Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: Virtumonde and possibly more...

  1. 2008-09-24, 01:36 #1
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Unhappy Virtumonde and possibly more...

    Hi
    So like the title of my thread says, I have Virtumonde and possibly other malware/adware etc. Spybot was able to get rid of the other issues except for of course Virtumonde and at least one other thing. Even after running VundoFix and ComboFix multiple times (as well as Spybot) in safe mode, and deleting the infected files I could find, I just can't seem to get rid of it... What might be worth mentioning is that twice Spybot ran and said there were no problems (once in safe mode and once after normal restart), but still I got pop-ups and my IE settings were changed.

    Anyway, here's my HijackThis log.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 4:31:04 PM, on 2008-09-23
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\drivers\KodakCCS.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\Program Files\McAfee\VirusScan\McShield.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\PnkBstrB.exe
    C:\Program Files\SiteAdvisor\6261\SAService.exe
    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    C:\WINDOWS\System32\WgaTray.exe
    C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINDOWS\BCMSMMSG.exe
    C:\Program Files\Dell\Media Experience\PCMService.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
    O2 - BHO: (no name) - {41b2d192-ea3a-4555-90a1-e50a9035fc09} - C:\WINDOWS\system32\sosoxx.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: {28fb0ffc-b290-2d09-49a4-9282285f2608} - {8062f582-2829-4a94-90d2-092bcff0bf82} - C:\WINDOWS\System32\trlhyf.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
    O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
    O4 - HKLM\..\Run: [90db8fbe] rundll32.exe "C:\WINDOWS\System32\aejohbji.dll",b
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab55579.cab
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ca..._2.3.2.100.cab
    O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10...y.cab55579.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab55579.cab
    O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
    O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames...o.cab55579.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary...o.cab56649.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/sh...19/mcgdmgr.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
    O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10...y.cab55579.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
    O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames...p.cab56961.cab
    O18 - Protocol: bw+0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {E9A1120D-A99D-43BB-8D16-3A207402632E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: sosoxx.dll trlhyf.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

    --
    End of file - 25846 bytes
  2. 2008-09-24, 22:37 #2
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
    "BEFORE you POST" (READ this Procedure before Requesting Assistance)
    http://forums.spybot.info/showthread.php?t=288
    All advice given is taken at your own risk.
    Please make sure you have read this information so we are on the same page.

    Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
    The junk can be tough to remove, so do not expect fast or easy.

    1) Would you do both of us a favor and get rid of those 018 lines?
    For your information, all of the 018 items in the log are the result of the Logitech Desktop Messenger which gets installed along with another Logitech program because the EULA agreement is not read. Unless you know what it is and use it, it is a resource waster and can be removed in Add Remove programs, but make sure you uninstall only what I highlite in red, this is optional:
    C:\Program Files\Logitech\Desktop Messenger\ <<< uninstall only the program in red.
    After a restart those lines should be gone in the next HJT log...thanks

    2) We need first to disable TeaTimer that it doesn't interfere with fixes. You can re-enable it when you're clean again:
    * Run Spybot-S&D in Advanced Mode.
    * If it is not already set to do this Go to the Mode menu select "Advanced Mode"
    * On the left hand side, Click on Tools
    * Then click on the Resident Icon in the List
    * Uncheck "Resident TeaTimer" and OK any prompts.
    * Restart your computer.
    (leave TT disabled until we finish)

    3) A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.

    Tutorial
    http://www.bleepingcomputer.com/comb...o-use-combofix

    Remove any old copies of combofix before you proceed.

    Thanks to sUBs and anyone else who helped with this fix.

    It is important that it is saved directly to your Desktop.

    Download ComboFix from Here to your Desktop
    • Double click combofix.exe and follow the prompts.
    • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply

    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    Post the combofix log and a new HJT log.

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  3. 2008-09-26, 02:09 #3
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default HijackThis log (new)

    Sorry it took me so long to respond - I really do appreciate you taking the time to reply.

    Here's the new HijackThis log, the ComboFix will be posted next.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 4:58:05 PM, on 2008-09-25
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0013)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\drivers\KodakCCS.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\PnkBstrB.exe
    C:\Program Files\SiteAdvisor\6261\SAService.exe
    C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\ctfmon.exe
    c:\PROGRA~1\mcafee\msc\mcuimgr.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [RJAALASR] %systemroot%\RJAALASR.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk.disabled
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab55579.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ca..._2.3.2.100.cab
    O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10...y.cab55579.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab55579.cab
    O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames...o.cab55579.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary...o.cab56649.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/sh...19/mcgdmgr.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
    O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10...y.cab55579.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
    O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames...p.cab56961.cab
    O20 - AppInit_DLLs: sosoxx.dll trlhyf.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

    --
    End of file - 7263 bytes
  4. 2008-09-26, 02:16 #4
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default ComboFix log part 1

    ComboFix 08-09-20.05 - Administrator 2008-09-25 16:30:33.4 - NTFSx86 MINIMAL
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.286 [GMT -7:00]
    Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\WINDOWS\system32\B0.tmp
    C:\WINDOWS\system32\bitsprx.dll
    C:\WINDOWS\system32\blphc1h8j0end9.scr
    C:\WINDOWS\system32\cfgmgr3.dll
    C:\WINDOWS\system32\cmpbk3.dll
    C:\WINDOWS\system32\drivers\Winim50.sys
    C:\WINDOWS\system32\dwave.sys
    C:\WINDOWS\system32\k86.bin
    C:\WINDOWS\system32\lphc1h8j0end9.exe
    C:\WINDOWS\system32\winhelp.exe
    .
    ---- Previous Run -------
    .
    C:\WINDOWS\system32\5.tmp
    C:\WINDOWS\system32\blphc1h8j0end9.scr
    C:\WINDOWS\system32\cnbjmo.dll
    C:\WINDOWS\system32\E.tmp
    C:\WINDOWS\system32\ijbhojea.ini
    C:\WINDOWS\system32\k86.bin
    C:\WINDOWS\system32\lphc1h8j0end9.exe
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\phc1h8j0end9.bmp

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_RSVPCLIPSRV
    -------\Legacy_TCPSR
    -------\Legacy_WINIM50
    -------\Service_RSVPClipSrv
    -------\Service_Winim50


    ((((((((((((((((((((((((( Files Created from 2008-08-25 to 2008-09-25 )))))))))))))))))))))))))))))))
    .

    2008-09-25 03:05 . 2008-09-25 03:05 23,552 --ahs---- C:\WINDOWS\SYSTEM32\$winnt$s.dll
    2008-09-25 03:05 . 2008-09-25 03:05 23,040 --ahs---- C:\WINDOWS\SYSTEM32\38a.dll
    2008-09-25 03:05 . 2008-09-25 03:05 16,384 --ahs---- C:\WINDOWS\SYSTEM32\4Fm.dll
    2008-09-25 02:27 . 2008-09-25 02:27 49,664 --a------ C:\4C.tmp
    2008-09-25 02:27 . 2008-09-25 02:27 18 --a------ C:\WINDOWS\SYSTEM32\4B.tmp
    2008-09-25 02:26 . 2008-09-25 02:26 131,198 --a------ C:\WINDOWS\SYSTEM32\43.tmp
    2008-09-25 02:26 . 2008-09-25 02:26 37,888 --a------ C:\WINDOWS\SYSTEM32\46.tmp
    2008-09-25 02:26 . 2008-09-25 02:26 312 --a------ C:\WINDOWS\SYSTEM32\41.tmp
    2008-09-25 01:54 . 2008-09-25 01:54 49,664 --a------ C:\3D.tmp
    2008-09-25 01:53 . 2008-09-25 01:53 131,198 --a------ C:\WINDOWS\SYSTEM32\35.tmp
    2008-09-25 01:53 . 2008-09-25 01:53 37,888 --a------ C:\WINDOWS\SYSTEM32\38.tmp
    2008-09-25 01:53 . 2008-09-25 01:53 312 --a------ C:\WINDOWS\SYSTEM32\33.tmp
    2008-09-25 01:53 . 2008-09-25 01:53 18 --a------ C:\WINDOWS\SYSTEM32\3C.tmp
    2008-09-25 01:37 . 2008-09-25 15:42 32,256 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\ati1ydxx.sys
    2008-09-25 01:36 . 2008-09-25 01:36 131,198 --a------ C:\WINDOWS\SYSTEM32\E.tmp
    2008-09-25 01:36 . 2008-09-25 01:36 49,664 --a------ C:\1E.tmp
    2008-09-25 01:36 . 2008-09-25 01:36 37,888 --a------ C:\WINDOWS\SYSTEM32\17.tmp
    2008-09-25 01:36 . 2008-09-25 01:36 312 --a------ C:\WINDOWS\SYSTEM32\5.tmp
    2008-09-25 01:36 . 2008-09-25 01:36 29 --a------ C:\WINDOWS\SYSTEM32\dpwuursd.tmp
    2008-09-25 01:36 . 2008-09-25 01:36 18 --a------ C:\WINDOWS\SYSTEM32\1D.tmp
    2008-09-25 01:32 . 2008-09-25 01:32 172,032 --a------ C:\WINDOWS\RJAALASR.exe
    2008-09-25 01:32 . 2008-09-25 01:32 32,256 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\ati2wbxx.sys
    2008-09-25 01:31 . 2008-09-25 01:31 172,032 --a------ C:\WINDOWS\SYSTEM32\B1.tmp
    2008-09-25 01:31 . 2008-09-25 01:31 131,198 --a------ C:\WINDOWS\SYSTEM32\AD.tmp
    2008-09-25 01:31 . 2008-09-25 01:32 49,664 --a------ C:\B6.tmp
    2008-09-25 01:31 . 2008-09-25 01:36 30,208 --a------ C:\WINDOWS\SYSTEM32\rs32net.exe
    2008-09-25 01:31 . 2008-09-25 04:05 641 --a-s---- C:\WINDOWS\SYSTEM32\1799622569.dat
    2008-09-25 01:31 . 2008-09-25 01:31 312 --a------ C:\WINDOWS\SYSTEM32\AC.tmp
    2008-09-25 01:31 . 2008-09-25 01:32 18 --a------ C:\WINDOWS\SYSTEM32\B5.tmp
    2008-09-25 00:06 . 2008-09-25 00:06 44 --a------ C:\WINDOWS\SYSTEM32\7E.tmp
    2008-09-25 00:06 . 2008-09-25 00:06 18 --a------ C:\WINDOWS\SYSTEM32\87.tmp
    2008-09-24 23:29 . 2008-09-24 23:29 18 --a------ C:\WINDOWS\SYSTEM32\4D.tmp
    2008-09-24 23:27 . 2008-09-24 23:28 88 --a------ C:\WINDOWS\SYSTEM32\4A.tmp
    2008-09-24 23:02 . 2008-09-24 23:02 186,368 --a------ C:\WINDOWS\SYSTEM32\13.tmp
    2008-09-24 23:02 . 2008-09-24 23:02 88 --a------ C:\WINDOWS\SYSTEM32\F.tmp
    2008-09-24 23:02 . 2008-09-24 23:02 18 --a------ C:\WINDOWS\SYSTEM32\1B.tmp
    2008-09-24 22:42 . 2008-09-24 22:42 186,368 --a------ C:\WINDOWS\SYSTEM32\14.tmp
    2008-09-24 22:42 . 2008-09-24 22:42 88 --a------ C:\WINDOWS\SYSTEM32\12.tmp
    2008-09-24 22:42 . 2008-09-24 22:42 18 --a------ C:\WINDOWS\SYSTEM32\18.tmp
    2008-09-24 22:42 . 2008-09-24 22:42 0 --a------ C:\WINDOWS\SYSTEM32\XDva016.sys
  5. 2008-09-26, 02:16 #5
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default combofix log part 2

    2008-09-24 22:42 . 2008-09-24 22:42 0 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\wATV03nt.sys
    2008-09-24 22:42 . 2008-09-24 22:42 0 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\wanatw4.sys
    2008-09-24 22:42 . 2008-09-24 22:42 0 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\LMouKE.Sys
    2008-09-24 22:42 . 2008-09-24 22:42 0 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\el90xbc5.sys
    2008-09-24 22:33 . 2008-09-24 22:33 36,452 --a------ C:\WINDOWS\SYSTEM32\10.tmp
    2008-09-24 22:33 . 2008-09-24 22:33 88 --a------ C:\WINDOWS\SYSTEM32\C.tmp
    2008-09-24 22:33 . 2008-09-24 22:33 18 --a------ C:\WINDOWS\SYSTEM32\11.tmp
    2008-09-24 22:16 . 2008-09-24 22:16 0 --a------ C:\WINDOWS\SYSTEM32\D.tmp
    2008-09-24 22:15 . 2008-09-24 22:16 88 --a------ C:\WINDOWS\SYSTEM32\B.tmp
    2008-09-24 22:10 . 2008-09-24 22:10 88 --a------ C:\WINDOWS\SYSTEM32\7.tmp
    2008-09-24 22:10 . 2008-09-24 22:10 0 --a------ C:\WINDOWS\SYSTEM32\9.tmp
    2008-09-24 22:05 . 2008-09-24 22:05 88 --a------ C:\WINDOWS\SYSTEM32\4.tmp
    2008-09-24 22:05 . 2008-09-24 22:05 18 --a------ C:\WINDOWS\SYSTEM32\8.tmp
    2008-09-24 22:01 . 2008-09-24 22:01 186,368 --a------ C:\WINDOWS\SYSTEM32\6A.tmp
    2008-09-24 22:01 . 2008-09-24 22:01 36,452 --a------ C:\WINDOWS\SYSTEM32\6B.tmp
    2008-09-24 22:01 . 2008-09-24 22:01 88 --a------ C:\WINDOWS\SYSTEM32\68.tmp
    2008-09-24 22:01 . 2008-09-24 22:01 0 --a------ C:\WINDOWS\SYSTEM32\6C.tmp
    2008-09-24 21:50 . 2008-09-25 00:00 <DIR> d-------- C:\WINDOWS\SYSTEM32\CatRoot_bak
    2008-09-24 21:31 . 2008-09-24 23:29 8,592 --a------ C:\WINDOWS\SYSTEM32\dplx.sys
    2008-09-24 21:31 . 2008-09-24 21:31 88 --a------ C:\WINDOWS\SYSTEM32\6.tmp
    2008-09-24 21:31 . 2008-09-24 21:32 18 --a------ C:\WINDOWS\SYSTEM32\A.tmp
    2008-09-23 19:29 . 2006-08-14 03:34 332,928 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\srv.sys
    2008-09-23 19:28 . 2006-06-21 22:06 1,435,648 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\query.dll
    2008-09-23 19:28 . 2006-06-21 22:06 69,120 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\ciodm.dll
    2008-09-23 19:22 . 2006-07-13 06:33 8,453,632 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\shell32.dll
    2008-09-23 19:21 . 2006-04-20 04:51 359,808 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip.sys
    2008-09-23 19:18 . 2006-08-25 08:45 617,472 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\comctl32.dll
    2008-09-23 18:53 . 2004-08-04 00:56 380,416 --------- C:\WINDOWS\SYSTEM32\irprops.cpl
    2008-09-23 18:34 . 2004-07-17 11:40 19,528 --a------ C:\WINDOWS\002622_.tmp
    2008-09-23 17:28 . 2008-09-24 18:18 4,566 --a------ C:\WINDOWS\imsins.BAK
    2008-09-23 16:14 . 2008-09-23 16:14 <DIR> d-------- C:\Program Files\Trend Micro
    2008-09-22 22:07 . 2006-05-05 02:41 453,120 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\mrxsmb.sys
    2008-09-22 22:07 . 2006-05-05 02:47 174,592 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\rdbss.sys
    2008-09-22 19:06 . 2008-09-22 19:06 <DIR> d-------- C:\VundoFix Backups
    2008-09-22 18:12 . 2003-07-16 13:50 48,256 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\w32.dll
    2008-09-22 18:12 . 2003-07-16 13:51 41,600 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\weitekp9.dll
    2008-09-22 18:12 . 2003-07-16 13:51 31,232 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\weitekp9.sys
    2008-09-22 18:10 . 2004-08-03 22:31 482,304 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\pintlgnt.ime
    2008-09-22 18:10 . 2003-07-16 13:33 92,416 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\mga.sys
    2008-09-22 18:10 . 2003-07-16 13:33 92,032 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\mga.dll
    2008-09-22 18:10 . 2003-07-16 13:23 67,584 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\pmigrate.dll
    2008-09-22 18:10 . 2001-08-17 23:36 65,536 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\EXCH_mailmsg.dll
    2008-09-22 18:10 . 2001-08-17 23:36 38,912 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\EXCH_ntfsdrv.dll
    2008-09-22 18:10 . 2003-07-16 13:41 6,144 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\pmxgl.dll
    2008-09-22 18:09 . 2003-07-16 13:22 10,096,640 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\hwxcht.dll
    2008-09-22 18:09 . 2001-08-17 23:36 43,520 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\EXCH_fcachdll.dll
    2008-09-22 18:09 . 2003-07-16 13:31 18,432 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\jupiw.dll
    2008-09-22 18:07 . 2001-08-17 23:36 2,134,528 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\EXCH_smtpsnap.dll
    2008-09-22 18:07 . 2001-08-17 23:36 175,104 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\EXCH_smtpadm.dll
    2008-09-22 17:56 . 2008-09-22 17:56 749 -rah----- C:\WINDOWS\WindowsShell.Manifest
    2008-09-22 17:56 . 2008-09-22 17:56 749 -rah----- C:\WINDOWS\SYSTEM32\wuaucpl.cpl.manifest
    2008-09-22 17:56 . 2008-09-22 17:56 749 -rah----- C:\WINDOWS\SYSTEM32\sapi.cpl.manifest
    2008-09-22 17:56 . 2008-09-22 17:56 749 -rah----- C:\WINDOWS\SYSTEM32\ncpa.cpl.manifest
    2008-09-22 17:56 . 2008-09-22 17:56 488 -rah----- C:\WINDOWS\SYSTEM32\logonui.exe.manifest
    2008-09-22 17:52 . 2008-07-18 22:09 1,811,656 --a------ C:\WINDOWS\SYSTEM32\wuaueng.dll
    2008-09-22 17:51 . 2004-08-03 23:07 52,864 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\dmusic.sys
    2008-09-22 17:51 . 2004-08-03 23:07 6,400 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\splitter.sys
    2008-09-22 17:50 . 2004-08-03 22:59 57,472 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\redbook.sys
    2008-09-22 17:33 . 2004-08-04 00:56 130,048 --a------ C:\WINDOWS\SYSTEM32\ksproxy.ax
    2008-09-22 17:33 . 2004-08-04 00:56 4,096 --a------ C:\WINDOWS\SYSTEM32\ksuser.dll
    2008-09-22 17:32 . 2004-08-04 01:01 40,840 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\termdd.sys
    2008-09-22 17:29 . 2003-07-16 13:39 1,086,182 -ra------ C:\WINDOWS\SETA8.tmp
    2008-09-22 17:29 . 2003-07-16 13:39 797,189 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\NT5IIS.CAT
    2008-09-22 17:29 . 2003-07-16 13:32 399,645 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\MAPIMIG.CAT
    2008-09-22 17:29 . 2003-07-16 13:37 37,484 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\MW770.CAT
    2008-09-22 17:29 . 2003-07-16 13:30 13,608 -ra------ C:\WINDOWS\SETB4.tmp
    2008-09-22 17:29 . 2003-07-16 13:29 13,472 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\HPCRDP.CAT
    2008-09-22 17:29 . 2003-07-16 13:29 8,574 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\IASNT4.CAT
    2008-09-22 17:29 . 2003-07-16 13:54 7,046 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\OEMBIOS.CAT
    2008-09-22 17:29 . 2003-07-16 13:54 7,046 -ra------ C:\WINDOWS\SETC6.tmp
    2008-09-22 17:26 . 2008-09-22 17:26 119,808 --a------ C:\WINDOWS\SYSTEM32\trlhyf.dll
    2008-09-22 17:26 . 2008-09-22 17:26 119,808 --a------ C:\WINDOWS\SYSTEM32\sngykdjv.dll
    2008-09-22 17:23 . 2008-09-22 17:23 82,944 --a------ C:\WINDOWS\SYSTEM32\aejohbji.dll
    2008-09-22 17:20 . 2008-07-18 22:09 215,752 --a------ C:\WINDOWS\SYSTEM32\wuaucpl.cpl
    2008-09-22 09:20 . 2008-09-22 09:20 <DIR> d-------- C:\WINDOWS\java
    2008-09-22 09:20 . 2008-09-25 01:35 535,920,640 --a------ C:\WINDOWS\MEMORY.DMP
    2008-09-21 14:58 . 2008-09-21 16:51 1,738 --a------ C:\WINDOWS\setupapi.old
    2008-09-21 14:51 . 2008-09-21 14:51 <DIR> d-------- C:\Program Files\Safer Networking
    2008-09-21 14:13 . 2008-09-21 14:14 <DIR> d-------- C:\Program Files\CCleaner
    2008-09-21 14:03 . 2008-09-21 14:06 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
    2008-09-21 14:03 . 2008-09-23 21:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-09-21 13:56 . 2004-03-15 15:59 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Sonic
    2008-09-21 13:56 . 2004-03-15 16:01 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Jasc Software Inc
    2008-09-21 13:56 . 2008-09-21 14:38 <DIR> d-------- C:\Documents and Settings\Administrator
    2008-09-21 12:58 . 2008-09-21 12:58 119,808 --a------ C:\WINDOWS\SYSTEM32\sosoxx.dll
  6. 2008-09-26, 02:17 #6
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default combofix log part 3

    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-09-24 01:38 --------- d-----w C:\Program Files\Canon
    2008-09-24 01:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\SupportSoft
    2008-09-24 01:33 --------- d-----w C:\Program Files\Dell Support Center
    2008-09-24 01:31 --------- d-----w C:\Program Files\Common Files\supportsoft
    2008-09-24 01:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-09-24 01:19 --------- d-----w C:\Program Files\Dell
    2008-09-20 22:47 --------- d-----w C:\Documents and Settings\Cindy\Application Data\MSN6
    2008-09-20 22:16 --------- d-----w C:\Documents and Settings\Steve\Application Data\MSN6
    2008-09-12 17:20 --------- d-----w C:\Program Files\McAfee
    2008-08-31 05:55 --------- d-----w C:\Program Files\iTunes
    2008-08-31 05:54 --------- d-----w C:\Program Files\iPod
    2008-08-31 05:50 --------- d-----w C:\Program Files\QuickTime
    2008-08-26 04:08 --------- d-----w C:\Program Files\MSN Messenger
    2008-08-19 16:51 --------- d-----w C:\Program Files\NOS
    2008-08-19 16:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\NOS
    2008-08-19 03:41 --------- d-----w C:\Program Files\Common Files\Adobe AIR
    2008-08-19 03:40 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-08-14 09:17 --------- d-----w C:\Program Files\GameSpy Arcade
    2008-08-14 08:47 --------- d-----w C:\Documents and Settings\Sarah\Application Data\MSN6
    2008-08-14 04:21 --------- d-----w C:\Program Files\Apple Software Update
    .

    ------- Sigcheck -------

    2003-07-16 13:47 20480 2f9b3fab88427319ae1c623da7657e85 C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
    2004-08-04 00:56 22016 b44a9ec9ffcc580e175b192a27f106fa C:\WINDOWS\ServicePackFiles\i386\svchost.exe
    2004-08-04 00:56 22016 b1172999c9889f1f7063d773109da2fb C:\WINDOWS\SYSTEM32\svchost.exe

    2005-05-25 12:07 359936 63fdfea54eb53de2d863ee454937ce1e C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
    2006-01-13 10:07 360448 5562cc0a47b2aef06d3417b733f3c195 C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys
    2006-04-20 05:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    2007-10-30 09:53 360832 64798ecfa43d78c7178375fcdd16d8c8 C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    2008-06-20 03:44 360960 744e57c99232201ae98c49168b918f48 C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    2008-06-20 04:51 361600 9aefa14bd6b182d61e3119fa5f436d3d C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    2008-06-20 04:59 361600 ad978a1b783b5719720cff204b666c8e C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    2003-07-16 13:47 332928 244a2f9816bc9b593957281ef577d976 C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
    2004-08-03 23:14 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys
    2005-05-25 12:04 359808 88763a98a4c26c409741b4aa162720c9 C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys
    2004-08-03 23:14 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
    2006-04-20 04:51 359808 1dbf125862891817f374f407626967f4 C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
    2007-10-30 10:20 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
    2004-08-03 23:14 359040 1745b00fc1141404b28f4b94f69a8871 C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
    2006-04-20 04:51 359808 1dbf125862891817f374f407626967f4 C:\WINDOWS\SoftwareDistribution\Download\0d3b5d19cc06db007bbe6584808bfa9e\backup\tcpip.sys
    2006-04-20 04:38 340480 b8158e2a6112c0a5ca67bc158fc70218 C:\WINDOWS\SoftwareDistribution\Download\556eb98436b65a8c1ffae674c83d197f\SP1QFE\tcpip.sys
    2006-04-20 04:51 359808 1dbf125862891817f374f407626967f4 C:\WINDOWS\SoftwareDistribution\Download\556eb98436b65a8c1ffae674c83d197f\SP2GDR\tcpip.sys
    2006-04-20 05:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 C:\WINDOWS\SoftwareDistribution\Download\556eb98436b65a8c1ffae674c83d197f\SP2QFE\tcpip.sys
    2008-06-20 03:45 360320 2a5554fc5b1e04e131230e3ce035c3f9 C:\WINDOWS\SoftwareDistribution\Download\ad744bdeedce85bf37a096f34577ff3a\sp2gdr\tcpip.sys
    2006-04-20 04:51 359808 021415ad071ef3944c27dc9597ed2214 C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip.sys
    2006-04-20 04:51 359808 021415ad071ef3944c27dc9597ed2214 C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys

    2004-08-04 00:56 1039872 3e72e8cddb0430b8da6717ab1f238480 C:\WINDOWS\explorer.exe
    2007-06-13 04:26 1040896 c47f62e3d79f33fd859eeafd4521d5e1 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
    2003-07-16 13:28 1011712 cabc6acc2d07f54e1438646615b21426 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
    2004-08-04 00:56 1039872 f23ea6bdeec01ab844aa9cfc31ba19d3 C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
    2004-08-04 00:56 1039872 0ffeb1097e917d3bd8a7d505e7294941 C:\WINDOWS\ServicePackFiles\i386\explorer.exe

    2003-07-16 13:26 20992 954470ebd89bc3e43f7e2d7434bbaeaf C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
    2004-08-04 00:56 23040 c574ee9ca8966e4e3d7547ebb59ea688 C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
    2004-08-04 00:56 23040 83b48f42a37030bb871fa1300a9f0af6 C:\WINDOWS\SYSTEM32\ctfmon.exe

    2005-06-10 17:17 65536 ff913e82962cbfd4f4dd7b628288a72f C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    2003-07-16 13:46 58880 b8790eb2d8c296e2186c6eab56f91a81 C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe
    2004-08-04 00:56 65536 7579e9061203ff730f554938850b43ae C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe
    2004-08-04 00:56 65536 3716cf3f78414231daa51e532b38f430 C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe
    2005-06-10 16:55 60928 4b2f0031e4c687f8f2088c84ed8c532c C:\WINDOWS\SoftwareDistribution\Download\0d3b5d19cc06db007bbe6584808bfa9e\backup\spoolsv.exe
    2005-06-10 16:55 60928 8129ec1fde55bf2764d0c71772703130 C:\WINDOWS\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp1qfe\spoolsv.exe
    2005-06-10 16:53 65536 0083f79e822bfac7876bf6220c4ecc0a C:\WINDOWS\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2gdr\spoolsv.exe
    2005-06-10 17:17 65536 ff913e82962cbfd4f4dd7b628288a72f C:\WINDOWS\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2qfe\spoolsv.exe
    2005-06-10 16:53 65536 0083f79e822bfac7876bf6220c4ecc0a C:\WINDOWS\SYSTEM32\spoolsv.exe

    2003-07-16 13:49 29696 eb1eac537a334ec8de64dca283ba1923 C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
    2004-08-04 00:56 32256 e5e057208f1120dfb7a451c1feafa22c C:\WINDOWS\ServicePackFiles\i386\userinit.exe
    2004-08-04 00:56 32256 8b369bcff0ac9d7cab3d1ca2217cb022 C:\WINDOWS\SYSTEM32\userinit.exe
    .
    ((((((((((((((((((((((((((((( snapshot@2008-09-22_20.38.59.34 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2004-11-30 22:46:38 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\spmsg.dll
    + 2004-11-30 21:46:38 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\spmsg.dll
    - 2004-12-01 04:22:42 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\spuninst.exe
    + 2004-12-01 03:22:42 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\spuninst.exe
    - 2004-12-01 04:22:40 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\update\spcustom.dll
    + 2004-12-01 03:22:40 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\update\spcustom.dll
    - 2004-11-30 22:46:40 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\update\update.exe
    + 2004-11-30 21:46:40 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB873333\update\update.exe
    - 2004-10-14 18:34:52 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    + 2004-10-14 17:34:52 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    - 2004-10-14 18:36:18 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    + 2004-10-14 17:36:18 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    - 2004-10-14 18:36:16 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    + 2004-10-14 17:36:16 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    - 2004-10-14 18:34:54 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    + 2004-10-14 17:34:54 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    - 2004-10-14 19:34:52 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    + 2004-10-14 18:34:52 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    - 2004-10-14 19:36:18 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    + 2004-10-14 18:36:18 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    - 2004-10-14 19:36:16 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    + 2004-10-14 18:36:16 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    - 2004-10-14 19:34:54 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    + 2004-10-14 18:34:54 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    - 2004-10-14 19:34:52 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    + 2004-10-14 18:34:46 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    - 2004-10-14 19:36:18 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    + 2004-10-14 18:36:07 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    - 2004-10-14 19:36:16 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    + 2004-10-14 18:36:06 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    - 2004-10-14 19:34:54 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    + 2004-10-14 18:34:48 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    - 2004-11-30 22:46:38 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    + 2004-10-14 18:34:46 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    - 2004-12-01 04:22:42 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    + 2004-10-14 18:36:07 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    - 2004-12-01 04:22:40 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    + 2004-10-14 18:36:06 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    - 2004-11-30 22:46:40 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    + 2004-10-14 18:34:48 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    - 2004-11-30 22:46:38 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    + 2004-10-14 18:34:46 7,168 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    - 2004-12-01 04:22:42 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    + 2004-10-14 18:36:07 177,664 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    - 2004-12-01 04:22:40 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    + 2004-10-14 18:36:06 21,504 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    - 2004-11-30 22:46:40 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    + 2004-10-14 18:21:58 662,528 -c--a-w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    - 2005-07-08 02:27:08 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    + 2005-07-08 02:27:06 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    - 2005-06-29 23:54:32 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    + 2005-06-29 23:54:30 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    - 2005-02-25 04:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll
    + 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll
    - 2005-02-25 04:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe
    + 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe
    - 2005-10-06 00:39:46 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\arpidfix.exe
    + 2005-10-05 23:39:46 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\arpidfix.exe
    - 2005-02-25 04:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll
    + 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll
    - 2005-02-25 04:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\update.exe
    + 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\update.exe
    - 2005-02-25 04:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll
    + 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    - 2005-06-29 23:54:32 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    + 2005-06-29 23:54:30 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    + 2005-07-13 01:08:08 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    + 2005-07-13 01:08:09 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    - 2005-09-09 23:26:26 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    + 2005-09-09 23:26:25 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    + 2005-07-13 01:08:08 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    + 2005-07-13 01:08:17 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB901190\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB901190\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB901190\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB901190\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    + 2005-10-12 23:12:25 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    + 2005-10-12 23:12:25 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    + 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    + 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    - 2005-02-25 03:35:06 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    + 2005-02-25 03:35:05 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    - 2005-02-25 03:35:06 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    - 2005-08-23 01:01:30 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    + 2005-08-23 01:01:28 38,400 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    - 2005-02-25 03:35:06 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    + 2005-02-25 03:35:05 22,240 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    - 2005-02-25 03:35:06 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    + 2005-02-25 03:35:05 718,048 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    - 2005-02-25 03:35:08 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c--a-w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    - 2006-05-14 08:48:18 180,736 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    + 2006-06-22 10:36:52 180,736 ----a-w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    - 2005-10-12 23:16:49 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    + 2005-10-12 23:12:25 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    - 2005-10-12 23:16:49 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    - 2005-10-12 23:16:49 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    + 2005-10-12 23:12:25 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    - 2005-10-12 23:16:51 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    + 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    - 2005-10-12 23:16:56 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    + 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB912919\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB912919\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB912919\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB912919\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll
    - 2005-10-12 23:12:26 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\spuninst.exe
    + 2006-01-19 19:29:21 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\spuninst.exe
    - 2005-10-12 23:12:25 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\update\spcustom.dll
    + 2006-01-19 19:29:20 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\update\spcustom.dll
    - 2005-10-12 23:12:29 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\update\update.exe
    + 2006-01-19 19:29:21 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\update\update.exe
    - 2005-10-12 23:12:34 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB921398\update\updspapi.dll
    - 2005-10-12 23:16:49 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll
    + 2005-10-12 23:12:25 14,048 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll
    - 2005-10-12 23:16:49 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe
    - 2005-10-12 23:16:49 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\update\spcustom.dll
    + 2005-10-12 23:12:25 22,752 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\update\spcustom.dll
    - 2005-10-12 23:16:51 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\update\update.exe
    + 2005-10-12 23:12:28 716,000 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\update\update.exe
    - 2005-10-12 23:16:56 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\update\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c--a-w C:\WINDOWS\$hf_mig$\KB923414\update\updspapi.dll
    - 2002-08-29 11:00:00 8,192 -c----w C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe
    + 2002-08-29 11:00:00 15,872 -c----w C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe
    - 2002-08-29 11:00:00 742,400 -c----w C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe
    + 2002-08-29 11:00:00 750,080 -c----w C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe
    - 2002-08-29 11:00:00 221,696 -c----w C:\WINDOWS\$NtUninstallKB842773$\qmgr.dll
    + 2003-07-16 20:42:27 221,696 -c----w C:\WINDOWS\$NtUninstallKB842773$\qmgr.dll
    - 2002-08-29 11:00:00 17,408 -c----w C:\WINDOWS\$NtUninstallKB842773$\qmgrprxy.dll
    + 2003-07-16 20:42:28 17,408 -c----w C:\WINDOWS\$NtUninstallKB842773$\qmgrprxy.dll
    - 2002-08-29 11:00:00 310,272 -c----w C:\WINDOWS\$NtUninstallKB842773$\winhttp.dll
    + 2003-07-16 20:51:36 310,272 -c----w C:\WINDOWS\$NtUninstallKB842773$\winhttp.dll
    - 2004-08-04 07:56:44 1,281,536 -c----w C:\WINDOWS\$NtUninstallKB873333$\ole32.dll
    + 2004-08-04 07:56:46 1,281,536 -c----w C:\WINDOWS\$NtUninstallKB873333$\ole32.dll
    - 2002-08-29 11:00:00 68,608 -c----w C:\WINDOWS\$NtUninstallKB873333$\olecli32.dll
    + 2003-07-16 20:40:36 68,608 -c----w C:\WINDOWS\$NtUninstallKB873333$\olecli32.dll
    - 2002-08-29 11:00:00 34,304 -c----w C:\WINDOWS\$NtUninstallKB873333$\olecnv32.dll
    + 2003-07-16 20:40:37 34,304 -c----w C:\WINDOWS\$NtUninstallKB873333$\olecnv32.dll
    - 2004-08-04 07:56:44 395,776 -c----w C:\WINDOWS\$NtUninstallKB873333$\rpcss.dll
    + 2004-08-04 07:56:46 395,776 -c----w C:\WINDOWS\$NtUninstallKB873333$\rpcss.dll
    + 2004-12-01 04:22:40 21,504 -c----w C:\WINDOWS\$NtUninstallKB873333$\spcustom.dll
    + 2004-11-30 22:46:38 7,168 -c----w C:\WINDOWS\$NtUninstallKB873333$\spmsg.dll
    + 2004-12-01 04:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB873333$\spuninst.exe
    - 2004-12-01 04:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
    + 2004-12-01 03:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
    + 2004-11-30 22:46:40 662,528 -c----w C:\WINDOWS\$NtUninstallKB873333$\update.exe
    - 2004-08-04 07:56:42 345,088 -c----w C:\WINDOWS\$NtUninstallKB873339$\hypertrm.dll
    + 2004-08-04 07:56:44 345,088 -c----w C:\WINDOWS\$NtUninstallKB873339$\hypertrm.dll
    + 2004-10-14 18:36:16 21,504 -c----w C:\WINDOWS\$NtUninstallKB873339$\spcustom.dll
    + 2004-10-14 18:34:52 7,168 -c----w C:\WINDOWS\$NtUninstallKB873339$\spmsg.dll
    + 2004-10-14 18:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB873339$\spuninst.exe
    - 2004-10-14 18:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
    + 2004-10-14 17:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
    + 2004-10-14 18:34:54 662,528 -c----w C:\WINDOWS\$NtUninstallKB873339$\update.exe
    - 2004-08-04 07:56:42 721,920 -c----w C:\WINDOWS\$NtUninstallKB885835$\lsasrv.dll
    + 2004-08-04 07:56:44 721,920 -c----w C:\WINDOWS\$NtUninstallKB885835$\lsasrv.dll
    + 2004-10-14 19:36:16 21,504 -c----w C:\WINDOWS\$NtUninstallKB885835$\spcustom.dll
    + 2004-10-14 19:34:52 7,168 -c----w C:\WINDOWS\$NtUninstallKB885835$\spmsg.dll
    + 2004-10-14 19:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB885835$\spuninst.exe
    - 2004-10-14 19:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
    + 2004-10-14 18:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
    + 2004-10-14 19:34:54 662,528 -c----w C:\WINDOWS\$NtUninstallKB885835$\update.exe
    + 2004-10-14 19:36:16 21,504 -c----w C:\WINDOWS\$NtUninstallKB885836$\spcustom.dll
    + 2004-10-14 19:34:52 7,168 -c----w C:\WINDOWS\$NtUninstallKB885836$\spmsg.dll
    + 2004-10-14 19:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB885836$\spuninst.exe
    - 2004-10-14 19:36:18 177,664 -c----w C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
    + 2004-10-14 18:36:07 177,664 -c----w C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
    + 2004-10-14 19:34:54 662,528 -c----w C:\WINDOWS\$NtUninstallKB885836$\update.exe
    + 2004-12-01 04:22:40 21,504 -c----w C:\WINDOWS\$NtUninstallKB888302$\spcustom.dll
    + 2004-11-30 22:46:38 7,168 -c----w C:\WINDOWS\$NtUninstallKB888302$\spmsg.dll
    + 2004-12-01 04:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB888302$\spuninst.exe
    - 2004-12-01 04:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
    + 2004-10-14 18:36:07 177,664 -c----w C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
    - 2004-08-04 07:56:45 96,768 -c----w C:\WINDOWS\$NtUninstallKB888302$\srvsvc.dll
    + 2004-08-04 07:56:46 96,768 -c----w C:\WINDOWS\$NtUninstallKB888302$\srvsvc.dll
    + 2004-11-30 22:46:40 662,528 -c----w C:\WINDOWS\$NtUninstallKB888302$\update.exe
    - 2004-08-04 07:56:41 58,880 -c----w C:\WINDOWS\$NtUninstallKB890046$\agentdpv.dll
    + 2004-08-04 07:56:42 58,880 -c----w C:\WINDOWS\$NtUninstallKB890046$\agentdpv.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB890046$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB890046$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB890046$\spuninst.exe
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB890046$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB890046$\updspapi.dll
    - 2004-08-04 07:56:41 56,832 -c----w C:\WINDOWS\$NtUninstallKB890859$\authz.dll
    + 2004-08-04 07:56:42 56,832 -c----w C:\WINDOWS\$NtUninstallKB890859$\authz.dll
    - 2004-08-04 05:58:58 2,056,832 -c----w C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe
    + 2004-08-04 05:59:00 2,056,832 -c----w C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe
    - 2004-08-04 06:19:59 2,180,992 -c----w C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe
    + 2004-08-04 06:20:00 2,180,992 -c----w C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe
    + 2005-02-25 02:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB890859$\spcustom.dll
    + 2005-02-25 02:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB890859$\spmsg.dll
    + 2005-02-25 02:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB890859$\spuninst.exe
    + 2005-02-25 02:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB890859$\update.exe
    + 2005-02-25 02:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB890859$\updspapi.dll
    - 2004-08-04 07:56:46 577,024 -c----w C:\WINDOWS\$NtUninstallKB890859$\user32.dll
    + 2004-08-04 07:56:48 577,024 -c----w C:\WINDOWS\$NtUninstallKB890859$\user32.dll
    - 2004-08-04 06:17:40 1,835,904 -c----w C:\WINDOWS\$NtUninstallKB890859$\win32k.sys
    + 2004-08-04 06:17:42 1,835,904 -c----w C:\WINDOWS\$NtUninstallKB890859$\win32k.sys
    - 2004-08-04 07:56:46 290,816 -c----w C:\WINDOWS\$NtUninstallKB890859$\winsrv.dll
    + 2004-08-04 07:56:48 290,816 -c----w C:\WINDOWS\$NtUninstallKB890859$\winsrv.dll
    + 2004-12-01 04:22:40 21,504 -c----w C:\WINDOWS\$NtUninstallKB891781$\spcustom.dll
    + 2004-11-30 22:46:38 7,168 -c----w C:\WINDOWS\$NtUninstallKB891781$\spmsg.dll
    + 2004-12-01 04:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB891781$\spuninst.exe
    - 2004-12-01 04:22:42 177,664 -c----w C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
    + 2004-10-14 18:36:07 177,664 -c----w C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
    + 2004-11-30 22:46:40 662,528 -c----w C:\WINDOWS\$NtUninstallKB891781$\update.exe
    + 2005-07-08 02:27:08 38,400 -c----w C:\WINDOWS\$NtUninstallKB893756$\arpidfix.exe
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB893756$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB893756$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB893756$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB893756$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB893756$\spuninst\updspapi.dll
    - 2004-08-04 07:56:46 246,272 -c----w C:\WINDOWS\$NtUninstallKB893756$\tapisrv.dll
    + 2004-08-04 07:56:48 246,272 -c----w C:\WINDOWS\$NtUninstallKB893756$\tapisrv.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB893756$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB893756$\updspapi.dll
    - 2004-08-04 07:56:50 18,432 -c----w C:\WINDOWS\$NtUninstallKB896358$\hh.exe
    + 2004-08-04 07:56:52 18,432 -c----w C:\WINDOWS\$NtUninstallKB896358$\hh.exe
    - 2004-08-04 07:56:42 38,912 -c----w C:\WINDOWS\$NtUninstallKB896358$\hhsetup.dll
    + 2004-08-04 07:56:44 38,912 -c----w C:\WINDOWS\$NtUninstallKB896358$\hhsetup.dll
    - 2004-08-04 07:56:42 143,872 -c----w C:\WINDOWS\$NtUninstallKB896358$\itircl.dll
    + 2004-08-04 07:56:44 143,872 -c----w C:\WINDOWS\$NtUninstallKB896358$\itircl.dll
    - 2004-08-04 07:56:42 134,144 -c----w C:\WINDOWS\$NtUninstallKB896358$\itss.dll
    + 2004-08-04 07:56:44 134,144 -c----w C:\WINDOWS\$NtUninstallKB896358$\itss.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB896358$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB896358$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896358$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896358$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB896358$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB896358$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896358$\updspapi.dll
    + 2005-06-29 23:54:32 38,400 -c----w C:\WINDOWS\$NtUninstallKB896423$\arpidfix.exe
  7. 2008-09-26, 02:18 #7
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default combofix log part 4

    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB896423$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB896423$\spmsg.dll
    - 2004-08-04 07:56:57 65,536 -c----w C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe
    + 2004-08-04 07:56:58 65,536 -c----w C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896423$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896423$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB896423$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB896423$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896423$\updspapi.dll
    + 2005-10-06 00:39:46 38,400 -c----w C:\WINDOWS\$NtUninstallKB896424$\arpidfix.exe
    + 2005-02-25 04:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB896424$\spcustom.dll
    + 2005-02-25 04:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB896424$\spmsg.dll
    + 2005-02-25 04:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896424$\spuninst.exe
    - 2005-02-25 04:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe
    - 2005-02-25 04:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896424$\spuninst\updspapi.dll
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896424$\spuninst\updspapi.dll
    + 2005-02-25 04:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB896424$\update.exe
    + 2005-02-25 04:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896424$\updspapi.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB896428$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB896428$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896428$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896428$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB896428$\spuninst\updspapi.dll
    - 2004-08-04 07:56:57 82,944 -c----w C:\WINDOWS\$NtUninstallKB896428$\telnet.exe
    + 2004-08-04 07:56:58 82,944 -c----w C:\WINDOWS\$NtUninstallKB896428$\telnet.exe
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB896428$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB896428$\updspapi.dll
    + 2005-06-29 23:54:32 38,400 -c----w C:\WINDOWS\$NtUninstallKB899587$\arpidfix.exe
    - 2004-08-04 07:56:42 294,400 -c----w C:\WINDOWS\$NtUninstallKB899587$\kerberos.dll
    + 2004-08-04 07:56:44 294,400 -c----w C:\WINDOWS\$NtUninstallKB899587$\kerberos.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB899587$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB899587$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB899587$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB899587$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB899587$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB899587$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB899587$\updspapi.dll
    + 2005-06-29 23:54:32 38,400 -c----w C:\WINDOWS\$NtUninstallKB899591$\arpidfix.exe
    - 2004-08-04 08:01:08 139,400 -c----w C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys
    + 2004-08-04 08:01:10 139,400 -c----w C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB899591$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB899591$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB899591$\spuninst.exe
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB899591$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB899591$\updspapi.dll
    + 2005-09-27 00:36:24 38,400 -c----w C:\WINDOWS\$NtUninstallKB900725$\arpidfix.exe
    - 2004-08-04 07:56:42 18,944 -c----w C:\WINDOWS\$NtUninstallKB900725$\linkinfo.dll
    + 2004-08-04 07:56:44 18,944 -c----w C:\WINDOWS\$NtUninstallKB900725$\linkinfo.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB900725$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB900725$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB900725$\spuninst.exe
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB900725$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB900725$\updspapi.dll
    + 2005-09-09 23:26:26 38,400 -c----w C:\WINDOWS\$NtUninstallKB901017$\arpidfix.exe
    - 2004-08-04 07:56:41 2,067,968 -c----w C:\WINDOWS\$NtUninstallKB901017$\cdosys.dll
    + 2004-08-04 07:56:42 2,067,968 -c----w C:\WINDOWS\$NtUninstallKB901017$\cdosys.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB901017$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB901017$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB901017$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe
    + 2005-07-13 01:08:09 209,632 -c----w C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB901017$\spuninst\updspapi.dll
    + 2005-07-13 01:08:17 371,936 -c----w C:\WINDOWS\$NtUninstallKB901017$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB901017$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB901017$\updspapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB901190$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB901190$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB901190$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB901190$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB901190$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB901190$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB901190$\updspapi.dll
    - 2004-08-04 07:56:42 253,952 -c----w C:\WINDOWS\$NtUninstallKB901214$\icm32.dll
    + 2004-08-04 07:56:44 253,952 -c----w C:\WINDOWS\$NtUninstallKB901214$\icm32.dll
    - 2004-08-04 07:56:42 73,728 -c----w C:\WINDOWS\$NtUninstallKB901214$\mscms.dll
    + 2004-08-04 07:56:44 73,728 -c----w C:\WINDOWS\$NtUninstallKB901214$\mscms.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB901214$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB901214$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB901214$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB901214$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB901214$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB901214$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB901214$\updspapi.dll
    - 2004-08-04 07:56:44 1,287,680 -c----w C:\WINDOWS\$NtUninstallKB904706$\quartz.dll
    + 2004-08-04 07:56:46 1,287,680 -c----w C:\WINDOWS\$NtUninstallKB904706$\quartz.dll
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB904706$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB904706$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB904706$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB904706$\spuninst\updspapi.dll
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB904706$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB904706$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB904706$\updspapi.dll
    + 2005-08-19 23:50:31 38,400 -c----w C:\WINDOWS\$NtUninstallKB905414$\arpidfix.exe
    - 2004-08-04 07:56:44 198,144 -c----w C:\WINDOWS\$NtUninstallKB905414$\netman.dll
    + 2004-08-04 07:56:46 198,144 -c----w C:\WINDOWS\$NtUninstallKB905414$\netman.dll
    + 2005-02-25 03:35:05 22,240 -c----w C:\WINDOWS\$NtUninstallKB905414$\spcustom.dll
    + 2005-02-25 03:35:05 14,048 -c----w C:\WINDOWS\$NtUninstallKB905414$\spmsg.dll
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB905414$\spuninst.exe
    + 2005-02-25 03:35:05 718,048 -c----w C:\WINDOWS\$NtUninstallKB905414$\update.exe
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB905414$\updspapi.dll
    + 2005-08-23 01:01:30 38,400 -c----w C:\WINDOWS\$NtUninstallKB905749$\arpidfix.exe
    + 2005-02-25 03:35:06 22,240 -c----w C:\WINDOWS\$NtUninstallKB905749$\spcustom.dll
    + 2005-02-25 03:35:06 14,048 -c----w C:\WINDOWS\$NtUninstallKB905749$\spmsg.dll
    + 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB905749$\spuninst.exe
    - 2005-02-25 03:35:06 209,632 -c----w C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe
    + 2005-02-25 03:35:05 209,632 -c----w C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe
    - 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB905749$\spuninst\updspapi.dll
    + 2005-02-25 03:35:06 371,936 -c----w C:\WINDOWS\$NtUninstallKB905749$\spuninst\updspapi.dll
    - 2005-06-30 02:02:39 118,272 -c----w C:\WINDOWS\$NtUninstallKB905749$\umpnpmgr.dll
    + 2004-08-04 07:56:48 118,272 -c----w C:\WINDOWS\$NtUninstallKB905749$\umpnpmgr.dll
    + 2005-02-25 03:35:06 718,048 -c----w C:\WINDOWS\$NtUninstallKB905749$\update.exe
    + 2005-02-25 03:35:08 371,936 -c----w C:\WINDOWS\$NtUninstallKB905749$\updspapi.dll
    - 2002-08-29 11:00:00 79,360 -c----w C:\WINDOWS\$NtUninstallKB908519$\fontsub.dll
    + 2003-07-16 20:28:28 79,360 -c----w C:\WINDOWS\$NtUninstallKB908519$\fontsub.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB908519$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB908519$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB908519$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB908519$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB908519$\spuninst\updspapi.dll
    - 2004-08-04 07:56:46 210,432 -c----w C:\WINDOWS\$NtUninstallKB908519$\t2embed.dll
    + 2004-08-04 07:56:48 210,432 -c----w C:\WINDOWS\$NtUninstallKB908519$\t2embed.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB908519$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB908519$\updspapi.dll
    - 2005-09-23 03:05:29 8,450,560 -c----w C:\WINDOWS\$NtUninstallKB908531$\shell32.dll
    + 2004-08-04 07:56:46 8,384,000 -c----w C:\WINDOWS\$NtUninstallKB908531$\shell32.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB908531$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB908531$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB908531$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB908531$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB908531$\updspapi.dll
    + 2006-03-17 01:05:35 36,352 -c----w C:\WINDOWS\$NtUninstallKB908531$\verclsid.exe
    - 2004-08-04 07:56:42 1,082,368 -c----w C:\WINDOWS\$NtUninstallKB910437$\esent.dll
    + 2004-08-04 07:56:44 1,082,368 -c----w C:\WINDOWS\$NtUninstallKB910437$\esent.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB910437$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB910437$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB910437$\spuninst.exe
    + 2005-10-12 23:12:28 716,000 -c----w C:\WINDOWS\$NtUninstallKB910437$\update.exe
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB910437$\updspapi.dll
    - 2004-08-04 07:56:44 174,080 -c----w C:\WINDOWS\$NtUninstallKB911280$\rasmans.dll
    + 2004-08-04 07:56:46 174,080 -c----w C:\WINDOWS\$NtUninstallKB911280$\rasmans.dll
    + 2005-10-12 23:16:49 22,752 -c----w C:\WINDOWS\$NtUninstallKB911280$\spcustom.dll
    + 2005-10-12 23:16:49 14,048 -c----w C:\WINDOWS\$NtUninstallKB911280$\spmsg.dll
    + 2005-10-12 23:16:49 213,216 -c----w C:\WINDOWS\$NtUninstallKB911280$\spuninst.exe
    - 2005-10-12 23:16:49 213,216 -c----w C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe
    - 2005-10-12 23:16:56 371,424 -c----w C:\WINDOWS\$NtUninstallKB911280$\spuninst\updspapi.dll
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB911280$\spuninst\updspapi.dll
    + 2005-10-12 23:16:51 716,000 -c----w C:\WINDOWS\$NtUninstallKB911280$\update.exe
    + 2005-10-12 23:16:56 371,424 -c----w C:\WINDOWS\$NtUninstallKB911280$\updspapi.dll
    - 2004-08-04 07:56:42 143,360 -c----w C:\WINDOWS\$NtUninstallKB911562$\msadco.dll
    + 2004-08-04 07:56:44 143,360 -c----w C:\WINDOWS\$NtUninstallKB911562$\msadco.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB911562$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB911562$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB911562$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB911562$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB911562$\updspapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB911927$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB911927$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB911927$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB911927$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB911927$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB911927$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB911927$\updspapi.dll
    - 2004-08-04 07:56:46 67,584 -c----w C:\WINDOWS\$NtUninstallKB911927$\webclnt.dll
    + 2004-08-04 07:56:48 67,584 -c----w C:\WINDOWS\$NtUninstallKB911927$\webclnt.dll
    - 2005-10-06 03:09:36 280,064 -c----w C:\WINDOWS\$NtUninstallKB912919$\gdi32.dll
    + 2004-08-04 07:56:44 278,016 -c----w C:\WINDOWS\$NtUninstallKB912919$\gdi32.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB912919$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB912919$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB912919$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB912919$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB912919$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB912919$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB912919$\updspapi.dll
    - 2005-07-26 04:39:46 425,472 -c----w C:\WINDOWS\$NtUninstallKB913580$\msdtcprx.dll
    + 2004-08-04 07:56:44 425,472 -c----w C:\WINDOWS\$NtUninstallKB913580$\msdtcprx.dll
    - 2005-07-26 04:39:47 945,152 -c----w C:\WINDOWS\$NtUninstallKB913580$\msdtctm.dll
    + 2004-08-04 07:56:44 949,248 -c----w C:\WINDOWS\$NtUninstallKB913580$\msdtctm.dll
    - 2005-07-26 04:39:47 161,280 -c----w C:\WINDOWS\$NtUninstallKB913580$\msdtcuiu.dll
    + 2004-08-04 07:56:44 161,280 -c----w C:\WINDOWS\$NtUninstallKB913580$\msdtcuiu.dll
    - 2005-07-26 04:39:47 66,560 -c----w C:\WINDOWS\$NtUninstallKB913580$\mtxclu.dll
    + 2004-08-04 07:56:46 66,560 -c----w C:\WINDOWS\$NtUninstallKB913580$\mtxclu.dll
    - 2005-07-26 04:39:47 91,136 -c----w C:\WINDOWS\$NtUninstallKB913580$\mtxoci.dll
    + 2004-08-04 07:56:46 90,112 -c----w C:\WINDOWS\$NtUninstallKB913580$\mtxoci.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB913580$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB913580$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB913580$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB913580$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB913580$\updspapi.dll
    - 2005-07-26 04:39:49 11,776 -c----w C:\WINDOWS\$NtUninstallKB913580$\xolehlp.dll
    + 2004-08-04 07:56:48 11,776 -c----w C:\WINDOWS\$NtUninstallKB913580$\xolehlp.dll
    - 2004-08-04 07:56:42 111,104 -c----w C:\WINDOWS\$NtUninstallKB914388$\dhcpcsvc.dll
    + 2004-08-04 07:56:44 111,104 -c----w C:\WINDOWS\$NtUninstallKB914388$\dhcpcsvc.dll
    - 2004-08-04 07:56:42 94,720 -c----w C:\WINDOWS\$NtUninstallKB914388$\iphlpapi.dll
    + 2004-08-04 07:56:44 94,720 -c----w C:\WINDOWS\$NtUninstallKB914388$\iphlpapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB914388$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB914388$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB914388$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB914388$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB914388$\updspapi.dll
    - 2005-01-19 04:26:52 451,584 -c----w C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys
    + 2004-08-04 06:15:18 451,456 -c----w C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys
    - 2004-10-28 01:13:58 174,592 -c----w C:\WINDOWS\$NtUninstallKB914389$\rdbss.sys
    + 2004-08-04 06:20:08 176,512 -c----w C:\WINDOWS\$NtUninstallKB914389$\rdbss.sys
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB914389$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB914389$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB914389$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB914389$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB914389$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB914389$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB914389$\updspapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB915865$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB915865$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB915865$\spuninst.exe
    + 2005-10-12 23:12:28 716,000 -c----w C:\WINDOWS\$NtUninstallKB915865$\update.exe
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB915865$\updspapi.dll
    + 2008-04-14 00:12:11 121,856 -c----w C:\WINDOWS\$NtUninstallKB915865$\xmllite.dll
    - 2004-08-04 07:56:42 983,552 -c----w C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll
    + 2004-08-04 07:56:44 983,552 -c----w C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB917422$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB917422$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB917422$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB917422$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB917422$\updspapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB917953$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB917953$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB917953$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB917953$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB917953$\spuninst\updspapi.dll
    - 2006-01-13 02:28:14 359,808 -c----w C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
    + 2004-08-04 06:14:42 359,040 -c----w C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB917953$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB917953$\updspapi.dll
    - 2002-08-29 11:00:00 200,064 -c----w C:\WINDOWS\$NtUninstallKB919007$\rmcast.sys
    + 2003-07-16 20:43:16 200,064 -c----w C:\WINDOWS\$NtUninstallKB919007$\rmcast.sys
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB919007$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB919007$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB919007$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB919007$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB919007$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB919007$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB919007$\updspapi.dll
    - 2004-11-16 21:17:00 68,096 -c----w C:\WINDOWS\$NtUninstallKB920670$\hlink.dll
    + 2003-07-16 20:29:27 77,850 -c----w C:\WINDOWS\$NtUninstallKB920670$\hlink.dll
    + 2005-10-12 23:16:49 22,752 -c----w C:\WINDOWS\$NtUninstallKB920670$\spcustom.dll
    + 2005-10-12 23:16:49 14,048 -c----w C:\WINDOWS\$NtUninstallKB920670$\spmsg.dll
    + 2005-10-12 23:16:49 213,216 -c----w C:\WINDOWS\$NtUninstallKB920670$\spuninst.exe
    + 2005-10-12 23:16:51 716,000 -c----w C:\WINDOWS\$NtUninstallKB920670$\update.exe
    + 2005-10-12 23:16:56 371,424 -c----w C:\WINDOWS\$NtUninstallKB920670$\updspapi.dll
    - 2006-05-19 12:59:41 148,480 -c----w C:\WINDOWS\$NtUninstallKB920683$\dnsapi.dll
    + 2004-08-04 07:56:44 148,480 -c----w C:\WINDOWS\$NtUninstallKB920683$\dnsapi.dll
    - 2004-08-04 07:56:44 8,192 -c----w C:\WINDOWS\$NtUninstallKB920683$\rasadhlp.dll
    + 2004-08-04 07:56:46 8,192 -c----w C:\WINDOWS\$NtUninstallKB920683$\rasadhlp.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB920683$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB920683$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB920683$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB920683$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB920683$\updspapi.dll
    - 2004-08-04 07:56:41 69,120 -c----w C:\WINDOWS\$NtUninstallKB920685$\ciodm.dll
    + 2004-08-04 07:56:42 69,120 -c----w C:\WINDOWS\$NtUninstallKB920685$\ciodm.dll
    - 2004-08-04 07:56:44 1,435,648 -c----w C:\WINDOWS\$NtUninstallKB920685$\query.dll
    + 2004-08-04 07:56:46 1,435,648 -c----w C:\WINDOWS\$NtUninstallKB920685$\query.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB920685$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB920685$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB920685$\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB920685$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB920685$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB920685$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB920685$\updspapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB921398$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB921398$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB921398$\spuninst.exe
    - 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe
    + 2006-01-19 19:29:21 213,216 -c----w C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB921398$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB921398$\spuninst\updspapi.dll
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB921398$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB921398$\updspapi.dll
    - 2004-08-04 07:56:44 332,288 -c----w C:\WINDOWS\$NtUninstallKB921883$\netapi32.dll
    + 2004-08-04 07:56:46 332,288 -c----w C:\WINDOWS\$NtUninstallKB921883$\netapi32.dll
    + 2005-10-12 23:16:49 22,752 -c----w C:\WINDOWS\$NtUninstallKB921883$\spcustom.dll
    + 2005-10-12 23:16:49 14,048 -c----w C:\WINDOWS\$NtUninstallKB921883$\spmsg.dll
    + 2005-10-12 23:16:49 213,216 -c----w C:\WINDOWS\$NtUninstallKB921883$\spuninst.exe
    + 2005-10-12 23:16:51 716,000 -c----w C:\WINDOWS\$NtUninstallKB921883$\update.exe
    + 2005-10-12 23:16:56 371,424 -c----w C:\WINDOWS\$NtUninstallKB921883$\updspapi.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB922616$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB922616$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB922616$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB922616$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB922616$\updspapi.dll
    - 2004-08-04 07:56:41 611,328 -c----w C:\WINDOWS\$NtUninstallKB923191$\comctl32.dll
    + 2004-08-04 07:56:42 611,328 -c----w C:\WINDOWS\$NtUninstallKB923191$\comctl32.dll
    - 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB923191$\spuninst\updspapi.dll
    + 2006-01-19 19:29:21 371,424 -c----w C:\WINDOWS\$NtUninstallKB923191$\spuninst\updspapi.dll
    + 2005-10-12 23:16:49 22,752 -c----w C:\WINDOWS\$NtUninstallKB923414$\spcustom.dll
    + 2005-10-12 23:16:49 14,048 -c----w C:\WINDOWS\$NtUninstallKB923414$\spmsg.dll
    + 2005-10-12 23:16:49 213,216 -c----w C:\WINDOWS\$NtUninstallKB923414$\spuninst.exe
    - 2005-10-12 23:16:49 213,216 -c----w C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe
    - 2005-10-12 23:16:56 371,424 -c----w C:\WINDOWS\$NtUninstallKB923414$\spuninst\updspapi.dll
    + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB923414$\spuninst\updspapi.dll
    - 2006-04-21 06:12:27 332,800 -c----w C:\WINDOWS\$NtUninstallKB923414$\srv.sys
    + 2004-08-04 06:14:46 336,256 -c----w C:\WINDOWS\$NtUninstallKB923414$\srv.sys
    + 2005-10-12 23:16:51 716,000 -c----w C:\WINDOWS\$NtUninstallKB923414$\update.exe
    + 2005-10-12 23:16:56 371,424 -c----w C:\WINDOWS\$NtUninstallKB923414$\updspapi.dll
    - 2004-08-04 07:56:44 1,236,480 -c----w C:\WINDOWS\$NtUninstallKB924191$\msxml3.dll
    + 2004-08-04 07:56:46 1,236,480 -c----w C:\WINDOWS\$NtUninstallKB924191$\msxml3.dll
    + 2005-10-12 23:12:25 22,752 -c----w C:\WINDOWS\$NtUninstallKB924191$\spcustom.dll
    + 2005-10-12 23:12:25 14,048 -c----w C:\WINDOWS\$NtUninstallKB924191$\spmsg.dll
    + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB924191$\spuninst.exe
    + 2005-10-12 23:12:29 716,000 -c----w C:\WINDOWS\$NtUninstallKB924191$\update.exe
    + 2005-10-12 23:12:34 371,424 -c----w C:\WINDOWS\$NtUninstallKB924191$\updspapi.dll
    - 2003-07-16 20:23:46 1,818,624 ----a-w C:\WINDOWS\AppPatch\AcGenral.dll
    + 2004-08-04 07:56:42 1,852,416 ----a-w C:\WINDOWS\AppPatch\acgenral.dll
    - 2003-07-16 20:23:46 406,528 ----a-w C:\WINDOWS\AppPatch\AcLayers.dll
    + 2004-08-04 07:56:42 450,048 ----a-w C:\WINDOWS\AppPatch\aclayers.dll
    - 2003-07-16 20:23:46 125,440 ----a-w C:\WINDOWS\AppPatch\AcLua.dll
    + 2004-08-04 07:56:42 137,728 ----a-w C:\WINDOWS\AppPatch\aclua.dll
    - 2003-07-16 20:23:47 219,136 ----a-w C:\WINDOWS\AppPatch\AcSpecfc.dll
    + 2004-08-04 07:56:42 244,736 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
    - 2003-07-16 20:23:51 107,520 ----a-w C:\WINDOWS\AppPatch\AcXtrnal.dll
    + 2004-08-04 07:56:42 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.dll
    - 2003-06-02 11:00:28 65,536 ----a-w C:\WINDOWS\BCMSMD2K.exe
    + 2003-08-29 11:59:22 65,536 ----a-w C:\WINDOWS\BCMSMD2K.exe
    - 2003-06-02 11:00:30 131,072 ----a-w C:\WINDOWS\BCMSMMSG.exe
    + 2003-08-29 11:59:24 131,072 ----a-w C:\WINDOWS\BCMSMMSG.exe
    - 2003-06-02 11:00:30 155,648 ----a-w C:\WINDOWS\BCMSMU.exe
    + 2003-08-29 11:59:24 159,744 ----a-w C:\WINDOWS\BCMSMU.exe
    - 2002-07-26 01:13:12 196,608 -c--a-w C:\WINDOWS\Downloaded Program Files\dwusplay.exe
    + 2002-07-26 01:13:12 204,800 -c--a-w C:\WINDOWS\Downloaded Program Files\dwusplay.exe
    + 2006-05-05 09:41:45 453,120 ------w C:\WINDOWS\Driver Cache\i386\mrxsmb.sys
    + 2005-03-02 00:57:44 2,135,552 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
    + 2005-03-02 00:34:40 2,056,832 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
    + 2005-03-02 00:34:42 2,015,232 ------w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
    + 2005-03-02 00:59:53 2,179,328 ------w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
    - 2005-10-21 03:02:28 174,592 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
    + 2005-10-21 03:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
    - 2005-10-21 03:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
    + 2005-10-21 03:02:28 174,592 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
    - 2001-06-11 23:19:04 233,472 -c--a-w C:\WINDOWS\Help\SBSI\Training\ounins32_s.exe
    + 2001-06-11 23:19:04 241,664 -c--a-w C:\WINDOWS\Help\SBSI\Training\ounins32_s.exe
    - 2001-11-07 18:28:32 49,152 -c----w C:\WINDOWS\Help\SBSI\Training\usersid.exe
    + 2001-11-07 18:28:32 61,000 -c----w C:\WINDOWS\Help\SBSI\Training\usersid.exe
    - 2003-07-16 20:45:35 32,256 ----a-w C:\WINDOWS\Help\sniffpol.dll
    + 2004-08-04 07:56:46 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
    - 2003-07-16 20:46:47 30,720 ----a-w C:\WINDOWS\Help\sstub.dll
    + 2004-08-04 07:56:46 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
    - 2003-07-16 20:48:33 262,656 ----a-w C:\WINDOWS\Help\tshoot.dll
    + 2004-08-04 07:56:48 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
    - 2003-07-16 20:29:21 18,432 ----a-w C:\WINDOWS\hh.exe
    + 2005-05-26 23:22:01 18,432 ----a-w C:\WINDOWS\hh.exe
    - 2004-08-04 07:56:41 61,440 -c--a-w C:\WINDOWS\ie7\admparse.dll
    + 2004-08-04 07:56:42 61,440 -c--a-w C:\WINDOWS\ie7\admparse.dll
    - 2004-08-04 07:56:41 99,840 -c--a-w C:\WINDOWS\ie7\advpack.dll
    + 2004-08-04 07:56:42 99,840 -c--a-w C:\WINDOWS\ie7\advpack.dll
    + 2004-08-04 07:56:42 1,016,832 -c--a-w C:\WINDOWS\ie7\browseui.dll
    - 2004-08-04 07:56:41 35,328 -c--a-w C:\WINDOWS\ie7\corpol.dll
    + 2004-08-04 07:56:42 35,328 -c--a-w C:\WINDOWS\ie7\corpol.dll
    - 2004-08-04 07:56:41 28,672 -c--a-w C:\WINDOWS\ie7\custsat.dll
    + 2006-11-08 05:03:36 33,792 -c--a-w C:\WINDOWS\ie7\custsat.dll
    - 2006-10-23 15:17:52 357,888 -c--a-w C:\WINDOWS\ie7\dxtmsft.dll
    + 2004-08-04 07:56:44 357,888 -c--a-w C:\WINDOWS\ie7\dxtmsft.dll
    - 2006-10-23 15:17:52 205,312 -c--a-w C:\WINDOWS\ie7\dxtrans.dll
    + 2004-08-04 07:56:44 201,728 -c--a-w C:\WINDOWS\ie7\dxtrans.dll
    - 2004-08-04 07:56:42 38,912 -c--a-w C:\WINDOWS\ie7\hmmapi.dll
    + 2004-08-04 07:56:44 38,912 -c--a-w C:\WINDOWS\ie7\hmmapi.dll
    - 2004-08-04 07:56:50 34,304 -c--a-w C:\WINDOWS\ie7\ie4uinit.exe
    + 2004-08-04 07:56:52 41,984 -c--a-w C:\WINDOWS\ie7\ie4uinit.exe
    - 2004-08-04 07:56:42 139,264 -c--a-w C:\WINDOWS\ie7\ieakeng.dll
    + 2004-08-04 07:56:44 139,264 -c--a-w C:\WINDOWS\ie7\ieakeng.dll
    - 2004-08-04 07:56:42 216,576 -c--a-w C:\WINDOWS\ie7\ieaksie.dll
    + 2004-08-04 07:56:44 216,576 -c--a-w C:\WINDOWS\ie7\ieaksie.dll
    - 2002-08-29 11:00:00 221,184 -c--a-w C:\WINDOWS\ie7\ieakui.dll
    + 2003-07-16 20:30:08 221,184 -c--a-w C:\WINDOWS\ie7\ieakui.dll
    - 2004-08-04 07:56:42 323,584 -c--a-w C:\WINDOWS\ie7\iedkcs32.dll
    + 2004-08-04 07:56:44 323,584 -c--a-w C:\WINDOWS\ie7\iedkcs32.dll
    - 2006-10-23 11:00:41 18,432 -c--a-w C:\WINDOWS\ie7\iedw.exe
    + 2006-10-17 20:04:50 76,800 -c--a-w C:\WINDOWS\ie7\iedw.exe
    - 2006-10-23 15:17:52 251,392 -c--a-w C:\WINDOWS\ie7\iepeers.dll
    + 2004-08-04 07:56:44 249,344 -c--a-w C:\WINDOWS\ie7\iepeers.dll
    + 2006-11-08 05:03:36 287,744 -c--a-w C:\WINDOWS\ie7\ieproxy.dll
    - 2004-08-04 07:56:42 48,640 -c--a-w C:\WINDOWS\ie7\iernonce.dll
    + 2004-08-04 07:56:44 48,640 -c--a-w C:\WINDOWS\ie7\iernonce.dll
    - 2004-08-04 07:56:42 62,976 -c--a-w C:\WINDOWS\ie7\iesetup.dll
    + 2004-08-04 07:56:44 62,976 -c--a-w C:\WINDOWS\ie7\iesetup.dll
    + 2006-11-08 05:03:36 180,736 -c--a-w C:\WINDOWS\ie7\ieui.dll
    - 2004-08-04 07:56:50 93,184 -c--a-w C:\WINDOWS\ie7\iexplore.exe
    + 2004-08-04 07:56:52 100,864 -c--a-w C:\WINDOWS\ie7\iexplore.exe
    - 2004-08-04 07:56:42 35,840 -c--a-w C:\WINDOWS\ie7\imgutil.dll
    + 2004-08-04 07:56:44 35,840 -c--a-w C:\WINDOWS\ie7\imgutil.dll
    - 2006-10-23 15:17:52 96,256 -c--a-w C:\WINDOWS\ie7\inseng.dll
    + 2004-08-04 07:56:44 96,256 -c--a-w C:\WINDOWS\ie7\inseng.dll
    - 2006-05-18 05:24:25 450,560 -c--a-w C:\WINDOWS\ie7\jscript.dll
    + 2004-08-04 07:56:44 450,560 -c--a-w C:\WINDOWS\ie7\jscript.dll
    - 2006-10-23 15:17:52 16,384 -c--a-w C:\WINDOWS\ie7\jsproxy.dll
    + 2004-08-04 07:56:44 15,872 -c--a-w C:\WINDOWS\ie7\jsproxy.dll
    - 2004-08-04 07:56:42 22,016 -c--a-w C:\WINDOWS\ie7\licmgr10.dll
    + 2004-08-04 07:56:44 22,016 -c--a-w C:\WINDOWS\ie7\licmgr10.dll
    + 2006-10-17 19:58:32 19,968 -c--a-w C:\WINDOWS\ie7\msfeedssync.exe
    - 2004-08-04 07:56:53 29,184 -c--a-w C:\WINDOWS\ie7\mshta.exe
    + 2004-08-04 07:56:54 36,864 -c--a-w C:\WINDOWS\ie7\mshta.exe
    - 2006-10-23 15:17:52 3,055,104 -c--a-w C:\WINDOWS\ie7\mshtml.dll
    + 2004-08-04 07:56:44 3,003,392 -c--a-w C:\WINDOWS\ie7\mshtml.dll
    - 2006-10-23 15:17:52 448,512 -c--a-w C:\WINDOWS\ie7\mshtmled.dll
    + 2004-08-04 07:56:44 448,512 -c--a-w C:\WINDOWS\ie7\mshtmled.dll
    - 2004-08-04 07:56:14 56,832 -c--a-w C:\WINDOWS\ie7\mshtmler.dll
    + 2004-08-04 07:56:16 56,832 -c--a-w C:\WINDOWS\ie7\mshtmler.dll
    - 2002-08-29 11:00:00 146,432 -c--a-w C:\WINDOWS\ie7\msls31.dll
    + 2003-07-16 20:36:08 146,432 -c--a-w C:\WINDOWS\ie7\msls31.dll
    - 2006-10-23 15:17:52 146,432 -c--a-w C:\WINDOWS\ie7\msrating.dll
    + 2004-08-04 07:56:44 146,432 -c--a-w C:\WINDOWS\ie7\msrating.dll
    - 2006-10-23 15:17:52 532,480 -c--a-w C:\WINDOWS\ie7\mstime.dll
    + 2004-08-04 07:56:44 530,432 -c--a-w C:\WINDOWS\ie7\mstime.dll
    - 2004-08-04 07:56:44 96,256 -c--a-w C:\WINDOWS\ie7\occache.dll
    + 2004-08-04 07:56:46 96,256 -c--a-w C:\WINDOWS\ie7\occache.dll
    - 2006-10-23 15:17:52 39,424 -c--a-w C:\WINDOWS\ie7\pngfilt.dll
    + 2004-08-04 07:56:46 39,424 -c--a-w C:\WINDOWS\ie7\pngfilt.dll
    + 2004-08-04 07:56:46 1,483,264 -c--a-w C:\WINDOWS\ie7\shdocvw.dll
    + 2004-08-04 07:56:46 473,600 -c--a-w C:\WINDOWS\ie7\shlwapi.dll
    - 2006-11-08 05:04:18 31,856 -c--a-w C:\WINDOWS\ie7\spuninst\iecustom.dll
    + 2007-08-14 01:54:42 32,960 -c--a-w C:\WINDOWS\ie7\spuninst\iecustom.dll
    - 2006-11-08 05:01:06 66,048 -c--a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe
    + 2007-08-14 01:52:06 73,728 -c--a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe
    - 2004-08-04 07:56:46 37,888 -c--a-w C:\WINDOWS\ie7\url.dll
    + 2004-08-04 07:56:48 37,888 -c--a-w C:\WINDOWS\ie7\url.dll
    - 2006-10-23 15:17:53 613,888 -c--a-w C:\WINDOWS\ie7\urlmon.dll
    + 2004-08-04 07:56:48 601,088 -c--a-w C:\WINDOWS\ie7\urlmon.dll
    - 2004-08-04 07:56:46 417,792 -c--a-w C:\WINDOWS\ie7\vbscript.dll
    + 2004-08-04 07:56:48 417,792 -c--a-w C:\WINDOWS\ie7\vbscript.dll
    - 2006-12-19 18:08:07 852,480 -c--a-w C:\WINDOWS\ie7\vgx.dll
    + 2004-08-04 07:56:48 848,384 -c--a-w C:\WINDOWS\ie7\vgx.dll
    - 2004-08-04 07:56:46 276,480 -c--a-w C:\WINDOWS\ie7\webcheck.dll
    + 2004-08-04 07:56:48 276,480 -c--a-w C:\WINDOWS\ie7\webcheck.dll
    + 2006-10-17 20:05:58 214,016 -c--a-w C:\WINDOWS\ie7\winfxdocobj.exe
    - 2006-10-23 15:17:53 658,944 -c--a-w C:\WINDOWS\ie7\wininet.dll
    + 2004-08-04 07:56:48 656,384 -c--a-w C:\WINDOWS\ie7\wininet.dll
    - 2006-11-07 11:26:28 54,784 -c----w C:\WINDOWS\ie7updates\KB928090-IE7\ie4uinit.exe
    + 2006-11-07 11:26:28 62,464 -c----w C:\WINDOWS\ie7updates\KB928090-IE7\ie4uinit.exe
    - 2006-11-07 11:26:32 13,312 -c----w C:\WINDOWS\ie7updates\KB928090-IE7\ieudinit.exe
    + 2006-11-07 11:26:32 20,992 -c----w C:\WINDOWS\ie7updates\KB928090-IE7\ieudinit.exe
    - 2006-10-17 20:04:40 622,080 -c----w C:\WINDOWS\ie7updates\KB928090-IE7\iexplore.exe
    + 2006-10-17 20:04:40 629,760 -c----w C:\WINDOWS\ie7updates\KB928090-IE7\iexplore.exe
    - 2007-01-09 02:08:14 56,832 -c----w C:\WINDOWS\ie7updates\KB931768-IE7\ie4uinit.exe
    + 2007-01-09 02:08:14 64,512 -c----w C:\WINDOWS\ie7updates\KB931768-IE7\ie4uinit.exe
    - 2007-01-09 02:08:10 13,824 -c----w C:\WINDOWS\ie7updates\KB931768-IE7\ieudinit.exe
    + 2007-01-09 02:08:10 21,504 -c----w C:\WINDOWS\ie7updates\KB931768-IE7\ieudinit.exe
    - 2007-01-09 02:08:42 623,616 -c----w C:\WINDOWS\ie7updates\KB931768-IE7\iexplore.exe
    + 2007-01-09 02:08:42 631,296 -c----w C:\WINDOWS\ie7updates\KB931768-IE7\iexplore.exe
    - 2007-03-07 08:28:17 56,832 -c----w C:\WINDOWS\ie7updates\KB933566-IE7\ie4uinit.exe
    + 2007-03-07 08:28:17 64,512 -c----w C:\WINDOWS\ie7updates\KB933566-IE7\ie4uinit.exe
    - 2007-02-27 08:20:47 13,824 -c----w C:\WINDOWS\ie7updates\KB933566-IE7\ieudinit.exe
    + 2007-02-27 08:20:47 21,504 -c----w C:\WINDOWS\ie7updates\KB933566-IE7\ieudinit.exe
    - 2007-02-21 08:00:58 623,616 -c----w C:\WINDOWS\ie7updates\KB933566-IE7\iexplore.exe
    + 2007-02-21 08:00:58 631,296 -c----w C:\WINDOWS\ie7updates\KB933566-IE7\iexplore.exe
    - 2007-04-24 14:26:20 56,832 -c----w C:\WINDOWS\ie7updates\KB937143-IE7\ie4uinit.exe
    + 2007-04-24 14:26:20 64,512 -c----w C:\WINDOWS\ie7updates\KB937143-IE7\ie4uinit.exe
    - 2007-04-24 14:26:20 13,824 -c----w C:\WINDOWS\ie7updates\KB937143-IE7\ieudinit.exe
    + 2007-04-24 14:26:20 21,504 -c----w C:\WINDOWS\ie7updates\KB937143-IE7\ieudinit.exe
    - 2007-04-24 14:26:26 625,152 -c----w C:\WINDOWS\ie7updates\KB937143-IE7\iexplore.exe
    + 2007-04-24 14:26:26 632,832 -c----w C:\WINDOWS\ie7updates\KB937143-IE7\iexplore.exe
    - 2007-06-27 08:27:04 63,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ie4uinit.exe
    + 2007-06-27 08:27:04 71,168 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ie4uinit.exe
    - 2007-06-27 08:27:05 13,824 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieudinit.exe
    + 2007-06-27 08:27:05 21,504 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieudinit.exe
    - 2007-06-27 08:27:30 625,152 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe
    + 2007-06-27 08:27:30 632,832 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe
    - 2007-08-17 10:20:54 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
    + 2007-08-17 10:20:54 71,168 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
    - 2007-08-17 10:20:54 13,824 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
    + 2007-08-17 10:20:54 21,504 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
    - 2007-08-17 10:21:21 625,152 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
    + 2007-08-17 10:21:21 632,832 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
    - 2007-10-10 10:59:40 70,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
    + 2007-10-10 10:59:40 78,336 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
    - 2007-10-10 10:59:40 13,824 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
    + 2007-10-10 10:59:40 21,504 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
    - 2007-10-10 10:59:52 625,152 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
    + 2007-10-10 10:59:52 632,832 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
    - 2007-12-06 11:00:57 70,656 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-12-06 11:00:57 78,336 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
    - 2007-12-06 11:00:58 13,824 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
    + 2007-12-06 11:00:58 21,504 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
    - 2007-12-06 11:01:25 625,664 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-12-06 11:01:25 633,344 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
    - 2008-02-29 08:55:23 70,656 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
    + 2008-02-29 08:55:23 78,336 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
    - 2008-02-22 10:00:51 13,824 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
    + 2008-02-22 10:00:51 21,504 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
    - 2008-02-29 08:55:46 625,664 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
    + 2008-02-29 08:55:46 633,344 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
    - 2008-04-22 07:39:58 70,656 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-22 07:39:58 78,336 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
    - 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:39:58 21,504 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
    - 2008-04-22 07:40:18 625,664 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-22 07:40:18 633,344 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
    - 2003-07-16 20:23:18 426,042 ----a-w C:\WINDOWS\IME\IMJP8_1\APPLETS\voicepad.dll
    + 2004-08-04 05:32:36 426,041 ----a-w C:\WINDOWS\IME\IMJP8_1\APPLETS\voicepad.dll
    - 2003-07-16 20:23:18 86,074 ----a-w C:\WINDOWS\IME\IMJP8_1\APPLETS\voicesub.dll
    + 2004-08-04 05:32:36 86,073 ----a-w C:\WINDOWS\IME\IMJP8_1\APPLETS\voicesub.dll
    - 2003-07-16 20:22:31 65,592 ----a-w C:\WINDOWS\IME\IMJP8_1\cplexe.exe
    + 2004-08-04 05:31:40 65,591 ----a-w C:\WINDOWS\IME\IMJP8_1\cplexe.exe
    - 2003-07-16 20:22:42 360,494 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpcic.dll
    + 2004-08-04 05:31:52 368,696 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpcic.dll
    - 2003-07-16 20:22:43 716,857 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpcus.dll
    + 2004-08-04 05:31:52 716,856 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpcus.dll
    - 2002-08-29 11:00:00 57,398 -c--a-w C:\WINDOWS\IME\IMJP8_1\imjpdadm.exe
    + 2002-08-29 11:00:00 65,590 -c--a-w C:\WINDOWS\IME\IMJP8_1\imjpdadm.exe
    - 2003-07-16 20:22:44 81,977 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpdct.dll
    + 2004-08-04 05:31:54 81,976 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpdct.dll
    - 2003-07-16 20:22:44 315,450 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpdct.exe
    + 2004-08-04 05:31:54 315,449 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpdct.exe
    - 2003-07-16 20:22:44 163,898 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpdsvr.exe
    + 2004-08-04 05:31:56 163,897 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpdsvr.exe
    - 2003-07-16 20:22:45 213,606 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpinst.exe
    + 2004-08-04 05:31:58 213,381 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpinst.exe
    - 2003-07-16 20:22:46 217,145 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpmig.exe
    + 2004-08-04 05:32:00 217,144 ----a-w C:\WINDOWS\IME\IMJP8_1\imjpmig.exe
    - 2003-07-16 20:22:48 241,720 ----a-w C:\WINDOWS\IME\IMJP8_1\imjprw.exe
    + 2004-08-04 05:32:12 241,719 ----a-w C:\WINDOWS\IME\IMJP8_1\imjprw.exe
    - 2002-08-29 11:00:00 45,109 -c--a-w C:\WINDOWS\IME\IMJP8_1\imjpuex.exe
    + 2002-08-29 11:00:00 53,301 -c--a-w C:\WINDOWS\IME\IMJP8_1\imjpuex.exe
    - 2003-07-16 20:22:51 270,393 ----a-w C:\WINDOWS\IME\IMJP8_1\imjputy.exe
    + 2004-08-04 05:32:16 270,392 ----a-w C:\WINDOWS\IME\IMJP8_1\imjputy.exe
    - 2003-07-16 20:22:52 274,490 ----a-w C:\WINDOWS\IME\IMJP8_1\imjputyc.dll
    + 2004-08-04 05:32:16 274,489 ----a-w C:\WINDOWS\IME\IMJP8_1\imjputyc.dll
    - 2003-07-16 20:22:40 80,384 ----a-w C:\WINDOWS\IME\IMKR6_1\APPLETS\imekrmbx.dll
    + 2004-08-04 06:04:34 86,016 ----a-w C:\WINDOWS\IME\IMKR6_1\APPLETS\imekrmbx.dll
    - 2003-07-16 20:22:40 99,328 ----a-w C:\WINDOWS\IME\IMKR6_1\imekrcic.dll
    + 2004-08-04 06:04:38 106,496 ----a-w C:\WINDOWS\IME\IMKR6_1\imekrcic.dll
    - 2002-08-29 11:00:00 59,904 -c--a-w C:\WINDOWS\IME\IMKR6_1\imkrinst.exe
    + 2002-08-29 11:00:00 67,584 -c--a-w C:\WINDOWS\IME\IMKR6_1\imkrinst.exe
    - 2003-07-16 20:35:11 203,776 ----a-w C:\WINDOWS\IME\mscandui.dll
    + 2004-08-04 07:56:44 220,160 ----a-w C:\WINDOWS\IME\mscandui.dll
    - 2002-08-29 11:00:00 311,359 -c--a-w C:\WINDOWS\IME\SHARED\imepadsv.exe
    + 2002-08-29 11:00:00 319,551 -c--a-w C:\WINDOWS\IME\SHARED\imepadsv.exe
    - 2003-07-16 20:45:42 121,344 ----a-w C:\WINDOWS\IME\SOFTKBD.DLL
    + 2004-08-04 07:56:46 130,048 ----a-w C:\WINDOWS\IME\softkbd.dll
    - 2003-07-16 20:46:17 62,464 ----a-w C:\WINDOWS\IME\SPGRMR.dll
    + 2004-08-04 07:56:30 62,976 ----a-w C:\WINDOWS\IME\spgrmr.dll
    - 2003-07-16 20:46:21 235,520 ----a-w C:\WINDOWS\IME\SPTIP.dll
    + 2004-08-04 07:56:46 250,880 ----a-w C:\WINDOWS\IME\sptip.dll
    - 2003-07-16 20:48:51 258,048 ----a-w C:\WINDOWS\INF\unregmp2.exe
    + 2004-08-04 07:56:58 217,088 ----a-w C:\WINDOWS\INF\unregmp2.exe
    - 2005-08-04 19:09:07 61,440 -c--a-r C:\WINDOWS\Installer\{1FD0C5C1-B01B-4B4C-9607-
  8. 2008-09-26, 02:21 #8
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default combofix log part 5

    E5D3B3D1318F}\IntelliPoint.exe
    + 2005-08-04 19:09:07 69,632 -c--a-r C:\WINDOWS\Installer\{1FD0C5C1-B01B-4B4C-9607-E5D3B3D1318F}\IntelliPoint.exe
    - 2005-08-04 19:09:07 61,440 -c--a-r C:\WINDOWS\Installer\{1FD0C5C1-B01B-4B4C-9607-E5D3B3D1318F}\MicrosoftIntelliPoint.exe
    + 2005-08-04 19:09:07 69,632 -c--a-r C:\WINDOWS\Installer\{1FD0C5C1-B01B-4B4C-9607-E5D3B3D1318F}\MicrosoftIntelliPoint.exe
    - 2002-09-03 08:06:18 166,912 -c--a-r C:\WINDOWS\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\PLACES.EXE
    + 2002-09-03 08:06:18 174,592 -c--a-r C:\WINDOWS\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\PLACES.EXE
    - 2008-06-22 05:41:56 57,344 -c--a-r C:\WINDOWS\Installer\{3648253A-C2C4-4CFB-8BE5-381D1C638B94}\NewShortcut7_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
    + 2008-06-22 05:41:56 65,536 -c--a-r C:\WINDOWS\Installer\{3648253A-C2C4-4CFB-8BE5-381D1C638B94}\NewShortcut7_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
    - 2008-06-22 05:41:56 57,344 -c--a-r C:\WINDOWS\Installer\{3648253A-C2C4-4CFB-8BE5-381D1C638B94}\NewShortcut8_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
    + 2008-06-22 05:41:56 65,536 -c--a-r C:\WINDOWS\Installer\{3648253A-C2C4-4CFB-8BE5-381D1C638B94}\NewShortcut8_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
    - 2006-11-21 02:19:53 32,768 -c--a-r C:\WINDOWS\Installer\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}\icon.exe
    + 2006-11-21 02:19:53 40,960 -c--a-r C:\WINDOWS\Installer\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}\icon.exe
    - 2005-04-01 04:26:21 32,768 -c--a-r C:\WINDOWS\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC}\icon.exe
    + 2005-04-01 04:26:21 40,960 -c--a-r C:\WINDOWS\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC}\icon.exe
    - 2004-06-13 15:49:02 57,344 -c--a-r C:\WINDOWS\Installer\{81A34902-9D0B-4920-A25C-4CDC5D14B328}\DPS_DTLink.CAA7B2BB_F373_4C0B_8C62_D4147E5C816B.exe
    + 2004-06-13 15:49:02 65,536 -c--a-r C:\WINDOWS\Installer\{81A34902-9D0B-4920-A25C-4CDC5D14B328}\DPS_DTLink.CAA7B2BB_F373_4C0B_8C62_D4147E5C816B.exe
    - 2004-06-13 15:49:03 57,344 -c--a-r C:\WINDOWS\Installer\{81A34902-9D0B-4920-A25C-4CDC5D14B328}\DPS_SMLink.CAA7B2BB_F373_4C0B_8C62_D4147E5C816B.exe
    + 2004-06-13 15:49:03 65,536 -c--a-r C:\WINDOWS\Installer\{81A34902-9D0B-4920-A25C-4CDC5D14B328}\DPS_SMLink.CAA7B2BB_F373_4C0B_8C62_D4147E5C816B.exe
    - 2008-09-10 09:11:57 23,040 ----a-r C:\WINDOWS\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-09-10 09:11:57 30,720 ----a-r C:\WINDOWS\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2005-03-03 15:14:32 65,536 -c--a-r C:\WINDOWS\Installer\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}\NewShortcut3.exe
    + 2005-03-03 15:14:32 73,728 -c--a-r C:\WINDOWS\Installer\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}\NewShortcut3.exe
    - 2006-10-13 08:20:00 32,768 -c--a-r C:\WINDOWS\Installer\{A9CF9052-F4A0-475D-A00F-A8388C62DD63}\icon.exe
    + 2006-10-13 08:20:00 40,960 -c--a-r C:\WINDOWS\Installer\{A9CF9052-F4A0-475D-A00F-A8388C62DD63}\icon.exe
    - 2007-08-15 14:58:05 32,768 -c--a-r C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe
    + 2007-08-15 14:58:05 40,960 -c--a-r C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe
    - 2005-02-15 01:57:52 40,960 -c--a-r C:\WINDOWS\Installer\{FCDB1C92-03C6-4C76-8625-371224256091}\NewShortcut2.exe
    + 2005-02-15 01:57:52 49,152 -c--a-r C:\WINDOWS\Installer\{FCDB1C92-03C6-4C76-8625-371224256091}\NewShortcut2.exe
    - 2007-05-24 06:14:58 57,344 -c--a-r C:\WINDOWS\Installer\{FE4E2639-4640-446D-8736-6B38208F71ED}\NewShortcut8_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
    + 2007-05-24 06:14:58 65,536 -c--a-r C:\WINDOWS\Installer\{FE4E2639-4640-446D-8736-6B38208F71ED}\NewShortcut8_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
    - 2004-07-15 09:49:18 20,480 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
    + 2004-07-15 09:49:18 28,672 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
    - 2007-04-14 05:30:52 32,768 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    + 2007-04-14 05:30:52 40,960 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2003-02-21 13:24:10 94,208 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CasPol.exe
    + 2003-02-21 13:24:10 102,400 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CasPol.exe
    - 2004-07-15 19:23:28 49,152 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\csc.exe
    + 2004-07-15 19:23:28 57,344 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\csc.exe
    - 2003-02-21 10:12:24 28,672 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
    + 2003-02-21 10:12:24 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
    - 2003-10-08 22:30:14 81,920 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
    + 2003-10-08 22:30:14 90,112 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
    - 2003-02-21 13:24:38 7,680 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEExec.exe
    + 2003-02-21 13:24:38 15,360 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEExec.exe
    - 2004-07-15 08:35:30 196,608 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
    + 2004-07-15 08:35:30 204,800 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
    - 2003-02-21 13:24:42 15,872 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe
    + 2003-02-21 13:24:42 23,552 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe
    - 2003-02-21 13:24:52 40,960 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\jsc.exe
    + 2003-02-21 13:24:52 49,152 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\jsc.exe
    - 2004-07-15 22:28:50 49,152 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
    + 2004-07-15 22:28:50 57,344 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
    - 2004-07-15 22:28:50 49,152 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
    + 2004-07-15 22:28:50 57,344 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
    - 2007-01-16 00:11:26 73,728 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
    + 2007-01-16 00:11:26 81,920 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
    - 2003-02-21 01:09:46 73,728 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ngen.exe
    + 2003-02-21 01:09:46 81,920 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ngen.exe
    - 2003-02-21 13:25:24 28,672 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe
    + 2003-02-21 13:25:24 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe
    - 2003-02-21 13:25:30 12,288 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe
    + 2003-02-21 13:25:30 19,968 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe
    - 2004-06-22 21:51:38 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
    + 2004-06-22 21:51:38 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
    - 2004-07-15 19:23:20 737,280 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\vbc.exe
    + 2004-07-15 19:23:20 745,472 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\vbc.exe
    - 2007-10-24 09:47:22 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2007-10-24 09:47:22 45,056 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    - 2007-10-24 09:47:22 24,576 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2007-10-24 09:47:22 32,768 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    - 2007-10-24 09:47:22 106,496 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2007-10-24 09:47:22 114,688 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    - 2007-10-24 09:47:40 106,496 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2007-10-24 09:47:40 114,688 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    - 2007-10-24 09:47:28 5,120 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2007-10-24 09:47:28 12,800 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2007-10-24 09:47:40 9,728 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2007-10-24 09:47:40 17,408 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2007-10-24 09:47:40 28,672 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2007-10-24 09:47:40 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2007-10-24 09:47:34 40,960 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2007-10-24 09:47:34 49,152 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2007-10-24 09:47:36 69,632 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2007-10-24 09:47:36 77,824 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2007-10-24 09:47:40 53,248 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2007-10-24 09:47:40 61,440 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    - 2007-10-24 09:47:40 32,768 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2007-10-24 09:47:40 40,960 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2003-07-16 20:23:56 22,016 ----a-w C:\WINDOWS\MSAGENT\agentanm.dll
    + 2004-08-04 07:56:42 24,064 ----a-w C:\WINDOWS\MSAGENT\agentanm.dll
    - 2003-07-16 20:23:56 204,288 ----a-w C:\WINDOWS\MSAGENT\agentctl.dll
    + 2004-08-04 07:56:42 214,016 ----a-w C:\WINDOWS\MSAGENT\agentctl.dll
    - 2003-07-16 20:23:56 35,840 ----a-w C:\WINDOWS\MSAGENT\agentdp2.dll
    + 2004-08-04 07:56:42 41,984 ----a-w C:\WINDOWS\MSAGENT\agentdp2.dll
    - 2003-07-16 20:23:56 50,688 ----a-w C:\WINDOWS\MSAGENT\agentdpv.dll
    + 2005-04-22 05:06:42 57,344 ----a-w C:\WINDOWS\MSAGENT\agentdpv.dll
    - 2003-07-16 20:23:56 44,032 ----a-w C:\WINDOWS\MSAGENT\agentmpx.dll
    + 2004-08-04 07:56:42 49,152 ----a-w C:\WINDOWS\MSAGENT\agentmpx.dll
    - 2003-07-16 20:23:57 21,504 ----a-w C:\WINDOWS\MSAGENT\agentpsh.dll
    + 2004-08-04 07:56:42 24,064 ----a-w C:\WINDOWS\MSAGENT\agentpsh.dll
    - 2003-07-16 20:23:57 39,936 ----a-w C:\WINDOWS\MSAGENT\agentsr.dll
    + 2004-08-04 07:56:42 44,032 ----a-w C:\WINDOWS\MSAGENT\agentsr.dll
    - 2003-07-16 20:23:57 242,688 ----a-w C:\WINDOWS\MSAGENT\agentsvr.exe
    + 2004-08-04 07:56:48 264,192 ----a-w C:\WINDOWS\MSAGENT\agentsvr.exe
    - 2003-07-16 20:24:07 21,504 ----a-w C:\WINDOWS\MSAGENT\agtintl.dll
    + 2004-08-04 07:56:42 24,064 ----a-w C:\WINDOWS\MSAGENT\agtintl.dll
    - 2003-07-16 20:36:08 36,352 ----a-w C:\WINDOWS\MSAGENT\mslwvtts.dll
    + 2004-08-04 07:56:44 39,936 ----a-w C:\WINDOWS\MSAGENT\mslwvtts.dll
    - 2008-04-13 18:53:32 558,080 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
    + 2008-04-13 18:53:32 565,760 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
    - 2003-07-16 20:39:13 73,728 ----a-w C:\WINDOWS\notepad.exe
    + 2004-08-04 07:56:56 76,800 ----a-w C:\WINDOWS\notepad.exe
    - 2003-07-16 20:29:17 750,080 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
    + 2004-08-04 07:56:50 776,192 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
    - 2003-07-16 20:29:18 711,168 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpsvc.exe
    + 2004-08-04 07:56:52 751,616 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpsvc.exe
    - 2003-07-16 20:29:41 16,384 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\HscUpd.exe
    + 2004-08-04 07:56:52 26,624 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\hscupd.exe
    - 2003-07-16 20:35:14 153,088 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe
    + 2004-08-04 07:56:54 165,888 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe
    - 2003-07-16 20:36:02 348,160 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msinfo.dll
    + 2004-08-04 07:56:44 376,320 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\msinfo.dll
    - 2003-07-16 20:41:06 97,792 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll
    + 2004-08-04 07:56:46 102,400 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll
    - 2003-07-16 20:41:07 29,696 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
    + 2004-08-04 07:56:46 38,912 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
    - 2003-07-16 20:49:08 146,432 ----a-w C:\WINDOWS\PCHealth\UploadLB\Binaries\uploadm.exe
    + 2004-08-04 07:56:58 158,208 ----a-w C:\WINDOWS\PCHealth\UploadLB\Binaries\uploadm.exe
    - 2008-04-14 00:12:06 151,552 ------w C:\WINDOWS\peernet\sqldb20.dll
    + 2004-08-04 07:56:46 151,552 ------w C:\WINDOWS\peernet\sqldb20.dll
    - 2008-04-14 00:12:06 462,848 ------w C:\WINDOWS\peernet\sqlqp20.dll
    + 2004-08-04 07:56:46 462,848 ------w C:\WINDOWS\peernet\sqlqp20.dll
    - 2008-04-14 00:12:06 110,592 ------w C:\WINDOWS\peernet\sqlse20.dll
    + 2004-08-04 07:56:46 110,592 ------w C:\WINDOWS\peernet\sqlse20.dll
    - 2003-07-16 20:43:03 141,824 ----a-w C:\WINDOWS\regedit.exe
    + 2004-08-04 07:56:56 154,112 ----a-w C:\WINDOWS\regedit.exe
    - 2002-12-12 06:14:32 16,896 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnsvr.exe
    + 2002-12-12 06:14:32 24,576 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnsvr.exe
    - 2002-12-12 06:14:32 80,896 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvsetup.exe
    + 2002-12-12 06:14:32 88,576 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvsetup.exe
    - 2003-05-30 15:00:02 937,984 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe
    + 2003-05-30 15:00:02 946,176 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe
    - 2002-12-12 06:14:32 44,544 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe
    + 2002-12-12 06:14:32 52,224 -c--a-w C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe
    + 2004-08-04 06:10:08 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\1394bus.sys
    + 2004-08-04 06:00:04 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys
    + 2004-08-04 06:10:12 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\61883.sys
    + 2004-08-04 07:56:42 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll
    + 2004-08-04 05:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys
    + 2004-08-04 05:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\ac97via.sys
    + 2004-08-04 07:56:48 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
    + 2004-08-04 07:56:42 1,852,416 ------w C:\WINDOWS\ServicePackFiles\i386\acgenral.dll
    + 2004-08-04 07:56:42 450,048 ------w C:\WINDOWS\ServicePackFiles\i386\aclayers.dll
    + 2004-08-04 07:56:42 137,728 ------w C:\WINDOWS\ServicePackFiles\i386\aclua.dll
    + 2004-08-04 07:56:42 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\aclui.dll
    + 2004-08-04 06:07:38 187,776 ------w C:\WINDOWS\ServicePackFiles\i386\acpi.sys
    + 2004-08-04 07:56:42 244,736 ------w C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll
    + 2004-08-04 07:56:42 194,048 ------w C:\WINDOWS\ServicePackFiles\i386\activeds.dll
    + 2004-08-04 07:56:48 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\actmovie.exe
    + 2004-08-04 07:56:42 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll
    + 2004-08-04 07:56:42 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll
    + 2004-08-04 07:56:42 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\admin.dll
    + 2004-08-04 07:56:48 24,631 ------w C:\WINDOWS\ServicePackFiles\i386\admin.exe
    + 2004-08-04 05:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\admjoy.sys
    + 2004-08-04 07:56:42 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
    + 2004-08-04 07:56:42 175,616 ------w C:\WINDOWS\ServicePackFiles\i386\adsldp.dll
    + 2004-08-04 07:56:42 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll
    + 2004-08-04 07:56:42 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll
    + 2004-08-04 07:56:42 263,680 ------w C:\WINDOWS\ServicePackFiles\i386\adsnt.dll
    + 2004-08-04 07:56:42 4,255 ------w C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll
    + 2004-08-04 07:56:42 3,967 ------w C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll
    + 2004-08-04 07:56:42 3,615 ------w C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll
    + 2004-08-04 07:56:42 3,647 ------w C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll
    + 2004-08-04 07:56:42 3,135 ------w C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll
    + 2004-08-04 07:56:42 3,711 ------w C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll
    + 2004-08-04 07:56:42 3,775 ------w C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll
    + 2004-08-04 07:56:42 616,960 ------w C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
    + 2004-08-04 07:56:42 99,840 ------w C:\WINDOWS\ServicePackFiles\i386\advpack.dll
    + 2004-08-04 05:39:38 142,464 ------w C:\WINDOWS\ServicePackFiles\i386\aec.sys
    + 2004-08-04 06:14:16 138,496 ------w C:\WINDOWS\ServicePackFiles\i386\afd.sys
    + 2004-08-04 07:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentanm.dll
    + 2004-08-04 07:56:42 214,016 ------w C:\WINDOWS\ServicePackFiles\i386\agentctl.dll
    + 2004-08-04 07:56:42 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
    + 2004-08-04 07:56:42 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
    + 2004-08-04 07:56:42 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll
    + 2004-08-04 07:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll
    + 2004-08-04 07:56:42 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\agentsr.dll
    + 2004-08-04 07:56:48 264,192 ------w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
    + 2004-08-04 06:07:42 42,368 ------w C:\WINDOWS\ServicePackFiles\i386\agp440.sys
    + 2004-08-04 06:07:44 44,928 ------w C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys
    + 2004-08-04 07:56:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agtintl.dll
    + 2004-08-04 07:56:48 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
    + 2004-08-04 07:56:48 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\alg.exe
    + 2004-08-04 06:07:42 42,752 ------w C:\WINDOWS\ServicePackFiles\i386\alim1541.sys
    + 2004-08-04 07:56:42 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll
    + 2004-08-04 06:07:44 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\amdagp.sys
    + 2004-08-04 05:59:20 36,992 ------w C:\WINDOWS\ServicePackFiles\i386\amdk6.sys
    + 2004-08-04 05:59:22 37,376 ------w C:\WINDOWS\ServicePackFiles\i386\amdk7.sys
    + 2004-08-04 07:56:42 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\amstream.dll
    + 2004-08-04 05:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\an983.sys
    + 2004-08-04 07:56:42 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\apphelp.dll
    + 2004-08-04 07:56:42 331,264 ------w C:\WINDOWS\ServicePackFiles\i386\aqueue.dll
    + 2004-08-04 05:58:30 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\arp1394.sys
    + 2004-08-04 07:56:00 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\asferror.dll
    + 2004-08-04 07:56:42 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll
    + 2004-08-04 06:05:04 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
    + 2004-08-04 07:56:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\at.exe
    + 2004-08-04 05:59:44 95,360 ------w C:\WINDOWS\ServicePackFiles\i386\atapi.sys
    + 2004-08-04 05:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys
    + 2004-08-04 05:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys
    + 2004-08-04 05:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys
    + 2004-08-04 05:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys
    + 2004-08-04 05:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys
    + 2004-08-04 05:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys
    + 2004-08-04 05:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys
    + 2004-08-04 05:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys
    + 2004-08-04 05:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys
    + 2004-08-04 05:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys
    + 2004-08-04 07:56:42 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
    + 2004-08-04 07:56:42 377,984 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
    + 2004-08-04 07:56:42 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
    + 2004-08-04 05:29:28 327,040 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
    + 2004-08-04 05:29:28 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
    + 2004-08-04 07:56:42 870,784 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
    + 2004-08-04 07:56:42 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll
    + 2004-08-04 07:56:42 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
    + 2004-08-04 05:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys
    + 2004-08-04 05:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys
    + 2004-08-04 05:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys
    + 2004-08-04 05:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys
    + 2004-08-04 05:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys
    + 2004-08-04 05:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys
    + 2004-08-04 05:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys
    + 2004-08-04 05:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys
    + 2004-08-04 05:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys
    + 2004-08-04 05:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys
    + 2004-08-04 07:56:42 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll
    + 2004-08-04 07:56:42 516,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
    + 2004-08-04 07:56:42 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\atl.dll
    + 2004-08-04 07:56:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\atmadm.exe
    + 2004-08-04 05:58:32 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys
    + 2004-08-04 07:56:00 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\atmfd.dll
    + 2004-08-04 05:58:36 55,936 ------w C:\WINDOWS\ServicePackFiles\i386\atmlane.sys
    + 2004-08-04 07:56:42 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\atmlib.dll
    + 2004-08-04 07:56:42 21,183 ------w C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll
    + 2004-08-04 07:56:42 11,359 ------w C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll
    + 2004-08-04 07:56:42 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll
    + 2004-08-04 07:56:42 14,143 ------w C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll
    + 2004-08-04 07:56:42 17,279 ------w C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll
    + 2004-08-04 07:56:42 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll
    + 2004-08-04 07:56:48 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\auditusr.exe
    + 2004-08-04 07:56:42 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\author.dll
    + 2004-08-04 07:56:48 24,631 ------w C:\WINDOWS\ServicePackFiles\i386\author.exe
    + 2004-08-04 07:56:42 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\authz.dll
    + 2004-08-04 07:56:48 588,800 ------w C:\WINDOWS\ServicePackFiles\i386\autochk.exe
    + 2004-08-04 07:56:48 602,624 ------w C:\WINDOWS\ServicePackFiles\i386\autoconv.exe
    + 2004-08-04 07:56:48 580,608 ------w C:\WINDOWS\ServicePackFiles\i386\autofmt.exe
    + 2004-08-04 07:56:48 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\autolfn.exe
    + 2004-08-04 06:10:12 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\avc.sys
    + 2004-08-04 06:10:00 13,696 ------w C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys
    + 2004-08-04 07:56:42 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\avifil32.dll
    + 2004-08-04 07:56:42 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\basesrv.dll
    + 2004-08-04 07:56:42 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
    + 2004-08-04 07:56:42 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\batt.dll
    + 2004-08-04 06:10:14 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\bdasup.sys
    + 2004-08-04 07:56:42 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\bidispl.dll
    + 2004-08-04 07:56:42 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll
    + 2004-08-04 07:56:42 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll
    + 2004-08-04 07:56:42 286,208 ------w C:\WINDOWS\ServicePackFiles\i386\blackbox.dll
    + 2004-08-04 07:56:48 79,360 ------w C:\WINDOWS\ServicePackFiles\i386\blastcln.exe
    + 2004-08-04 05:59:58 71,552 ------w C:\WINDOWS\ServicePackFiles\i386\bridge.sys
    + 2004-08-04 07:56:00 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\browselc.dll
    + 2004-08-04 07:56:42 77,312 ------w C:\WINDOWS\ServicePackFiles\i386\browser.dll
    + 2004-08-04 07:56:42 1,016,832 ------w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
    + 2004-08-04 07:56:42 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\browsewm.dll
    + 2004-08-04 07:56:42 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
    + 2004-08-04 06:10:40 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\bthenum.sys
    + 2004-08-04 06:10:40 38,016 ------w C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys
    + 2004-08-04 05:58:40 100,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthpan.sys
    + 2004-08-04 06:10:38 274,304 ------w C:\WINDOWS\ServicePackFiles\i386\bthport.sys
    + 2004-08-04 06:10:38 35,456 ------w C:\WINDOWS\ServicePackFiles\i386\bthprint.sys
    + 2004-08-04 07:56:42 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\bthserv.dll
    + 2004-08-04 06:10:36 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthusb.sys
    + 2004-08-04 07:56:42 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\btpanui.dll
    + 2004-08-04 07:56:42 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\cabinet.dll
    + 2004-08-04 07:56:42 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
    + 2004-08-04 07:56:42 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\callcont.dll
    + 2004-08-04 07:56:42 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\camocx.dll
    + 2004-08-04 07:56:42 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\catsrv.dll
    + 2004-08-04 07:56:42 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll
    + 2004-08-04 07:56:42 628,224 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll
    + 2004-08-04 06:10:18 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys
    + 2004-08-04 06:14:12 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\cdfs.sys
    + 2004-08-04 07:56:42 150,528 ------w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
    + 2004-08-04 07:56:42 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\cdm.dll
    + 2004-08-04 07:56:42 2,067,968 ------w C:\WINDOWS\ServicePackFiles\i386\cdosys.dll
    + 2004-08-04 05:59:54 49,536 ------w C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
    + 2004-08-04 07:56:42 194,560 ------w C:\WINDOWS\ServicePackFiles\i386\certcli.dll
    + 2004-08-04 07:56:42 457,728 ------w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
    + 2004-08-04 07:56:42 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\cewmdm.dll
    + 2004-08-04 07:56:42 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll
    + 2004-08-04 07:56:02 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll
    + 2004-08-04 07:56:48 196,672 ------w C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe
    + 2004-08-04 07:56:42 15,423 ------w C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll
    + 2004-08-04 06:00:14 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\changer.sys
    + 2004-08-04 07:56:42 1,352,192 ------w C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll
    + 2004-08-04 07:56:42 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\ciodm.dll
    + 2004-08-04 07:56:48 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\cisvc.exe
    + 2004-08-04 06:14:28 49,664 ------w C:\WINDOWS\ServicePackFiles\i386\classpnp.sys
    + 2004-08-04 07:56:42 110,080 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll
    + 2004-08-04 07:56:42 501,248 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll
    + 2004-08-04 07:56:48 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
    + 2004-08-04 07:56:42 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll
    + 2004-08-04 07:56:48 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
    + 2004-08-04 07:56:48 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
    + 2004-08-04 07:56:48 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
    + 2004-08-04 07:56:42 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\clusapi.dll
    + 2004-08-04 06:07:40 14,080 ------w C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys
    + 2004-08-04 07:56:42 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll
    + 2004-08-04 07:56:50 396,288 ------w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
    + 2004-08-04 07:56:42 343,040 ------w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
    + 2004-08-04 07:56:50 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
    + 2004-08-04 07:56:50 47,616 ------w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
    + 2004-08-04 07:56:42 185,344 ------w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
    + 2004-08-04 07:56:42 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll
    + 2004-08-04 07:56:50 71,168 ------w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
    + 2004-08-04 07:56:42 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\cmutil.dll
    + 2004-08-04 07:56:42 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll
    + 2004-08-04 07:56:42 79,360 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll
    + 2004-08-04 07:56:42 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\colbact.dll
    + 2004-08-04 07:56:42 195,584 ------w C:\WINDOWS\ServicePackFiles\i386\comadmin.dll
    + 2004-08-04 07:56:42 611,328 ------w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
    + 2004-08-04 07:56:42 276,992 ------w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
    + 2004-08-04 07:56:42 252,928 ------w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
    + 2004-08-04 07:56:42 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
    + 2004-08-04 07:56:50 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.exe
    + 2004-08-04 07:56:42 792,064 ------w C:\WINDOWS\ServicePackFiles\i386\comres.dll
    + 2004-08-04 07:56:42 1,251,840 ------w C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll
    + 2004-08-04 07:56:42 540,160 ------w C:\WINDOWS\ServicePackFiles\i386\comuid.dll
    + 2004-08-04 07:56:50 1,040,384 ------w C:\WINDOWS\ServicePackFiles\i386\conf.exe
    + 2004-08-04 07:56:42 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll
    + 2004-08-04 07:56:50 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\conime.exe
    + 2004-08-04 07:56:42 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\corpol.dll
    + 2004-08-04 07:56:42 163,840 ------w C:\WINDOWS\ServicePackFiles\i386\credui.dll
    + 2004-08-04 05:59:22 36,480 ------w C:\WINDOWS\ServicePackFiles\i386\crusoe.sys
    + 2004-08-04 07:56:42 597,504 ------w C:\WINDOWS\ServicePackFiles\i386\crypt32.dll
    + 2004-08-04 07:56:42 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll
    + 2004-08-04 07:56:42 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll
    + 2004-08-04 07:56:42 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\cryptext.dll
    + 2004-08-04 07:56:42 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll
    + 2004-08-04 07:56:42 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
    + 2004-08-04 07:56:42 512,512 ------w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
    + 2004-08-04 07:56:42 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
    + 2004-08-04 07:56:50 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
    + 2004-08-04 07:56:42 326,656 ------w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
    + 2004-08-04 07:56:42 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll
    + 2004-08-04 07:56:50 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\csrss.exe
    + 2004-08-04 07:56:42 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll
    + 2004-08-04 07:56:42 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\custsat.dll
    + 2004-08-04 05:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys
    + 2004-08-04 07:56:42 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8.dll
    + 2004-08-04 07:56:42 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll
    + 2004-08-04 07:56:42 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
    + 2004-08-04 07:56:42 825,344 ------w C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll
    + 2004-08-04 07:56:42 1,053,696 ------w C:\WINDOWS\ServicePackFiles\i386\danim.dll
    + 2004-08-04 07:56:44 561,179 ------w C:\WINDOWS\ServicePackFiles\i386\dao360.dll
    + 2004-08-04 07:56:44 54,272 ------w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
    + 2004-08-04 07:56:44 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\davclnt.dll
    + 2004-08-04 07:56:44 640,000 ------w C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll
    + 2004-08-04 07:56:44 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll
    + 2004-08-04 07:56:44 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll
    + 2004-08-04 07:56:44 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll
    + 2004-08-04 08:07:22 1,788 ------w C:\WINDOWS\ServicePackFiles\i386\dcache.bin
    + 2004-08-04 07:56:44 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\dcap32.dll
    + 2004-08-04 07:56:44 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\dciman32.dll
    + 2004-08-04 07:56:50 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
    + 2004-08-04 07:56:44 266,240 ------w C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
    + 2004-08-04 07:56:44 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll
    + 2004-08-04 07:56:50 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\defrag.exe
    + 2004-08-04 07:56:44 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\devenum.dll
    + 2004-08-04 07:56:44 282,624 ------w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
    + 2004-08-04 07:56:50 90,112 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe
    + 2004-08-04 07:56:50 112,640 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe
    + 2004-08-04 07:56:44 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll
    + 2004-08-04 07:56:44 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
    + 2004-08-04 07:56:44 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll
    + 2004-08-04 07:56:44 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\dgnet.dll
    + 2004-08-04 07:56:44 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll
    + 2004-08-04 07:56:50 546,816 ------w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
    + 2004-08-04 07:56:50 93,184 ------w C:\WINDOWS\ServicePackFiles\i386\diantz.exe
    + 2004-08-04 07:56:44 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\digest.dll
    + 2004-08-04 07:56:44 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\dinput.dll
    + 2004-08-04 07:56:44 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\dinput8.dll
    + 2004-08-04 07:56:44 81,408 ------w C:\WINDOWS\ServicePackFiles\i386\directdb.dll
    + 2004-08-04 05:59:56 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\disk.sys
    + 2004-08-04 05:59:54 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\diskdump.sys
    + 2004-08-04 07:56:50 171,520 ------w C:\WINDOWS\ServicePackFiles\i386\diskpart.exe
    + 2004-08-04 07:56:50 303,104 ------w C:\WINDOWS\ServicePackFiles\i386\dlimport.exe
    + 2004-08-04 07:56:50 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\dllhost.exe
    + 2004-08-04 06:00:06 8,320 ------w C:\WINDOWS\ServicePackFiles\i386\dlttape.sys
    + 2004-08-04 07:56:50 232,448 ------w C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe
    + 2004-08-04 07:56:44 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dmband.dll
    + 2004-08-04 06:07:18 799,744 ------w C:\WINDOWS\ServicePackFiles\i386\dmboot.sys
    + 2004-08-04 07:56:44 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll
    + 2004-08-04 07:56:44 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll
    + 2004-08-04 07:56:44 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\dmime.dll
    + 2004-08-04 06:07:18 153,344 ------w C:\WINDOWS\ServicePackFiles\i386\dmio.sys
    + 2004-08-04 07:56:44 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\dmloader.dll
    + 2004-08-04 07:56:50 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\dmremote.exe
    + 2004-08-04 07:56:44 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\dmscript.dll
    + 2004-08-04 07:56:44 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\dmserver.dll
    + 2004-08-04 07:56:44 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll
    + 2004-08-04 07:56:44 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\dmsynth.dll
    + 2004-08-04 07:56:44 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.dll
    + 2004-08-04 06:07:40 52,864 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.sys
    + 2004-08-04 07:56:44 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\dmutil.dll
    + 2004-08-04 07:56:44 148,480 ------w C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll
    + 2004-08-04 07:56:44 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\dnsrslvr.dll
    + 2004-08-04 07:56:44 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\docprop2.dll
    + 2004-08-04 05:51:22 53,840 ------w C:\WINDOWS\ServicePackFiles\i386\dosx.exe
    + 2004-08-04 05:58:30 207,360 ------w C:\WINDOWS\ServicePackFiles\i386\dot4.sys
    + 2004-08-04 06:13:54 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll
    + 2004-08-04 07:56:50 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\dplaysvr.exe
    + 2004-08-04 07:56:44 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\dplayx.dll
    + 2004-08-04 07:56:44 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
    + 2004-08-04 07:56:04 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\dpnaddr.dll
    + 2004-08-04 07:56:44 375,296 ------w C:\WINDOWS\ServicePackFiles\i386\dpnet.dll
    + 2004-08-04 07:56:44 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll
    + 2004-08-04 07:56:44 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll
    + 2004-08-04 07:56:04 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\dpnlobby.dll
    + 2004-08-04 07:56:50 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\dpnsvr.exe
    + 2004-08-04 07:56:44 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvacm.dll
    + 2004-08-04 07:56:44 212,480 ------w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
    + 2004-08-04 07:56:50 91,136 ------w C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe
    + 2004-08-04 07:56:44 116,736 ------w C:\WINDOWS\ServicePackFiles\i386\dpvvox.dll
    + 2004-08-04 07:56:44 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\dpwsockx.dll
    + 2004-08-04 07:57:06 299,520 ------w C:\WINDOWS\ServicePackFiles\i386\drmclien.dll
    + 2004-08-04 06:08:00 60,288 ------w C:\WINDOWS\ServicePackFiles\i386\drmk.sys
    + 2004-08-04 06:07:58 2,944 ------w C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys
    + 2004-08-04 07:56:44 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\drmstor.dll
    + 2004-08-04 07:57:04 695,296 ------w C:\WINDOWS\ServicePackFiles\i386\drmv2clt.dll
    + 2004-08-04 07:56:44 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\drprov.dll
    + 2004-07-17 18:36:44 4,656 ------w C:\WINDOWS\ServicePackFiles\i386\ds16gt.dll
    + 2004-08-04 07:56:44 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\ds32gt.dll
    + 2004-08-04 07:56:44 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\dsdmo.dll
    + 2004-08-04 07:56:44 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\dsdmoprp.dll
    + 2004-08-04 07:56:44 92,672 ------w C:\WINDOWS\ServicePackFiles\i386\dskquota.dll
    + 2004-08-04 07:56:44 367,616 ------w C:\WINDOWS\ServicePackFiles\i386\dsound.dll
    + 2004-08-04 07:56:44 1,294,336 ------w C:\WINDOWS\ServicePackFiles\i386\dsound3d.dll
    + 2004-08-04 07:56:44 142,336 ------w C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
    + 2004-08-04 07:56:06 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\dsprpres.dll
    + 2004-08-04 07:56:44 239,104 ------w C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
    + 2004-08-04 07:56:44 51,200 ------w C:\WINDOWS\ServicePackFiles\i386\dssec.dll
    + 2004-08-04 05:31:44 137,216 ------w C:\WINDOWS\ServicePackFiles\i386\dssenh.dll
    + 2004-08-04 07:56:44 113,152 ------w C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
    + 2004-08-04 07:56:44 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\dswave.dll
    + 2004-08-04 07:56:50 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\dumprep.exe
    + 2004-08-04 07:56:44 304,128 ------w C:\WINDOWS\ServicePackFiles\i386\duser.dll
    + 2004-08-04 07:56:50 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\dvdupgrd.exe
    + 2004-08-04 07:56:50 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\dwwin.exe
    + 2004-08-04 07:56:44 619,008 ------w C:\WINDOWS\ServicePackFiles\i386\dx7vb.dll
    + 2004-08-04 07:56:44 1,227,264 ------w C:\WINDOWS\ServicePackFiles\i386\dx8vb.dll
    + 2004-08-04 07:56:50 1,306,624 ------w C:\WINDOWS\ServicePackFiles\i386\dxdiag.exe
    + 2004-08-04 07:56:44 2,113,536 ------w C:\WINDOWS\ServicePackFiles\i386\dxdiagn.dll
    + 2004-08-04 06:00:56 71,040 ------w C:\WINDOWS\ServicePackFiles\i386\dxg.sys
    + 2004-08-04 07:56:44 498,205 ------w C:\WINDOWS\ServicePackFiles\i386\dxmasf.dll
    + 2004-08-04 07:56:44 357,888 ------w C:\WINDOWS\ServicePackFiles\i386\dxtmsft.dll
    + 2004-08-04 07:56:44 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\dxtrans.dll
    + 2004-08-04 07:56:44 183,296 ------w C:\WINDOWS\ServicePackFiles\i386\els.dll
    + 2004-08-04 07:56:44 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\encapi.dll
    + 2004-08-04 07:56:44 186,368 ------w C:\WINDOWS\ServicePackFiles\i386\encdec.dll
    + 2004-08-04 07:56:06 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\ep9res.dll
    + 2004-07-17 18:39:36 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\epcl5res.dll
    + 2004-08-04 07:56:44 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\ersvc.dll
    + 2004-08-04 07:56:44 243,200 ------w C:\WINDOWS\ServicePackFiles\i386\es.dll
    + 2004-08-04 07:56:44 1,082,368 ------w C:\WINDOWS\ServicePackFiles\i386\esent.dll
    + 2004-08-04 07:56:44 247,808 ------w C:\WINDOWS\ServicePackFiles\i386\esscli.dll
    + 2004-08-04 05:32:28 137,088 ------w C:\WINDOWS\ServicePackFiles\i386\essm2e.sys
    + 2004-08-04 07:56:50 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\eudcedit.exe
    + 2004-08-04 07:56:44 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
    + 2004-08-04 07:56:44 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\evntagnt.dll
    + 2004-08-04 07:56:50 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\evntcmd.exe
    + 2004-08-04 07:56:44 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\evntrprv.dll
    + 2004-08-04 07:56:50 99,840 ------w C:\WINDOWS\ServicePackFiles\i386\evntwin.exe
    + 2004-08-04 07:56:44 380,957 ------w C:\WINDOWS\ServicePackFiles\i386\expsrv.dll
    + 2004-08-04 07:56:44 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\extmgr.dll
    + 2004-08-04 07:56:50 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\extrac32.exe
    + 2004-08-04 06:14:18 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\fastfat.sys
    + 2004-08-04 07:56:44 472,064 ------w C:\WINDOWS\ServicePackFiles\i386\fastprox.dll
    + 2004-08-04 07:56:44 80,384 ------w C:\WINDOWS\ServicePackFiles\i386\faultrep.dll
    + 2004-08-04 07:56:50 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\faxpatch.exe
    + 2004-08-04 05:59:28 27,392 ------w C:\WINDOWS\ServicePackFiles\i386\fdc.sys
    + 2004-08-04 07:56:44 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\feclient.dll
    + 2004-08-04 07:56:44 337,920 ------w C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
    + 2004-08-04 07:56:50 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\findstr.exe
    + 2004-08-04 07:56:44 87,552 ------w C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
    + 2004-08-04 05:59:28 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys
    + 2004-08-04 07:56:44 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\fltlib.dll
    + 2004-08-04 07:56:50 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\fltmc.exe
    + 2004-08-04 06:01:20 124,800 ------w C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys
    + 2004-08-04 07:56:44 382,976 ------w C:\WINDOWS\ServicePackFiles\i386\fontext.dll
    + 2004-08-04 07:56:50 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\fontview.exe
    + 2004-08-04 05:31:24 34,173 ------w C:\WINDOWS\ServicePackFiles\i386\forehe.sys
    + 2004-08-04 07:56:44 32,828 ------w C:\WINDOWS\ServicePackFiles\i386\fp40ext.dll
    + 2004-08-04 07:56:44 184,435 ------w C:\WINDOWS\ServicePackFiles\i386\fp4amsft.dll
  9. 2008-09-26, 02:22 #9
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default combofix log part 6

    + 2004-08-04 07:56:44 82,035 ------w C:\WINDOWS\ServicePackFiles\i386\fp4anscp.dll
    + 2004-08-04 07:56:44 147,513 ------w C:\WINDOWS\ServicePackFiles\i386\fp4apws.dll
    + 2004-08-04 07:56:44 49,210 ------w C:\WINDOWS\ServicePackFiles\i386\fp4areg.dll
    + 2004-08-04 07:56:44 102,509 ------w C:\WINDOWS\ServicePackFiles\i386\fp4atxt.dll
    + 2004-08-04 07:56:44 618,605 ------w C:\WINDOWS\ServicePackFiles\i386\fp4autl.dll
    + 2004-08-04 07:56:44 41,020 ------w C:\WINDOWS\ServicePackFiles\i386\fp4avnb.dll
    + 2004-08-04 07:56:44 32,826 ------w C:\WINDOWS\ServicePackFiles\i386\fp4avss.dll
    + 2004-08-04 07:56:44 49,212 ------w C:\WINDOWS\ServicePackFiles\i386\fp4awebs.dll
    + 2004-08-04 07:56:44 876,653 ------w C:\WINDOWS\ServicePackFiles\i386\fp4awel.dll
    + 2004-08-04 07:56:50 22,800 ------w C:\WINDOWS\ServicePackFiles\i386\fp98sadm.exe
    + 2004-08-04 07:56:50 117,520 ------w C:\WINDOWS\ServicePackFiles\i386\fp98swin.exe
    + 2004-08-04 07:56:50 32,824 ------w C:\WINDOWS\ServicePackFiles\i386\fpadmcgi.exe
    + 2004-08-04 07:56:44 20,541 ------w C:\WINDOWS\ServicePackFiles\i386\fpadmdll.dll
    + 2004-08-04 07:56:50 196,686 ------w C:\WINDOWS\ServicePackFiles\i386\fpcount.exe
    + 2004-08-04 07:56:44 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\fpencode.dll
    + 2004-08-04 07:56:44 20,541 ------w C:\WINDOWS\ServicePackFiles\i386\fpexedll.dll
    + 2004-08-04 07:56:44 598,071 ------w C:\WINDOWS\ServicePackFiles\i386\fpmmc.dll
    + 2004-08-04 07:56:08 208,896 ------w C:\WINDOWS\ServicePackFiles\i386\fpmmcsat.dll
    + 2004-08-04 07:56:50 28,730 ------w C:\WINDOWS\ServicePackFiles\i386\fpremadm.exe
    + 2004-08-04 07:56:50 36,920 ------w C:\WINDOWS\ServicePackFiles\i386\fpsrvadm.exe
    + 2004-08-04 07:56:08 9,344 ------w C:\WINDOWS\ServicePackFiles\i386\framebuf.dll
    + 2004-08-04 07:56:44 185,856 ------w C:\WINDOWS\ServicePackFiles\i386\framedyn.dll
    + 2004-08-04 07:56:50 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
    + 2004-08-04 07:56:50 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\ftp.exe
    + 2004-08-04 07:56:44 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\fwcfg.dll
    + 2004-08-04 07:56:44 452,096 ------w C:\WINDOWS\ServicePackFiles\i386\fxsapi.dll
    + 2004-08-04 07:56:50 151,040 ------w C:\WINDOWS\ServicePackFiles\i386\fxsclnt.exe
    + 2004-08-04 07:56:44 72,192 ------w C:\WINDOWS\ServicePackFiles\i386\fxscom.dll
    + 2004-08-04 07:56:44 285,184 ------w C:\WINDOWS\ServicePackFiles\i386\fxscomex.dll
    + 2004-08-04 07:56:50 237,056 ------w C:\WINDOWS\ServicePackFiles\i386\fxscover.exe
    + 2004-08-04 07:56:44 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\fxsdrv.dll
    + 2004-08-04 07:56:44 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\fxsevent.dll
    + 2004-08-04 07:56:44 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\fxsext32.dll
    + 2004-08-04 07:56:44 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\fxsmon.dll
    + 2004-08-04 07:56:44 132,608 ------w C:\WINDOWS\ServicePackFiles\i386\fxsocm.dll
    + 2004-08-04 07:56:44 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\fxsperf.dll
    + 2004-08-04 07:56:08 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\fxsres.dll
    + 2004-08-04 07:56:44 562,176 ------w C:\WINDOWS\ServicePackFiles\i386\fxsst.dll
    + 2004-08-04 07:56:50 275,456 ------w C:\WINDOWS\ServicePackFiles\i386\fxssvc.exe
    + 2004-08-04 07:56:44 246,272 ------w C:\WINDOWS\ServicePackFiles\i386\fxst30.dll
    + 2004-08-04 07:56:44 397,312 ------w C:\WINDOWS\ServicePackFiles\i386\fxstiff.dll
    + 2004-08-04 07:56:44 154,112 ------w C:\WINDOWS\ServicePackFiles\i386\fxsui.dll
    + 2004-08-04 07:56:44 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\fxswzrd.dll
    + 2004-08-04 07:56:44 400,384 ------w C:\WINDOWS\ServicePackFiles\i386\fxsxp32.dll
    + 2004-08-04 06:07:44 46,464 ------w C:\WINDOWS\ServicePackFiles\i386\gagp30kx.sys
    + 2004-08-04 06:08:22 10,624 ------w C:\WINDOWS\ServicePackFiles\i386\gameenum.sys
    + 2004-08-04 06:08:30 59,136 ------w C:\WINDOWS\ServicePackFiles\i386\gckernel.sys
    + 2004-08-04 07:56:44 278,016 ------w C:\WINDOWS\ServicePackFiles\i386\gdi32.dll
    + 2004-08-04 07:56:44 122,880 ------w C:\WINDOWS\ServicePackFiles\i386\glu32.dll
    + 2004-08-04 05:31:44 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\gpkcsp.dll
    + 2004-08-04 07:56:08 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\gpkrsrc.dll
    + 2004-08-04 07:56:50 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
    + 2004-08-04 05:59:20 28,288 ------w C:\WINDOWS\ServicePackFiles\i386\grserial.sys
    + 2004-08-04 07:56:44 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\guitrn.dll
    + 2004-08-04 07:56:44 108,544 ------w C:\WINDOWS\ServicePackFiles\i386\guitrn_a.dll
    + 2004-08-04 07:56:44 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\h323cc.dll
    + 2004-08-04 07:56:44 614,912 ------w C:\WINDOWS\ServicePackFiles\i386\h323msp.dll
    + 2004-08-04 05:59:20 105,472 ------w C:\WINDOWS\ServicePackFiles\i386\hal.dll
    + 2004-08-04 05:59:10 131,968 ------w C:\WINDOWS\ServicePackFiles\i386\halaacpi.dll
    + 2004-08-04 05:59:08 81,280 ------w C:\WINDOWS\ServicePackFiles\i386\halacpi.dll
    + 2004-08-04 05:59:14 150,656 ------w C:\WINDOWS\ServicePackFiles\i386\halapic.dll
    + 2004-08-04 05:59:14 134,400 ------w C:\WINDOWS\ServicePackFiles\i386\halmacpi.dll
    + 2004-08-04 05:59:20 152,704 ------w C:\WINDOWS\ServicePackFiles\i386\halmps.dll
    + 2004-08-04 05:59:20 77,696 ------w C:\WINDOWS\ServicePackFiles\i386\halsp.dll
    + 2004-08-04 07:56:44 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\hccoin.dll
    + 2004-08-04 07:56:50 776,192 ------w C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
    + 2004-08-04 07:56:52 751,616 ------w C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe
    + 2004-08-04 07:56:52 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\hh.exe
    + 2004-08-04 07:56:44 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll
    + 2004-08-04 07:56:44 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\hid.dll
    + 2004-08-04 06:10:38 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\hidbth.sys
    + 2004-08-04 06:08:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\hidclass.sys
    + 2004-08-04 06:08:20 15,104 ------w C:\WINDOWS\ServicePackFiles\i386\hidir.sys
    + 2004-08-04 06:08:18 24,960 ------w C:\WINDOWS\ServicePackFiles\i386\hidparse.sys
    + 2004-08-04 07:56:44 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\hidserv.dll
    + 2004-08-04 07:56:44 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
    + 2004-08-04 07:56:44 344,064 ------w C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
    + 2004-08-04 07:56:44 330,752 ------w C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
    + 2004-08-04 07:56:44 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\hostmib.dll
    + 2004-08-04 07:56:44 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
    + 2004-08-04 07:56:44 10,752 ------w C:\WINDOWS\ServicePackFiles\i386\hpcjrr.dll
    + 2004-08-04 07:56:44 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\hpcjrrps.dll
    + 2004-08-04 07:56:44 87,552 ------w C:\WINDOWS\ServicePackFiles\i386\hpfud50.dll
    + 2004-08-04 07:56:52 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\hscupd.exe
    + 2004-08-04 05:41:48 220,032 ------w C:\WINDOWS\ServicePackFiles\i386\hsfbs2s2.sys
    + 2004-08-04 07:56:44 32,285 ------w C:\WINDOWS\ServicePackFiles\i386\hsfcisp2.dll
    + 2004-08-04 05:41:50 685,056 ------w C:\WINDOWS\ServicePackFiles\i386\hsfcxts2.sys
    + 2004-08-04 05:41:56 1,041,536 ------w C:\WINDOWS\ServicePackFiles\i386\hsfdpsp2.sys
    + 2004-08-04 06:00:14 263,040 ------w C:\WINDOWS\ServicePackFiles\i386\http.sys
    + 2004-08-04 07:56:44 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\httpapi.dll
    + 2004-08-04 07:56:44 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\htui.dll
    + 2004-08-04 07:56:44 345,088 ------w C:\WINDOWS\ServicePackFiles\i386\hypertrm.dll
    + 2004-08-04 06:00:52 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\i2omgmt.sys
    + 2004-08-04 06:00:52 18,560 ------w C:\WINDOWS\ServicePackFiles\i386\i2omp.sys
    + 2004-08-04 06:14:38 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys
    + 2004-08-04 07:56:44 702,845 ------w C:\WINDOWS\ServicePackFiles\i386\i81xdnt5.dll
    + 2004-08-04 05:29:38 161,020 ------w C:\WINDOWS\ServicePackFiles\i386\i81xnt5.sys
    + 2004-08-04 07:56:44 119,808 ------w C:\WINDOWS\ServicePackFiles\i386\iasrad.dll
    + 2004-08-04 07:56:44 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\icaapi.dll
    + 2004-08-04 07:56:44 80,384 ------w C:\WINDOWS\ServicePackFiles\i386\iccvid.dll
    + 2004-08-04 07:56:44 253,952 ------w C:\WINDOWS\ServicePackFiles\i386\icm32.dll
    + 2004-08-04 07:56:08 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\icmp.dll
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\iconlib.dll
    + 2004-08-04 07:56:44 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\icwconn.dll
    + 2004-08-04 07:56:52 222,208 ------w C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
    + 2004-08-04 07:56:52 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
    + 2004-08-04 07:56:44 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
    + 2004-08-04 07:56:44 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\icwdl.dll
    + 2004-08-04 07:56:44 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
    + 2004-08-04 07:56:44 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\icwphbk.dll
    + 2004-08-04 07:56:52 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\icwrmind.exe
    + 2004-08-04 07:56:44 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\icwutil.dll
    + 2004-08-04 07:56:44 120,832 ------w C:\WINDOWS\ServicePackFiles\i386\idq.dll
    + 2004-08-04 07:56:52 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\ie4uinit.exe
    + 2004-08-04 07:56:44 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\ieakeng.dll
    + 2004-08-04 07:56:44 216,576 ------w C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
    + 2004-08-04 07:56:44 323,584 ------w C:\WINDOWS\ServicePackFiles\i386\iedkcs32.dll
    + 2004-08-04 07:56:52 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\iedw.exe
    + 2004-08-04 07:56:44 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\ieencode.dll
    + 2004-08-04 07:56:44 249,344 ------w C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
    + 2004-08-04 07:56:44 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
    + 2004-08-04 07:56:44 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
    + 2004-08-04 07:56:52 100,864 ------w C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
    + 2004-08-04 07:56:52 122,368 ------w C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
    + 2004-08-04 07:56:44 135,680 ------w C:\WINDOWS\ServicePackFiles\i386\ifmon.dll
    + 2004-08-04 07:56:44 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\igmpagnt.dll
    + 2004-08-04 07:56:44 505,344 ------w C:\WINDOWS\ServicePackFiles\i386\iis.dll
    + 2004-08-04 07:56:44 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\ils.dll
    + 2004-08-04 07:56:44 144,384 ------w C:\WINDOWS\ServicePackFiles\i386\imagehlp.dll
    + 2004-08-04 07:56:52 157,696 ------w C:\WINDOWS\ServicePackFiles\i386\imapi.exe
    + 2004-08-04 06:00:16 41,856 ------w C:\WINDOWS\ServicePackFiles\i386\imapi.sys
    + 2004-08-04 07:56:44 36,921 ------w C:\WINDOWS\ServicePackFiles\i386\imeshare.dll
    + 2004-08-04 07:56:44 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\imgutil.dll
    + 2004-08-04 07:56:44 110,080 ------w C:\WINDOWS\ServicePackFiles\i386\imm32.dll
    + 2004-08-04 07:56:44 274,432 ------w C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
    + 2004-08-04 07:56:44 678,400 ------w C:\WINDOWS\ServicePackFiles\i386\inetcomm.dll
    + 2004-08-04 07:56:44 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\inetmib1.dll
    + 2004-08-04 07:56:44 75,264 ------w C:\WINDOWS\ServicePackFiles\i386\inetpp.dll
    + 2004-08-04 07:56:44 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
    + 2004-08-04 07:56:10 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\inetres.dll
    + 2004-08-04 07:56:52 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
    + 2004-08-04 07:56:44 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\initpki.dll
    + 2004-08-04 07:56:44 123,392 ------w C:\WINDOWS\ServicePackFiles\i386\input.dll
    + 2004-08-04 07:56:44 96,256 ------w C:\WINDOWS\ServicePackFiles\i386\inseng.dll
    + 2004-08-04 05:59:42 5,504 ------w C:\WINDOWS\ServicePackFiles\i386\intelide.sys
    + 2004-08-04 05:59:20 36,096 ------w C:\WINDOWS\ServicePackFiles\i386\intelppm.sys
    + 2004-08-04 06:00:08 29,056 ------w C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys
    + 2004-08-04 07:56:52 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\ipconfig.exe
    + 2004-08-04 07:56:06 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\ipevldpc.dll
    + 2004-08-04 07:56:06 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\ipevlpid.dll
    + 2004-08-04 07:56:44 94,720 ------w C:\WINDOWS\ServicePackFiles\i386\iphlpapi.dll
    + 2004-08-04 06:04:46 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\ipinip.sys
    + 2004-08-04 07:56:12 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\ipmntdpc.dll
    + 2004-08-04 06:04:52 134,912 ------w C:\WINDOWS\ServicePackFiles\i386\ipnat.sys
    + 2004-08-04 07:56:44 331,264 ------w C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll
    + 2004-08-04 07:56:44 330,752 ------w C:\WINDOWS\ServicePackFiles\i386\ippromon.dll
    + 2004-08-04 07:56:44 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\iprip.dll
    + 2004-08-04 06:14:30 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\ipsec.sys
    + 2004-08-04 07:56:44 349,696 ------w C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
    + 2004-08-04 07:56:44 182,784 ------w C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll
    + 2004-08-04 07:56:28 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\ipseldpc.dll
    + 2004-08-04 07:56:06 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\ipselpid.dll
    + 2004-08-04 07:56:44 384,000 ------w C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
    + 2004-08-04 07:56:52 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\ipv6.exe
    + 2004-08-04 07:56:44 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\ipv6mon.dll
    + 2004-08-04 07:56:52 31,232 ------w C:\WINDOWS\ServicePackFiles\i386\ipxroute.exe
    + 2004-08-04 07:56:44 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\ir41_qc.dll
    + 2004-08-04 07:56:44 338,432 ------w C:\WINDOWS\ServicePackFiles\i386\ir41_qcx.dll
    + 2004-08-04 07:56:44 755,200 ------w C:\WINDOWS\ServicePackFiles\i386\ir50_32.dll
    + 2004-08-04 07:56:44 200,192 ------w C:\WINDOWS\ServicePackFiles\i386\ir50_qc.dll
    + 2004-08-04 07:56:44 183,808 ------w C:\WINDOWS\ServicePackFiles\i386\ir50_qcx.dll
    + 2004-08-04 06:00:54 87,424 ------w C:\WINDOWS\ServicePackFiles\i386\irda.sys
    + 2004-08-04 06:00:48 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\irenum.sys
    + 2004-08-04 07:56:52 160,256 ------w C:\WINDOWS\ServicePackFiles\i386\irftp.exe
    + 2004-08-04 07:56:44 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\irmon.dll
    + 2004-08-04 07:56:44 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\isign32.dll
    + 2004-08-04 07:56:44 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\isrdbg32.dll
    + 2004-08-04 07:56:44 143,872 ------w C:\WINDOWS\ServicePackFiles\i386\itircl.dll
    + 2004-08-04 07:56:44 134,144 ------w C:\WINDOWS\ServicePackFiles\i386\itss.dll
    + 2004-08-04 07:56:44 192,000 ------w C:\WINDOWS\ServicePackFiles\i386\iuengine.dll
    + 2004-08-04 07:56:44 54,272 ------w C:\WINDOWS\ServicePackFiles\i386\ixsso.dll
    + 2004-08-04 07:56:44 47,616 ------w C:\WINDOWS\ServicePackFiles\i386\iyuv_32.dll
    + 2004-08-04 07:56:44 450,560 ------w C:\WINDOWS\ServicePackFiles\i386\jscript.dll
    + 2004-08-04 07:56:44 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\jsproxy.dll
    + 2004-08-04 05:58:34 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys
    + 2004-08-04 07:56:12 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\kbdfi1.dll
    + 2004-08-04 05:58:36 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\kbdhid.sys
    + 2004-08-04 07:56:12 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\kbdinbe1.dll
    + 2004-08-04 07:56:12 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\kbdinben.dll
    + 2004-08-04 07:56:12 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\kbdinmal.dll
    + 2004-08-04 07:56:12 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\kbdmaori.dll
    + 2004-08-04 07:56:12 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\kbdmlt47.dll
    + 2004-08-04 07:56:12 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\kbdmlt48.dll
    + 2004-08-04 07:56:12 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\kbdno1.dll
    + 2004-08-04 07:56:12 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\kbdsmsfi.dll
    + 2004-08-04 07:56:12 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\kbdsmsno.dll
    + 2004-08-04 07:56:12 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\kbdukx.dll
    + 2004-08-04 05:59:24 7,424 ------w C:\WINDOWS\ServicePackFiles\i386\kd1394.dll
    + 2004-08-04 07:56:44 294,400 ------w C:\WINDOWS\ServicePackFiles\i386\kerberos.dll
    + 2004-08-04 07:56:44 983,552 ------w C:\WINDOWS\ServicePackFiles\i386\kernel32.dll
    + 2004-08-04 05:46:56 42,537 ------w C:\WINDOWS\ServicePackFiles\i386\keyboard.sys
    + 2004-08-04 07:56:44 150,528 ------w C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
    + 2004-08-04 06:07:50 171,776 ------w C:\WINDOWS\ServicePackFiles\i386\kmixer.sys
    + 2004-08-04 05:49:34 92,224 ------w C:\WINDOWS\ServicePackFiles\i386\krnl386.exe
    + 2004-08-04 07:56:44 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\krnlprov.dll
    + 2004-08-04 06:15:22 140,928 ------w C:\WINDOWS\ServicePackFiles\i386\ks.sys
    + 2004-08-04 05:59:48 92,032 ------w C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\ksuser.dll
    + 2004-08-04 05:31:52 97,792 ------w C:\WINDOWS\ServicePackFiles\i386\lang\chtmbx.dll
    + 2004-08-04 05:31:54 56,320 ------w C:\WINDOWS\ServicePackFiles\i386\lang\chtskdic.dll
    + 2004-08-04 05:31:54 173,568 ------w C:\WINDOWS\ServicePackFiles\i386\lang\chtskf.dll
    + 2004-08-04 05:31:54 198,656 ------w C:\WINDOWS\ServicePackFiles\i386\lang\cintime.dll
    + 2004-08-04 05:31:56 487,936 ------w C:\WINDOWS\ServicePackFiles\i386\lang\cintsetp.exe
    + 2004-08-04 05:31:40 65,591 ------w C:\WINDOWS\ServicePackFiles\i386\lang\cplexe.exe
    + 2004-08-04 06:04:38 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imekrcic.dll
    + 2004-08-04 06:04:34 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2004-08-04 05:31:50 811,064 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjp81k.dll
    + 2004-08-04 05:31:52 368,696 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpcic.dll
    + 2004-08-04 05:31:52 716,856 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpcus.dll
    + 2004-08-04 05:31:54 81,976 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.dll
    + 2004-08-04 05:31:54 315,449 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.exe
    + 2004-08-04 05:31:56 163,897 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpdsvr.exe
    + 2004-08-04 05:31:58 213,381 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpinst.exe
    + 2004-08-04 05:32:00 217,144 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpmig.exe
    + 2004-08-04 05:32:12 241,719 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjprw.exe
    + 2004-08-04 05:32:16 270,392 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjputy.exe
    + 2004-08-04 05:32:16 274,489 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjputyc.dll
    + 2004-08-04 05:32:28 102,456 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imlang.dll
    + 2004-08-04 05:31:50 74,680 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imscinst.exe
    + 2004-08-04 05:32:12 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\lang\padrs404.dll
    + 2004-08-04 05:31:50 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\lang\padrs804.dll
    + 2004-08-04 05:31:50 175,104 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2004-08-04 05:31:50 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2004-08-04 05:31:50 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pintlphr.exe
    + 2004-08-04 05:31:50 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pmigrate.dll
    + 2004-08-04 05:32:16 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\lang\tintlphr.exe
    + 2004-08-04 05:32:16 462,848 ------w C:\WINDOWS\ServicePackFiles\i386\lang\tintsetp.exe
    + 2004-08-04 05:32:14 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\lang\tmigrate.dll
    + 2004-08-04 06:04:12 76,288 ------w C:\WINDOWS\ServicePackFiles\i386\lang\uniime.dll
    + 2004-08-04 05:32:36 426,041 ------w C:\WINDOWS\ServicePackFiles\i386\lang\voicepad.dll
    + 2004-08-04 05:32:36 86,073 ------w C:\WINDOWS\ServicePackFiles\i386\lang\voicesub.dll
    + 2004-08-04 07:56:44 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\laprxy.dll
    + 2004-08-04 05:59:34 34,688 ------w C:\WINDOWS\ServicePackFiles\i386\lbrtfdc.sys
    + 2004-08-04 07:56:44 423,936 ------w C:\WINDOWS\ServicePackFiles\i386\licdll.dll
    + 2004-08-04 07:56:44 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\licmgr10.dll
    + 2004-08-04 07:56:44 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\licwmi.dll
    + 2004-08-04 07:56:44 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll
    + 2004-08-04 07:56:44 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\lmhsvc.dll
    + 2004-08-04 07:56:44 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\lmmib2.dll
    + 2004-08-04 07:56:44 399,872 ------w C:\WINDOWS\ServicePackFiles\i386\lmrt.dll
    + 2004-08-04 07:56:44 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\loadperf.dll
    + 2004-08-04 07:56:44 221,696 ------w C:\WINDOWS\ServicePackFiles\i386\localsec.dll
    + 2004-08-04 07:56:44 341,504 ------w C:\WINDOWS\ServicePackFiles\i386\localspl.dll
    + 2004-08-04 07:56:44 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\localui.dll
    + 2004-08-04 07:56:52 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\locator.exe
    + 2004-08-04 07:56:44 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\log.dll
    + 2004-08-04 07:56:52 111,616 ------w C:\WINDOWS\ServicePackFiles\i386\logagent.exe
    + 2004-08-04 07:56:52 67,072 ------w C:\WINDOWS\ServicePackFiles\i386\logman.exe
    + 2004-08-04 07:56:58 228,352 ------w C:\WINDOWS\ServicePackFiles\i386\logon.scr
    + 2004-08-04 07:56:52 522,240 ------w C:\WINDOWS\ServicePackFiles\i386\logonui.exe
    + 2004-08-04 07:56:44 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\lpdsvc.dll
    + 2004-08-04 07:56:44 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\lpk.dll
    + 2004-08-04 07:56:44 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\lprhelp.dll
    + 2004-08-04 07:56:44 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\lprmon.dll
    + 2004-08-04 07:56:44 721,920 ------w C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll
    + 2004-08-04 07:56:52 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\lsass.exe
    + 2004-08-04 05:41:36 606,684 ------w C:\WINDOWS\ServicePackFiles\i386\ltmdmnt.sys
    + 2004-08-04 05:41:38 420,992 ------w C:\WINDOWS\ServicePackFiles\i386\ltmdmntt.sys
    + 2004-08-04 06:00:08 7,040 ------w C:\WINDOWS\ServicePackFiles\i386\ltotape.sys
    + 2004-08-04 05:39:32 20,864 ------w C:\WINDOWS\ServicePackFiles\i386\lwadihid.sys
    + 2004-08-04 07:56:52 80,384 ------w C:\WINDOWS\ServicePackFiles\i386\magnify.exe
    + 2004-08-04 07:56:52 93,184 ------w C:\WINDOWS\ServicePackFiles\i386\makecab.exe
    + 2004-08-04 07:56:44 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\mcastmib.dll
    + 2004-08-04 07:56:44 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\mciavi32.dll
    + 2004-08-04 07:56:44 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\mciqtz32.dll
    + 2004-08-04 07:56:44 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\mciseq.dll
    + 2004-08-04 07:56:44 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\mciwave.dll
    + 2004-08-04 07:56:44 118,272 ------w C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
    + 2004-08-04 07:56:44 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.dll
    + 2004-08-04 05:41:56 11,868 ------w C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.sys
    + 2004-08-04 06:00:50 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\memstpci.sys
    + 2004-08-04 06:07:46 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\mf.sys
    + 2004-08-04 07:56:44 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\mf3216.dll
    + 2004-08-04 07:56:44 1,028,096 ------w C:\WINDOWS\ServicePackFiles\i386\mfc42.dll
    + 2004-08-04 07:56:44 1,024,000 ------w C:\WINDOWS\ServicePackFiles\i386\mfc42u.dll
    + 2004-08-04 07:56:44 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\mfcsubs.dll
    + 2004-08-04 07:56:44 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\mgmtapi.dll
    + 2004-08-04 07:56:44 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\midimap.dll
    + 2004-08-04 07:56:44 201,216 ------w C:\WINDOWS\ServicePackFiles\i386\migism.dll
    + 2004-08-04 07:56:44 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\migism_a.dll
    + 2004-08-04 07:56:44 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\miglibnt.dll
    + 2004-08-04 07:56:52 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\migload.exe
    + 2004-08-04 07:56:52 794,624 ------w C:\WINDOWS\ServicePackFiles\i386\migrate.exe
    + 2004-08-04 07:56:52 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\migregdb.exe
    + 2004-08-04 07:56:52 247,808 ------w C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
    + 2004-08-04 07:56:52 243,712 ------w C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
    + 2004-08-04 07:56:44 586,240 ------w C:\WINDOWS\ServicePackFiles\i386\mlang.dll
    + 2004-08-04 07:56:52 822,784 ------w C:\WINDOWS\ServicePackFiles\i386\mmc.exe
    + 2004-08-04 07:56:44 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
    + 2004-08-04 07:56:44 1,192,960 ------w C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
    + 2004-08-04 07:56:44 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
    + 2004-08-04 07:56:44 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\mmfutil.dll
    + 2004-08-04 05:51:12 68,768 ------w C:\WINDOWS\ServicePackFiles\i386\mmsystem.dll
    + 2004-08-04 07:56:44 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\mnmdd.dll
    + 2004-08-04 07:56:52 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
    + 2004-08-04 07:56:44 207,360 ------w C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
    + 2004-08-04 07:56:52 151,040 ------w C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
    + 2004-08-04 06:08:06 30,080 ------w C:\WINDOWS\ServicePackFiles\i386\modem.sys
    + 2004-08-04 07:56:44 153,600 ------w C:\WINDOWS\ServicePackFiles\i386\modemui.dll
    + 2004-08-04 07:56:52 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\mofcomp.exe
    + 2004-08-04 07:56:44 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\mofd.dll
    + 2004-08-04 07:56:12 216,064 ------w C:\WINDOWS\ServicePackFiles\i386\moricons.dll
    + 2004-08-04 05:58:34 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\mouclass.sys
    + 2004-08-04 05:58:32 42,240 ------w C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys
    + 2004-08-04 07:56:54 3,563,008 ------w C:\WINDOWS\ServicePackFiles\i386\moviemk.exe
    + 2004-08-04 07:56:44 310,272 ------w C:\WINDOWS\ServicePackFiles\i386\mp43dmod.dll
    + 2004-08-04 07:56:44 384,512 ------w C:\WINDOWS\ServicePackFiles\i386\mp4sdmod.dll
    + 2004-08-04 06:10:14 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\mpe.sys
    + 2004-08-04 07:56:44 240,640 ------w C:\WINDOWS\ServicePackFiles\i386\mpg4dmod.dll
    + 2004-08-04 07:56:54 131,072 ------w C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
    + 2004-08-04 07:56:54 12,319 ------w C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
    + 2004-08-04 07:56:44 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\mpr.dll
    + 2004-08-04 07:56:44 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\mprapi.dll
    + 2004-08-04 07:56:44 368,640 ------w C:\WINDOWS\ServicePackFiles\i386\mpvis.dll
    + 2004-08-04 06:00:58 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys
    + 2004-08-04 06:15:18 451,456 ------w C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys
    + 2004-08-04 07:56:44 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\msacm32.dll
    + 2004-08-04 07:56:44 331,776 ------w C:\WINDOWS\ServicePackFiles\i386\msadce.dll
    + 2004-08-04 07:56:14 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\msadcer.dll
    + 2004-08-04 07:56:44 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\msadcf.dll
    + 2004-08-04 07:56:14 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msadcfr.dll
    + 2004-08-04 07:56:44 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\msadco.dll
    + 2004-08-04 07:56:14 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msadcor.dll
    + 2004-08-04 07:56:44 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\msadcs.dll
    + 2004-08-04 07:56:44 155,648 ------w C:\WINDOWS\ServicePackFiles\i386\msadds.dll
    + 2004-08-04 07:56:14 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\msaddsr.dll
    + 2004-08-04 07:56:14 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\msader15.dll
    + 2004-08-04 07:56:44 536,576 ------w C:\WINDOWS\ServicePackFiles\i386\msado15.dll
    + 2004-08-04 07:56:44 180,224 ------w C:\WINDOWS\ServicePackFiles\i386\msadomd.dll
    + 2004-08-04 07:56:44 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\msador15.dll
    + 2004-08-04 07:56:44 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\msadox.dll
    + 2004-08-04 07:56:44 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\msadrh15.dll
    + 2004-08-04 07:56:14 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\msafd.dll
    + 2004-08-04 07:56:44 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\msapsspc.dll
    + 2004-08-04 07:56:44 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\msasn1.dll
    + 2004-08-04 07:56:44 220,160 ------w C:\WINDOWS\ServicePackFiles\i386\mscandui.dll
    + 2004-08-04 07:56:44 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\mscms.dll
    + 2004-08-04 07:56:44 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\msconf.dll
    + 2004-08-04 07:56:54 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
    + 2004-07-17 18:42:20 116,288 ------w C:\WINDOWS\ServicePackFiles\i386\msconv97.dll
    + 2004-08-04 07:56:14 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\mscpx32r.dll
    + 2004-08-04 07:56:44 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\mscpxl32.dll
    + 2004-08-04 07:56:44 294,400 ------w C:\WINDOWS\ServicePackFiles\i386\msctf.dll
    + 2004-08-04 07:56:44 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\msctfp.dll
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdadc.dll
    + 2004-08-04 07:56:44 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\msdadiag.dll
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdaenum.dll
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdaer.dll
    + 2004-08-04 07:56:44 532,480 ------w C:\WINDOWS\ServicePackFiles\i386\msdaipp.dll
    + 2004-08-04 07:56:44 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\msdaora.dll
    + 2004-08-04 07:56:14 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdaorar.dll
    + 2004-08-04 07:56:44 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\msdaosp.dll
    + 2004-08-04 07:56:14 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdaprsr.dll
    + 2004-08-04 07:56:44 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\msdaprst.dll
    + 2004-08-04 07:56:44 204,800 ------w C:\WINDOWS\ServicePackFiles\i386\msdaps.dll
    + 2004-08-04 07:56:44 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\msdarem.dll
    + 2004-08-04 07:56:14 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdaremr.dll
    + 2004-08-04 07:56:44 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\msdart.dll
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdasc.dll
    + 2004-08-04 07:56:44 315,392 ------w C:\WINDOWS\ServicePackFiles\i386\msdasql.dll
    + 2004-08-04 07:56:14 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdasqlr.dll
    + 2004-08-04 07:56:44 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\msdatl3.dll
    + 2004-08-04 07:56:44 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\msdatt.dll
    + 2004-08-04 07:56:44 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdaurl.dll
    + 2004-08-04 07:56:44 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\msdfmap.dll
    + 2004-08-04 07:56:44 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\msdmo.dll
    + 2004-08-04 07:56:54 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
    + 2004-08-04 07:56:44 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\msdtclog.dll
    + 2004-08-04 07:56:44 425,472 ------w C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll
    + 2004-08-04 07:56:44 949,248 ------w C:\WINDOWS\ServicePackFiles\i386\msdtctm.dll
    + 2004-08-04 07:56:44 161,280 ------w C:\WINDOWS\ServicePackFiles\i386\msdtcuiu.dll
    + 2004-08-04 06:10:00 51,328 ------w C:\WINDOWS\ServicePackFiles\i386\msdv.sys
    + 2004-08-04 07:56:14 4,126 ------w C:\WINDOWS\ServicePackFiles\i386\msdxmlc.dll
    + 2004-08-04 07:56:44 512,029 ------w C:\WINDOWS\ServicePackFiles\i386\msexch40.dll
    + 2004-08-04 07:56:44 319,517 ------w C:\WINDOWS\ServicePackFiles\i386\msexcl40.dll
    + 2004-08-04 06:00:42 19,072 ------w C:\WINDOWS\ServicePackFiles\i386\msfs.sys
    + 2004-08-04 07:56:44 537,088 ------w C:\WINDOWS\ServicePackFiles\i386\msftedit.dll
    + 2004-08-04 07:56:44 994,304 ------w C:\WINDOWS\ServicePackFiles\i386\msgina.dll
    + 2004-08-04 06:04:14 35,072 ------w C:\WINDOWS\ServicePackFiles\i386\msgpc.sys
    + 2004-08-04 07:56:44 3,166,208 ------w C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
    + 2004-08-04 07:56:44 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\msgrocm.dll
    + 2004-08-04 07:56:44 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\msgsc.dll
    + 2004-08-04 07:56:14 180,224 ------w C:\WINDOWS\ServicePackFiles\i386\msgslang.dll
    + 2004-08-04 07:56:44 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll
    + 2004-08-04 07:56:58 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\msh261.drv
    + 2004-08-04 07:56:58 294,912 ------w C:\WINDOWS\ServicePackFiles\i386\msh263.drv
    + 2004-08-04 07:56:54 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\mshta.exe
    + 2004-08-04 07:56:44 3,003,392 ------w C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
    + 2004-08-04 07:56:44 448,512 ------w C:\WINDOWS\ServicePackFiles\i386\mshtmled.dll
    + 2004-08-04 07:56:16 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\mshtmler.dll
    + 2004-08-04 07:56:44 2,804,224 ------w C:\WINDOWS\ServicePackFiles\i386\msi.dll
    + 2004-08-04 07:56:44 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\msident.dll
    + 2004-08-04 07:56:44 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\msidle.dll
    + 2004-08-04 07:56:44 248,832 ------w C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
    + 2004-08-04 07:56:54 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
    + 2004-08-04 07:56:44 331,264 ------w C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
    + 2004-08-04 07:56:44 4,608 ------w C:\WINDOWS\ServicePackFiles\i386\msimg32.dll
    + 2004-08-04 07:56:54 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\msimn.exe
    + 2004-08-04 07:56:18 884,736 ------w C:\WINDOWS\ServicePackFiles\i386\msimsg.dll
    + 2004-08-04 07:56:44 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\msimtf.dll
    + 2004-08-04 07:56:44 376,320 ------w C:\WINDOWS\ServicePackFiles\i386\msinfo.dll
    + 2004-08-04 06:00:48 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\msircomm.sys
    + 2004-08-04 07:56:54 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\msiregmv.exe
    + 2004-08-04 07:56:44 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\msisip.dll
    + 2004-08-04 07:56:44 1,507,356 ------w C:\WINDOWS\ServicePackFiles\i386\msjet40.dll
    + 2004-07-17 18:34:48 358,976 ------w C:\WINDOWS\ServicePackFiles\i386\msjetol1.dll
    + 2004-08-04 07:56:44 151,583 ------w C:\WINDOWS\ServicePackFiles\i386\msjint40.dll
    + 2004-08-04 07:56:44 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\msjro.dll
    + 2004-08-04 07:56:44 53,279 ------w C:\WINDOWS\ServicePackFiles\i386\msjter40.dll
    + 2004-08-04 07:56:44 241,693 ------w C:\WINDOWS\ServicePackFiles\i386\msjtes40.dll
    + 2004-08-04 05:58:42 7,552 ------w C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys
    + 2004-08-04 07:56:44 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\mslbui.dll
    + 2004-08-04 07:56:44 213,023 ------w C:\WINDOWS\ServicePackFiles\i386\msltus40.dll
    + 2004-08-04 07:56:44 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\mslwvtts.dll
    + 2004-08-04 07:56:54 1,675,264 ------w C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
    + 2004-08-04 07:57:02 259,072 ------w C:\WINDOWS\ServicePackFiles\i386\msnetobj.dll
    + 2004-08-04 07:56:44 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\msnsspc.dll
    + 2004-08-04 07:56:44 122,368 ------w C:\WINDOWS\ServicePackFiles\i386\msobcomm.dll
    + 2004-08-04 07:56:44 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msobdl.dll
    + 2004-08-04 07:56:44 561,664 ------w C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
    + 2004-08-04 07:56:44 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\msobshel.dll
    + 2004-08-04 07:56:44 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\msobweb.dll
    + 2004-08-04 07:56:44 1,311,232 ------w C:\WINDOWS\ServicePackFiles\i386\msoe.dll
    + 2004-08-04 07:56:44 252,928 ------w C:\WINDOWS\ServicePackFiles\i386\msoeacct.dll
    + 2004-08-04 07:56:20 2,479,616 ------w C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
    + 2004-08-04 07:56:44 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\msoert2.dll
    + 2004-08-04 07:56:20 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\msorc32r.dll
    + 2004-08-04 07:56:44 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\msorcl32.dll
    + 2004-08-04 07:56:54 350,720 ------w C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
    + 2004-08-04 07:56:44 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\mspatcha.dll
    + 2004-08-04 07:56:44 348,189 ------w C:\WINDOWS\ServicePackFiles\i386\mspbde40.dll
    + 2004-08-04 05:58:40 5,376 ------w C:\WINDOWS\ServicePackFiles\i386\mspclock.sys
    + 2004-08-04 07:56:44 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\mspmsnsv.dll
    + 2004-08-04 07:56:44 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\mspmsp.dll
    + 2004-08-04 05:58:42 4,992 ------w C:\WINDOWS\ServicePackFiles\i386\mspqm.sys
    + 2004-08-04 07:56:20 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\msprivs.dll
    + 2004-08-04 07:56:44 146,432 ------w C:\WINDOWS\ServicePackFiles\i386\msrating.dll
    + 2004-08-04 07:56:44 421,919 ------w C:\WINDOWS\ServicePackFiles\i386\msrd2x40.dll
    + 2004-08-04 07:56:44 315,423 ------w C:\WINDOWS\ServicePackFiles\i386\msrd3x40.dll
    + 2004-08-04 07:56:44 552,989 ------w C:\WINDOWS\ServicePackFiles\i386\msrepl40.dll
    + 2004-08-04 07:56:44 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\msrle32.dll
    + 2004-08-04 07:56:44 134,656 ------w C:\WINDOWS\ServicePackFiles\i386\mssap.dll
    + 2004-08-04 07:57:02 356,352 ------w C:\WINDOWS\ServicePackFiles\i386\msscp.dll
    + 2004-08-04 06:07:48 15,488 ------w C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys
    + 2004-08-04 07:56:44 274,432 ------w C:\WINDOWS\ServicePackFiles\i386\mst120.dll
    + 2004-08-04 07:56:44 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\mst123.dll
    + 2004-08-04 06:10:00 49,024 ------w C:\WINDOWS\ServicePackFiles\i386\mstape.sys
    + 2004-08-04 07:56:44 274,944 ------w C:\WINDOWS\ServicePackFiles\i386\mstask.dll
    + 2004-08-04 05:58:40 5,504 ------w C:\WINDOWS\ServicePackFiles\i386\mstee.sys
    + 2004-08-04 07:56:44 258,077 ------w C:\WINDOWS\ServicePackFiles\i386\mstext40.dll
    + 2004-08-04 07:56:44 530,432 ------w C:\WINDOWS\ServicePackFiles\i386\mstime.dll
    + 2004-08-04 07:56:54 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\mstinit.exe
    + 2004-08-04 07:56:44 115,712 ------w C:\WINDOWS\ServicePackFiles\i386\mstlsapi.dll
    + 2004-08-04 05:59:42 415,232 ------w C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
    + 2004-08-04 05:59:44 655,360 ------w C:\WINDOWS\ServicePackFiles\i386\mstscax.dll
    + 2004-08-04 07:56:44 195,072 ------w C:\WINDOWS\ServicePackFiles\i386\msutb.dll
    + 2004-08-04 07:56:44 129,536 ------w C:\WINDOWS\ServicePackFiles\i386\msv1_0.dll
    + 2004-08-04 07:56:44 1,392,671 ------w C:\WINDOWS\ServicePackFiles\i386\msvbvm60.dll
    + 2004-08-04 07:56:44 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\msvcirt.dll
    + 2004-08-04 07:56:44 413,696 ------w C:\WINDOWS\ServicePackFiles\i386\msvcp60.dll
    + 2004-08-04 07:56:44 343,040 ------w C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll
    + 2004-08-04 05:58:26 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\msvcrt40.dll
    + 2004-08-04 07:56:44 120,832 ------w C:\WINDOWS\ServicePackFiles\i386\msvfw32.dll
    + 2004-08-04 07:56:44 1,428,480 ------w C:\WINDOWS\ServicePackFiles\i386\msvidctl.dll
    + 2004-08-04 07:56:44 72,704 ------w C:\WINDOWS\ServicePackFiles\i386\msw3prt.dll
    + 2004-08-04 07:56:46 831,519 ------w C:\WINDOWS\ServicePackFiles\i386\mswdat10.dll
    + 2004-08-04 07:56:46 204,288 ------w C:\WINDOWS\ServicePackFiles\i386\mswebdvd.dll
    + 2004-08-04 07:56:46 245,760 ------w C:\WINDOWS\ServicePackFiles\i386\mswmdm.dll
    + 2004-08-04 07:56:46 245,248 ------w C:\WINDOWS\ServicePackFiles\i386\mswsock.dll
    + 2004-08-04 07:56:46 614,429 ------w C:\WINDOWS\ServicePackFiles\i386\mswstr10.dll
    + 2004-08-04 07:56:46 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\msxactps.dll
    + 2004-08-04 07:56:46 348,189 ------w C:\WINDOWS\ServicePackFiles\i386\msxbde40.dll
    + 2004-08-04 07:56:46 506,368 ------w C:\WINDOWS\ServicePackFiles\i386\msxml.dll
    + 2004-08-04 07:56:46 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
    + 2004-08-04 07:56:46 1,236,480 ------w C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
    + 2004-08-04 07:56:46 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\msyuv.dll
    + 2004-08-04 05:41:40 126,686 ------w C:\WINDOWS\ServicePackFiles\i386\mtlmnt5.sys
    + 2004-08-04 05:41:38 1,309,184 ------w C:\WINDOWS\ServicePackFiles\i386\mtlstrm.sys
    + 2004-08-04 07:56:46 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\mtxclu.dll
    + 2004-08-04 07:56:46 90,112 ------w C:\WINDOWS\ServicePackFiles\i386\mtxoci.dll
    + 2004-08-04 07:56:46 1,737,856 ------w C:\WINDOWS\ServicePackFiles\i386\mtxparhd.dll
    + 2004-08-04 05:29:38 452,736 ------w C:\WINDOWS\ServicePackFiles\i386\mtxparhm.sys
    + 2004-08-04 07:56:54 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\muisetup.exe
    + 2004-08-04 06:15:22 107,904 ------w C:\WINDOWS\ServicePackFiles\i386\mup.sys
    + 2004-08-04 06:04:52 12,672 ------w C:\WINDOWS\ServicePackFiles\i386\mutohpen.sys
    + 2004-08-04 07:56:46 90,624 ------w C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
    + 2004-08-04 06:10:30 85,376 ------w C:\WINDOWS\ServicePackFiles\i386\nabtsfec.sys
    + 2004-08-04 07:56:46 221,184 ------w C:\WINDOWS\ServicePackFiles\i386\nac.dll
    + 2004-08-04 07:56:56 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\narrator.exe
    + 2004-08-04 07:56:46 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\ncobjapi.dll
    + 2004-08-04 07:56:46 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\ncprov.dll
    + 2004-08-04 07:56:46 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\ncpsres.dll
    + 2004-08-04 07:56:46 17,920 ------w C:\WINDOWS\ServicePackFiles\i386\nddeapi.dll
    + 2004-08-04 07:56:56 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\nddeapir.exe
    + 2004-08-04 07:56:46 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\nddenb32.dll
    + 2004-08-04 06:14:30 182,912 ------w C:\WINDOWS\ServicePackFiles\i386\ndis.sys
    + 2004-08-04 06:10:14 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\ndisip.sys
    + 2004-08-04 07:56:46 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\ndisnpp.dll
    + 2004-08-04 06:03:14 12,928 ------w C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys
    + 2004-08-04 06:14:32 91,776 ------w C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys
    + 2004-08-04 07:56:56 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\net.exe
    + 2004-08-04 07:56:56 132,608 ------w C:\WINDOWS\ServicePackFiles\i386\net1.exe
    + 2004-08-04 07:56:46 332,288 ------w C:\WINDOWS\ServicePackFiles\i386\netapi32.dll
    + 2004-08-04 06:03:22 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\netbios.sys
    + 2004-08-04 06:14:38 162,816 ------w C:\WINDOWS\ServicePackFiles\i386\netbt.sys
    + 2004-08-04 07:56:46 622,080 ------w C:\WINDOWS\ServicePackFiles\i386\netcfgx.dll
    + 2004-08-04 07:56:56 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\netdde.exe
    + 2004-08-04 07:56:46 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\netid.dll
    + 2004-08-04 07:56:46 407,040 ------w C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
    + 2004-08-04 07:56:46 198,144 ------w C:\WINDOWS\ServicePackFiles\i386\netman.dll
    + 2004-08-04 07:56:46 77,312 ------w C:\WINDOWS\ServicePackFiles\i386\netoc.dll
    + 2004-08-04 07:56:46 875,008 ------w C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll
    + 2004-08-04 07:56:46 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\netrap.dll
    + 2004-08-04 08:02:46 339,456 ------w C:\WINDOWS\ServicePackFiles\i386\netsetup.exe
    + 2004-08-04 07:56:56 93,696 ------w C:\WINDOWS\ServicePackFiles\i386\netsh.exe
    + 2004-08-04 07:56:46 1,708,032 ------w C:\WINDOWS\ServicePackFiles\i386\netshell.dll
    + 2004-08-04 07:56:56 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\netstat.exe
    + 2004-08-04 07:56:46 80,896 ------w C:\WINDOWS\ServicePackFiles\i386\netui0.dll
    + 2004-08-04 07:56:46 245,760 ------w C:\WINDOWS\ServicePackFiles\i386\netui1.dll
    + 2004-08-04 05:31:42 132,695 ------w C:\WINDOWS\ServicePackFiles\i386\netwlan5.sys
    + 2004-08-04 07:56:46 248,832 ------w C:\WINDOWS\ServicePackFiles\i386\newdev.dll
    + 2004-08-04 05:58:30 61,824 ------w C:\WINDOWS\ServicePackFiles\i386\nic1394.sys
    + 2004-08-04 07:56:46 103,936 ------w C:\WINDOWS\ServicePackFiles\i386\nlhtml.dll
    + 2004-08-04 07:56:46 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\nmas.dll
    + 2004-08-04 07:56:46 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\nmasnt.dll
    + 2004-08-04 07:56:46 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\nmchat.dll
    + 2004-08-04 07:56:46 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\nmcom.dll
    + 2004-08-04 07:56:46 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\nmft.dll
    + 2004-08-04 07:56:46 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\nmmkcert.dll
    + 2004-08-04 05:59:52 40,320 ------w C:\WINDOWS\ServicePackFiles\i386\nmnt.sys
    + 2004-08-04 07:56:46 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll
    + 2004-08-04 07:56:46 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\nmwb.dll
    + 2004-08-04 07:56:56 76,800 ------w C:\WINDOWS\ServicePackFiles\i386\notepad.exe
    + 2004-08-04 07:57:02 226,816 ------w C:\WINDOWS\ServicePackFiles\i386\npdrmv2.dll
    + 2004-08-04 07:56:46 364,544 ------w C:\WINDOWS\ServicePackFiles\i386\npdsplay.dll
    + 2004-08-04 06:00:44 30,848 ------w C:\WINDOWS\ServicePackFiles\i386\npfs.sys
    + 2004-08-04 07:56:56 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\nppagent.exe
    + 2004-08-04 07:56:46 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\npptools.dll
    + 2004-08-04 07:56:46 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\npwmsdrm.dll
    + 2004-08-04 06:00:52 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\nscirda.sys
    + 2004-08-04 07:56:56 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\nslookup.exe
    + 2004-08-04 05:38:34 47,564 ------w C:\WINDOWS\ServicePackFiles\i386\ntdetect.com
    + 2004-08-04 07:56:38 708,096 ------w C:\WINDOWS\ServicePackFiles\i386\ntdll.dll
    + 2004-08-04 07:56:46 67,072 ------w C:\WINDOWS\ServicePackFiles\i386\ntdsapi.dll
    + 2004-08-04 07:56:46 212,992 ------w C:\WINDOWS\ServicePackFiles\i386\ntevt.dll
    + 2004-08-04 06:15:10 574,592 ------w C:\WINDOWS\ServicePackFiles\i386\ntfs.sys
    + 2004-08-04 05:45:10 33,840 ------w C:\WINDOWS\ServicePackFiles\i386\ntio.sys
    + 2004-08-04 05:45:16 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\ntio404.sys
    + 2004-08-04 05:45:12 35,648 ------w C:\WINDOWS\ServicePackFiles\i386\ntio411.sys
    + 2004-08-04 05:45:16 35,424 ------w C:\WINDOWS\ServicePackFiles\i386\ntio412.sys
    + 2004-08-04 05:45:14 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\ntio804.sys
    + 2004-08-04 06:18:32 2,148,352 ------w C:\WINDOWS\ServicePackFiles\i386\ntkrnlmp.exe
    + 2004-08-04 05:59:00 2,056,832 ------w C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe
    + 2004-08-04 05:59:02 2,015,232 ------w C:\WINDOWS\ServicePackFiles\i386\ntkrpamp.exe
    + 2004-08-04 07:56:46 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\ntlanman.dll
    + 2004-08-04 07:56:46 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\ntlsapi.dll
    + 2004-08-04 07:56:46 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\ntmarta.dll
    + 2004-08-04 07:56:46 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\ntmsapi.dll
    + 2004-08-04 07:56:46 179,712 ------w C:\WINDOWS\ServicePackFiles\i386\ntmsdba.dll
    + 2004-08-04 07:56:46 488,448 ------w C:\WINDOWS\ServicePackFiles\i386\ntmsmgr.dll
    + 2004-08-04 07:56:46 435,200 ------w C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll
    + 2004-08-04 05:41:40 180,360 ------w C:\WINDOWS\ServicePackFiles\i386\ntmtlfax.sys
    + 2004-08-04 07:56:46 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\ntoc.dll
    + 2004-08-04 06:20:00 2,180,992 ------w C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe
    + 2004-08-04 07:56:46 91,136 ------w C:\WINDOWS\ServicePackFiles\i386\ntprint.dll
    + 2004-08-04 07:56:46 143,872 ------w C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
    + 2004-08-04 07:56:56 427,520 ------w C:\WINDOWS\ServicePackFiles\i386\ntvdm.exe
    + 2004-08-04 07:56:46 4,274,816 ------w C:\WINDOWS\ServicePackFiles\i386\nv4_disp.dll
    + 2004-08-04 05:29:56 1,897,408 ------w C:\WINDOWS\ServicePackFiles\i386\nv4_mini.sys
    + 2004-08-04 06:03:36 88,448 ------w C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys
    + 2004-08-04 07:56:46 144,384 ------w C:\WINDOWS\ServicePackFiles\i386\nwprovau.dll
    + 2004-08-04 07:56:46 266,752 ------w C:\WINDOWS\ServicePackFiles\i386\oakley.dll
    + 2004-08-04 07:56:46 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\objsel.dll
    + 2004-08-04 07:56:24 405,504 ------w C:\WINDOWS\ServicePackFiles\i386\obrb041b.dll
    + 2004-08-04 07:56:24 408,576 ------w C:\WINDOWS\ServicePackFiles\i386\obrb0424.dll
    + 2004-08-04 07:56:46 96,256 ------w C:\WINDOWS\ServicePackFiles\i386\occache.dll
    + 2004-08-04 07:56:46 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\ocgen.dll
    + 2004-08-04 07:56:46 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\ocmsn.dll
    + 2004-07-17 18:36:44 26,224 ------w C:\WINDOWS\ServicePackFiles\i386\odbc16gt.dll
    + 2004-08-04 07:56:46 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\odbc32.dll
    + 2004-08-04 07:56:46 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\odbc32gt.dll
    + 2004-08-04 07:56:56 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
    + 2004-08-04 07:56:46 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\odbcbcp.dll
    + 2004-08-04 07:56:46 135,168 ------w C:\WINDOWS\ServicePackFiles\i386\odbcconf.dll
    + 2004-08-04 07:56:56 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\odbcconf.exe
    + 2004-08-04 07:56:46 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\odbccp32.dll
    + 2004-08-04 07:56:46 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\odbccr32.dll
    + 2004-08-04 07:56:46 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\odbccu32.dll
    + 2004-08-04 07:56:24 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
    + 2004-08-04 07:56:24 53,279 ------w C:\WINDOWS\ServicePackFiles\i386\odbcji32.dll
    + 2004-08-04 07:56:46 278,559 ------w C:\WINDOWS\ServicePackFiles\i386\odbcjt32.dll
    + 2004-08-04 07:56:24 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\odbcp32r.dll
    + 2004-08-04 07:56:46 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\odbctrac.dll
    + 2004-08-04 07:56:46 20,511 ------w C:\WINDOWS\ServicePackFiles\i386\oddbse32.dll
    + 2004-08-04 07:56:46 20,510 ------w C:\WINDOWS\ServicePackFiles\i386\odexl32.dll
    + 2004-08-04 07:56:46 20,510 ------w C:\WINDOWS\ServicePackFiles\i386\odfox32.dll
    + 2004-08-04 07:56:46 20,510 ------w C:\WINDOWS\ServicePackFiles\i386\odpdx32.dll
    + 2004-08-04 07:56:46 20,511 ------w C:\WINDOWS\ServicePackFiles\i386\odtext32.dll
    + 2004-08-04 07:56:46 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\oeimport.dll
    + 2004-08-04 07:56:56 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
    + 2004-08-04 07:56:46 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\oemiglib.dll
    + 2004-08-04 07:56:46 120,832 ------w C:\WINDOWS\ServicePackFiles\i386\offfilt.dll
    + 2004-08-04 06:10:10 61,056 ------w C:\WINDOWS\ServicePackFiles\i386\ohci1394.sys
    + 2004-08-04 07:56:46 1,281,536 ------w C:\WINDOWS\ServicePackFiles\i386\ole32.dll
    + 2004-08-04 07:56:46 553,472 ------w C:\WINDOWS\ServicePackFiles\i386\oleaut32.dll
    + 2004-08-04 07:56:46 487,424 ------w C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
    + 2004-08-04 07:56:46 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\oledb32r.dll
    + 2004-08-04 07:56:46 107,008 ------w C:\WINDOWS\ServicePackFiles\i386\oleprn.dll
    + 2004-08-04 07:56:46 83,456 ------w C:\WINDOWS\ServicePackFiles\i386\olepro32.dll
    + 2004-08-04 07:56:56 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
    + 2004-08-04 07:56:46 713,728 ------w C:\WINDOWS\ServicePackFiles\i386\opengl32.dll
    + 2004-08-04 06:00:22 166,400 ------w C:\WINDOWS\ServicePackFiles\i386\oschoice.exe
    + 2004-08-04 07:56:56 223,232 ------w C:\WINDOWS\ServicePackFiles\i386\osk.exe
    + 2004-08-04 05:59:34 230,400 ------w C:\WINDOWS\ServicePackFiles\i386\osloader.exe
    + 2004-08-04 07:56:46 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\osuninst.dll
    + 2004-08-04 07:56:46 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\p2p.dll
    + 2004-08-04 07:56:46 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\p2pgasvc.dll
    + 2004-08-04 07:56:46 312,320 ------w C:\WINDOWS\ServicePackFiles\i386\p2pgraph.dll
    + 2004-08-04 07:56:46 88,064 ------w C:\WINDOWS\ServicePackFiles\i386\p2pnetsh.dll
    + 2004-08-04 07:56:46 526,848 ------w C:\WINDOWS\ServicePackFiles\i386\p2psvc.dll
    + 2004-08-04 05:59:20 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\p3.sys
    + 2004-08-04 07:56:56 66,048 ------w C:\WINDOWS\ServicePackFiles\i386\packager.exe
    + 2004-08-04 05:59:08 80,128 ------w C:\WINDOWS\ServicePackFiles\i386\parport.sys
    + 2004-08-04 07:56:46 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
    + 2004-08-04 05:31:24 29,502 ------w C:\WINDOWS\ServicePackFiles\i386\pca200e.sys
    + 2004-08-04 07:56:46 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\pchshell.dll
    + 2004-08-04 07:56:46 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\pchsvc.dll
    + 2004-08-04 06:07:48 68,224 ------w C:\WINDOWS\ServicePackFiles\i386\pci.sys
    + 2004-08-04 05:59:42 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\pciidex.sys
    + 2004-08-04 07:56:24 676,864 ------w C:\WINDOWS\ServicePackFiles\i386\pcl5eres.dll
    + 2004-08-04 07:56:24 169,472 ------w C:\WINDOWS\ServicePackFiles\i386\pclxl.dll
    + 2004-08-04 06:07:48 119,936 ------w C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys
    + 2004-08-04 05:06:18 169,984 ------w C:\WINDOWS\ServicePackFiles\i386\pcx500.sys
    + 2004-08-04 07:56:46 283,648 ------w C:\WINDOWS\ServicePackFiles\i386\pdh.dll
    + 2004-08-04 07:56:46 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll
    + 2004-08-04 07:56:46 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\perfdisk.dll
    + 2004-08-04 07:56:56 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
    + 2004-08-04 07:56:46 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\perfos.dll
    + 2004-08-04 07:56:46 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\perfproc.dll
    + 2004-08-04 06:06:56 27,904 ------w C:\WINDOWS\ServicePackFiles\i386\perm2.sys
    + 2004-08-04 07:56:24 211,712 ------w C:\WINDOWS\ServicePackFiles\i386\perm2dll.dll
    + 2004-08-04 06:06:58 28,032 ------w C:\WINDOWS\ServicePackFiles\i386\perm3.sys
    + 2004-08-04 07:56:24 259,328 ------w C:\WINDOWS\ServicePackFiles\i386\perm3dd.dll
    + 2004-08-04 07:56:46 176,128 ------w C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
    + 2004-08-04 07:56:46 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\pid.dll
    + 2004-08-04 06:04:42 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\pidgen.dll
    + 2004-08-04 07:56:56 288,768 ------w C:\WINDOWS\ServicePackFiles\i386\pinball.exe
    + 2004-08-04 07:56:56 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\ping.exe
    + 2004-08-04 07:56:46 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\pjlmon.dll
    + 2004-08-04 07:56:46 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\plotter.dll
    + 2004-08-04 07:56:46 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\plotui.dll
    + 2004-08-04 07:56:46 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\pngfilt.dll
    + 2004-08-04 07:56:46 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\pnrpnsp.dll
    + 2004-08-04 07:56:46 105,472 ------w C:\WINDOWS\ServicePackFiles\i386\polstore.dll
    + 2004-08-04 06:15:50 145,792 ------w C:\WINDOWS\ServicePackFiles\i386\portcls.sys
    + 2004-08-04 07:56:56 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\powercfg.exe
    + 2004-08-04 07:56:46 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\powrprof.dll
    + 2004-08-04 06:00:18 17,664 ------w C:\WINDOWS\ServicePackFiles\i386\ppa3.sys
    + 2004-08-04 07:56:46 560,640 ------w C:\WINDOWS\ServicePackFiles\i386\printui.dll
    + 2004-08-04 05:59:18 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\processr.sys
    + 2004-08-04 07:56:46 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\profmap.dll
    + 2004-08-04 07:56:56 117,248 ------w C:\WINDOWS\ServicePackFiles\i386\progman.exe
    + 2004-08-04 07:56:56 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\proquota.exe
    + 2004-08-04 07:56:46 237,056 ------w C:\WINDOWS\ServicePackFiles\i386\provthrd.dll
    + 2004-08-04 07:56:56 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\proxycfg.exe
    + 2004-08-04 07:56:46 132,608 ------w C:\WINDOWS\ServicePackFiles\i386\ps5ui.dll
    + 2004-08-04 07:56:46 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\psapi.dll
    + 2004-08-04 07:56:46 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\psbase.dll
    + 2004-08-04 06:04:20 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\psched.sys
    + 2004-08-04 07:56:46 464,384 ------w C:\WINDOWS\ServicePackFiles\i386\pscript5.dll
    + 2004-08-04 07:56:46 363,520 ------w C:\WINDOWS\ServicePackFiles\i386\psisdecd.dll
    + 2004-08-04 07:56:46 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\pstorec.dll
    + 2004-08-04 07:56:46 34,304 ------w C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll
    + 2004-08-04 07:56:46 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\ptpusd.dll
    + 2004-08-04 07:56:46 237,568 ------w C:\WINDOWS\ServicePackFiles\i386\qasf.dll
    + 2004-08-04 07:56:46 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\qcap.dll
    + 2004-08-04 07:56:46 279,040 ------w C:\WINDOWS\ServicePackFiles\i386\qdv.dll
    + 2004-08-04 07:56:46 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\qdvd.dll
    + 2004-08-04 07:56:46 562,176 ------w C:\WINDOWS\ServicePackFiles\i386\qedit.dll
    + 2004-08-04 07:56:26 733,696 ------w C:\WINDOWS\ServicePackFiles\i386\qedwipes.dll
    + 2004-08-04 06:00:06 6,016 ------w C:\WINDOWS\ServicePackFiles\i386\qic157.sys
    + 2004-08-04 07:56:46 382,464 ------w C:\WINDOWS\ServicePackFiles\i386\qmgr.dll
    + 2004-08-04 07:56:46 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\qmgrprxy.dll
    + 2004-08-04 07:56:56 28,160 ------w C:\WINDOWS\ServicePackFiles\i386\qprocess.exe
    + 2004-08-04 07:56:46 1,287,680 ------w C:\WINDOWS\ServicePackFiles\i386\quartz.dll
    + 2004-08-04 07:56:46 1,435,648 ------w C:\WINDOWS\ServicePackFiles\i386\query.dll
    + 2004-08-04 07:56:46 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\racpldlg.dll
    + 2004-08-04 06:00:52 20,736 ------w C:\WINDOWS\ServicePackFiles\i386\ramdisk.sys
    + 2004-08-04 07:56:46 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll
    + 2004-08-04 07:56:46 236,544 ------w C:\WINDOWS\ServicePackFiles\i386\rasapi32.dll
    + 2004-08-04 07:56:46 89,088 ------w C:\WINDOWS\ServicePackFiles\i386\rasauto.dll
    + 2004-08-04 07:56:46 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\raschap.dll
    + 2004-08-04 07:56:46 657,920 ------w C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
    + 2004-08-04 06:14:24 51,328 ------w C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys
    + 2004-08-04 07:56:46 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\rasman.dll
    + 2004-08-04 07:56:46 174,080 ------w C:\WINDOWS\ServicePackFiles\i386\rasmans.dll
    + 2004-08-04 07:56:56 64,512 ------w C:\WINDOWS\ServicePackFiles\i386\rasphone.exe
    + 2004-08-04 07:56:46 206,336 ------w C:\WINDOWS\ServicePackFiles\i386\rasppp.dll
    + 2004-08-04 06:05:08 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys
    + 2004-08-04 06:14:28 48,384 ------w C:\WINDOWS\ServicePackFiles\i386\raspptp.sys
    + 2004-08-04 07:56:46 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\rassapi.dll
    + 2004-08-04 07:56:46 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\rastapi.dll
    + 2004-08-04 07:56:46 112,128 ------w C:\WINDOWS\ServicePackFiles\i386\rastls.dll
    + 2004-08-04 07:56:46 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\rcbdyctl.dll
    + 2004-08-04 07:56:56 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe
    + 2004-08-04 07:56:56 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\rcp.exe
    + 2004-08-04 06:20:08 176,512 ------w C:\WINDOWS\ServicePackFiles\i386\rdbss.sys
    + 2004-08-04 07:56:46 147,968 ------w C:\WINDOWS\ServicePackFiles\i386\rdchost.dll
    + 2004-08-04 07:56:56 70,144 ------w C:\WINDOWS\ServicePackFiles\i386\rdpclip.exe
    + 2004-08-04 08:01:08 92,168 ------w C:\WINDOWS\ServicePackFiles\i386\rdpdd.dll
    + 2004-08-04 06:01:16 196,864 ------w C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys
    + 2004-08-04 07:56:46 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\rdpsnd.dll
    + 2004-08-04 08:01:10 139,400 ------w C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys
    + 2004-08-04 08:01:10 87,176 ------w C:\WINDOWS\ServicePackFiles\i386\rdpwsx.dll
    + 2004-08-04 07:56:56 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\rdsaddin.exe
    + 2004-08-04 07:56:56 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\rdshost.exe
    + 2004-08-04 05:41:40 13,776 ------w C:\WINDOWS\ServicePackFiles\i386\recagent.sys
    + 2004-08-04 05:59:38 57,472 ------w C:\WINDOWS\ServicePackFiles\i386\redbook.sys
    + 2004-08-04 05:48:46 3,338 ------w C:\WINDOWS\ServicePackFiles\i386\redir.exe
    + 2004-08-04 07:56:56 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\reg.exe
    + 2004-08-04 07:56:46 49,664 ------w C:\WINDOWS\ServicePackFiles\i386\regapi.dll
    + 2004-08-04 07:56:56 154,112 ------w C:\WINDOWS\ServicePackFiles\i386\regedit.exe
    + 2004-08-04 07:56:46 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\regsvc.dll
    + 2004-08-04 07:56:56 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\regsvr32.exe
    + 2004-08-04 07:56:46 397,824 ------w C:\WINDOWS\ServicePackFiles\i386\regwizc.dll
    + 2004-08-04 07:56:46 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\remotepg.dll
    + 2004-08-04 07:56:46 177,152 ------w C:\WINDOWS\ServicePackFiles\i386\repdrvfs.dll
    + 2004-08-04 07:56:46 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\resutils.dll
    + 2004-08-04 07:56:56 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\rexec.exe
    + 2004-08-04 06:10:40 59,648 ------w C:\WINDOWS\ServicePackFiles\i386\rfcomm.sys
    + 2004-08-04 07:56:46 123,392 ------w C:\WINDOWS\ServicePackFiles\i386\riafres.dll
    + 2004-08-04 07:56:46 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\riafui1.dll
    + 2004-08-04 07:56:46 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\riafui2.dll
    + 2004-08-04 07:56:46 431,616 ------w C:\WINDOWS\ServicePackFiles\i386\riched20.dll
    + 2004-08-04 06:04:32 30,080 ------w C:\WINDOWS\ServicePackFiles\i386\rndismp.sys
    + 2004-08-04 06:04:32 30,080 ------w C:\WINDOWS\ServicePackFiles\i386\rndismpx.sys
    + 2004-08-04 05:59:12 79,104 ------w C:\WINDOWS\ServicePackFiles\i386\rocket.sys
    + 2004-08-04 07:56:46 581,120 ------w C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll
    + 2004-08-04 07:56:46 395,776 ------w C:\WINDOWS\ServicePackFiles\i386\rpcss.dll
    + 2004-08-04 07:56:46 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\rrcm.dll
  10. 2008-09-26, 02:23 #10
    Sarah K
    Sarah K is offline
    Junior Member
    Join Date
    Sep 2008
    Posts
    16

    Default combofix log continued...

    + 2004-08-04 05:31:44 152,576 ------w C:\WINDOWS\ServicePackFiles\i386\rsaenh.dll
    + 2004-08-04 07:56:56 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\rsh.exe
    + 2004-08-04 07:56:46 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\rshx32.dll
    + 2004-08-04 07:56:46 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\rsmps.dll
    + 2004-08-04 07:56:56 388,096 ------w C:\WINDOWS\ServicePackFiles\i386\rstrui.exe
    + 2004-08-04 07:56:56 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\rtcshare.exe
    + 2004-08-04 07:56:46 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\rtipxmib.dll
    + 2004-08-04 05:31:34 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\rtl8139.sys
    + 2004-08-04 07:56:46 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\rtutils.dll
    + 2004-08-04 07:56:56 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\rundll32.exe
    + 2004-08-04 07:56:56 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\runonce.exe
    + 2004-08-04 07:56:46 397,056 ------w C:\WINDOWS\ServicePackFiles\i386\s3gnb.dll
    + 2004-08-04 05:29:52 166,912 ------w C:\WINDOWS\ServicePackFiles\i386\s3gnbm.sys
    + 2004-08-04 07:56:46 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\safrcdlg.dll
    + 2004-08-04 07:56:46 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\safrdm.dll
    + 2004-08-04 07:56:46 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\safrslv.dll
    + 2004-08-04 07:56:46 64,000 ------w C:\WINDOWS\ServicePackFiles\i386\samlib.dll
    + 2004-08-04 07:56:46 415,744 ------w C:\WINDOWS\ServicePackFiles\i386\samsrv.dll
    + 2004-08-04 07:56:46 741,376 ------w C:\WINDOWS\ServicePackFiles\i386\sapi.dll
    + 2004-08-04 07:56:56 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\savedump.exe
    + 2004-08-04 07:56:46 270,848 ------w C:\WINDOWS\ServicePackFiles\i386\sbe.dll
    + 2004-08-04 07:56:46 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\sbeio.dll
    + 2004-08-04 05:59:58 43,136 ------w C:\WINDOWS\ServicePackFiles\i386\sbp2port.sys
    + 2004-08-04 07:56:46 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\scarddlg.dll
    + 2004-08-04 07:56:56 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\scardsvr.exe
    + 2004-08-04 05:31:44 169,984 ------w C:\WINDOWS\ServicePackFiles\i386\sccbase.dll
    + 2004-08-04 07:56:46 171,008 ------w C:\WINDOWS\ServicePackFiles\i386\sccsccp.dll
    + 2004-08-04 07:56:46 180,224 ------w C:\WINDOWS\ServicePackFiles\i386\scecli.dll
    + 2004-08-04 07:56:46 313,856 ------w C:\WINDOWS\ServicePackFiles\i386\scesrv.dll
    + 2004-08-04 07:56:46 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\schannel.dll
    + 2004-08-04 07:56:46 190,976 ------w C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll
    + 2004-08-04 07:56:46 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\sclgntfy.dll
    + 2004-08-04 07:56:56 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\scrcons.exe
    + 2004-08-04 07:56:46 202,752 ------w C:\WINDOWS\ServicePackFiles\i386\script.dll
    + 2004-08-04 07:56:46 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\script_a.dll
    + 2004-08-04 07:56:58 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\scrnsave.scr
    + 2004-08-04 07:56:46 159,744 ------w C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
    + 2004-08-04 07:56:46 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\scrrun.dll
    + 2004-08-04 05:59:42 96,256 ------w C:\WINDOWS\ServicePackFiles\i386\scsiport.sys
    + 2004-08-04 07:56:56 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\sdbinst.exe
    + 2004-08-04 06:07:48 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\sdbus.sys
    + 2004-08-04 07:56:46 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\sdhcinst.dll
    + 2004-07-17 18:36:38 27,440 ------w C:\WINDOWS\ServicePackFiles\i386\secdrv.sys
    + 2004-08-04 07:56:46 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\seclogon.dll
    + 2004-08-02 21:20:40 4,569 ------w C:\WINDOWS\ServicePackFiles\i386\secupd.dat
    + 2004-08-04 07:56:46 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\secur32.dll
    + 2004-08-04 07:56:46 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\security.dll
    + 2004-08-04 07:56:46 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\sendcmsg.dll
    + 2004-08-04 07:56:46 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
    + 2004-08-04 07:56:46 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\sens.dll
    + 2004-08-04 07:56:46 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\sensapi.dll
    + 2004-08-04 05:59:08 15,488 ------w C:\WINDOWS\ServicePackFiles\i386\serenum.sys
    + 2004-08-04 06:15:54 64,896 ------w C:\WINDOWS\ServicePackFiles\i386\serial.sys
    + 2004-08-04 07:56:46 56,320 ------w C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
    + 2004-08-04 07:56:56 115,712 ------w C:\WINDOWS\ServicePackFiles\i386\services.exe
    + 2004-08-04 07:56:58 148,480 ------w C:\WINDOWS\ServicePackFiles\i386\sessmgr.exe
    + 2004-08-04 07:56:58 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\sethc.exe
    + 2004-08-04 07:56:58 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\setup.exe
    + 2004-08-04 07:56:58 782,336 ------w C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
    + 2004-08-04 07:56:58 80,896 ------w C:\WINDOWS\ServicePackFiles\i386\setup50.exe
    + 2004-08-04 07:56:46 983,552 ------w C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
    + 2004-08-04 07:56:46 101,376 ------w C:\WINDOWS\ServicePackFiles\i386\setupqry.dll
    + 2004-08-04 07:56:46 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\sfc.dll
    + 2004-08-04 07:56:46 140,288 ------w C:\WINDOWS\ServicePackFiles\i386\sfc_os.dll
    + 2004-08-04 07:56:46 1,580,544 ------w C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll
    + 2004-08-04 05:59:56 11,136 ------w C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys
    + 2004-08-04 05:59:56 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys
    + 2004-08-04 05:59:56 11,392 ------w C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys
    + 2004-08-04 07:56:28 549,376 ------w C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
    + 2004-08-04 07:56:46 1,483,264 ------w C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
    + 2004-08-04 07:56:46 8,384,000 ------w C:\WINDOWS\ServicePackFiles\i386\shell32.dll
    + 2004-08-04 07:56:46 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\shfolder.dll
    + 2004-08-04 07:56:46 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\shgina.dll
    + 2004-08-04 07:56:46 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\shimeng.dll
    + 2004-08-04 07:56:46 438,272 ------w C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
    + 2004-08-04 07:56:46 473,600 ------w C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
    + 2004-08-04 07:56:46 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\shmedia.dll
    + 2004-08-04 07:56:58 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\shmgrate.exe
    + 2004-08-04 07:56:58 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
    + 2004-08-04 07:56:46 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
    + 2004-08-04 07:56:46 134,656 ------w C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll
    + 2004-08-04 07:56:46 20,536 ------w C:\WINDOWS\ServicePackFiles\i386\shtml.dll
    + 2004-08-04 07:56:58 24,629 ------w C:\WINDOWS\ServicePackFiles\i386\shtml.exe
    + 2004-08-04 07:56:58 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\shutdown.exe
    + 2004-08-04 07:56:46 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\sigtab.dll
    + 2004-08-04 07:56:58 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
    + 2004-08-04 07:56:46 3,901 ------w C:\WINDOWS\ServicePackFiles\i386\siint5.dll
    + 2004-08-04 06:07:44 41,088 ------w C:\WINDOWS\ServicePackFiles\i386\sisagp.sys
    + 2004-08-04 05:31:36 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\sisnic.sys


    p2
    2004-08-04 07:56:58 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\skeys.exe
    + 2004-08-04 05:31:42 63,547 ------w C:\WINDOWS\ServicePackFiles\i386\sla30nd5.sys
    + 2004-08-04 07:56:46 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\slayerxp.dll
    + 2004-08-04 05:31:44 306,176 ------w C:\WINDOWS\ServicePackFiles\i386\slbcsp.dll
    + 2004-08-04 07:56:46 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\slbiop.dll
    + 2004-08-04 07:56:46 73,832 ------w C:\WINDOWS\ServicePackFiles\i386\slcoinst.dll
    + 2004-08-04 07:56:46 286,792 ------w C:\WINDOWS\ServicePackFiles\i386\slextspk.dll
    + 2004-08-04 07:56:46 188,508 ------w C:\WINDOWS\ServicePackFiles\i386\slgen.dll
    + 2004-08-04 06:10:18 11,136 ------w C:\WINDOWS\ServicePackFiles\i386\slip.sys
    + 2004-08-04 05:41:42 129,535 ------w C:\WINDOWS\ServicePackFiles\i386\slnt7554.sys
    + 2004-08-04 05:41:44 404,990 ------w C:\WINDOWS\ServicePackFiles\i386\slntamr.sys
    + 2004-08-04 05:41:46 95,424 ------w C:\WINDOWS\ServicePackFiles\i386\slnthal.sys
    + 2004-08-04 07:56:58 41,058 ------w C:\WINDOWS\ServicePackFiles\i386\slrundll.exe
    + 2004-08-04 07:56:58 81,988 ------w C:\WINDOWS\ServicePackFiles\i386\slserv.exe
    + 2004-08-04 05:41:46 13,240 ------w C:\WINDOWS\ServicePackFiles\i386\slwdmsup.sys
    + 2004-08-04 06:07:38 6,016 ------w C:\WINDOWS\ServicePackFiles\i386\smbali.sys
    + 2004-08-04 06:07:36 16,128 ------w C:\WINDOWS\ServicePackFiles\i386\smbbatt.sys
    + 2004-08-04 06:07:36 6,912 ------w C:\WINDOWS\ServicePackFiles\i386\smbclass.sys
    + 2004-08-04 07:56:58 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\smbinst.exe
    + 2004-08-04 07:56:58 244,224 ------w C:\WINDOWS\ServicePackFiles\i386\smi2smir.exe
    + 2004-08-04 07:56:46 363,008 ------w C:\WINDOWS\ServicePackFiles\i386\smlogcfg.dll
    + 2004-08-04 07:56:58 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\smlogsvc.exe
    + 2004-08-04 07:56:58 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\smss.exe
    + 2004-08-04 07:56:46 456,704 ------w C:\WINDOWS\ServicePackFiles\i386\smtpsvc.dll
    + 2004-08-04 07:56:58 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
    + 2004-08-04 07:56:46 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\sniffpol.dll
    + 2004-08-04 07:56:58 40,448 ------w C:\WINDOWS\ServicePackFiles\i386\snmp.exe
    + 2004-08-04 07:56:46 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\snmpapi.dll
    + 2004-08-04 07:56:46 259,072 ------w C:\WINDOWS\ServicePackFiles\i386\snmpcl.dll
    + 2004-08-04 07:56:46 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\snmpincl.dll
    + 2004-08-04 07:56:46 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\snmpmib.dll
    + 2004-08-04 07:56:46 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\snmpsmir.dll
    + 2004-08-04 07:56:46 182,272 ------w C:\WINDOWS\ServicePackFiles\i386\snmpsnap.dll
    + 2004-08-04 07:56:46 40,448 ------w C:\WINDOWS\ServicePackFiles\i386\snmpthrd.dll
    + 2004-08-04 07:56:58 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\snmptrap.exe
    + 2004-08-04 07:56:46 130,048 ------w C:\WINDOWS\ServicePackFiles\i386\softkbd.dll
    + 2004-08-04 06:00:06 7,552 ------w C:\WINDOWS\ServicePackFiles\i386\sonyait.sys
    + 2004-08-04 06:09:56 25,472 ------w C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys
    + 2004-08-04 07:56:58 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\spdwnwxp.exe
    + 2004-08-04 07:56:30 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\spgrmr.dll
    + 2004-08-04 07:56:58 546,304 ------w C:\WINDOWS\ServicePackFiles\i386\spider.exe
    + 2004-08-04 06:07:48 6,400 ------w C:\WINDOWS\ServicePackFiles\i386\splitter.sys
    + 2004-08-04 07:56:58 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\spnpinst.exe
    + 2004-08-04 07:56:46 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\spoolss.dll
    + 2004-08-04 07:56:30 193,024 ------w C:\WINDOWS\ServicePackFiles\i386\spra041b.dll
    + 2004-08-04 07:56:30 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\spra0424.dll
    + 2004-08-04 07:56:30 757,248 ------w C:\WINDOWS\ServicePackFiles\i386\sprb041b.dll
    + 2004-08-04 07:56:32 732,160 ------w C:\WINDOWS\ServicePackFiles\i386\sprb0424.dll
    + 2004-08-04 07:56:46 250,880 ------w C:\WINDOWS\ServicePackFiles\i386\sptip.dll
    + 2004-08-04 07:56:58 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\spupdwxp.exe
    + 2004-08-04 07:56:46 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\sqldb20.dll
    + 2004-08-04 07:56:46 528,384 ------w C:\WINDOWS\ServicePackFiles\i386\sqloledb.dll
    + 2004-08-04 07:56:46 462,848 ------w C:\WINDOWS\ServicePackFiles\i386\sqlqp20.dll
    + 2004-08-04 07:56:46 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\sqlse20.dll
    + 2004-08-04 07:56:46 442,368 ------w C:\WINDOWS\ServicePackFiles\i386\sqlsrv32.dll
    + 2004-08-04 07:56:46 180,800 ------w C:\WINDOWS\ServicePackFiles\i386\sqlunirl.dll
    + 2004-08-04 07:56:46 217,088 ------w C:\WINDOWS\ServicePackFiles\i386\sqlxmlx.dll
    + 2004-08-04 06:06:26 73,472 ------w C:\WINDOWS\ServicePackFiles\i386\sr.sys
    + 2004-08-04 07:56:46 58,434 ------w C:\WINDOWS\ServicePackFiles\i386\srchctls.dll
    + 2004-08-04 07:56:46 725,566 ------w C:\WINDOWS\ServicePackFiles\i386\srchui.dll
    + 2004-08-04 07:56:46 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\srclient.dll
    + 2004-08-04 07:56:46 239,104 ------w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
    + 2004-08-04 07:56:46 170,496 ------w C:\WINDOWS\ServicePackFiles\i386\srsvc.dll
    + 2004-08-04 06:14:46 336,256 ------w C:\WINDOWS\ServicePackFiles\i386\srv.sys
    + 2004-08-04 07:56:46 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\srvsvc.dll
    + 2004-08-04 07:56:58 712,704 ------w C:\WINDOWS\ServicePackFiles\i386\ss3dfo.scr
    + 2004-08-04 07:56:58 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\ssbezier.scr
    + 2004-08-04 07:56:46 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\ssdpapi.dll
    + 2004-08-04 07:56:46 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll
    + 2004-08-04 07:56:58 401,408 ------w C:\WINDOWS\ServicePackFiles\i386\ssflwbox.scr
    + 2004-08-04 07:56:58 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\ssmarque.scr
    + 2004-08-04 07:56:58 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\ssmypics.scr
    + 2004-08-04 07:56:58 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\ssmyst.scr
    + 2004-08-04 07:56:58 618,496 ------w C:\WINDOWS\ServicePackFiles\i386\sspipes.scr
    + 2004-08-04 07:56:58 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\ssstars.scr
    + 2004-08-04 07:56:58 688,128 ------w C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr
    + 2004-08-04 07:56:46 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\sstub.dll
    + 2004-08-04 07:56:46 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\startoc.dll
    + 2004-08-04 07:56:46 86,528 ------w C:\WINDOWS\ServicePackFiles\i386\stdprov.dll
    + 2004-08-04 07:56:46 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\sti.dll
    + 2004-08-04 07:56:46 136,704 ------w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
    + 2004-08-04 07:56:58 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\stimon.exe
    + 2004-08-04 07:56:46 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\stobject.dll
    + 2004-08-04 07:56:46 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\storprop.dll
    + 2004-08-04 06:08:04 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\stream.sys
    + 2004-08-04 06:10:14 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\streamip.sys
    + 2004-08-04 07:56:46 246,302 ------w C:\WINDOWS\ServicePackFiles\i386\strmdll.dll
    + 2004-08-04 07:56:46 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\strmfilt.dll
    + 2004-08-04 07:56:58 24,641 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe
    + 2004-08-04 07:56:58 73,793 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe
    + 2004-08-04 05:58:42 4,352 ------w C:\WINDOWS\ServicePackFiles\i386\swenum.sys
    + 2004-08-04 07:56:48 713,216 ------w C:\WINDOWS\ServicePackFiles\i386\sxs.dll
    + 2004-08-04 07:56:48 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\synceng.dll
    + 2004-08-04 07:56:48 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\syncui.dll
    + 2004-08-04 06:15:56 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys
    + 2004-08-04 07:56:48 168,960 ------w C:\WINDOWS\ServicePackFiles\i386\sysmod.dll
    + 2004-08-04 07:56:48 155,648 ------w C:\WINDOWS\ServicePackFiles\i386\sysmod_a.dll
    + 2004-08-04 07:56:58 113,664 ------w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
    + 2004-08-04 07:56:48 984,576 ------w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
    + 2004-08-04 07:56:48 210,432 ------w C:\WINDOWS\ServicePackFiles\i386\t2embed.dll
    + 2004-08-04 06:00:00 14,976 ------w C:\WINDOWS\ServicePackFiles\i386\tape.sys
    + 2004-08-04 07:56:48 858,624 ------w C:\WINDOWS\ServicePackFiles\i386\tapi3.dll
    + 2004-08-04 07:56:48 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\tapi32.dll
    + 2004-08-04 07:56:48 246,272 ------w C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll
    + 2004-08-04 07:56:58 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
    + 2004-08-04 06:07:46 223,616 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys
    + 2004-08-04 07:56:48 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmib.dll
    + 2004-08-04 07:56:48 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmon.dll
    + 2004-08-04 07:56:48 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll
    + 2004-08-04 07:56:58 41,019 ------w C:\WINDOWS\ServicePackFiles\i386\tcptest.exe
    + 2004-08-04 07:56:36 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\tcptsat.dll
    + 2004-08-04 06:07:50 18,560 ------w C:\WINDOWS\ServicePackFiles\i386\tdi.sys
    + 2004-08-04 08:01:08 12,040 ------w C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys
    + 2004-08-04 08:01:08 21,896 ------w C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys
    + 2004-08-04 07:56:58 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\telnet.exe
    + 2004-08-04 08:01:08 40,840 ------w C:\WINDOWS\ServicePackFiles\i386\termdd.sys
    + 2004-08-04 07:56:48 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\termmgr.dll
    + 2004-08-04 07:56:48 295,424 ------w C:\WINDOWS\ServicePackFiles\i386\termsrv.dll
    + 2004-08-04 06:00:06 149,376 ------w C:\WINDOWS\ServicePackFiles\i386\tffsport.sys
    + 2004-08-04 07:56:48 385,536 ------w C:\WINDOWS\ServicePackFiles\i386\themeui.dll
    + 2004-08-04 07:56:58 354,816 ------w C:\WINDOWS\ServicePackFiles\i386\tourstrt.exe
    + 2004-08-04 07:56:58 90,112 ------w C:\WINDOWS\ServicePackFiles\i386\tp4mon.exe
    + 2004-08-04 07:56:58 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\tracert.exe
    + 2004-08-04 07:56:48 153,088 ------w C:\WINDOWS\ServicePackFiles\i386\triedit.dll
    + 2004-08-04 07:56:48 90,624 ------w C:\WINDOWS\ServicePackFiles\i386\trkwks.dll
    + 2004-08-04 07:56:48 93,696 ------w C:\WINDOWS\ServicePackFiles\i386\tscfgwmi.dll
    + 2004-08-04 05:59:28 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\tscupgrd.exe
    + 2004-08-04 08:01:08 12,168 ------w C:\WINDOWS\ServicePackFiles\i386\tsddd.dll
    + 2004-08-04 07:56:48 279,040 ------w C:\WINDOWS\ServicePackFiles\i386\tshoot.dll
    + 2004-08-04 07:56:48 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll
    + 2004-08-04 07:56:48 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\tty.dll
    + 2004-08-04 07:56:36 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\ttyres.dll
    + 2004-08-04 07:56:48 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\ttyui.dll
    + 2004-08-04 06:03:18 12,416 ------w C:\WINDOWS\ServicePackFiles\i386\tunmp.sys
    + 2004-08-04 07:56:48 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\twain_32.dll
    + 2004-08-04 07:56:48 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\twext.dll
    + 2004-08-04 07:56:48 101,376 ------w C:\WINDOWS\ServicePackFiles\i386\txflog.dll
    + 2004-08-04 06:07:44 44,672 ------w C:\WINDOWS\ServicePackFiles\i386\uagp35.sys
    + 2004-08-04 06:00:32 66,176 ------w C:\WINDOWS\ServicePackFiles\i386\udfs.sys
    + 2004-08-04 07:56:48 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll
    + 2004-08-04 07:56:48 275,456 ------w C:\WINDOWS\ServicePackFiles\i386\ulib.dll
    + 2004-08-04 07:56:48 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\umandlg.dll
    + 2004-08-04 07:56:48 118,272 ------w C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll
    + 2004-08-04 07:56:48 264,704 ------w C:\WINDOWS\ServicePackFiles\i386\unidrv.dll
    + 2004-08-04 07:56:48 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll
    + 2004-08-04 07:56:48 74,240 ------w C:\WINDOWS\ServicePackFiles\i386\unimdmat.dll
    + 2004-08-04 07:56:48 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\uniplat.dll
    + 2004-08-04 07:56:36 619,520 ------w C:\WINDOWS\ServicePackFiles\i386\unires.dll
    + 2004-08-04 07:56:58 217,088 ------w C:\WINDOWS\ServicePackFiles\i386\unregmp2.exe
    + 2004-08-04 07:56:48 316,416 ------w C:\WINDOWS\ServicePackFiles\i386\untfs.dll
    + 2004-08-04 05:58:34 209,408 ------w C:\WINDOWS\ServicePackFiles\i386\update.sys
    + 2004-08-04 07:56:58 158,208 ------w C:\WINDOWS\ServicePackFiles\i386\uploadm.exe
    + 2004-08-04 07:56:48 132,608 ------w C:\WINDOWS\ServicePackFiles\i386\upnp.dll
    + 2004-08-04 07:56:58 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\upnpcont.exe
    + 2004-08-04 07:56:48 185,344 ------w C:\WINDOWS\ServicePackFiles\i386\upnphost.dll
    + 2004-08-04 07:56:48 239,616 ------w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
    + 2004-08-04 07:56:58 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\ups.exe
    + 2004-08-04 07:56:48 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\url.dll
    + 2004-08-04 07:56:48 601,088 ------w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
    + 2004-08-04 05:31:26 32,384 ------w C:\WINDOWS\ServicePackFiles\i386\usb101et.sys
    + 2004-08-04 06:04:34 12,672 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023.sys
    + 2004-08-04 06:04:34 12,672 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023x.sys
    + 2004-08-04 06:07:56 59,264 ------w C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys
    + 2004-08-04 06:08:48 31,616 ------w C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys
    + 2004-08-04 06:08:38 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\usbehci.sys
    + 2004-08-04 06:08:44 57,600 ------w C:\WINDOWS\ServicePackFiles\i386\usbhub.sys
    + 2004-08-04 06:08:58 16,000 ------w C:\WINDOWS\ServicePackFiles\i386\usbintel.sys
    + 2004-08-04 07:56:48 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\usbmon.dll
    + 2004-08-04 06:08:38 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\usbohci.sys
    + 2004-08-04 06:08:44 142,976 ------w C:\WINDOWS\ServicePackFiles\i386\usbport.sys
    + 2004-08-04 06:01:26 25,856 ------w C:\WINDOWS\ServicePackFiles\i386\usbprint.sys
    + 2004-08-04 05:58:46 15,104 ------w C:\WINDOWS\ServicePackFiles\i386\usbscan.sys
    + 2004-08-04 06:08:44 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\usbser.sys
    + 2004-08-04 06:08:48 26,496 ------w C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
    + 2004-08-04 06:08:38 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys
    + 2004-08-04 07:56:48 74,240 ------w C:\WINDOWS\ServicePackFiles\i386\usbui.dll
    + 2004-08-04 06:10:12 78,464 ------w C:\WINDOWS\ServicePackFiles\i386\usbvideo.sys
    + 2004-08-04 07:56:48 577,024 ------w C:\WINDOWS\ServicePackFiles\i386\user32.dll
    + 2004-08-04 07:56:48 723,456 ------w C:\WINDOWS\ServicePackFiles\i386\userenv.dll
    + 2004-08-04 07:56:48 406,528 ------w C:\WINDOWS\ServicePackFiles\i386\usp10.dll
    + 2004-08-04 07:56:58 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\utilman.exe
    + 2004-08-04 07:56:48 218,624 ------w C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll
    + 2004-08-04 07:56:48 30,749 ------w C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll
    + 2004-08-04 07:56:48 417,792 ------w C:\WINDOWS\ServicePackFiles\i386\vbscript.dll
    + 2004-08-04 07:56:48 11,325 ------w C:\WINDOWS\ServicePackFiles\i386\vchnt5.dll
    + 2004-08-04 07:56:48 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\vdmdbg.dll
    + 2004-08-04 07:56:48 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll
    + 2004-08-04 07:56:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\version.dll
    + 2004-08-04 07:56:48 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll
    + 2004-08-04 06:07:08 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\vga.sys
    + 2004-08-04 07:56:48 848,384 ------w C:\WINDOWS\ServicePackFiles\i386\vgx.dll
    + 2004-08-04 06:07:44 42,240 ------w C:\WINDOWS\ServicePackFiles\i386\viaagp.sys
    + 2004-08-04 05:59:44 5,376 ------w C:\WINDOWS\ServicePackFiles\i386\viaide.sys
    + 2004-08-04 06:07:06 79,744 ------w C:\WINDOWS\ServicePackFiles\i386\videoprt.sys
    + 2004-08-04 07:56:48 131,584 ------w C:\WINDOWS\ServicePackFiles\i386\viewprov.dll
    + 2004-08-04 06:00:18 52,352 ------w C:\WINDOWS\ServicePackFiles\i386\volsnap.sys
    + 2004-08-04 07:56:48 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\vssapi.dll
    + 2004-08-04 07:56:58 297,472 ------w C:\WINDOWS\ServicePackFiles\i386\vssvc.exe
    + 2004-08-04 07:56:48 174,592 ------w C:\WINDOWS\ServicePackFiles\i386\w32time.dll
    + 2004-08-04 07:56:48 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\w3ssl.dll
    + 2004-08-04 07:56:48 483,840 ------w C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll
    + 2004-08-04 07:56:58 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\wab.exe
    + 2004-08-04 07:56:48 504,832 ------w C:\WINDOWS\ServicePackFiles\i386\wab32.dll
    + 2004-08-04 07:56:36 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
    + 2004-08-04 07:56:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
    + 2004-08-04 07:56:48 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
    + 2004-08-04 07:56:58 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
    + 2004-08-04 06:04:54 13,568 ------w C:\WINDOWS\ServicePackFiles\i386\wacompen.sys
    + 2004-08-04 05:29:38 12,415 ------w C:\WINDOWS\ServicePackFiles\i386\wadv01nt.sys
    + 2004-08-04 05:29:38 12,127 ------w C:\WINDOWS\ServicePackFiles\i386\wadv02nt.sys
    + 2004-08-04 05:29:38 11,775 ------w C:\WINDOWS\ServicePackFiles\i386\wadv05nt.sys
    + 2004-08-04 05:29:40 11,807 ------w C:\WINDOWS\ServicePackFiles\i386\wadv07nt.sys
    + 2004-08-04 05:29:40 11,295 ------w C:\WINDOWS\ServicePackFiles\i386\wadv08nt.sys
    + 2004-08-04 05:29:42 11,871 ------w C:\WINDOWS\ServicePackFiles\i386\wadv09nt.sys
    + 2004-08-04 05:29:42 11,935 ------w C:\WINDOWS\ServicePackFiles\i386\wadv11nt.sys
    + 2004-08-04 06:04:58 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\wanarp.sys
    + 2004-08-04 06:07:34 17,664 ------w C:\WINDOWS\ServicePackFiles\i386\watchdog.sys
    + 2004-08-04 05:29:42 29,311 ------w C:\WINDOWS\ServicePackFiles\i386\watv01nt.sys
    + 2004-08-04 05:29:44 19,551 ------w C:\WINDOWS\ServicePackFiles\i386\watv02nt.sys
    + 2004-08-04 05:29:44 33,599 ------w C:\WINDOWS\ServicePackFiles\i386\watv04nt.sys
    + 2004-08-04 05:29:46 22,271 ------w C:\WINDOWS\ServicePackFiles\i386\watv06nt.sys
    + 2004-08-04 05:29:46 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\watv10nt.sys
    + 2004-08-04 07:56:48 196,608 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
    + 2004-08-04 07:56:48 214,528 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll
    + 2004-08-04 07:56:48 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcons.dll
    + 2004-08-04 07:56:48 530,944 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll
    + 2004-08-04 07:56:48 178,176 ------w C:\WINDOWS\ServicePackFiles\i386\wbemdisp.dll
    + 2004-08-04 07:56:48 273,920 ------w C:\WINDOWS\ServicePackFiles\i386\wbemess.dll
    + 2004-08-04 07:56:48 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\wbemperf.dll
    + 2004-08-04 07:56:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll
    + 2004-08-04 07:56:48 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\wbemsvc.dll
    + 2004-08-04 07:56:58 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\wbemtest.exe
    + 2004-08-04 07:56:48 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll
    + 2004-08-04 06:08:48 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\wceusbsh.sys
    + 2004-08-04 05:29:46 23,615 ------w C:\WINDOWS\ServicePackFiles\i386\wch7xxnt.sys
    + 2004-08-04 07:56:48 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\wdigest.dll
    + 2004-08-04 07:56:58 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\wdmaud.drv
    + 2004-08-04 06:15:06 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys
    + 2004-08-04 07:56:48 276,480 ------w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
    + 2004-08-04 07:56:48 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\webclnt.dll
    + 2004-08-04 07:56:48 135,680 ------w C:\WINDOWS\ServicePackFiles\i386\webvw.dll
    + 2004-08-04 07:56:58 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\wextract.exe
    + 2004-08-04 07:56:58 441,344 ------w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
    + 2004-08-04 07:56:48 463,360 ------w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
    + 2004-08-04 07:56:48 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\wiadss.dll
    + 2004-08-04 07:56:48 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\wiascr.dll
    + 2004-08-04 07:56:48 333,312 ------w C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll
    + 2004-08-04 07:56:48 589,312 ------w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
    + 2004-08-04 07:56:48 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\wiavideo.dll
    + 2004-08-04 06:17:42 1,835,904 ------w C:\WINDOWS\ServicePackFiles\i386\win32k.sys
    + 2004-08-04 07:56:48 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\win32spl.dll
    + 2004-08-04 07:56:36 937,984 ------w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
    + 2004-08-04 07:56:58 291,328 ------w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
    + 2004-08-04 07:56:48 351,232 ------w C:\WINDOWS\ServicePackFiles\i386\winhttp.dll
    + 2004-08-04 07:56:48 656,384 ------w C:\WINDOWS\ServicePackFiles\i386\wininet.dll
    + 2004-08-04 07:56:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\winipsec.dll
    + 2004-08-04 07:56:58 509,952 ------w C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
    + 2004-08-04 07:56:48 176,128 ------w C:\WINDOWS\ServicePackFiles\i386\winmm.dll
    + 2004-08-04 05:51:20 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\winnls.dll
    + 2004-08-04 07:56:36 764,928 ------w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
    + 2004-08-04 07:56:48 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\winrnr.dll
    + 2004-08-04 07:56:48 99,328 ------w C:\WINDOWS\ServicePackFiles\i386\winscard.dll
    + 2004-08-04 07:56:48 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\winshfhc.dll
    + 2004-08-04 07:56:58 146,432 ------w C:\WINDOWS\ServicePackFiles\i386\winspool.drv
    + 2004-08-04 07:56:48 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
    + 2004-08-04 07:56:48 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\winsta.dll
    + 2004-08-04 07:56:48 176,640 ------w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
    + 2004-08-04 07:56:58 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\winver.exe
    + 2004-08-04 07:56:48 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll
    + 2004-08-04 07:56:48 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\wldap32.dll
    + 2004-08-04 05:31:28 154,624 ------w C:\WINDOWS\ServicePackFiles\i386\wlluc48.sys
    + 2004-08-04 07:56:48 92,672 ------w C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll
    + 2004-08-04 07:56:48 408,064 ------w C:\WINDOWS\ServicePackFiles\i386\wmadmod.dll
    + 2004-08-04 07:56:48 670,720 ------w C:\WINDOWS\ServicePackFiles\i386\wmadmoe.dll
    + 2004-08-04 07:56:48 230,400 ------w C:\WINDOWS\ServicePackFiles\i386\wmasf.dll
    + 2004-08-04 07:56:48 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\wmdmlog.dll
    + 2004-08-04 07:56:48 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\wmdmps.dll
    + 2004-08-04 07:56:36 168,448 ------w C:\WINDOWS\ServicePackFiles\i386\wmerror.dll
    + 2004-08-04 07:56:36 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmi.dll
    + 2004-08-04 06:07:42 8,832 ------w C:\WINDOWS\ServicePackFiles\i386\wmiacpi.sys
    + 2004-08-04 07:56:58 204,288 ------w C:\WINDOWS\ServicePackFiles\i386\wmiadap.exe
    + 2004-08-04 07:56:36 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapres.dll
    + 2004-08-04 07:56:48 89,088 ------w C:\WINDOWS\ServicePackFiles\i386\wmiaprpl.dll
    + 2004-08-04 07:56:58 134,144 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapsrv.exe
    + 2004-08-04 07:56:48 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll
    + 2004-08-04 07:56:48 140,800 ------w C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll
    + 2004-08-04 07:56:48 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\wmidx.dll
    + 2004-08-04 07:56:48 156,672 ------w C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll
    + 2004-08-04 07:56:48 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmipdskq.dll
    + 2004-08-04 07:56:48 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmipiprt.dll
    + 2004-08-04 07:56:48 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\wmipjobj.dll
    + 2004-08-04 07:56:48 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll
    + 2004-08-04 07:56:48 437,248 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll
    + 2004-08-04 07:56:58 225,792 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe
    + 2004-08-04 07:56:48 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll
    + 2004-08-04 07:56:48 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll
    + 2004-08-04 07:56:48 95,232 ------w C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll
    + 2004-08-04 07:56:48 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ae.dll
    + 2004-08-04 07:56:48 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2eres.dll
    + 2004-08-04 07:56:48 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ext.dll
    + 2004-08-04 07:56:48 402,432 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2filt.dll
    + 2004-08-04 07:56:48 502,272 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxa.dll
    + 2004-08-04 07:56:48 325,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxb.dll
    + 2004-08-04 07:56:48 4,256,768 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
    + 2004-08-04 07:56:48 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res2.dll
    + 2004-08-04 07:56:48 1,050,624 ------w C:\WINDOWS\ServicePackFiles\i386\wmnetmgr.dll
    + 2004-08-04 07:56:48 4,874,240 ------w C:\WINDOWS\ServicePackFiles\i386\wmp.dll
    + 2004-08-04 07:56:48 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\wmpasf.dll
    + 2004-08-04 07:56:48 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\wmpband.dll
    + 2004-08-04 07:56:48 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\wmpcd.dll
    + 2004-08-04 07:56:48 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\wmpcore.dll
    + 2004-08-04 07:56:48 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmpdxm.dll
    + 2004-08-04 07:56:58 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
    + 2004-08-04 07:56:38 2,940,928 ------w C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
    + 2004-08-04 07:56:48 221,184 ------w C:\WINDOWS\ServicePackFiles\i386\wmpns.dll
    + 2004-08-04 07:56:48 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\wmpshell.dll
    + 2004-08-04 07:56:48 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\wmpui.dll
    + 2004-08-04 07:56:48 759,296 ------w C:\WINDOWS\ServicePackFiles\i386\wmsdmod.dll
    + 2004-08-04 07:56:48 115,200 ------w C:\WINDOWS\ServicePackFiles\i386\wmsdmoe.dll
    + 2004-08-04 07:56:48 1,119,744 ------w C:\WINDOWS\ServicePackFiles\i386\wmsdmoe2.dll
    + 2004-08-04 07:56:48 484,864 ------w C:\WINDOWS\ServicePackFiles\i386\wmspdmod.dll
    + 2004-08-04 07:56:48 896,512 ------w C:\WINDOWS\ServicePackFiles\i386\wmspdmoe.dll
    + 2004-08-04 07:56:48 303,616 ------w C:\WINDOWS\ServicePackFiles\i386\wmstream.dll
    + 2004-08-04 07:57:04 2,105,344 ------w C:\WINDOWS\ServicePackFiles\i386\wmvcore.dll
    + 2004-08-04 07:56:48 809,984 ------w C:\WINDOWS\ServicePackFiles\i386\wmvdmod.dll
    + 2004-08-04 07:56:48 1,001,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmvdmoe2.dll
    + 2004-08-04 07:56:58 222,208 ------w C:\WINDOWS\ServicePackFiles\i386\wordpad.exe
    + 2004-08-04 07:56:48 264,192 ------w C:\WINDOWS\ServicePackFiles\i386\wow32.dll
    + 2004-08-04 07:56:58 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
    + 2004-08-04 07:56:58 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\wpnpinst.exe
    + 2004-08-04 07:56:48 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
    + 2004-08-04 07:56:48 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\ws2help.dll
    + 2004-08-04 07:56:58 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe
    + 2004-08-04 07:56:58 122,880 ------w C:\WINDOWS\ServicePackFiles\i386\wscript.exe
    + 2004-08-04 07:56:48 81,408 ------w C:\WINDOWS\ServicePackFiles\i386\wscsvc.dll
    + 2004-08-04 07:56:48 108,032 ------w C:\WINDOWS\ServicePackFiles\i386\wshbth.dll
    + 2004-08-04 07:56:48 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\wshcon.dll
    + 2004-08-04 07:56:48 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\wshext.dll
    + 2004-08-04 07:56:48 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\wship6.dll
    + 2004-08-04 07:56:48 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\wshirda.dll
    + 2004-08-04 07:56:48 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\wshrm.dll
    + 2004-08-04 07:56:48 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll
    + 2004-08-04 05:29:48 12,063 ------w C:\WINDOWS\ServicePackFiles\i386\wsiintxx.sys
    + 2004-08-04 07:56:48 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll
    + 2004-08-04 07:56:48 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\wsock32.dll
    + 2004-08-04 06:10:22 19,328 ------w C:\WINDOWS\ServicePackFiles\i386\wstcodec.sys
    + 2004-08-04 07:56:48 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\wstdecod.dll
    + 2004-08-04 07:56:48 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll
    + 2004-08-04 07:56:48 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\wuapi.dll
    + 2004-08-04 07:56:58 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe
    + 2004-08-04 07:56:58 173,568 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
    + 2004-08-04 07:56:48 1,134,592 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll
    + 2004-08-04 07:56:48 183,296 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng1.dll
    + 2004-08-04 07:56:48 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll
    + 2004-08-04 07:56:48 112,640 ------w C:\WINDOWS\ServicePackFiles\i386\wucltui.dll
    + 2004-08-04 07:56:48 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\wups.dll
    + 2004-08-04 07:56:48 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\wuweb.dll
    + 2004-08-04 05:29:50 19,455 ------w C:\WINDOWS\ServicePackFiles\i386\wvchntxx.sys
    + 2004-08-04 07:56:48 378,368 ------w C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll
    + 2004-08-04 07:56:48 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll
    + 2004-08-04 07:56:48 359,936 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll
    + 2004-08-04 07:56:48 91,648 ------w C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll
    + 2004-08-04 07:56:58 38,400 ------w C:\WINDOWS\ServicePackFiles\i386\xcopy.exe
    + 2004-07-17 18:39:16 174,200 ------w C:\WINDOWS\ServicePackFiles\i386\xenroll.dll
    + 2004-08-04 07:56:48 129,536 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll
    + 2004-08-04 07:56:48 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprovi.dll
    + 2004-08-04 07:56:48 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\xolehlp.dll
    + 2004-08-04 07:56:38 438,784 ------w C:\WINDOWS\ServicePackFiles\i386\xpob2res.dll
    + 2004-08-04 07:56:38 187,392 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll
    + 2004-08-04 07:56:38 2,897,920 ------w C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
    + 2004-08-04 07:56:48 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\xrxwiadr.dll
    + 2004-08-04 07:56:48 337,920 ------w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
    - 2003-07-16 20:35:50 3,346,432 ----a-w C:\WINDOWS\SRCHASST\msgr3en.dll
    + 2004-08-04 07:56:44 3,166,208 ----a-w C:\WINDOWS\SRCHASST\msgr3en.dll
    - 2003-07-16 20:46:30 106,562 ----a-w C:\WINDOWS\SRCHASST\srchctls.dll
    + 2004-08-04 07:56:46 58,434 ----a-w C:\WINDOWS\SRCHASST\srchctls.dll
    - 2003-07-16 20:46:31 798,782 ----a-w C:\WINDOWS\SRCHASST\srchui.dll
    + 2004-08-04 07:56:46 725,566 ----a-w C:\WINDOWS\SRCHASST\srchui.dll
    - 2003-07-16 20:33:56 68,928 ----a-w C:\WINDOWS\SYSTEM\MMSYSTEM.DLL
    + 2004-08-04 05:51:12 68,768 ----a-w C:\WINDOWS\SYSTEM\mmsystem.dll
    - 2003-07-16 20:51:52 132,096 ----a-w C:\WINDOWS\SYSTEM\WINSPOOL.DRV
    + 2004-08-04 07:56:58 146,432 ----a-w C:\WINDOWS\SYSTEM\winspool.drv
    + 2008-09-25 10:05:43 23,552 --sha-w C:\WINDOWS\SYSTEM32\$winnt$s.dll
    - 2003-07-16 20:23:38 59,392 ----a-w C:\WINDOWS\SYSTEM32\6to4svc.dll
    + 2004-08-04 07:56:42 100,352 ----a-w C:\WINDOWS\SYSTEM32\6to4svc.dll
    - 2003-07-16 20:23:46 107,008 ----a-w C:\WINDOWS\SYSTEM32\aclui.dll
    + 2004-08-04 07:56:42 114,688 ----a-w C:\WINDOWS\SYSTEM32\aclui.dll
    - 2003-07-16 20:23:49 181,760 ----a-w C:\WINDOWS\SYSTEM32\activeds.dll
    + 2004-08-04 07:56:42 194,048 ----a-w C:\WINDOWS\SYSTEM32\activeds.dll
    - 2003-07-16 20:23:50 11,776 ----a-w C:\WINDOWS\SYSTEM32\actmovie.exe
    + 2004-08-04 07:56:48 11,776 ----a-w C:\WINDOWS\SYSTEM32\actmovie.exe
    - 2003-07-16 20:23:50 98,304 ----a-w C:\WINDOWS\SYSTEM32\actxprxy.dll
    + 2004-08-04 07:56:42 101,888 ----a-w C:\WINDOWS\SYSTEM32\actxprxy.dll
    - 2003-07-16 20:23:52 57,344 ----a-w C:\WINDOWS\SYSTEM32\admparse.dll
    + 2007-08-14 01:39:20 71,680 ----a-w C:\WINDOWS\SYSTEM32\admparse.dll
    - 2003-07-16 20:23:54 162,816 ----a-w C:\WINDOWS\SYSTEM32\adsldp.dll
    + 2004-08-04 07:56:42 175,616 ----a-w C:\WINDOWS\SYSTEM32\adsldp.dll
    - 2003-07-16 20:23:54 139,776 ----a-w C:\WINDOWS\SYSTEM32\adsldpc.dll
    + 2004-08-04 07:56:42 143,360 ----a-w C:\WINDOWS\SYSTEM32\adsldpc.dll
    - 2003-07-16 20:23:55 62,464 ----a-w C:\WINDOWS\SYSTEM32\adsmsext.dll
    + 2004-08-04 07:56:42 68,096 ----a-w C:\WINDOWS\SYSTEM32\adsmsext.dll
    - 2003-07-16 20:23:55 239,616 ----a-w C:\WINDOWS\SYSTEM32\adsnt.dll
    + 2004-08-04 07:56:42 263,680 ----a-w C:\WINDOWS\SYSTEM32\adsnt.dll
    - 2003-07-16 20:23:55 558,080 ----a-w C:\WINDOWS\SYSTEM32\advapi32.dll
    + 2004-08-04 07:56:42 616,960 ----a-w C:\WINDOWS\SYSTEM32\advapi32.dll
    - 2003-07-16 20:23:55 91,136 ----a-w C:\WINDOWS\SYSTEM32\advpack.dll
    + 2007-08-14 01:39:00 123,904 ----a-w C:\WINDOWS\SYSTEM32\advpack.dll
    - 2003-07-16 20:24:08 99,328 ----a-w C:\WINDOWS\SYSTEM32\ahui.exe
    + 2004-08-04 07:56:48 105,984 ----a-w C:\WINDOWS\SYSTEM32\ahui.exe
    - 2003-07-16 20:24:09 49,664 ----a-w C:\WINDOWS\SYSTEM32\alg.exe
    + 2004-08-04 07:56:48 52,224 ----a-w C:\WINDOWS\SYSTEM32\alg.exe
    - 2003-07-16 20:24:10 15,872 ----a-w C:\WINDOWS\SYSTEM32\alrsvc.dll
    + 2004-08-04 07:56:42 17,408 ----a-w C:\WINDOWS\SYSTEM32\alrsvc.dll
    - 2003-07-16 20:24:10 63,488 ----a-w C:\WINDOWS\SYSTEM32\amstream.dll
    + 2004-08-04 07:56:42 70,656 ----a-w C:\WINDOWS\SYSTEM32\amstream.dll
    - 2003-07-16 20:24:15 115,712 ----a-w C:\WINDOWS\SYSTEM32\apphelp.dll
    + 2004-08-04 07:56:42 126,976 ----a-w C:\WINDOWS\SYSTEM32\apphelp.dll
    - 2003-07-16 20:24:23 5,120 ----a-w C:\WINDOWS\SYSTEM32\asferror.dll
    + 2004-08-04 07:56:00 8,192 ----a-w C:\WINDOWS\SYSTEM32\asferror.dll
    - 2003-07-16 20:24:24 77,824 ----a-w C:\WINDOWS\SYSTEM32\asycfilt.dll
    + 2004-08-04 07:56:42 65,024 ----a-w C:\WINDOWS\SYSTEM32\asycfilt.dll
    - 2003-07-16 20:24:25 30,208 ----a-w C:\WINDOWS\SYSTEM32\at.exe
    + 2004-08-04 07:56:48 32,768 ----a-w C:\WINDOWS\SYSTEM32\at.exe
    - 2008-04-14 00:11:49 229,376 ----a-w C:\WINDOWS\SYSTEM32\ati2cqag.dll
    + 2004-08-04 07:56:42 229,376 ----a-w C:\WINDOWS\SYSTEM32\ati2cqag.dll
    - 2002-08-29 11:40:48 377,984 ----a-w C:\WINDOWS\SYSTEM32\ati2dvaa.dll
    + 2004-08-04 07:56:42 377,984 ----a-w C:\WINDOWS\SYSTEM32\ati2dvaa.dll
    - 2002-08-29 11:40:48 202,496 ----a-w C:\WINDOWS\SYSTEM32\ati2dvag.dll
    + 2004-08-04 07:56:42 201,728 ----a-w C:\WINDOWS\SYSTEM32\ati2dvag.dll
    - 2002-08-29 11:40:48 844,675 ----a-w C:\WINDOWS\SYSTEM32\ati3d1ag.dll
    + 2004-08-04 07:56:42 870,784 ----a-w C:\WINDOWS\SYSTEM32\ati3d1ag.dll
    - 2008-04-14 00:11:50 1,888,992 ----a-w C:\WINDOWS\SYSTEM32\ati3duag.dll
    + 2004-08-04 07:56:42 1,888,992 ----a-w C:\WINDOWS\SYSTEM32\ati3duag.dll
    - 2008-04-14 00:11:50 32,768 ----a-w C:\WINDOWS\SYSTEM32\ativtmxx.dll
    + 2004-08-04 07:56:42 32,768 ----a-w C:\WINDOWS\SYSTEM32\ativtmxx.dll
    - 2008-04-14 00:11:50 516,768 ----a-w C:\WINDOWS\SYSTEM32\ativvaxx.dll
    + 2004-08-04 07:56:42 516,768 ----a-w C:\WINDOWS\SYSTEM32\ativvaxx.dll
    - 2003-07-16 20:24:31 74,810 ----a-w C:\WINDOWS\SYSTEM32\atl.dll
    + 2004-08-04 07:56:42 58,880 ----a-w C:\WINDOWS\SYSTEM32\atl.dll
    - 2003-07-16 20:24:32 17,920 ----a-w C:\WINDOWS\SYSTEM32\atmadm.exe
    + 2004-08-04 07:56:48 18,944 ----a-w C:\WINDOWS\SYSTEM32\atmadm.exe
    - 2003-07-16 20:24:32 272,768 ----a-w C:\WINDOWS\SYSTEM32\atmfd.dll
    + 2004-08-04 07:56:00 285,696 ----a-w C:\WINDOWS\SYSTEM32\atmfd.dll
    - 2003-07-16 20:24:33 27,136 ----a-w C:\WINDOWS\SYSTEM32\atmlib.dll
    + 2004-08-04 07:56:42 30,208 ----a-w C:\WINDOWS\SYSTEM32\atmlib.dll
    - 2003-07-16 20:24:34 38,912 ----a-w C:\WINDOWS\SYSTEM32\audiosrv.dll
    + 2004-08-04 07:56:42 42,496 ----a-w C:\WINDOWS\SYSTEM32\audiosrv.dll
    - 2003-07-16 20:24:35 51,200 ----a-w C:\WINDOWS\SYSTEM32\authz.dll
    + 2005-03-02 18:09:29 56,832 ----a-w C:\WINDOWS\SYSTEM32\authz.dll
    - 2003-07-16 20:24:35 565,760 ----a-w C:\WINDOWS\SYSTEM32\autochk.exe
    + 2004-08-04 07:56:48 588,800 ----a-w C:\WINDOWS\SYSTEM32\autochk.exe
    - 2003-07-16 20:24:36 578,560 ----a-w C:\WINDOWS\SYSTEM32\autoconv.exe
    + 2004-08-04 07:56:48 602,624 ----a-w C:\WINDOWS\SYSTEM32\autoconv.exe
    - 2003-07-16 20:24:36 558,592 ----a-w C:\WINDOWS\SYSTEM32\autofmt.exe
    + 2004-08-04 07:56:48 580,608 ----a-w C:\WINDOWS\SYSTEM32\autofmt.exe
    - 2003-07-16 20:24:36 8,192 ----a-w C:\WINDOWS\SYSTEM32\autolfn.exe
    + 2004-08-04 07:56:48 11,264 ----a-w C:\WINDOWS\SYSTEM32\autolfn.exe
    - 2003-07-16 20:24:38 76,288 ----a-w C:\WINDOWS\SYSTEM32\avifil32.dll
    + 2004-08-04 07:56:42 84,992 ----a-w C:\WINDOWS\SYSTEM32\avifil32.dll
    - 2003-07-16 20:24:41 44,032 ----a-w C:\WINDOWS\SYSTEM32\basesrv.dll
    + 2004-08-04 07:56:42 52,736 ----a-w C:\WINDOWS\SYSTEM32\basesrv.dll
    - 2003-07-16 20:24:42 27,136 ----a-w C:\WINDOWS\SYSTEM32\batmeter.dll
    + 2004-08-04 07:56:42 28,672 ----a-w C:\WINDOWS\SYSTEM32\batmeter.dll
    - 2003-07-16 20:24:42 6,656 ----a-w C:\WINDOWS\SYSTEM32\batt.dll
    + 2004-08-04 07:56:42 8,704 ----a-w C:\WINDOWS\SYSTEM32\batt.dll
    - 2003-06-02 11:00:28 118,784 ----a-w C:\WINDOWS\SYSTEM32\BCMSMI32.dll
    + 2003-08-29 11:59:22 122,880 ----a-w C:\WINDOWS\SYSTEM32\BCMSMI32.dll
    - 2003-07-16 20:24:46 14,848 ----a-w C:\WINDOWS\SYSTEM32\bidispl.dll
    + 2004-08-04 07:56:42 17,408 ----a-w C:\WINDOWS\SYSTEM32\bidispl.dll
    - 2003-07-16 20:24:47 204,800 ----a-w C:\WINDOWS\SYSTEM32\blackbox.dll
    + 2004-08-04 07:56:42 286,208 ----a-w C:\WINDOWS\SYSTEM32\blackbox.dll
    - 2003-07-16 20:24:55 62,976 ----a-w C:\WINDOWS\SYSTEM32\browselc.dll
    + 2004-08-04 07:56:00 63,488 ----a-w C:\WINDOWS\SYSTEM32\browselc.dll
    - 2003-07-16 20:24:56 49,152 ----a-w C:\WINDOWS\SYSTEM32\browser.dll
    + 2004-08-04 07:56:42 77,312 ----a-w C:\WINDOWS\SYSTEM32\browser.dll
    - 2003-07-16 20:24:56 1,021,952 ----a-w C:\WINDOWS\SYSTEM32\browseui.dll
    + 2006-09-23 20:12:50 1,022,976 ----a-w C:\WINDOWS\SYSTEM32\browseui.dll
    - 2003-07-16 20:24:56 71,680 ----a-w C:\WINDOWS\SYSTEM32\browsewm.dll
    + 2004-08-04 07:56:42 78,336 ----a-w C:\WINDOWS\SYSTEM32\browsewm.dll
    - 2003-07-16 20:25:03 59,904 ----a-w C:\WINDOWS\SYSTEM32\cabinet.dll
    + 2004-08-04 07:56:42 59,904 ----a-w C:\WINDOWS\SYSTEM32\cabinet.dll
    - 2003-07-16 20:25:03 80,384 ----a-w C:\WINDOWS\SYSTEM32\cabview.dll
    + 2004-08-04 07:56:42 84,480 ----a-w C:\WINDOWS\SYSTEM32\cabview.dll
    - 2003-07-16 20:25:05 45,056 ----a-w C:\WINDOWS\SYSTEM32\camocx.dll
    + 2004-08-04 07:56:42 50,688 ----a-w C:\WINDOWS\SYSTEM32\camocx.dll
    - 2003-07-16 20:25:06 215,040 ----a-w C:\WINDOWS\SYSTEM32\catsrv.dll
    + 2004-08-04 07:56:42 229,888 ----a-w C:\WINDOWS\SYSTEM32\catsrv.dll
    - 2003-07-16 20:25:07 85,504 ----a-w C:\WINDOWS\SYSTEM32\catsrvps.dll
    + 2004-08-04 07:56:42 85,504 ----a-w C:\WINDOWS\SYSTEM32\catsrvps.dll
    - 2003-07-16 20:25:07 582,656 ----a-w C:\WINDOWS\SYSTEM32\catsrvut.dll
    + 2004-08-04 07:56:42 628,224 ----a-w C:\WINDOWS\SYSTEM32\catsrvut.dll
    - 2003-07-16 20:25:08 142,336 ----a-w C:\WINDOWS\SYSTEM32\cdfview.dll
    + 2004-08-04 07:56:42 150,528 ----a-w C:\WINDOWS\SYSTEM32\cdfview.dll
    - 2003-07-16 20:25:09 2,028,032 ----a-w C:\WINDOWS\SYSTEM32\cdosys.dll
    + 2005-09-10 01:53:41 2,067,968 ----a-w C:\WINDOWS\SYSTEM32\cdosys.dll
    - 2003-07-16 20:25:11 186,880 ----a-w C:\WINDOWS\SYSTEM32\certcli.dll
    + 2004-08-04 07:56:42 194,560 ----a-w C:\WINDOWS\SYSTEM32\certcli.dll
    - 2003-07-16 20:25:11 436,736 ----a-w C:\WINDOWS\SYSTEM32\certmgr.dll
    + 2004-08-04 07:56:42 457,728 ----a-w C:\WINDOWS\SYSTEM32\certmgr.dll
    - 2002-11-27 03:03:32 159,232 ----a-w C:\WINDOWS\SYSTEM32\cewmdm.dll
    + 2004-08-04 07:56:42 159,232 ----a-w C:\WINDOWS\SYSTEM32\cewmdm.dll
    - 2003-07-16 20:25:15 32,768 ----a-w C:\WINDOWS\SYSTEM32\cfgbkend.dll
    + 2004-08-04 07:56:42 38,912 ----a-w C:\WINDOWS\SYSTEM32\cfgbkend.dll
    - 2003-07-16 20:25:15 16,896 ----a-w C:\WINDOWS\SYSTEM32\cfgmgr32.dll
    + 2004-08-04 07:56:02 16,896 ----a-w C:\WINDOWS\SYSTEM32\cfgmgr32.dll
    - 2003-07-16 20:25:25 64,512 ----a-w C:\WINDOWS\SYSTEM32\ciodm.dll
    + 2006-06-22 05:06:29 69,120 ----a-w C:\WINDOWS\SYSTEM32\ciodm.dll
    - 2003-07-16 20:25:25 12,800 ----a-w C:\WINDOWS\SYSTEM32\cisvc.exe
    + 2004-08-04 07:56:48 13,312 ----a-w C:\WINDOWS\SYSTEM32\cisvc.exe
    - 2003-07-16 20:25:27 100,864 ----a-w C:\WINDOWS\SYSTEM32\clbcatex.dll
    + 2004-08-04 07:56:42 110,080 ----a-w C:\WINDOWS\SYSTEM32\clbcatex.dll
    - 2003-07-16 20:25:28 468,480 ----a-w C:\WINDOWS\SYSTEM32\clbcatq.dll
    + 2004-08-04 07:56:42 501,248 ----a-w C:\WINDOWS\SYSTEM32\clbcatq.dll
    - 2003-07-16 20:25:28 69,120 ----a-w C:\WINDOWS\SYSTEM32\cleanmgr.exe
    + 2004-08-04 07:56:48 71,680 ----a-w C:\WINDOWS\SYSTEM32\cleanmgr.exe
    - 2003-07-16 20:25:29 127,552 ----a-w C:\WINDOWS\SYSTEM32\cliconfg.dll
    + 2004-08-04 07:56:42 77,824 ----a-w C:\WINDOWS\SYSTEM32\cliconfg.dll
    - 2003-07-16 20:25:29 53,824 ----a-w C:\WINDOWS\SYSTEM32\cliconfg.exe
    + 2004-08-04 07:56:48 28,672 ----a-w C:\WINDOWS\SYSTEM32\cliconfg.exe
    - 2003-07-16 20:25:30 38,400 ----a-w C:\WINDOWS\SYSTEM32\clipsrv.exe
    + 2004-08-04 07:56:48 40,960 ----a-w C:\WINDOWS\SYSTEM32\clipsrv.exe
    - 2003-07-16 20:25:31 54,272 ----a-w C:\WINDOWS\SYSTEM32\clusapi.dll
    + 2004-08-04 07:56:42 57,856 ----a-w C:\WINDOWS\SYSTEM32\clusapi.dll
    - 2003-07-16 20:25:32 12,288 ----a-w C:\WINDOWS\SYSTEM32\cmcfg32.dll
    + 2004-08-04 07:56:42 15,872 ----a-w C:\WINDOWS\SYSTEM32\cmcfg32.dll
    - 2003-07-16 20:25:32 383,488 ----a-w C:\WINDOWS\SYSTEM32\cmd.exe
    + 2004-08-04 07:56:50 396,288 ----a-w C:\WINDOWS\SYSTEM32\cmd.exe
    - 2003-07-16 20:25:32 324,608 ----a-w C:\WINDOWS\SYSTEM32\cmdial32.dll
    + 2004-08-04 07:56:42 343,040 ----a-w C:\WINDOWS\SYSTEM32\cmdial32.dll
    - 2003-07-16 20:25:33 49,152 ----a-w C:\WINDOWS\SYSTEM32\cmdl32.exe
    + 2004-08-04 07:56:50 54,784 ----a-w C:\WINDOWS\SYSTEM32\cmdl32.exe
    - 2003-07-16 20:25:33 43,520 ----a-w C:\WINDOWS\SYSTEM32\cmmon32.exe
    + 2004-08-04 07:56:50 47,616 ----a-w C:\WINDOWS\SYSTEM32\cmmon32.exe
    - 2003-07-16 20:25:34 174,592 ----a-w C:\WINDOWS\SYSTEM32\cmprops.dll
    + 2004-08-04 07:56:42 185,344 ----a-w C:\WINDOWS\SYSTEM32\cmprops.dll
    - 2003-07-16 20:25:35 62,464 ----a-w C:\WINDOWS\SYSTEM32\cmstp.exe
    + 2004-08-04 07:56:50 71,168 ----a-w C:\WINDOWS\SYSTEM32\cmstp.exe
    - 2003-07-16 20:25:35 36,352 ----a-w C:\WINDOWS\SYSTEM32\cmutil.dll
    + 2004-08-04 07:56:42 39,936 ----a-w C:\WINDOWS\SYSTEM32\cmutil.dll
    - 2003-07-16 20:27:31 45,568 ----a-w C:\WINDOWS\SYSTEM32\cnbjmon.dll
    + 2004-08-04 07:56:42 47,104 ----a-w C:\WINDOWS\SYSTEM32\cnbjmon.dll
    - 2003-07-16 20:25:37 56,832 ----a-w C:\WINDOWS\SYSTEM32\colbact.dll
    + 2004-08-04 07:56:42 62,464 ----a-w C:\WINDOWS\SYSTEM32\colbact.dll
    - 2003-07-16 20:25:37 186,880 ----a-w C:\WINDOWS\SYSTEM32\Com\comadmin.dll
    + 2004-08-04 07:56:42 195,584 ----a-w C:\WINDOWS\SYSTEM32\Com\comadmin.dll
    - 2003-07-16 20:25:43 15,872 ----a-w C:\WINDOWS\SYSTEM32\Com\comrepl.exe
    + 2004-08-04 07:56:50 17,408 ----a-w C:\WINDOWS\SYSTEM32\Com\comrepl.exe
    - 2003-07-16 20:25:38 557,056 ----a-w C:\WINDOWS\SYSTEM32\comctl32.dll
    + 2006-08-25 15:45:58 617,472 ----a-w C:\WINDOWS\SYSTEM32\comctl32.dll
    - 2003-07-16 20:25:38 258,048 ----a-w C:\WINDOWS\SYSTEM32\comdlg32.dll
    + 2004-08-04 07:56:42 276,992 ----a-w C:\WINDOWS\SYSTEM32\comdlg32.dll
    - 2003-07-16 20:25:41 238,592 ----a-w C:\WINDOWS\SYSTEM32\compatUI.dll
    + 2004-08-04 07:56:42 252,928 ----a-w C:\WINDOWS\SYSTEM32\compatui.dll
    - 2003-07-16 20:25:43 222,208 ----a-w C:\WINDOWS\SYSTEM32\compstui.dll
    + 2004-08-04 07:56:42 229,376 ----a-w C:\WINDOWS\SYSTEM32\compstui.dll
    - 2003-07-16 20:25:44 792,064 ----a-w C:\WINDOWS\SYSTEM32\comres.dll
    + 2004-08-04 07:56:42 792,064 ----a-w C:\WINDOWS\SYSTEM32\comres.dll
    - 2003-07-16 20:25:44 1,172,992 ----a-w C:\WINDOWS\SYSTEM32\comsvcs.dll
    + 2004-08-04 07:56:42 1,251,840 ----a-w C:\WINDOWS\SYSTEM32\comsvcs.dll
    - 2003-07-16 20:25:45 495,616 ----a-w C:\WINDOWS\SYSTEM32\comuid.dll
    + 2004-08-04 07:56:42 540,160 ----a-w C:\WINDOWS\SYSTEM32\comuid.dll
    - 2008-09-23 01:59:38 32,768 -c--a-w C:\WINDOWS\SYSTEM32
« Previous Thread | Next Thread »

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules