Results 1 to 10 of 16

Thread: Virtumonde.dll!!! Help!!!

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default Virtumonde.dll!!! Help!!!

    Tried fixing this virtumonde demon myself... Wasn't very successful to say the least... Here is the HJT log, appreciate any help!!!

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 5:53:28 PM, on 8/26/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\System32\mobsync.exe
    C:\Users\Micah\Desktop\HiJackThis.exe
    C:\Windows\system32\SearchFilterHost.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    F2 - REG:system.ini: Shell=
    F2 - REG:system.ini: UserInit=
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {67FE9F26-8E23-468C-923C-E4E892597CB7} - C:\Windows\system32\byXNHxxY.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {AE0699B9-FF9D-4B5A-A149-894BBD12D9AA} - (no file)
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\rqRLeEvV.dll,#1
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O20 - AppInit_DLLs:
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 5047 bytes
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain

  2. #2
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Hi hacim

    Please download Malwarebytes' Anti-Malware to your desktop.

    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    • Please post contents of that file in your next reply.


    • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)


    Post:

    - mbam log
    - rsit logs (taken after mbam run)
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006

  3. #3
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    I appreciate your help so much! Here are the logs as followed in two sections it would not let me post both of them in one reply.

    Malwarebytes' Anti-Malware 1.25
    Database version: 1062
    Windows 6.0.6001 Service Pack 1

    1:53:03 PM 8/30/2008
    mbam-log-08-30-2008 (13-53-03).txt

    Scan type: Full Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|)
    Objects scanned: 135489
    Time elapsed: 49 minute(s), 53 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 1
    Registry Keys Infected: 4
    Registry Values Infected: 2
    Registry Data Items Infected: 2
    Folders Infected: 0
    Files Infected: 7

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    C:\Windows\System32\byXNHxxY.dll (Trojan.Vundo.H) -> Delete on reboot.

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{717d3379-eb49-45a5-950a-21d61a4013e2} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{717d3379-eb49-45a5-950a-21d61a4013e2} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mpx (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Malware.Trace) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxnhxxy -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxnhxxy -> Delete on reboot.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Windows\System32\byXNHxxY.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\Windows\System32\YxxHNXyb.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\Windows\System32\YxxHNXyb.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    c:\Windows\System32\mpx.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Users\Micah\AppData\Local\Temp\MediaTubeCodec_ver1.1504.0.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Windows\System32\mpxu.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    K:\RSIT.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain

  4. #4
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log

    Logfile of random's system information tool (written by random/random)
    Run by Micah at 2008-08-30 14:00:49
    Microsoft® Windows Vista™ Home Basic Service Pack 1
    System drive C: has 159 GB (67%) free of 238 GB
    Total RAM: 2047 MB (72% free)

    HijackThis download failed

    Registry dump

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-01-28 1554256]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE0699B9-FF9D-4B5A-A149-894BBD12D9AA}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {D0943516-5076-4020-A3B5-AEFAF26AB263} - Veoh Browser Plug-in - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll [2008-06-19 352256]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [2008-02-22 144784]
    "Krait"=C:\Program Files\Razer\Krait\razerhid.exe [2007-02-16 126976]
    "P17RunE"=RunDll32 P17RunE.dll []
    "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-03-09 185632]
    "NvSvc"=C:\Windows\system32\nvsvc.dll [2007-12-11 86016]
    "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-12-11 8530464]
    "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-12-11 81920]
    "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
    "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-07-10 116040]
    "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ThePrivacyGuard"=C:\PROGRA~1\THEPRI~1\THEPRI~1.EXE /startup []
    "RunSpySweeperScheduleAtStartup"=C:\Windows\system32\msfeedssync.exe [2008-01-19 12800]
    "ProxyWay"=C:\Program Files\ProxyWay\proxyway.exe []
    "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
    C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    c:\program files\steam\steam.exe [2008-03-29 1271032]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLS"=" "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{DFAAB7BB-4990-47B1-8F27-6DB9C258D26B}"=C:\Windows\system32\cbXNHBTK.dll []

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "EnableLUA"=0
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableUIADesktopToggle"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
    shell\AutoRun\command - K:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3c2528f9-6a1b-11dc-b2a9-0016178feb8a}]
    shell\AutoRun\command - K:\LaunchU3.exe -a


    File associations

    .reg - open - regedit.exe "%1" %*
    .scr - open - "%1" %*
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain

  5. #5
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log continued

    List of files/folders created in the last three months

    2008-08-30 14:00:49 ----D---- C:\rsit
    2008-08-30 14:00:49 ----D---- C:\Program Files\trend micro
    2008-08-30 12:31:02 ----D---- C:\Users\Micah\AppData\Roaming\Malwarebytes
    2008-08-30 12:31:00 ----D---- C:\ProgramData\Malwarebytes
    2008-08-30 12:31:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2008-08-26 22:08:48 ----D---- C:\ProgramData\Avg7
    2008-08-26 21:27:41 ----A---- C:\Windows\system32\4b0812fe-.txt
    2008-08-19 21:09:14 ----D---- C:\ProgramData\Azureus
    2008-08-13 11:57:00 ----A---- C:\Windows\system32\tzres.dll
    2008-08-13 11:55:04 ----A---- C:\Windows\system32\mshtml.dll
    2008-08-13 11:55:04 ----A---- C:\Windows\system32\ieframe.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\wininet.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\urlmon.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\mstime.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\jsproxy.dll
    2008-08-13 11:54:59 ----A---- C:\Windows\system32\inetcomm.dll
    2008-08-13 11:54:59 ----A---- C:\Windows\system32\es.dll
    2008-08-13 11:54:58 ----A---- C:\Windows\system32\IPSECSVC.DLL
    2008-08-07 20:04:19 ----D---- C:\Program Files\iPod
    2008-08-07 20:04:17 ----D---- C:\Program Files\iTunes
    2008-08-03 17:39:24 ----A---- C:\Windows\wininit.ini
    2008-07-25 03:34:30 ----A---- C:\Windows\system32\DivXCodecVersionChecker.exe
    2008-07-22 20:38:43 ----A---- C:\Windows\system32\msshooks.dll
    2008-07-22 20:38:42 ----A---- C:\Windows\system32\msscb.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\thawbrkr.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\SearchFilterHost.exe
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\propsys.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\propdefs.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\msstrc.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\mssprxy.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\mssitlb.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\msshsq.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\korwbrkr.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\xmlfilter.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\wsepno.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\srchadmin.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\rtffilt.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\offfilt.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\nlhtml.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\msscntrs.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\mimefilt.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\tquery.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\SearchProtocolHost.exe
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\SearchIndexer.exe
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\mssrch.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\chtbrkr.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\chsbrkr.dll
    2008-07-22 20:38:37 ----A---- C:\Windows\system32\mssvp.dll
    2008-07-22 20:38:37 ----A---- C:\Windows\system32\mssphtb.dll
    2008-07-22 20:38:37 ----A---- C:\Windows\system32\mssph.dll
    2008-07-21 19:42:32 ----A---- C:\Windows\system32\xfcodec.dll
    2008-07-17 02:38:59 ----D---- C:\Users\Micah\AppData\Roaming\BSD
    2008-07-17 02:38:57 ----D---- C:\ProgramData\MediaWidget
    2008-07-17 02:38:55 ----D---- C:\Program Files\Media Widget
    2008-07-17 02:38:55 ----A---- C:\Windows\bsdsetup.dll
    2008-07-14 15:35:02 ----A---- C:\Windows\system32\javaws.exe
    2008-07-14 15:35:02 ----A---- C:\Windows\system32\javaw.exe
    2008-07-14 15:35:02 ----A---- C:\Windows\system32\java.exe
    2008-07-12 23:25:49 ----D---- C:\Program Files\Bonjour
    2008-07-12 23:25:04 ----D---- C:\Program Files\QuickTime
    2008-07-08 14:16:50 ----A---- C:\Windows\system32\NlsLexicons0007.dll
    2008-07-08 14:16:47 ----A---- C:\Windows\system32\NlsLexicons0009.dll
    2008-07-08 14:16:38 ----A---- C:\Windows\system32\NaturalLanguage6.dll
    2008-07-08 14:15:53 ----A---- C:\Windows\system32\shell32.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\wshext.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\wscript.exe
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\vbscript.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\scrrun.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\scrobj.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\jscript.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\cscript.exe
    2008-07-08 14:15:36 ----A---- C:\Windows\system32\rpcrt4.dll
    2008-07-08 14:15:36 ----A---- C:\Windows\system32\ntoskrnl.exe
    2008-07-08 14:15:36 ----A---- C:\Windows\system32\ntkrnlpa.exe
    2008-07-08 14:15:35 ----A---- C:\Windows\system32\pacerprf.dll
    2008-07-08 14:15:35 ----A---- C:\Windows\system32\emdmgmt.dll
    2008-07-02 15:34:57 ----D---- C:\Program Files\Common Files\Adobe
    2008-07-02 15:34:57 ----D---- C:\Program Files\Adobe
    2008-06-29 00:31:03 ----D---- C:\Program Files\Veoh Networks
    2008-06-29 00:30:39 ----D---- C:\Windows\Downloaded Installations
    2008-06-12 16:04:50 ----D---- C:\Program Files\Microsoft Games
    2008-06-12 16:04:49 ----D---- C:\PerfLogs
    2008-06-11 19:10:32 ----A---- C:\Windows\system32\SLsvc.exe
    2008-06-11 19:10:32 ----A---- C:\Windows\system32\onex.dll
    2008-06-11 19:10:20 ----A---- C:\Windows\system32\PSHED.DLL
    2008-06-11 19:10:19 ----A---- C:\Windows\system32\imagesp1.dll
    2008-06-11 19:10:16 ----A---- C:\Windows\system32\dfsr.exe
    2008-06-11 19:10:15 ----A---- C:\Windows\system32\wuaueng.dll
    2008-06-11 19:10:15 ----A---- C:\Windows\system32\sstpsvc.dll
    2008-06-11 19:10:15 ----A---- C:\Windows\system32\pidgenx.dll
    2008-06-11 19:10:14 ----A---- C:\Windows\system32\mstscax.dll
    2008-06-11 19:10:13 ----A---- C:\Windows\system32\WsmSvc.dll
    2008-06-11 19:10:13 ----A---- C:\Windows\system32\winrscmd.dll
    2008-06-11 19:10:12 ----A---- C:\Windows\system32\sysmain.dll
    2008-06-11 19:10:11 ----A---- C:\Windows\system32\vssapi.dll
    2008-06-11 19:10:11 ----A---- C:\Windows\system32\RMActivate.exe
    2008-06-11 19:10:10 ----A---- C:\Windows\system32\VSSVC.exe
    2008-06-11 19:10:10 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
    2008-06-11 19:10:09 ----A---- C:\Windows\system32\secproc.dll
    2008-06-11 19:10:09 ----A---- C:\Windows\system32\RMActivate_isv.exe
    2008-06-11 19:10:09 ----A---- C:\Windows\system32\iesetup.dll
    2008-06-11 19:10:08 ----A---- C:\Windows\system32\secproc_isv.dll
    2008-06-11 19:10:07 ----A---- C:\Windows\system32\drmv2clt.dll
    2008-06-11 19:10:06 ----A---- C:\Windows\system32\icardres.dll
    2008-06-11 19:10:06 ----A---- C:\Windows\system32\icardagt.exe
    2008-06-11 19:10:06 ----A---- C:\Windows\system32\blackbox.dll
    2008-06-11 19:10:05 ----A---- C:\Windows\system32\xpssvcs.dll
    2008-06-11 19:10:03 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
    2008-06-11 19:10:03 ----A---- C:\Windows\system32\RMActivate_ssp.exe
    2008-06-11 19:10:02 ----A---- C:\Windows\system32\spwizimg.dll
    2008-06-11 19:10:02 ----A---- C:\Windows\system32\rdpencom.dll
    2008-06-11 19:10:02 ----A---- C:\Windows\bfsvc.exe
    2008-06-11 19:10:01 ----A---- C:\Windows\system32\msxml6.dll
    2008-06-11 19:10:01 ----A---- C:\Windows\system32\msxml3.dll
    2008-06-11 19:10:01 ----A---- C:\Windows\system32\lpremove.exe
    2008-06-11 19:10:00 ----A---- C:\Windows\system32\ntdll.dll
    2008-06-11 19:10:00 ----A---- C:\Windows\system32\msjet40.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\qmgr.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\lsasrv.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\localspl.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\IKEEXT.DLL
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\wevtsvc.dll
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\wcncsvc.dll
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\TsWpfWrp.exe
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\recdisc.exe
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\mscoree.dll
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\kernel32.dll
    2008-06-11 19:09:56 ----A---- C:\Windows\system32\vds.exe
    2008-06-11 19:09:56 ----A---- C:\Windows\system32\CompMgmtLauncher.exe
    2008-06-11 19:09:55 ----A---- C:\Windows\system32\wmp.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\wcnwiz.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\SMBHelperClass.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\msvbvm60.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\mstsc.exe
    2008-06-11 19:09:53 ----A---- C:\Windows\system32\msdtctm.dll
    2008-06-11 19:09:53 ----A---- C:\Windows\system32\mf.dll
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\termsrv.dll
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\kerberos.dll
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\IMJP10K.DLL
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\advapi32.dll
    2008-06-11 19:09:51 ----A---- C:\Windows\system32\mmcndmgr.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\wuapi.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\Query.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\MPSSVC.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\CertEnroll.dll
