windows\system32\wbem\framedyn.dll
+ 2008-04-14 02:18:21 185,344 ----a-w c:\windows\system32\wbem\framedyn.dll
- 2004-08-19 13:42:14 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll
+ 2008-04-14 02:18:24 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll
- 2004-08-19 13:42:56 17,408 ----a-w c:\windows\system32\wbem\mofcomp.exe
+ 2008-04-14 02:19:03 17,408 ----a-w c:\windows\system32\wbem\mofcomp.exe
- 2004-08-19 13:42:16 124,928 ----a-w c:\windows\system32\wbem\mofd.dll
+ 2008-04-14 02:18:24 124,928 ----a-w c:\windows\system32\wbem\mofd.dll
- 2004-08-19 13:42:20 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
+ 2008-04-14 02:18:28 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
- 2004-08-19 13:42:20 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll
+ 2008-04-14 02:18:28 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll
- 2004-08-19 13:42:22 92,672 ----a-w c:\windows\system32\wbem\policman.dll
+ 2008-04-14 02:18:33 92,672 ----a-w c:\windows\system32\wbem\policman.dll
- 2004-08-19 13:42:22 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll
+ 2008-04-14 02:18:33 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll
- 2004-08-19 13:42:22 177,152 ----a-w c:\windows\system32\wbem\repdrvfs.dll
+ 2008-04-14 02:18:34 178,176 ----a-w c:\windows\system32\wbem\repdrvfs.dll
- 2004-08-19 13:43:08 36,864 ----a-w c:\windows\system32\wbem\scrcons.exe
+ 2008-04-14 02:19:10 36,352 ----a-w c:\windows\system32\wbem\scrcons.exe
- 2004-08-19 13:42:28 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll
+ 2008-04-14 02:18:44 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll
- 2004-08-19 13:42:28 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll
+ 2008-04-14 02:18:45 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll
- 2004-08-19 13:42:30 200,192 ----a-w c:\windows\system32\wbem\wbemcntl.dll
+ 2008-04-14 02:18:45 200,192 ----a-w c:\windows\system32\wbem\wbemcntl.dll
- 2004-08-19 13:42:30 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
+ 2008-04-14 02:18:45 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
- 2004-08-19 13:42:30 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll
+ 2008-04-14 02:18:46 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll
- 2004-08-19 13:42:30 531,456 ----a-w c:\windows\system32\wbem\wbemcore.dll
+ 2008-04-14 02:18:46 531,968 ----a-w c:\windows\system32\wbem\wbemcore.dll
- 2004-08-19 13:42:30 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll
+ 2008-04-14 02:18:46 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll
- 2004-08-19 13:42:30 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
+ 2008-04-14 02:18:46 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
- 2004-08-19 13:42:30 44,032 ----a-w c:\windows\system32\wbem\wbemperf.dll
+ 2008-04-14 02:18:46 44,032 ----a-w c:\windows\system32\wbem\wbemperf.dll
- 2004-08-19 13:42:30 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
+ 2008-04-14 02:18:46 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
- 2004-08-19 13:42:30 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
+ 2008-04-14 02:18:46 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
- 2004-08-19 13:43:16 119,296 ----a-w c:\windows\system32\wbem\wbemtest.exe
+ 2008-04-14 02:19:15 119,296 ----a-w c:\windows\system32\wbem\wbemtest.exe
- 2004-08-19 13:42:30 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll
+ 2008-04-14 02:18:46 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll
- 2004-08-19 13:43:16 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe
+ 2008-04-14 02:19:16 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe
- 2004-08-19 13:41:16 7,680 ----a-w c:\windows\system32\wbem\wmiapres.dll
+ 2008-04-14 01:53:21 7,680 ----a-w c:\windows\system32\wbem\wmiapres.dll
- 2004-08-19 13:42:32 89,088 ----a-w c:\windows\system32\wbem\wmiaprpl.dll
+ 2008-04-14 02:18:46 88,576 ----a-w c:\windows\system32\wbem\wmiaprpl.dll
- 2004-08-19 13:43:18 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe
+ 2008-04-14 02:19:16 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe
- 2004-08-19 13:43:18 366,592 ----a-w c:\windows\system32\wbem\wmic.exe
+ 2008-04-14 02:19:16 366,592 ----a-w c:\windows\system32\wbem\wmic.exe
- 2004-08-19 13:42:32 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll
+ 2008-04-14 02:18:46 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll
- 2004-08-19 13:42:32 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll
+ 2008-04-14 02:18:46 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll
- 2004-08-19 13:42:32 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll
+ 2008-04-14 02:18:46 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll
- 2004-08-19 13:42:32 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll
+ 2008-04-14 02:18:46 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll
- 2004-08-19 13:42:32 62,464 ----a-w c:\windows\system32\wbem\wmipiprt.dll
+ 2008-04-14 02:18:46 61,952 ----a-w c:\windows\system32\wbem\wmipiprt.dll
- 2004-08-19 13:42:32 62,976 ----a-w c:\windows\system32\wbem\wmipjobj.dll
+ 2008-04-14 02:18:46 62,464 ----a-w c:\windows\system32\wbem\wmipjobj.dll
- 2004-08-19 13:42:32 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
+ 2008-04-14 02:18:46 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
- 2004-08-19 13:42:32 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
+ 2008-04-14 02:18:47 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
- 2004-08-19 13:43:18 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
+ 2008-04-14 02:19:16 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
- 2004-08-19 13:42:32 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll
+ 2008-04-14 02:18:47 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll
- 2004-08-19 13:42:32 145,408 ----a-w c:\windows\system32\wbem\wmisvc.dll
+ 2008-04-14 02:18:47 145,408 ----a-w c:\windows\system32\wbem\wmisvc.dll
- 2004-08-19 13:42:32 98,816 ----a-w c:\windows\system32\wbem\wmiutils.dll
+ 2008-04-14 02:18:47 98,816 ----a-w c:\windows\system32\wbem\wmiutils.dll
- 2004-08-19 13:42:30 49,152 ----a-w c:\windows\system32\wdigest.dll
+ 2008-04-14 02:18:46 49,152 ----a-w c:\windows\system32\wdigest.dll
- 2004-08-19 20:43:26 23,552 ----a-w c:\windows\system32\wdmaud.drv
+ 2008-04-14 02:19:19 23,552 ----a-w c:\windows\system32\wdmaud.drv
- 2004-08-19 13:42:30 280,576 ----a-w c:\windows\system32\webcheck.dll
+ 2007-08-13 22:54:10 231,424 ----a-w c:\windows\system32\webcheck.dll
- 2006-01-04 03:35:09 68,096 ----a-w c:\windows\system32\webclnt.dll
+ 2008-04-14 02:18:46 68,096 ----a-w c:\windows\system32\webclnt.dll
- 2004-08-19 13:42:30 136,192 ----a-w c:\windows\system32\webvw.dll
+ 2008-04-14 02:18:46 136,192 ----a-w c:\windows\system32\webvw.dll
- 2004-08-19 13:43:16 66,560 ----a-w c:\windows\system32\wextract.exe
+ 2008-04-14 02:19:15 66,560 ----a-w c:\windows\system32\wextract.exe
- 2004-08-19 13:43:16 435,200 ----a-w c:\windows\system32\wiaacmgr.exe
+ 2008-04-14 02:19:15 435,200 ----a-w c:\windows\system32\wiaacmgr.exe
- 2004-08-19 13:42:30 461,312 ----a-w c:\windows\system32\wiadefui.dll
+ 2008-04-14 02:18:46 461,312 ----a-w c:\windows\system32\wiadefui.dll
- 2004-08-19 13:42:30 124,928 ----a-w c:\windows\system32\wiadss.dll
+ 2008-04-14 02:18:46 124,928 ----a-w c:\windows\system32\wiadss.dll
- 2004-08-19 13:42:30 75,776 ----a-w c:\windows\system32\wiascr.dll
+ 2008-04-14 02:18:46 75,776 ----a-w c:\windows\system32\wiascr.dll
- 2006-12-19 18:17:15 334,336 ----a-w c:\windows\system32\wiaservc.dll
+ 2008-04-14 02:18:46 334,336 ----a-w c:\windows\system32\wiaservc.dll
- 2004-08-19 13:42:30 592,384 ----a-w c:\windows\system32\wiashext.dll
+ 2008-04-14 02:18:46 592,384 ----a-w c:\windows\system32\wiashext.dll
- 2004-08-19 13:42:30 111,104 ----a-w c:\windows\system32\wiavideo.dll
+ 2008-04-14 02:18:46 111,104 ----a-w c:\windows\system32\wiavideo.dll
- 2008-03-20 08:09:25 1,845,376 ----a-w c:\windows\system32\win32k.sys
+ 2008-04-14 01:52:22 1,845,760 ----a-w c:\windows\system32\win32k.sys
- 2004-08-19 13:42:30 102,400 ----a-w c:\windows\system32\win32spl.dll
+ 2008-04-14 02:18:46 102,912 ----a-w c:\windows\system32\win32spl.dll
- 2004-08-19 13:41:10 937,984 ----a-w c:\windows\system32\winbrand.dll
+ 2008-04-13 16:48:53 1,647,616 ----a-w c:\windows\system32\winbrand.dll
+ 2008-04-14 02:18:46 712,704 ------w c:\windows\system32\windowscodecs.dll
+ 2008-04-14 02:18:46 346,112 ------w c:\windows\system32\windowscodecsext.dll
+ 2007-08-13 22:45:16 206,336 ------w c:\windows\system32\WinFXDocObj.exe
- 2004-08-19 13:42:32 351,232 ----a-w c:\windows\system32\winhttp.dll
+ 2008-04-14 02:18:46 354,304 ----a-w c:\windows\system32\winhttp.dll
- 2008-06-23 15:40:09 662,016 ----a-w c:\windows\system32\wininet.dll
+ 2007-08-13 22:54:10 818,688 ----a-w c:\windows\system32\wininet.dll
- 2004-08-19 13:42:32 32,768 ----a-w c:\windows\system32\winipsec.dll
+ 2008-04-14 02:18:46 32,256 ----a-w c:\windows\system32\winipsec.dll
- 2004-08-19 13:43:16 505,344 ----a-w c:\windows\system32\winlogon.exe
+ 2008-04-14 02:19:15 510,976 ----a-w c:\windows\system32\winlogon.exe
- 2004-08-19 13:42:32 180,224 ----a-w c:\windows\system32\winmm.dll
+ 2008-04-14 02:18:46 180,224 ----a-w c:\windows\system32\winmm.dll
- 2004-08-19 13:41:14 774,144 ----a-w c:\windows\system32\winntbbu.dll
+ 2008-04-14 02:17:52 763,904 ----a-w c:\windows\system32\winntbbu.dll
- 2004-08-19 13:42:32 16,896 ----a-w c:\windows\system32\winrnr.dll
+ 2008-04-14 02:18:46 16,896 ----a-w c:\windows\system32\winrnr.dll
- 2004-08-19 13:42:32 100,352 ----a-w c:\windows\system32\winscard.dll
+ 2008-04-14 02:18:46 100,352 ----a-w c:\windows\system32\winscard.dll
- 2004-08-19 13:42:32 17,408 ----a-w c:\windows\system32\winshfhc.dll
+ 2008-04-14 02:18:46 17,408 ----a-w c:\windows\system32\winshfhc.dll
- 2004-08-19 13:43:26 146,944 ----a-w c:\windows\system32\winspool.drv
+ 2008-04-14 02:19:19 146,944 ----a-w c:\windows\system32\winspool.drv
- 2007-03-17 13:45:06 293,376 ----a-w c:\windows\system32\winsrv.dll
+ 2008-04-14 02:18:46 293,888 ----a-w c:\windows\system32\winsrv.dll
- 2004-08-19 13:42:32 53,760 ----a-w c:\windows\system32\winsta.dll
+ 2008-04-14 02:18:46 53,760 ----a-w c:\windows\system32\winsta.dll
- 2004-08-19 13:42:32 176,640 ----a-w c:\windows\system32\wintrust.dll
+ 2008-04-14 02:18:46 176,640 ----a-w c:\windows\system32\wintrust.dll
- 2004-08-19 13:43:16 5,632 ----a-w c:\windows\system32\winver.exe
+ 2008-04-14 02:19:16 5,632 ----a-w c:\windows\system32\winver.exe
- 2006-08-17 12:29:42 132,096 ----a-w c:\windows\system32\wkssvc.dll
+ 2008-04-14 02:18:46 132,096 ----a-w c:\windows\system32\wkssvc.dll
+ 2008-04-14 02:18:46 69,120 ------w c:\windows\system32\wlanapi.dll
- 2004-08-19 13:42:32 172,544 ----a-w c:\windows\system32\wldap32.dll
+ 2008-04-14 02:18:46 172,544 ----a-w c:\windows\system32\wldap32.dll
- 2004-08-19 13:42:32 93,696 ----a-w c:\windows\system32\wlnotify.dll
+ 2008-04-14 02:18:46 93,696 ----a-w c:\windows\system32\wlnotify.dll
- 2004-08-19 13:41:16 200,704 ----a-w c:\windows\system32\wmerror.dll
+ 2008-04-14 01:53:19 200,704 ----a-w c:\windows\system32\wmerror.dll
- 2004-08-19 13:41:16 5,632 ----a-w c:\windows\system32\wmi.dll
+ 2008-04-14 02:17:54 5,632 ----a-w c:\windows\system32\wmi.dll
- 2007-04-30 06:22:16 4,734,976 ----a-w c:\windows\system32\wmp.dll
+ 2008-04-14 02:18:47 4,874,240 ----a-w c:\windows\system32\wmp.dll
- 2004-08-19 13:42:32 114,688 ----a-w c:\windows\system32\wmpasf.dll
+ 2008-04-14 02:18:47 114,688 ----a-w c:\windows\system32\wmpasf.dll
- 2004-08-19 13:42:32 20,480 ----a-w c:\windows\system32\wmpcd.dll
+ 2008-04-14 02:18:47 20,480 ----a-w c:\windows\system32\wmpcd.dll
- 2004-08-19 13:42:32 20,480 ----a-w c:\windows\system32\wmpcore.dll
+ 2008-04-14 02:18:47 20,480 ----a-w c:\windows\system32\wmpcore.dll
- 2004-08-19 13:42:32 233,472 ----a-w c:\windows\system32\wmpdxm.dll
+ 2008-04-14 02:18:47 233,472 ----a-w c:\windows\system32\wmpdxm.dll
+ 2008-04-14 02:18:47 276,992 ------w c:\windows\system32\wmphoto.dll
- 2004-08-19 13:41:26 2,977,792 ----a-w c:\windows\system32\wmploc.dll
+ 2008-04-14 01:54:40 2,977,792 ----a-w c:\windows\system32\wmploc.dll
- 2004-08-19 13:42:32 102,400 ----a-w c:\windows\system32\wmpshell.dll
+ 2008-04-14 02:18:47 102,400 ----a-w c:\windows\system32\wmpshell.dll
- 2004-08-19 13:42:32 20,480 ----a-w c:\windows\system32\wmpui.dll
+ 2008-04-14 02:18:47 20,480 ----a-w c:\windows\system32\wmpui.dll
- 2004-08-19 13:42:32 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
+ 2008-04-14 02:18:47 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
- 2004-08-19 13:42:32 303,616 ----a-w c:\windows\system32\wmstream.dll
+ 2008-04-14 02:18:47 303,616 ----a-w c:\windows\system32\wmstream.dll
- 2004-08-19 13:42:32 265,216 ----a-w c:\windows\system32\wow32.dll
+ 2008-04-14 02:18:47 265,216 ----a-w c:\windows\system32\wow32.dll
- 2004-08-19 13:43:18 32,256 ----a-w c:\windows\system32\wpabaln.exe
+ 2008-04-14 02:19:17 32,256 ----a-w c:\windows\system32\wpabaln.exe
- 2004-08-19 13:43:18 32,768 ----a-w c:\windows\system32\wpnpinst.exe
+ 2008-04-14 02:19:17 11,776 ----a-w c:\windows\system32\wpnpinst.exe
- 2004-08-19 13:42:32 82,944 ----a-w c:\windows\system32\ws2_32.dll
+ 2008-04-14 02:18:47 82,432 ----a-w c:\windows\system32\ws2_32.dll
- 2004-08-19 13:42:32 19,968 ----a-w c:\windows\system32\ws2help.dll
+ 2008-04-14 02:18:47 19,968 ----a-w c:\windows\system32\ws2help.dll
- 2004-08-19 13:43:18 13,824 ----a-w c:\windows\system32\wscntfy.exe
+ 2008-04-14 02:19:17 13,824 ----a-w c:\windows\system32\wscntfy.exe
- 2004-08-19 13:43:18 114,688 ----a-w c:\windows\system32\wscript.exe
+ 2008-04-14 02:19:17 155,648 ----a-w c:\windows\system32\wscript.exe
- 2004-08-19 13:42:32 81,408 ----a-w c:\windows\system32\wscsvc.dll
+ 2008-04-14 02:18:47 80,896 ----a-w c:\windows\system32\wscsvc.dll
- 2004-08-19 13:42:32 611,328 ----a-w c:\windows\system32\wsecedit.dll
+ 2008-04-14 02:18:47 618,496 ----a-w c:\windows\system32\wsecedit.dll
- 2004-08-19 13:42:32 108,032 ----a-w c:\windows\system32\wshbth.dll
+ 2008-04-14 02:18:47 108,032 ----a-w c:\windows\system32\wshbth.dll
- 2004-08-19 13:42:32 28,672 ----a-w c:\windows\system32\wshcon.dll
+ 2008-04-14 02:18:47 36,864 ----a-w c:\windows\system32\wshcon.dll
- 2004-08-19 13:42:32 65,536 ----a-w c:\windows\system32\wshext.dll
+ 2008-04-14 02:18:47 90,112 ----a-w c:\windows\system32\wshext.dll
- 2004-08-19 13:42:32 14,336 ----a-w c:\windows\system32\wship6.dll
+ 2008-04-14 02:18:47 14,336 ----a-w c:\windows\system32\wship6.dll
- 2004-08-19 13:42:32 11,776 ----a-w c:\windows\system32\WshRm.dll
+ 2008-04-14 02:18:47 11,264 ----a-w c:\windows\system32\wshrm.dll
- 2004-08-19 13:42:32 19,968 ----a-w c:\windows\system32\wshtcpip.dll
+ 2008-04-14 02:18:47 19,456 ----a-w c:\windows\system32\wshtcpip.dll
- 2004-08-19 13:42:32 42,496 ----a-w c:\windows\system32\wsnmp32.dll
+ 2008-04-14 02:18:47 41,984 ----a-w c:\windows\system32\wsnmp32.dll
- 2004-08-19 13:42:32 25,600 ----a-w c:\windows\system32\wsock32.dll
+ 2008-04-14 02:18:47 25,600 ----a-w c:\windows\system32\wsock32.dll
- 2004-08-19 13:42:32 51,200 ----a-w c:\windows\system32\wstdecod.dll
+ 2008-04-14 02:18:47 51,200 ----a-w c:\windows\system32\wstdecod.dll
- 2004-08-19 13:42:32 18,432 ----a-w c:\windows\system32\wtsapi32.dll
+ 2008-04-14 02:18:47 18,432 ----a-w c:\windows\system32\wtsapi32.dll
- 2007-07-30 23:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll
+ 2008-07-19 02:09:44 563,912 ----a-w c:\windows\system32\wuapi.dll
- 2007-07-30 23:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe
+ 2008-07-19 02:10:42 53,448 ----a-w c:\windows\system32\wuauclt.exe
- 2007-07-30 23:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll
+ 2008-07-19 02:09:42 1,811,656 ----a-w c:\windows\system32\wuaueng.dll
- 2004-08-19 13:42:34 6,656 ----a-w c:\windows\system32\wuauserv.dll
+ 2008-04-14 02:18:48 6,656 ----a-w c:\windows\system32\wuauserv.dll
- 2007-07-30 23:19:32 325,976 ----a-w c:\windows\system32\wucltui.dll
+ 2008-07-19 02:09:46 325,832 ----a-w c:\windows\system32\wucltui.dll
- 2007-07-30 23:18:40 33,624 ----a-w c:\windows\system32\wups.dll
+ 2008-07-19 02:10:20 36,552 ----a-w c:\windows\system32\wups.dll
- 2007-07-30 23:19:12 43,352 ----a-w c:\windows\system32\wups2.dll
+ 2008-07-19 02:10:40 45,768 ----a-w c:\windows\system32\wups2.dll
- 2007-07-30 23:19:28 203,096 ----a-w c:\windows\system32\wuweb.dll
+ 2008-07-19 02:09:44 205,000 ----a-w c:\windows\system32\wuweb.dll
- 2004-08-19 13:42:34 378,880 ----a-w c:\windows\system32\wzcdlg.dll
+ 2008-04-14 02:18:48 384,000 ----a-w c:\windows\system32\wzcdlg.dll
- 2004-08-19 13:56:12 51,712 ----a-w c:\windows\system32\wzcsapi.dll
+ 2008-04-14 02:18:48 52,736 ----a-w c:\windows\system32\wzcsapi.dll
- 2004-08-19 13:56:12 360,448 ----a-w c:\windows\system32\wzcsvc.dll
+ 2008-04-14 02:18:48 484,352 ----a-w c:\windows\system32\wzcsvc.dll
- 2004-08-19 13:42:34 91,648 ----a-w c:\windows\system32\xactsrv.dll
+ 2008-04-14 02:18:48 91,648 ----a-w c:\windows\system32\xactsrv.dll
- 2004-08-19 13:43:18 30,720 ----a-w c:\windows\system32\xcopy.exe
+ 2008-04-14 02:19:17 30,720 ----a-w c:\windows\system32\xcopy.exe
+ 2008-04-14 02:18:48 121,856 ------w c:\windows\system32\xmllite.dll
- 2004-08-19 13:42:34 129,536 ----a-w c:\windows\system32\xmlprov.dll
+ 2008-04-14 02:18:48 129,024 ----a-w c:\windows\system32\xmlprov.dll
- 2004-08-19 13:42:34 50,176 ----a-w c:\windows\system32\xmlprovi.dll
+ 2008-04-14 02:18:48 50,176 ----a-w c:\windows\system32\xmlprovi.dll
- 2006-03-01 19:44:00 11,776 ----a-w c:\windows\system32\xolehlp.dll
+ 2008-04-14 02:18:48 11,776 ----a-w c:\windows\system32\xolehlp.dll
- 2004-08-19 13:40:00 481,792 ----a-w c:\windows\system32\xpob2res.dll
+ 2008-04-13 18:40:26 481,792 ----a-w c:\windows\system32\xpob2res.dll
- 2004-08-19 13:40:36 196,096 ----a-w c:\windows\system32\xpsp1res.dll
+ 2008-04-13 18:35:11 196,096 ----a-w c:\windows\system32\xpsp1res.dll
- 2004-08-19 13:40:42 2,966,528 ----a-w c:\windows\system32\xpsp2res.dll
+ 2008-04-13 18:36:24 2,966,528 ----a-w c:\windows\system32\xpsp2res.dll
- 2008-07-03 09:42:31 369,152 ----a-w c:\windows\system32\xpsp3res.dll
+ 2008-04-13 18:39:11 764,416 ----a-w c:\windows\system32\xpsp3res.dll
- 2004-08-19 13:42:34 339,968 ----a-w c:\windows\system32\zipfldr.dll
+ 2008-04-14 02:18:48 340,480 ----a-w c:\windows\system32\zipfldr.dll
- 2004-08-19 13:42:28 50,688 ----a-w c:\windows\twain_32.dll
+ 2008-04-14 02:18:45 50,688 ----a-w c:\windows\twain_32.dll
- 2004-08-19 13:43:16 286,720 ----a-w c:\windows\winhlp32.exe
+ 2008-04-14 02:19:15 286,720 ----a-w c:\windows\winhlp32.exe
- 2007-01-19 12:50:55 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
+ 2008-04-14 02:16:14 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
- 2007-01-19 12:50:55 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
+ 2008-04-14 02:16:14 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
- 2007-01-19 12:50:55 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
+ 2008-04-14 02:16:14 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
- 2007-01-19 12:50:55 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2008-04-14 02:16:14 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2008-04-14 02:16:14 1,054,208 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
+ 2008-04-14 02:16:14 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2008-04-14 02:16:15 343,040 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
+ 2008-04-14 02:16:13 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
+ 2008-04-15 17:49:33 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\GdiPlus.dll
- 2004-08-19 13:38:10 852,992 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2008-04-14 02:16:14 852,992 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2004-08-19 13:38:10 993,280 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2008-04-14 02:16:14 993,280 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2004-08-19 13:38:10 136,192 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_es_858031fb\rtcres.dll
+ 2008-04-14 01:56:44 136,192 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_es_858031fb\rtcres.dll
.
-- Restablecer a la fecha actual de Snapshot --
.
((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"MSMSGS"="c:\archivos de programa\Messenger\msmsgs.exe" [2008-04-13 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Easy-PrintToolBox"="c:\archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2004-01-13 409600]
"AVG8_TRAY"="c:\archiv~1\AVG\AVG8\avgtray.exe" [2008-09-04 1235736]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
AutoCAD Startup Accelerator.lnk - c:\archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe [05/03/2005 16:18:22 10872]
Inicio r*pido de Adobe Reader.lnk - c:\archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe [23/09/2005 22:05:26 29696]
Software Kodak EasyShare.lnk - c:\archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe [23/07/2004 8:26:34 757760]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\aiaqdcz]
aiaqdcz.dll [BU]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Adg82.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Qux71.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Vyc03.sys]
@="Driver"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk
backup=c:\windows\pss\Inicio rápido de Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Kodak software updater.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Kodak software updater.lnk
backup=c:\windows\pss\Kodak software updater.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinManage]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
--a------ 2008-02-20 10:33 963072 c:\archivos de programa\Ares\Ares.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-13 22:18 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--------- 2004-06-04 07:33 1400944 c:\archivos de programa\Ahead\InCD\InCD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-05-11 20:52 155648 c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
--a------ 2008-03-31 21:54 507904 c:\archivos de programa\Winamp Remote\bin\OrbTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-07-06 22:09 77824 c:\archivos de programa\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 14:49 36352 c:\archivos de programa\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE]
--a------ 2003-07-18 04:01 180224 c:\windows\system32\pctspk.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PV92TRAY]
--a------ 2003-06-25 07:47 311296 c:\windows\system32\PV92Tray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\Archivos de programa\\Microsoft Encarta\\Biblioteca de Consulta Encarta 2004\\EDICT.EXE"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\Orb.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"c:\\Archivos de programa\\AVG\\AVG8\\avgupd.exe"=
"c:\\Archivos de programa\\Ares\\Ares.exe"=
"c:\\Archivos de programa\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\livecall.exe"=
R0 Adg82;Adg82;c:\windows\system32\Drivers\Adg82.sys [23/07/2008 16:38:35 32256]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [04/09/2008 21:19:36 97928]
R2 avg8wd;AVG Free8 WatchDog;c:\archiv~1\AVG\AVG8\avgwdsvc.exe [04/09/2008 21:17:57 231704]
S0 Qux71;Qux71;c:\windows\system32\Drivers\Qux71.sys []
S0 Vyc03;Vyc03;c:\windows\system32\Drivers\Vyc03.sys []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e5aad0d-a758-11db-b153-000b6a9b859d}]
\Shell\AutoRun\command - H:\cfdflx.com
\Shell\explore\Command - H:\cfdflx.com
\Shell\open\Command - H:\cfdflx.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5387fa46-5dc5-11dd-a93e-000b6a9b859d}]
\Shell\AutoRun\command - G:\cfdflx.com
\Shell\explore\Command - G:\cfdflx.com
\Shell\open\Command - G:\cfdflx.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{58376c3c-6e58-11dd-a94c-000b6a9b859d}]
\Shell\AutoRun\command - G:\cfdflx.com
\Shell\explore\Command - G:\cfdflx.com
\Shell\open\Command - G:\cfdflx.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{812b4358-d275-11dc-a88c-000b6a9b859d}]
\Shell\AutoRun\command - G:\cfdflx.com
\Shell\explore\Command - G:\cfdflx.com
\Shell\open\Command - G:\cfdflx.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aef08416-e963-11db-b1b3-000b6a9b859d}]
\Shell\AutoRun\command - G:\cfdflx.com
\Shell\explore\Command - G:\cfdflx.com
\Shell\open\Command - G:\cfdflx.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c144148e-dbed-11dc-a89f-000b6a9b859d}]
\Shell\AutoRun\command - G:\cfdflx.com
\Shell\explore\Command - G:\cfdflx.com
\Shell\open\Command - G:\cfdflx.com
.
Contenido de carpeta 'Tareas Programadas'
2008-09-28 c:\windows\Tasks\9CD3906491C041C4.job
- c:\docume~1\temp\datosd~1\liesmu~1\LinkStopBat.exe []
2008-09-28 c:\windows\Tasks\A0222F749199DFA0.job
- c:\docume~1\manuel~1\datosd~1\liesmu~1\LinkStopBat.exe []
2008-09-28 c:\windows\Tasks\AC599C6C91E21AD0.job
- c:\docume~1\cinthia\datosd~1\liesmu~1\LinkStopBat.exe []
.
- - - - HUÉRFANOS ELIMINADOS - - - -
MSConfigStartUp-lphc52qj0et8j - c:\windows\system32\lphc52qj0et8j.exe
.
------- Análisis Suplementario -------
.
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE: &Clean Traces - c:\archivos de programa\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\archivos de programa\DAP\dapextie.htm
IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZC
IE: &Winamp Search - c:\documents and settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Download &all with DAP - c:\archivos de programa\DAP\dapextie2.htm
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\Office10\EXCEL.EXE/3000
Name-Space Handler: FTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
Name-Space Handler: HTTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
FF - ProfilePath -
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-27 07:45:35
Windows 5.1.2600 Service Pack 3 NTFS
escaneando procesos ocultos ...
escaneando entradas ocultas de autostart ...
escaneando archivos ocultos ...
el escaneo se completo con exito
archivos ocultos: 0
**************************************************************************
.
------------------------ Otros procesos en ejecución ------------------------
.
c:\archivos de programa\Ahead\InCD\InCDsrv.exe
c:\archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
c:\archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
c:\windows\system32\wdfmgr.exe
c:\archiv~1\AVG\AVG8\avgrsx.exe
.
**************************************************************************
.
Tiempo completado: 2008-12-27 7:54:00 - Reiniciando la máquina
ComboFix-quarantined-files.txt 2008-12-27 11:53:54
ComboFix2.txt 2008-09-28 12:33:02
Pre-Run: 14,512,439,296 bytes libres
Post-Run: 14,410,645,504 bytes libres
6577 --- E O F --- 2008-12-27 11:29:02
Hi again,
Start hjt, do a system scan, check (if found):
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - (no file)
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...rch.jhtml?p=ZC
Close browsers and fix checked.
Open notepad and copy/paste the text in the quotebox below into it:
Driver::
Adg82
Qux71
Vyc03
File::
c:\windows\system32\Drivers\Adg82.sys
c:\windows\system32\Drivers\Qux71.sys
c:\windows\system32\Drivers\Vyc03.sys
H:\cfdflx.com
G:\cfdflx.com
c:\windows\Tasks\9CD3906491C041C4.job
c:\windows\Tasks\A0222F749199DFA0.job
c:\windows\Tasks\AC599C6C91E21AD0.job
Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\aiaqdcz]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Adg82.sys]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Qux71.sys]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Vyc03.sys]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e5aad0d-a758-11db-b153-000b6a9b859d}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5387fa46-5dc5-11dd-a93e-000b6a9b859d}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{58376c3c-6e58-11dd-a94c-000b6a9b859d}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{812b4358-d275-11dc-a88c-000b6a9b859d}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aef08416-e963-11db-b1b3-000b6a9b859d}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c144148e-dbed-11dc-a89f-000b6a9b859d}]
Save this as
CFScript
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.
Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.
Uninstall old Adobe Reader versions and get the latest one here (http://www.filehippo.com/download_adobe_reader/) or get Foxit Reader here (http://www.foxitsoftware.com/pdf/reader_2/down_reader.htm). Make sure you don't install toolbar if choose Foxit Reader!
Download ATF (Atribune Temp File) Cleaner© by Atribune (http://www.atribune.org/ccount/click.php?id=1) to your desktop.
Double-click ATF Cleaner.exe to open it
Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
*The other boxes are optional*
Then click the Empty Selected button.
If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
If you use Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
Click Exit on the Main menu to close the program.
* Go here (http://www.eset.eu/online-scanner) to run an online scanner from ESET.
Note: You will need to use Internet explorer for this scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Click Start
Make sure that the option Remove found threats is UNchecked and the option Scan unwanted applications is checkmarked.
Click Scan
Wait for the scan to finish
Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic, along with a new HijackThis log & above mentioned ComboFix resultant log.
Hi Blade!
i´m having problems to stablish again the internet connection
i´m attaching an image of the message i had tryint to repair the internet connection...
it´s in spanish but it says: it couldn´t consult the TCP/IP connection, can´t go further
ComboFix 08-12-26.03 - CINTHIA 2008-12-28 8:43:40.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.3082.18.255.74 [GMT -4:00]
Se ejecuta desde: c:\documents and settings\TEMP\Escritorio\ComboFix.exe
Comando de interruptores utilizados :: c:\documents and settings\TEMP\Escritorio\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Outdated)
ADVERTENCIA - ESTE EQUIPO NO TIENE INSTALADA LA CONSOLA DE RECUPERACION!
FILE ::
c:\windows\system32\Drivers\Adg82.sys
c:\windows\system32\Drivers\Qux71.sys
c:\windows\system32\Drivers\Vyc03.sys
c:\windows\Tasks\9CD3906491C041C4.job
c:\windows\Tasks\A0222F749199DFA0.job
c:\windows\Tasks\AC599C6C91E21AD0.job
G:\cfdflx.com
H:\cfdflx.com
.
(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\Drivers\Adg82.sys
c:\windows\Tasks\9CD3906491C041C4.job
c:\windows\Tasks\A0222F749199DFA0.job
c:\windows\Tasks\AC599C6C91E21AD0.job
G:\autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Servicios )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_Passthru
-------\Legacy_Adg82
-------\Service_Adg82
(((((((((((((((((( Archivos creados desde 2008-11-28 - 2008-12-28 )))))))))))))))))))))))))))))))))
.
2008-12-21 09:38 . 2008-12-21 09:38 <DIR> d-------- c:\archivos de programa\Trend Micro
2008-12-21 09:38 . 2008-12-21 09:39 1,393 --a------ c:\windows\imsins.BAK
.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-28 12:55 5,953,056 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-12-28 12:55 140,064 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-12-28 12:50 83,816 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-12-28 12:50 15,152 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-12-27 11:24 100,864 ----a-w c:\windows\system32\drivers\ndisio.sys
2008-07-12 03:12 67,696 ----a-w c:\archivos de programa\mozilla firefox\components\jar50.dll
2008-07-12 03:12 54,376 ----a-w c:\archivos de programa\mozilla firefox\components\jsd3250.dll
2008-07-12 03:12 34,952 ----a-w c:\archivos de programa\mozilla firefox\components\myspell.dll
2008-07-12 03:13 46,720 ----a-w c:\archivos de programa\mozilla firefox\components\spellchk.dll
2008-07-12 03:13 172,144 ----a-w c:\archivos de programa\mozilla firefox\components\xpinstal.dll
.
((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"MSMSGS"="c:\archivos de programa\Messenger\msmsgs.exe" [2008-04-13 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Easy-PrintToolBox"="c:\archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2004-01-13 409600]
"AVG8_TRAY"="c:\archiv~1\AVG\AVG8\avgtray.exe" [2008-09-04 1235736]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
AutoCAD Startup Accelerator.lnk - c:\archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe [05/03/2005 16:18:22 10872]
Inicio r*pido de Adobe Reader.lnk - c:\archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe [23/09/2005 22:05:26 29696]
Software Kodak EasyShare.lnk - c:\archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe [23/07/2004 8:26:34 757760]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk
backup=c:\windows\pss\Inicio rápido de Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Kodak software updater.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Kodak software updater.lnk
backup=c:\windows\pss\Kodak software updater.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinManage]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
--a------ 2008-02-20 10:33 963072 c:\archivos de programa\Ares\Ares.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-13 22:18 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--------- 2004-06-04 07:33 1400944 c:\archivos de programa\Ahead\InCD\InCD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-05-11 20:52 155648 c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
--a------ 2008-03-31 21:54 507904 c:\archivos de programa\Winamp Remote\bin\OrbTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-07-06 22:09 77824 c:\archivos de programa\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 14:49 36352 c:\archivos de programa\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE]
--a------ 2003-07-18 04:01 180224 c:\windows\system32\pctspk.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PV92TRAY]
--a------ 2003-06-25 07:47 311296 c:\windows\system32\PV92Tray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\Archivos de programa\\Microsoft Encarta\\Biblioteca de Consulta Encarta 2004\\EDICT.EXE"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\Orb.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"c:\\Archivos de programa\\AVG\\AVG8\\avgupd.exe"=
"c:\\Archivos de programa\\Ares\\Ares.exe"=
"c:\\Archivos de programa\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\livecall.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [04/09/2008 21:19:36 97928]
R2 avg8wd;AVG Free8 WatchDog;c:\archiv~1\AVG\AVG8\avgwdsvc.exe [04/09/2008 21:17:57 231704]
S0 Qux71;Qux71;c:\windows\system32\Drivers\Qux71.sys []
S0 Vyc03;Vyc03;c:\windows\system32\Drivers\Vyc03.sys []
.
.
------- Análisis Suplementario -------
.
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE: &Clean Traces - c:\archivos de programa\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\archivos de programa\DAP\dapextie.htm
IE: &Winamp Search - c:\documents and settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Download &all with DAP - c:\archivos de programa\DAP\dapextie2.htm
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\Office10\EXCEL.EXE/3000
Name-Space Handler: FTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
Name-Space Handler: HTTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
FF - ProfilePath - c:\documents and settings\TEMP\Datos de programa\Mozilla\Firefox\Profiles\1yjxsgn9.default\
FF - prefs.js: browser.startup.homepage - hxxp://es-AR.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:es-AR:official
FF - component: c:\archivos de programa\AVG\AVG8\Firefox\components\avgssff.dll
FF - component: c:\archivos de programa\AVG\AVG8\ToolbarFF\components\vmAVGConnector.dll
FF - component: c:\documents and settings\TEMP\Datos de programa\Mozilla\Firefox\Profiles\1yjxsgn9.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-28 08:53:16
Windows 5.1.2600 Service Pack 3 NTFS
escaneando procesos ocultos ...
escaneando entradas ocultas de autostart ...
escaneando archivos ocultos ...
el escaneo se completo con exito
archivos ocultos: 0
**************************************************************************
.
------------------------ Otros procesos en ejecución ------------------------
.
c:\archivos de programa\Ahead\InCD\InCDsrv.exe
c:\archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
c:\archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
c:\windows\system32\wdfmgr.exe
c:\archiv~1\AVG\AVG8\avgrsx.exe
.
**************************************************************************
.
Tiempo completado: 2008-12-28 9:01:51 - Reiniciando la máquina
ComboFix-quarantined-files.txt 2008-12-28 13:01:41
ComboFix2.txt 2008-12-27 11:54:04
ComboFix3.txt 2008-09-28 12:33:02
Pre-Run: 14,429,270,016 bytes libres
Post-Run: 14,373,376,000 bytes libres
163 --- E O F --- 2008-12-28 12:35:39
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:02:20 a.m., on 28/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\ARCHIV~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\ARCHIV~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Archivos de programa\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Archivos de programa\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [AVG8_TRAY] C:\ARCHIV~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Archivos de programa\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Archivos de programa\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Download &all with DAP - C:\Archivos de programa\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Investigador - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Archivos de programa\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Archivos de programa\Archivos comunes\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 6721 bytes
Hi
Have you tried reboot and see if connection would be restored after that?
I did that twice and doesn´t work
Hi
Let's see if connection works after following fix.
Open notepad and copy/paste the text in the quotebox below into it:
Driver::
Qux71
Vyc03
File::
c:\windows\system32\Drivers\Qux71.sys
c:\windows\system32\Drivers\Vyc03.sys
Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinManage]
Save this as
CFScript
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log. Let me know the status of connection.
Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.
Here is the log of combofix!!
i reboot but it didn´t worked, tried to repair the connetion and it keep saying the same message that we talked before!
ComboFix 08-12-26.03 - CINTHIA 2008-12-29 5:42:47.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.3082.18.255.47 [GMT -4:00]
Se ejecuta desde: c:\documents and settings\TEMP\Escritorio\ComboFix.exe
Comando de interruptores utilizados :: c:\documents and settings\TEMP\Escritorio\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Outdated)
ADVERTENCIA - ESTE EQUIPO NO TIENE INSTALADA LA CONSOLA DE RECUPERACION!
FILE ::
c:\windows\system32\Drivers\Qux71.sys
c:\windows\system32\Drivers\Vyc03.sys
.
(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Servicios )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_QUX71
-------\Service_Passthru
-------\Service_Qux71
-------\Service_Vyc03
(((((((((((((((((( Archivos creados desde 2008-11-28 - 2008-12-29 )))))))))))))))))))))))))))))))))
.
2008-12-28 09:18 . 2008-12-28 09:18 59,800 --a------ c:\documents and settings\TEMP\Datos de programa\GDIPFONTCACHEV1.DAT
2008-12-21 09:38 . 2008-12-21 09:38 <DIR> d-------- c:\archivos de programa\Trend Micro
2008-12-21 09:38 . 2008-12-21 09:39 1,393 --a------ c:\windows\imsins.BAK
.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-29 09:54 6,083,872 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-12-29 09:52 152,096 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-12-29 09:50 85,616 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-12-29 09:50 16,304 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-12-27 11:24 100,864 ----a-w c:\windows\system32\drivers\ndisio.sys
2008-07-12 03:12 67,696 ----a-w c:\archivos de programa\mozilla firefox\components\jar50.dll
2008-07-12 03:12 54,376 ----a-w c:\archivos de programa\mozilla firefox\components\jsd3250.dll
2008-07-12 03:12 34,952 ----a-w c:\archivos de programa\mozilla firefox\components\myspell.dll
2008-07-12 03:13 46,720 ----a-w c:\archivos de programa\mozilla firefox\components\spellchk.dll
2008-07-12 03:13 172,144 ----a-w c:\archivos de programa\mozilla firefox\components\xpinstal.dll
.
((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"MSMSGS"="c:\archivos de programa\Messenger\msmsgs.exe" [2008-04-13 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Easy-PrintToolBox"="c:\archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2004-01-13 409600]
"AVG8_TRAY"="c:\archiv~1\AVG\AVG8\avgtray.exe" [2008-09-04 1235736]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
AutoCAD Startup Accelerator.lnk - c:\archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe [05/03/2005 16:18:22 10872]
Software Kodak EasyShare.lnk - c:\archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe [23/07/2004 8:26:34 757760]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk
backup=c:\windows\pss\Inicio rápido de Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Kodak software updater.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Kodak software updater.lnk
backup=c:\windows\pss\Kodak software updater.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
--a------ 2008-02-20 10:33 963072 c:\archivos de programa\Ares\Ares.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-13 22:18 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--------- 2004-06-04 07:33 1400944 c:\archivos de programa\Ahead\InCD\InCD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-05-11 20:52 155648 c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
--a------ 2008-03-31 21:54 507904 c:\archivos de programa\Winamp Remote\bin\OrbTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-07-06 22:09 77824 c:\archivos de programa\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 14:49 36352 c:\archivos de programa\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE]
--a------ 2003-07-18 04:01 180224 c:\windows\system32\pctspk.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PV92TRAY]
--a------ 2003-06-25 07:47 311296 c:\windows\system32\PV92Tray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\Archivos de programa\\Microsoft Encarta\\Biblioteca de Consulta Encarta 2004\\EDICT.EXE"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\Orb.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"c:\\Archivos de programa\\AVG\\AVG8\\avgupd.exe"=
"c:\\Archivos de programa\\Ares\\Ares.exe"=
"c:\\Archivos de programa\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\livecall.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [04/09/2008 21:19:36 97928]
R2 avg8wd;AVG Free8 WatchDog;c:\archiv~1\AVG\AVG8\avgwdsvc.exe [04/09/2008 21:17:57 231704]
.
.
------- Análisis Suplementario -------
.
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE: &Clean Traces - c:\archivos de programa\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\archivos de programa\DAP\dapextie.htm
IE: &Winamp Search - c:\documents and settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Download &all with DAP - c:\archivos de programa\DAP\dapextie2.htm
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\Office10\EXCEL.EXE/3000
Name-Space Handler: FTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
Name-Space Handler: HTTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
FF - ProfilePath - c:\documents and settings\TEMP\Datos de programa\Mozilla\Firefox\Profiles\1yjxsgn9.default\
FF - prefs.js: browser.startup.homepage - hxxp://es-AR.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:es-AR:official
FF - component: c:\archivos de programa\AVG\AVG8\Firefox\components\avgssff.dll
FF - component: c:\archivos de programa\AVG\AVG8\ToolbarFF\components\vmAVGConnector.dll
FF - component: c:\documents and settings\TEMP\Datos de programa\Mozilla\Firefox\Profiles\1yjxsgn9.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-29 05:52:32
Windows 5.1.2600 Service Pack 3 NTFS
escaneando procesos ocultos ...
escaneando entradas ocultas de autostart ...
escaneando archivos ocultos ...
el escaneo se completo con exito
archivos ocultos: 0
**************************************************************************
.
------------------------ Otros procesos en ejecución ------------------------
.
c:\archivos de programa\Ahead\InCD\InCDsrv.exe
c:\archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
c:\archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
c:\windows\system32\wdfmgr.exe
c:\archiv~1\AVG\AVG8\avgrsx.exe
.
**************************************************************************
.
Tiempo completado: 2008-12-29 6:00:49 - Reiniciando la máquina
ComboFix-quarantined-files.txt 2008-12-29 10:00:43
ComboFix2.txt 2008-12-28 13:01:55
ComboFix3.txt 2008-12-27 11:54:04
ComboFix4.txt 2008-09-28 12:33:02
Pre-Run: 14,451,511,296 bytes libres
Post-Run: 14,398,803,968 bytes libres
150 --- E O F --- 2008-12-28 12:35:39
Hi
Download WinSockFix (http://www.softpedia.com/progDownload/WinSockFix-Download-15337.html) to your desktop. Run it and click 'Fix' -button there. Reboot and check the connection.
Here is the log file from eset online scan, and the others logs
# version=4
# OnlineScanner.ocx=1.0.0.56
# OnlineScannerDLLA.dll=1, 0, 0, 51
# OnlineScannerDLLW.dll=1, 0, 0, 51
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=3722 (20081229)
# vers_arch_module=1.064 (20080214)
# vers_adv_heur_module=1.064 (20070717)
# EOSSerial=8e1a9c4937b26a41b103a42265d176ff
# end=finished
# remove_checked=false
# unwanted_checked=true
# utc_time=2008-12-30 09:56:59
# local_time=2008-12-30 05:56:59 (-0400, Hora estándar de Sudamérica O.)
# country="Dominican Republic"
# osver=5.1.2600 NT Service Pack 3
# scanned=237501
# found=29
# scan_time=3801
C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll probably a variant of Win32/Adware.SearchAid application 747EFD8954EFD1B0C9B940A7FF9A5D63
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\2.bin\F3HTMLMU.DLL.vir probably a variant of Win32/Adware.SearchAid application 17C7770230C6C75054B2A9210755584E
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\2.bin\MWSBAR.DLL.vir probably a variant of Win32/Adware.SearchAid application E75F15F3DB5D4D933FC8A0C72C6441CE
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\F3DTACTL.DLL.vir probably a variant of Win32/Adware.SearchAid application 18B13265CFF2939571F4975159D47E50
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\F3HTMLMU.DLL.vir probably a variant of Win32/Adware.SearchAid application 17C7770230C6C75054B2A9210755584E
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\F3SHLLVW.DLL.vir probably a variant of Win32/Adware.SearchAid application 5719E6DC6E3F1379D4B0C15B1E3FB9E4
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\M3PLUGIN.DLL.vir probably a variant of Win32/Adware.SearchAid application 314E0468433FCCD2A52B0B4E192D109B
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\M3SRCHMN.EXE.vir probably a variant of Win32/Adware.SearchAid application BAA6CFD45C7B190AC59C14A7B5A9CAF9
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\MWSOEPLG.DLL.vir probably a variant of Win32/Adware.SearchAid application 29446F22E4FCED88C402CB4F907B4868
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\NPMYWEBS.DLL.vir probably a variant of Win32/Adware.SearchAid application 747EFD8954EFD1B0C9B940A7FF9A5D63
C:\QooBox\Quarantine\C\Archivos de programa\MyWebSearch\bar\3.bin\_MWSBAR.DLL.vir probably a variant of Win32/Adware.SearchAid application E75F15F3DB5D4D933FC8A0C72C6441CE
C:\QooBox\Quarantine\C\WINDOWS\system32\2.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\3.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\4.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\5.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\6.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\7.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\8.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\9.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\A.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\B.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\C.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\D.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\E.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\F.tmp.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\phc52qj0et8j.bmp.vir Win32/TrojanDownloader.FakeAlert.GS trojan 66FA7A528D4472EBB47D70E8F088B10C
C:\QooBox\Quarantine\C\WINDOWS\system32\pphc52qj0et8j.exe.vir Win32/TrojanDownloader.FakeAlert.FK trojan 58100D6E7AF052DF713CDB627F19B29C
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\_Adg82_.sys.zip Win32/Wigon trojan E21FB8CB217925008A55DE8A585A57BF
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\_Adg82_.sys.zip »ZIP »Adg82.sys Win32/Wigon trojan 00000000000000000000000000000000
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:02:55 a.m., on 30/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\ARCHIV~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\ARCHIV~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Microsoft Office\Office10\WINWORD.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\ARCHIV~1\AVG\AVG8\aAvgApi.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Archivos de programa\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Archivos de programa\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [AVG8_TRAY] C:\ARCHIV~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Archivos de programa\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Archivos de programa\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Download &all with DAP - C:\Archivos de programa\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Investigador - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/OnlineScanner.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Archivos de programa\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Archivos de programa\Archivos comunes\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7106 bytes
ComboFix 08-12-26.03 - CINTHIA 2008-12-28 8:43:40.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.3082.18.255.74 [GMT -4:00]
Se ejecuta desde: c:\documents and settings\TEMP\Escritorio\ComboFix.exe
Comando de interruptores utilizados :: c:\documents and settings\TEMP\Escritorio\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Outdated)
ADVERTENCIA - ESTE EQUIPO NO TIENE INSTALADA LA CONSOLA DE RECUPERACION!
FILE ::
c:\windows\system32\Drivers\Adg82.sys
c:\windows\system32\Drivers\Qux71.sys
c:\windows\system32\Drivers\Vyc03.sys
c:\windows\Tasks\9CD3906491C041C4.job
c:\windows\Tasks\A0222F749199DFA0.job
c:\windows\Tasks\AC599C6C91E21AD0.job
G:\cfdflx.com
H:\cfdflx.com
.
(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\Drivers\Adg82.sys
c:\windows\Tasks\9CD3906491C041C4.job
c:\windows\Tasks\A0222F749199DFA0.job
c:\windows\Tasks\AC599C6C91E21AD0.job
G:\autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Servicios )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_Passthru
-------\Legacy_Adg82
-------\Service_Adg82
(((((((((((((((((( Archivos creados desde 2008-11-28 - 2008-12-28 )))))))))))))))))))))))))))))))))
.
2008-12-21 09:38 . 2008-12-21 09:38 <DIR> d-------- c:\archivos de programa\Trend Micro
2008-12-21 09:38 . 2008-12-21 09:39 1,393 --a------ c:\windows\imsins.BAK
.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-28 12:55 5,953,056 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-12-28 12:55 140,064 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-12-28 12:50 83,816 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-12-28 12:50 15,152 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-12-27 11:24 100,864 ----a-w c:\windows\system32\drivers\ndisio.sys
2008-07-12 03:12 67,696 ----a-w c:\archivos de programa\mozilla firefox\components\jar50.dll
2008-07-12 03:12 54,376 ----a-w c:\archivos de programa\mozilla firefox\components\jsd3250.dll
2008-07-12 03:12 34,952 ----a-w c:\archivos de programa\mozilla firefox\components\myspell.dll
2008-07-12 03:13 46,720 ----a-w c:\archivos de programa\mozilla firefox\components\spellchk.dll
2008-07-12 03:13 172,144 ----a-w c:\archivos de programa\mozilla firefox\components\xpinstal.dll
.
((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"MSMSGS"="c:\archivos de programa\Messenger\msmsgs.exe" [2008-04-13 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Easy-PrintToolBox"="c:\archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2004-01-13 409600]
"AVG8_TRAY"="c:\archiv~1\AVG\AVG8\avgtray.exe" [2008-09-04 1235736]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
AutoCAD Startup Accelerator.lnk - c:\archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe [05/03/2005 16:18:22 10872]
Inicio r*pido de Adobe Reader.lnk - c:\archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe [23/09/2005 22:05:26 29696]
Software Kodak EasyShare.lnk - c:\archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe [23/07/2004 8:26:34 757760]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk
backup=c:\windows\pss\Inicio rápido de Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Kodak software updater.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Kodak software updater.lnk
backup=c:\windows\pss\Kodak software updater.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinManage]
NULL [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
--a------ 2008-02-20 10:33 963072 c:\archivos de programa\Ares\Ares.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-13 22:18 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--------- 2004-06-04 07:33 1400944 c:\archivos de programa\Ahead\InCD\InCD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-05-11 20:52 155648 c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
--a------ 2008-03-31 21:54 507904 c:\archivos de programa\Winamp Remote\bin\OrbTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-07-06 22:09 77824 c:\archivos de programa\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 14:49 36352 c:\archivos de programa\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE]
--a------ 2003-07-18 04:01 180224 c:\windows\system32\pctspk.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PV92TRAY]
--a------ 2003-06-25 07:47 311296 c:\windows\system32\PV92Tray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\Archivos de programa\\Microsoft Encarta\\Biblioteca de Consulta Encarta 2004\\EDICT.EXE"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\Orb.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\Archivos de programa\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"c:\\Archivos de programa\\AVG\\AVG8\\avgupd.exe"=
"c:\\Archivos de programa\\Ares\\Ares.exe"=
"c:\\Archivos de programa\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\livecall.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [04/09/2008 21:19:36 97928]
R2 avg8wd;AVG Free8 WatchDog;c:\archiv~1\AVG\AVG8\avgwdsvc.exe [04/09/2008 21:17:57 231704]
S0 Qux71;Qux71;c:\windows\system32\Drivers\Qux71.sys []
S0 Vyc03;Vyc03;c:\windows\system32\Drivers\Vyc03.sys []
.
.
------- Análisis Suplementario -------
.
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE: &Clean Traces - c:\archivos de programa\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\archivos de programa\DAP\dapextie.htm
IE: &Winamp Search - c:\documents and settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Download &all with DAP - c:\archivos de programa\DAP\dapextie2.htm
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\Office10\EXCEL.EXE/3000
Name-Space Handler: FTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
Name-Space Handler: HTTP\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\archiv~1\DAP\dapie.dll
FF - ProfilePath - c:\documents and settings\TEMP\Datos de programa\Mozilla\Firefox\Profiles\1yjxsgn9.default\
FF - prefs.js: browser.startup.homepage - hxxp://es-AR.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:es-AR:official
FF - component: c:\archivos de programa\AVG\AVG8\Firefox\components\avgssff.dll
FF - component: c:\archivos de programa\AVG\AVG8\ToolbarFF\components\vmAVGConnector.dll
FF - component: c:\documents and settings\TEMP\Datos de programa\Mozilla\Firefox\Profiles\1yjxsgn9.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-28 08:53:16
Windows 5.1.2600 Service Pack 3 NTFS
escaneando procesos ocultos ...
escaneando entradas ocultas de autostart ...
escaneando archivos ocultos ...
el escaneo se completo con exito
archivos ocultos: 0
**************************************************************************
.
------------------------ Otros procesos en ejecución ------------------------
.
c:\archivos de programa\Ahead\InCD\InCDsrv.exe
c:\archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
c:\archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
c:\windows\system32\wdfmgr.exe
c:\archiv~1\AVG\AVG8\avgrsx.exe
.
**************************************************************************
.
Tiempo completado: 2008-12-28 9:01:51 - Reiniciando la máquina
ComboFix-quarantined-files.txt 2008-12-28 13:01:41
ComboFix2.txt 2008-12-27 11:54:04
ComboFix3.txt 2008-09-28 12:33:02
Pre-Run: 14,429,270,016 bytes libres
Post-Run: 14,373,376,000 bytes libres
163 --- E O F --- 2008-12-28 12:35:39
Hi
You seem to have posted old ComboFix log. Did you run ComboFix again after the one you posted in post #22 (http://forums.spybot.info/showpost.php?p=272258&postcount=22)? If you haven't then let me know (no need to run again). However, if you run ComboFix after that reply then please post the log back here.
No i haven`t run combofix again, that`s the same one that i posted in the reply #22
That`s the one i posted in reply #18..
No i haven`t run combofix again, that`s the same one that i posted in the reply #22
Hi
We need to execute an OTMoveIt3 script
Please download OTMoveIt3 by OldTimer (http://oldtimer.geekstogo.com/OTMoveIt3.exe) and save it to your desktop.
Double click theOTMoveIt3 icon on your desktop.
Paste the following code under the Paste Fix Here area. Do not include the word
Code
.
:Files
C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll
Push the large MoveIt button.
OTMI3 may ask to reboot the machine. Please do so if asked.
Copy/Paste the contents under the Results line here in your next reply with a fresh hjt log. How's the system running?
If you are unable to copy/paste from this window (as will be the case if the machine was rebooted), open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
here is what you asked for!! the system is responding better...
========== FILES ==========
DllUnregisterServer procedure not found in C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll
C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll NOT unregistered.
C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll moved successfully.
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 01012009_124451
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:22 p.m., on 01/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\ARCHIV~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\ARCHIV~1\AVG\AVG8\aAvgApi.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Archivos de programa\Microsoft Office\Office10\WINWORD.EXE
C:\Documents and Settings\TEMP\Escritorio\OTMoveIt3.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Archivos de programa\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Archivos de programa\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARCHIV~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Archivos de programa\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [AVG8_TRAY] C:\ARCHIV~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Archivos de programa\Archivos comunes\Autodesk Shared\acstart16.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Archivos de programa\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Archivos de programa\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Datos de programa\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Download &all with DAP - C:\Archivos de programa\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Investigador - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/OnlineScanner.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Archivos de programa\Autodesk Architectural Desktop 3\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Archivos de programa\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Archivos de programa\Archivos comunes\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7204 bytes
Well congrats, it appears your system is all clean Are you still noticing any problems? If not, it's time to secure your system to prevent against further intrusions.
THESE STEPS ARE VERY IMPORTANT
Let's reset system restore
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: You will lose all previous restore points which are likely to be infected. Please note you need Administrator Access to do clean the restore points.
1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
2. Reboot.
3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
NOTE: only do this ONCE,NOT on a regular basis
Now lets uninstall ComboFix:
Click START then RUN
Now type Combofix /u in the runbox and click OK
Next we remove all used tools.
Double-click OTMoveIt3.exe.
Click the CleanUp! button.
Select Yes when the
Begin cleanup Process?
prompt appears.
If you are prompted to Reboot during the cleanup, select Yes.
The tool will delete itself once it finishes, if not delete it by yourself.
Note: If you receive a warning from your firewall or other security programs regarding OTMoveIt attempting to contact the internet, please allow it to do so.
UPDATING WINDOWS AND INTERNET EXPLORER
IMPORTANT: You Need to Update Windows and Internet Explorer to protect your computer from the malware that is around on the Internet. Please go to the windows update site (http://windowsupdate.microsoft.com/) to get the critical updates.
If you are running Microsoft Office, or any portion thereof, go to the Microsoft's Office Update site and make sure you have at least all the critical updates installed (Free) Microsoft Office Update.
Make your Internet Explorer more secure
This can be done by following these simple instructions:
From within Internet Explorer click on the Tools menu and then click on Options.
Click once on the Security tab
Click once on the Internet icon so it becomes highlighted.
Click once on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialize and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.
The following are recommended third party programs that are designed to keep your computer clean. A link as well as a brief description is included with each item.
Download Adaware
Adaware is a free program. It scans for known spyware on your computer. These scans should be run at least once every two weeks. For more information, see this tutorial (http://www.bleepingcomputer.com/forums/index.php?showtutorial=48)
The program is available for download here (http://www.download.com/Ad-Aware-2008/3000-8022_4-10045910.html)
Download Spybot
Spybot is a scanner like adaware. It scans for spyware and other malicious programs. It is important to have both Adaware and Spybot on your computer because each program provides unique detection and pretection measures. Spybot has preventitive tools that stop programs from even installing on your computer.
To see how to set this up as well as more spybot features, see here (http://www.bleepingcomputer.com/forums/index.php?showtutorial=43)
Spybot can be downloaded at this location (http://www.download.com/Spybot-Search-Destroy/3000-8022-10122137.html?part=dl-spybot&subj=dl&tag=but)
Download SpywareBlaster
Spyware blaster is a program that stops known malicious activex controls from installing on your computer. It works by changing settings in your registry. It makes
kill bits
in the registry, so that certain activex controls can't install.
If you don't know what activex controls are, see here (http://www.webopedia.com/TERM/A/ActiveX_control.html)
You can download SpywareBlaster here here (http://majorgeeks.com/downloadget.php?id=2859&file=11&evp=61b0e8ad41924a03c37615f4682b4cef)
SpywareBlaster tutorial (http://www.bleepingcomputer.com/forums/tutorial49.html)
hosts file:
Every version of windows has a hosts file as part of them. In a very basic sense, they are used to locate webpages. We can customize a hosts file so that it blocks certain webpages. However, it can slow down certain computers. This is why using a hosts file is optional!!
Download it here (http://www.mvps.org/winhelp2002/hosts.htm). Make sure you read the instructions on how to install the hosts file. There is a good tutorial here (http://www.bleepingcomputer.com/forums/tutorial51.html)
If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
Click the start button (at the lower left hand corner of your screen) Click run In the dialog box, type services.msc hit enter, then locate dns client Highlight it, then double-click it. On the dropdown box, change the setting from automatic to manual. Click ok
Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For more info, check this (http://www.bleepingcomputer.com/forums/tutorial60.html) webpage out.
If you don't have a 3rd party firewall or a router behind NAT then I recommend getting one. I recommend either Online Armor Free (http://www.tallemu.com/free-firewall-protection-software.html) or Comodo Firewall Pro (http://www.personalfirewall.comodo.com/download_firewall.html#fw3.0) (If you choose Comodo: Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" and install firewall ONLY!).
Just a final reminder for you. I am trying to stress these two points.
UPDATE UPDATE UPDATE!!! Make sure you do this about every 1-2 weeks.
Make sure all of your security programs are up to date.
Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
Once again, please post and tell me how things are going with your system... problems etc.
Have a great day,
Blade :cool:
Since this issue appears to be resolved ... this Topic has been closed. Glad I could help. :)
Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.
If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.