    2008-06-11 19:09:49 ----A---- C:\Windows\system32\xolehlp.dll
    2008-06-11 19:09:49 ----A---- C:\Windows\system32\ole32.dll
    2008-06-11 19:09:49 ----A---- C:\Windows\system32\msdtcprx.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\SSShim.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\netlogon.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\msvcrt.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
    2008-06-11 19:09:47 ----A---- C:\Windows\system32\schedsvc.dll
    2008-06-11 19:09:47 ----A---- C:\Windows\system32\nlmgp.dll
    2008-06-11 19:09:47 ----A---- C:\Windows\system32\DfsShlEx.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\wer.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\user32.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\shlwapi.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\sdclt.exe
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\milcore.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\IasMigPlugin.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\WSDApi.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\vdsdyn.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\QAGENTRT.DLL
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\diagperf.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\d3d9.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\clusapi.dll
    2008-06-11 19:09:44 ----A---- C:\Windows\system32\winrsmgr.dll
    2008-06-11 19:09:44 ----A---- C:\Windows\system32\mtxclu.dll
    2008-06-11 19:09:44 ----A---- C:\Windows\system32\mmc.exe
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\vdsbas.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\swprv.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\SLC.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\msi.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\comctl32.dll
    2008-06-11 19:09:42 ----A---- C:\Windows\system32\MSVidCtl.dll
    2008-06-11 19:09:41 ----A---- C:\Windows\system32\XPSSHHDR.dll
    2008-06-11 19:09:41 ----A---- C:\Windows\system32\msdtckrm.dll
    2008-06-11 19:09:41 ----A---- C:\Windows\system32\gpsvc.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\sbe.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\samsrv.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\mfc42u.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\FWPUCLNT.DLL
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\esent.dll
    2008-06-11 19:09:39 ----A---- C:\Windows\system32\wecutil.exe
    2008-06-11 19:09:39 ----A---- C:\Windows\system32\usp10.dll
    2008-06-11 19:09:39 ----A---- C:\Windows\system32\sdengin2.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\mfc42.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\gacinstall.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\cmipnpinstall.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\cmicryptinstall.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\crypt32.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\comsvcs.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\certutil.exe
    2008-06-11 19:09:33 ----A---- C:\Windows\system32\wucltux.dll
    2008-06-11 19:09:33 ----A---- C:\Windows\system32\mswsock.dll
    2008-06-11 19:09:33 ----A---- C:\Windows\explorer.exe
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\wmdrmsdk.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\sqlceqp30.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\setupapi.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\oleaut32.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\lsm.exe
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\FirewallAPI.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\wecsvc.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\sdohlp.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\schannel.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\msv1_0.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\iphlpsvc.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\bcrypt.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\wmpmde.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\thumbcache.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\riched20.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\p2psvc.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\netapi32.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\eapp3hst.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\WinSAT.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\vdsutil.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\imapi2fs.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\d3d10_1.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\autofmt.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\autoconv.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\autochk.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\authfwcfg.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\wevtapi.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\dmvdsitf.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\d3d10_1core.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\comuid.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\comdlg32.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\browseui.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\authui.dll
    2008-06-11 19:09:27 ----A---- C:\Windows\system32\WSDMon.dll
    2008-06-11 19:09:27 ----A---- C:\Windows\system32\mscories.dll
    2008-06-11 19:09:27 ----A---- C:\Windows\system32\eapphost.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\wevtfwd.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\untfs.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\uexfat.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\sqlcese30.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\rasmans.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\pcaui.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\iassam.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\eappcfg.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\DfrgNtfs.exe
    2008-06-11 19:09:25 ----A---- C:\Windows\system32\wlansvc.dll
    2008-06-11 19:09:25 ----A---- C:\Windows\system32\whealogr.dll
    2008-06-11 19:09:24 ----A---- C:\Windows\system32\dot3svc.dll
    2008-06-11 19:09:22 ----A---- C:\Windows\system32\rdpwsx.dll
    2008-06-11 19:09:22 ----A---- C:\Windows\system32\mssha.dll
    2008-06-11 19:09:22 ----A---- C:\Windows\system32\msdrm.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\zipfldr.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\WsmAuto.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\winhttp.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\rpcss.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\rasppp.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\nlasvc.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\ncrypt.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\evr.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\dfrgui.exe
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\BFE.DLL
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\WsmWmiPl.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\WMVCORE.DLL
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\wmdrmdev.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\win32spl.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\printui.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\msrepl40.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\dhcpcsvc6.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\ddraw.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\audiosrv.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\WebClnt.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\themecpl.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\rastls.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\QAGENT.DLL
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\objsel.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\dbghelp.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\w32time.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\sqlsrv32.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\PresentationHost.exe
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\ncryptui.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\icm32.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\iasnap.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\wmdrmnet.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\WerFaultSecure.exe
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\spoolss.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\msctf.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\iprtrmgr.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\infocardapi.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\azroles.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\wlangpui.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\winsrv.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\taskschd.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\scksp.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\mstlsapi.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\bcdedit.exe
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\basecsp.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\AudioEng.dll
    2008-06-11 19:09:15 ----A---- C:\Windows\system32\winsta.dll
    2008-06-11 19:09:15 ----A---- C:\Windows\system32\netprofm.dll
    2008-06-11 19:09:15 ----A---- C:\Windows\system32\dbgeng.dll
    2008-06-11 19:09:14 ----A---- C:\Windows\system32\taskcomp.dll
    2008-06-11 19:09:14 ----A---- C:\Windows\system32\rsaenh.dll
    2008-06-11 19:09:14 ----A---- C:\Windows\system32\netcfgx.dll
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\winlogon.exe
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\wercon.exe
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\sqmapi.dll
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\lpksetup.exe
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\cdosys.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\wlansec.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\msdtcuiu.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\mprddm.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\dfshim.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\certcli.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\apds.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\tsgqec.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\shdocvw.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\iasrad.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\eapsvc.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\bcdsrv.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\AUDIOKSE.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\aaclient.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\Wldap32.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\uDWM.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\msidcrl30.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\dnsapi.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\certmgr.dll
    2008-06-11 19:09:09 ----A---- C:\Windows\system32\WMVDECOD.DLL
    2008-06-11 19:09:09 ----A---- C:\Windows\system32\umpnpmgr.dll
    2008-06-11 19:09:09 ----A---- C:\Windows\system32\pla.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\wmicmiplugin.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\netshell.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\dxgi.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\dot3gpui.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\shsvcs.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\ntprint.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\cryptnet.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\comsnap.dll
    2008-06-11 19:09:06 ----A---- C:\Windows\system32\winmm.dll
    2008-06-11 19:09:06 ----A---- C:\Windows\system32\NlsData0009.dll
    2008-06-11 19:09:06 ----A---- C:\Windows\system32\MMDevAPI.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\wscsvc.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\synceng.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\services.exe
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\pnidui.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\cmifw.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\wscisvif.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\taskeng.exe
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\msjtes40.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\msconfig.exe
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\iassdo.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\cipher.exe
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\WMVSDECD.DLL
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\tdh.dll
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\rasapi32.dll
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\imapi2.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\wersvc.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\uxtheme.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\SessEnv.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\dot3api.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\dmdskmgr.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\cmd.exe
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\cbsra.exe
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\AuthFWSnapin.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wuwebv.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\WUDFx.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wlanmsm.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wlancfg.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wkssvc.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wevtutil.exe
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\srvsvc.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\qdvd.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\msscp.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\loadperf.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\rpchttp.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\rdpdd.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\mshtmled.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\msdtcVSp1res.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\localsec.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\fontext.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\diskpart.exe
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\comres.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\wsqmcons.exe
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\wlanapi.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\WinSATAPI.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\hnetcfg.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\dsound.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\WMADMOD.DLL
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\wlanpref.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\RDPENCDD.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\profprov.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\NAPMONTR.DLL
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\filemgmt.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\avifil32.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\wsecedit.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\WMSPDMOD.DLL
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\WindowsCodecs.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\tracerpt.exe
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\SLCommDlg.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\PresentationHostProxy.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\P2PGraph.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\MuiUnattend.exe
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\dwmredir.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\dnsrslvr.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\dhcpcsvc.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\wininit.exe
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\spp.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\rasdlg.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\QSHVHOST.DLL
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\iassvcs.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\gpresult.exe
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\dwm.exe
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\azroleui.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\apphelp.dll
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\PortableDeviceApi.dll
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\mscorier.dll
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\mcbuilder.exe
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\iashost.exe
    2008-06-11 19:08:55 ----A---- C:\Windows\HelpPane.exe
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\wecapi.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\unbcl.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\tcpmon.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\srrstr.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\spwizeng.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\SLUI.exe
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\shrink.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\rasmontr.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\msra.exe
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\lltdsvc.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\WMPEncEn.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\oleacc.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\IPHLPAPI.DLL
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\iertutil.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\iashlpr.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\gpedit.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\brcpl.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\regsvc.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\raschap.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\ntvdm.exe
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\ipsmsnap.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\framedynos.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\fdWSD.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\Faultrep.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\advpack.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\wpdshext.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\wdc.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\vsstrace.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\PerfCenterCPL.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\ntlanman.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\l2nacp.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\iedkcs32.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\EncDec.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\WlanMM.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\Storprop.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\netman.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\ieapfltr.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\framedyn.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\dssenh.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\certreq.exe
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\adsnt.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\WUDFHost.exe
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\WsmProv.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\wlanhlp.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\WLanConn.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\tcpipcfg.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\sxs.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\profsvc.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\ncsi.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\KMSVC.DLL
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\IPBusEnum.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\wusa.exe
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\WerFault.exe
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\VAN.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\userenv.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\umb.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\ie4uinit.exe
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\fundisc.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\cryptui.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\catsrvut.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\puiobj.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\NlsData000c.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\NlsData0007.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\netid.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\dps.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\photowiz.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\NlsData0011.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\netcenter.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\MdSched.exe
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\InkEd.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData004b.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData004a.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData0047.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData0046.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData0045.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\ipsecsnp.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\WinSCard.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\NlsData004e.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\NlsData004c.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\NlsData0049.dll
    2008-06-11 19:08:43 ----A---- C:\Windows\system32\spbcd.dll
    2008-06-11 19:08:43 ----A---- C:\Windows\system32\NlsData000a.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\ws2_32.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\ntdsapi.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData0c1a.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData0414.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData001b.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData001a.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData0018.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData000f.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\msinfo32.exe
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\secur32.dll
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\NlsData0416.dll
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\NlsData0039.dll
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\NlsData0020.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\winrs.exe
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\odbcjt32.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData0816.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData003e.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData002a.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData0022.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData0021.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NAPSTAT.EXE
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData0026.dll
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData001d.dll
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData0019.dll
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData0010.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData0027.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData0024.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData000d.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData0001.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\prnntfy.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData081a.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData0013.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData0003.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData0002.dll
    2008-06-11 19:08:35 ----A---- C:\Windows\system32\mblctr.exe
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\schtasks.exe
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\RelMon.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\pdh.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\msfeeds.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\iasacct.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\dmdlgs.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\dhcpsapi.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\cryptsvc.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\activeds.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\TSpkg.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\netdiagfx.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\FirewallControlPanel.exe
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\fdWCN.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\dfrgfat.exe
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\catsrv.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\wvc.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\wow32.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\winrm.vbs
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\rastapi.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\qwave.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\netcorehc.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\NAPHLPR.DLL
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\msacm32.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\ifmon.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\dot3msm.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\dot3cfg.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\AudioSes.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\wudriver.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\wscntfy.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\shsetup.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\ntshrui.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\msdt.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\els.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\clbcatq.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\adsldp.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\WMNetMgr.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\stobject.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\sdrsvc.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\QUTIL.DLL
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\psisdecd.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\net1.exe
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\ipnathlp.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\iasrecst.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\iasdatastore.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\fdSSDP.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\dsprop.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\wlgpclnt.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\wlanui.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\upnphost.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\systemcpl.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\smss.exe
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\rasman.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\nci.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\mprmsg.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\Defrag.exe
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\adsldpc.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\ActiveContentWizard.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\Wpc.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\wdigest.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\t2embed.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\setupcl.exe
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\rascfg.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\P2P.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\oleprn.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\msftedit.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\MigAutoPlay.exe
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain

  6. #6
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log continued

    2008-06-11 19:08:28 ----A---- C:\Windows\system32\loghours.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\L2SecHC.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\fde.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\dxdiag.exe
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\DFDWiz.exe
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\CompatUI.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\wiaservc.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\scansetting.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\rtm.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\NAPCRYPT.DLL
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\msutb.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\mprdim.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\gpapi.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\devmgr.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\wdi.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\msihnd.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\kdusb.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\ifsutil.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\dimsroam.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\CertEnrollUI.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\actxprxy.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\wscapi.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\wlandlg.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\WinFXDocObj.exe
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\vssadmin.exe
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\usbmon.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\SyncCenter.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\spoolsv.exe
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\regapi.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\mycomput.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\mswmdm.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\msls31.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\imagehlp.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\BOOTVID.DLL
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\audiodg.exe
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\uudf.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\sud.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\scecli.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\SCardSvr.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\newdev.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\mstask.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\mspaint.exe
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\kdcom.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\termmgr.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\tapisrv.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\ssdpsrv.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\SLUINotify.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\samlib.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\Robocopy.exe
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\puiapi.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\mtxoci.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\input.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\inetpp.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\duser.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\cic.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\AzSqlExt.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\adtschema.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\wisptis.exe
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\sdshext.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\netiohlp.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\iasads.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\cscapi.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\authz.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\WUDFPlatform.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\wpcsvc.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\webcheck.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\verifier.exe
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\themeui.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\slcinst.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\NlsData0000.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\msdtclog.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\msdt.exe
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\dxtmsft.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\d3d8.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\cmdial32.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\wpccpl.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\WMPhoto.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\wintrust.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\vdsldr.exe
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\SndVol.exe
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\rasgcw.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\pnpsetup.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\oledlg.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\ntmarta.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\mmcbase.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\mlang.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\icfupgd.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\icardie.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\clfsw32.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\wpd_ci.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\syssetup.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\slmgr.vbs
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\rasqec.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\polstore.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\nslookup.exe
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\ncobjapi.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\msrd3x40.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\msaatext.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\mpr.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\ieui.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\diskraid.exe
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\accessibilitycpl.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\wtsapi32.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\unlodctr.exe
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\ulib.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\sethc.exe
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\pnpui.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\oobefldr.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\mscms.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\lodctr.exe
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\iaspolcy.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\fontsub.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\extmgr.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\dxdiagn.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\cabinet.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\Utilman.exe
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\unattend.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\trkwks.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\scesrv.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\ogldrv.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\occache.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\lnkstub.exe
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\cabview.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\wups2.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\wpcao.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\wermgr.exe
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\sdspres.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\p2pcollab.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\msnetobj.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\iepeers.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\ieaksie.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\eappgnui.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\dsquery.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\drvinst.exe
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\dispdiag.exe
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\DHCPQEC.DLL
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\dfdts.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\bthci.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\basesrv.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\verifier.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\secproc_ssp.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\RstrtMgr.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\mprapi.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\mmcss.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\efsadu.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\WPDSp.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\WMVENCOD.DLL
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\wmpeffects.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\wercplsupport.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\qedit.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\WPDShServiceObj.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\wiascanprofiles.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\wiaaut.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\setupugc.exe
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\QSVRMGMT.DLL
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\pnrpnsp.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\pngfilt.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\p2pnetsh.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\networkmap.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\msoeacct.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\iscsiexe.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\icacls.exe
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\d3d10core.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\consent.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\xactsrv.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\wuauclt.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\usercpl.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\PNPXAssocPrx.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\PNPXAssoc.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\pcadm.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\msrdc.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\msdmo.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\lsass.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\lpk.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\eappprxy.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\drmmgrtn.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\dpapimig.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\conime.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\autoplay.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\xwizards.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\systeminfo.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\resutils.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\netcfg.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\msrating.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\mfplat.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\findstr.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\DWWIN.EXE
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\dssec.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\dot3ui.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\dfrgifc.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\cmdl32.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\alg.exe
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\txflog.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\powercpl.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\odbc32.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\nshhttp.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\netprof.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\MFWMAAEC.DLL
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\imm32.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\feclient.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\dbnetlib.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\btpanui.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\apircl.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\regedit.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\tbssvc.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\taskkill.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\svchost.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\RASMM.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\provthrd.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\msieftp.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\iexpress.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\dxva2.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\dwmapi.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\d3d10.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\bcdprov.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\ActionQueue.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\syncui.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\slwmi.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\SLCExt.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\slcc.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\shwebsvc.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\networkexplorer.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\EAPQEC.DLL
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\dmocx.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\xcopy.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\WMASF.DLL
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\uxsms.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\taskmgr.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\raserver.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\PnPUnattend.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\olepro32.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\ias.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\dnscacheugc.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\connect.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\brcplsdw.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\audiodev.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\aclui.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\wlanext.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\upnp.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\UIHub.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\reg.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\QCLIPROV.DLL
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\perfts.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\NapiNSP.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\msoert2.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\msjetoledb40.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\mountvol.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\mmcshext.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\icsfiltr.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\cmstp.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\certprop.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\browser.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\AuxiliaryDisplayApi.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\atl.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\appinfo.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\wuapp.exe
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\WpdMtpUS.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\WMVXENCD.DLL
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\wmpdxm.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\SysFxUI.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\SoundRecorder.exe
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\rekeywiz.exe
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\qcap.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\qasf.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\PING.EXE
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\netplwiz.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\inetmib1.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\ieakeng.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\httpapi.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\dsuiext.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\dskquoui.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\dmusic.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\cewmdm.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\bitsadmin.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\xwtpw32.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\WUDFSvc.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\WMVSENCD.DLL
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\wmpsrcwp.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\shimgvw.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\Sens.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\SecEdit.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\sbeio.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\ndfapi.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\mtstocom.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\mscandui.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\makecab.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\lsmproxy.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\dot3gpclnt.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\batt.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\auditpol.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\adsmsext.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wzcdlg.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wscmisetup.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wiashext.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wiadefui.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\userinit.exe
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\sppnp.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\shacct.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\seclogon.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\printcom.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\p2phost.exe
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\msorcl32.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\msdadiag.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\dxtrans.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\apss.dll
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\wpdwcn.dll
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\WMSPDMOE.DLL
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\sxstrace.exe
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\perfmon.exe
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\napipsec.dll
    2008-06-11 19:08:00 ----A---- C:\Windows\system32\HelpPaneProxy.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\wups.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\winrshost.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\UIAutomationCore.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\tasklist.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\TapiMigPlugin.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\rrinstaller.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\prntvpt.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\notepad.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\netiougc.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\msiexec.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\MP4SDECD.DLL
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\ktmutil.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\keymgr.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\FwRemoteSvr.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\ftp.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\fmifs.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\d3dim700.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\csrsrv.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\colorui.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\notepad.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\wscproxystub.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\wpdbusenum.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\wmiprop.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\winethc.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\txfw32.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\takeown.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\rasplap.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\powrprof.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\pots.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\PnPutil.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\pcasvc.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\nshipsec.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\msimtf.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\mfps.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\logagent.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\inseng.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\findnetprinters.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\driverquery.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\cryptdll.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\capisp.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\WLanHC.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\wextract.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\TMM.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\shrpubw.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\shgina.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\sfc_os.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\sendmail.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\runonce.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\rshx32.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\RpcPing.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\perfnet.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\olecli32.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\nsisvc.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\mfpmp.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\luainstall.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\ktmw32.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\imapi.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\fsutil.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\fdPHost.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\dnshc.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\d3dim.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\compstui.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\cmmon32.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\WMADMOE.DLL
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\wiaacmgr.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\w32tm.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\version.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\unregmp2.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\UI0Detect.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\tscupgrd.exe

    2008-06-11 19:07:56 ----A---- C:\Windows\system32\net.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\msvfw32.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\MPG4DECD.DLL
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\MP43DECD.DLL
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\mdminst.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\imgutil.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\getmac.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\dsauth.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\dimsjob.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\cmlua.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\wmpshell.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\sfc.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\sdchange.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\PortableDeviceWiaCompat.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\pnpts.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\migisol.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\ipconfig.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\fdeploy.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\dispci.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\dinput8.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\diantz.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\credui.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\comrepl.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\cmutil.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\ACW.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\wmvdspa.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\wmidx.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\vdmredir.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\utildll.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\TSTheme.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\TpmInit.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\softkbd.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\remotepg.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\pdhui.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\nlaapi.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\msfeedsbs.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\modemui.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\McxDriv.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\iernonce.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\hlink.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\fwcfg.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\ExplorerFrame.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\expand.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\EncDump.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\colbact.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\cfgbkend.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\bridgeunattend.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\amstream.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wsnmp32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wpnpinst.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wmpcm.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wfapigp.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\waitfor.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\vds_ps.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\tabcal.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\sti_ci.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\shutdown.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\rdrleakdiag.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\rasauto.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\qdv.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\osblprov.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\olethk32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\olesvr32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\odbccp32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\msdtc.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\mfvdsp.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\logman.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\iscsiwmi.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\iscsium.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\esentutl.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\dpnet.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\DpiScaling.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\dmsynth.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\COLORCNV.DLL
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\cmcfg32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\cacls.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\bootcfg.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\admparse.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\xmlprovi.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\WpdConns.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\werdiagcontroller.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\wavemsp.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\ufat.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\ucsvc.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\sxproxy.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\SLLUA.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\rgb9rast.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\RegCtrl.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\odbctrac.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\networkitemfactory.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\mstext40.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\mshta.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\msctfui.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\licmgr10.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\itss.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\convert.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\at.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\winnsi.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\unattendedjoin.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\TimeDateMUICallback.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\tbs.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\setupcln.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\rasdiag.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\prevhost.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\ocsetup.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\netbtugc.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\mydocs.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\mobsync.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\l2gpstore.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\iscsied.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\GuidedHelp.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\fphc.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\dskquota.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\dmime.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\csrstub.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\cscdll.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\cmpbk32.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\bitsigd.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\AuthFWGP.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\AtBroker.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\wpclsp.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\WINSRPC.DLL
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\vss_ps.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\VIDRESZR.DLL
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\usbui.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\upnpcont.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\srwmi.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\regini.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\RacAgent.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\odbccu32.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\odbccr32.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\nsi.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\nbtstat.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\napdsnap.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\mtxlegih.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\mtxdm.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\msident.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\msdart.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\MsCtfMonitor.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\mfcsubs.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\graftabl.com
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\gpupdate.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\dsdmo.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\dot3dlg.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\devenum.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\cmstplua.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\avrt.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\apilogen.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\amxread.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\wsock32.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\wiarpc.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\WavDest.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\vfwwdm32.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\syskey.exe
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\ROUTE.EXE
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\rasphone.exe
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\procinst.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\odbcbcp.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\netevent.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\ndfetw.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\msexcl40.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\MP3DMOD.DLL
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\extrac32.exe
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\eventcls.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\WlanMmHC.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\wiadss.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\TabbtnEx.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\Tabbtn.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\psbase.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\msxbde40.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\inetppui.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\dmscript.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\dmloader.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\d3dxof.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\csrss.exe
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\CertEnrollCtrl.exe
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\cdd.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\atmfd.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\Apphlpdm.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\fveupdate.exe
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\wshcon.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\PlaySndSrv.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\Netplwiz.exe
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\mspbde40.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\msltus40.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\icsunattend.exe
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\credssp.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\WsmRes.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\WSHTCPIP.DLL
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\wship6.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\tcpmon.ini
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\sxsstore.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\slwga.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\setupSNK.exe
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\sbunattend.exe
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\OptionalFeatures.exe
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\msvidc32.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\localui.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\lltdapi.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\icaapi.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\HotStartUserAgent.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\dmutil.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\ComputerDefaults.exe
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\usbperf.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\spopk.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\serialui.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\odbcconf.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\NcdProp.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\cofiredm.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\rasctrs.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\msobjs.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\msfeedssync.exe
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\midimap.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\ieencode.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\hnetmon.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\hbaapi.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\corpol.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\winipsec.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\vdmdbg.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\url.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\nlsbres.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\LogonUI.exe
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\iprtprio.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\InfDefaultInstall.exe
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\esentprf.dll
    2008-06-11 19:07:42 ----A---- C:\Windows\system32\osbaseln.dll
    2008-06-11 19:07:42 ----A---- C:\Windows\system32\msisip.dll
    2008-06-11 19:07:42 ----A---- C:\Windows\system32\cfgmgr32.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\winusb.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\rdpcfgex.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\msmmsp.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\dispex.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\riched32.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\Nlsdl.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\msidle.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\idndl.dll
    2008-06-11 19:07:38 ----A---- C:\Windows\system32\spwmp.dll
    2008-06-11 19:07:37 ----A---- C:\Windows\system32\KBDKOR.DLL
    2008-06-11 19:07:37 ----A---- C:\Windows\system32\KBDJPN.DLL
    2008-06-11 19:07:37 ----A---- C:\Windows\system32\iscsilog.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\WsmCl.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\wmploc.DLL
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\vga256.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\tsddd.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\framebuf.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\dxmasf.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\vga64k.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\vga.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\spwizres.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\f3ahvoas.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\dmdskres2.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\bootstr.dll
    2008-06-11 19:07:31 ----A---- C:\Windows\system32\gatherWiredInfo.vbs
    2008-06-11 19:07:30 ----A---- C:\Windows\system32\gatherWirelessInfo.vbs
    2008-06-11 19:07:30 ----A---- C:\Windows\system32\fsmgmt.msc
    2008-06-11 19:07:27 ----A---- C:\Windows\system32\perfmon.msc
    2008-06-11 19:07:26 ----A---- C:\Windows\system32\vsp1cln.exe
    2008-06-11 19:06:46 ----A---- C:\Windows\system32\xmllite.dll
    2008-06-11 19:06:42 ----A---- C:\Windows\system32\wbemcomn.dll
    2008-06-11 19:06:21 ----A---- C:\Windows\system32\SmiInstaller.dll
    2008-06-11 19:06:20 ----A---- C:\Windows\system32\SmiEngine.dll
    2008-06-11 19:06:08 ----A---- C:\Windows\system32\wdscore.dll
    2008-06-11 19:06:08 ----A---- C:\Windows\system32\PkgMgr.exe
    2008-06-11 19:05:19 ----A---- C:\Windows\system32\drvstore.dll
    2008-06-11 19:05:16 ----A---- C:\Windows\system32\dpx.dll
    2008-06-11 19:05:15 ----A---- C:\Windows\system32\mspatcha.dll
    2008-06-11 19:05:15 ----A---- C:\Windows\system32\msdelta.dll
    2008-06-11 17:02:16 ----A---- C:\Windows\system32\RacEngn.dll
    2008-06-11 17:02:07 ----A---- C:\Windows\system32\quartz.dll
    2008-06-01 16:20:13 ----A---- C:\Windows\War3Unin.exe
    2008-06-01 16:17:43 ----D---- C:\Program Files\Warcraft III
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •