Page 1 of 2 12 LastLast
Results 1 to 10 of 18

Thread: Win32.delf.rtk, Virtumonde and others.

  1. #1
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default Win32.delf.rtk, Virtumonde and others.

    While I am aware the rules state not to post asking for aid on multiple tech support boards, my last attempt went several weeks without a response and as a result my friend suggested (or rather insisted) I try this forum. Registry is backed up, although I was a little concerned with turning off TeaTimer, given how many actions it blocks every time I start my PC.

    For the last month or so I have been plagued by a virus that appears to repeatedly download other difficult-to-remove trojans onto my computer. I can't figure out where it's going, but thus far I've encountered Vundo/Virtumonde, the Fake Anti-Virus "Virus" and more recently the Win32.delf.rtk trojan. Aside from the tracking cookies being constantly placed on my computer, I've also encountered sporadic pop-ups via Internet Explorer (odd, since it's not my primary browser) and an inexplicable radio-ish broadcast that occurs sporadically and tends to cut off the moment I start up Spybot to see if I can catch it.

    I'm using SP2 at the moment (my previous attempt to download SP3 was marred by an inexplicable error and thus far I have been unable to properly update) and my primary detection programs are Spybot and Avira AntiVir (which, thankfully, was largely immune to the Trojans' initial attempts to disable security devices), and for the most part I thought that Avira had caught the virus when it was first contracted. It was only a couple of days later that the Trojans began to spawn like the angry little gribblies they are.

    On a possibly related note, I at one point attempted to prevent the Trojans from re-downloading themselves by deselecting the "File and Printer Sharing for Microsoft Networks" item in my connection properties. I re-selected, of course, when I saw that it did nothing to hinder them, but since then I have had unresolved issues with connecting to friends online/through certain programs. The Windows Firewall also refuses to re-engage, stating that the associated service (firewall/ICS) is not running, then states that it is unable to start the service in question. I'm not really sure what to do about that, although I understand it's likely my own inept fumblings that lead to the issue rather than viral interference and is probably best reserved for a different board.

    The following is a HijackThis log made preceding the multiple scans I run every time I turn the computer on, so it will likely show most of the stuff I get rid of on a daily basis.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:19:59 PM, on 07/03/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Eraser\eraser.exe
    C:\Program Files\WiFiConnector\NintendoWFCReg.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\WINDOWS\arservice.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\sopidkc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    c:\windows\$ntunistalls\svchost.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Opera 9\opera.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\DAEMON Tools Pro\DTProShellHlp.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ION&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
    O2 - BHO: Google plugin - {684EE1DB-CD52-4ca9-9CCF-93D5F6B419BA} - kmsvc32.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {A6D6C060-BB36-4407-8F59-B06192FCFFA8} - C:\WINDOWS\system32\mlJYRjJA.dll (file missing)
    O2 - BHO: (no name) - {f604a4f9-fbe8-4a5c-ac38-1065d50b29f9} - C:\WINDOWS\system32\pehirema.dll (file missing)
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    O4 - HKLM\..\Run: [bujopidiju] Rundll32.exe "C:\WINDOWS\system32\mijejabe.dll",s
    O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\system32\msrstart.exe
    O4 - HKLM\..\RunServices: [Object Rec] sorhost.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\IGN\Download Manager\dlm.exe /windowsstart /startifwork
    O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" -autorun
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKLM\..\Policies\Explorer\Run: [xccinit] C:\WINDOWS\system32\inf\rundll33.exe C:\WINDOWS\xccdf16_090131a.dll xccd16
    O4 - HKUS\S-1-5-21-3517020019-3143994005-2725134825-1008\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background (User '?')
    O4 - HKUS\S-1-5-21-3517020019-3143994005-2725134825-1008\..\Run: [igndlm.exe] C:\Program Files\IGN\Download Manager\dlm.exe /windowsstart /startifwork (User '?')
    O4 - HKUS\S-1-5-21-3517020019-3143994005-2725134825-1008\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide (User '?')
    O4 - HKUS\S-1-5-21-3517020019-3143994005-2725134825-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
    O4 - HKUS\S-1-5-21-3517020019-3143994005-2725134825-1008\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" -autorun (User '?')
    O4 - HKUS\S-1-5-21-3517020019-3143994005-2725134825-1008\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User '?')
    O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User '?')
    O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
    O4 - S-1-5-21-3517020019-3143994005-2725134825-1008 Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE (User '?')
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
    O4 - Global Startup: Run Nintendo Wi-Fi USB Connector Registration Tool.lnk = C:\Program Files\WiFiConnector\NintendoWFCReg.exe
    O4 - Global Startup: xccstart.lnk = C:\WINDOWS\system\xccef090131.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: imdds.dll
    O10 - Unknown file in Winsock LSP: imdds.dll
    O10 - Unknown file in Winsock LSP: imdds.dll
    O10 - Unknown file in Winsock LSP: imdds.dll
    O10 - Unknown file in Winsock LSP: c:\docume~1\hp_adm~1\locals~1\temp\ntdll64.dll
    O10 - Unknown file in Winsock LSP: c:\docume~1\hp_adm~1\locals~1\temp\ntdll64.dll
    O15 - Trusted Zone: http://*.trymedia.com (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/...x/qtplugin.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/Driver...sysreqlab3.cab
    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ca..._2.3.7.109.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/.../GAME_UNO1.cab
    O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Driver...sysreqlab2.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1165182224881
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
    O20 - AppInit_DLLs: eofsgt.dll C:\WINDOWS\system32\ c:\windows\system32\pimimoso.dll C:\WINDOWS\system32\ C:\WINDOWS\system32\hufufoga.dll cynlex.dll c:\windows\system32\kapigagi.dll
    O20 - Winlogon Notify: ljJDVpPj - ljJDVpPj.dll (file missing)
    O20 - Winlogon Notify: pmnkJApn - pmnkJApn.dll (file missing)
    O20 - Winlogon Notify: urqOGVPH - urqOGVPH.dll (file missing)
    O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kapigagi.dll (file missing)
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kapigagi.dll (file missing)
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: sopidkc Service (sopidkc) - Unknown owner - C:\WINDOWS\system32\sopidkc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: Tcp ipx Service (Tcpipsrv) - Unknown owner - c:\windows\$ntunistalls\svchost.exe

    --
    End of file - 12666 bytes

    The numerous "Missing DLLs" are, as far as I'm aware, from the various attempts to replicate using random file names that the Trojans have engaged in. If not, I'm pretty sure I still have most, if not all of them in quarantine, so I can restore them if necessary.

    Any help you could give me would be greatly appreciated.

  2. #2
    Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,300

    Default

    Hi,

    Download DDS and save it to your desktop from here or here or here.
    Disable any script blocker, and then double click dds.scr to run the tool.
    • When done, DDS will open two (2) logs:
      1. DDS.txt
      2. Attach.txt
    • Save both reports to your desktop. Post them back to your topic.
    Microsoft Windows Insider MVP 2016-2018
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

  3. #3
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    Here you go.

    As far as I know, all script blockers were off. Didn't get any notifications or anything.

    DDS (Ver_09-02-01.01) - NTFSx86
    Run by HP_Administrator at 15:08:32.56 on 09/03/2009
    Internet Explorer: 7.0.5730.11

    ============== Running Processes ===============


    ============== Pseudo HJT Report ===============

    uStart Page = about:blank
    uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uInternet Settings,ProxyServer = http=localhost:7171
    uInternet Settings,ProxyOverride = *.local;<local>
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
    BHO: Click-to-Call BHO: {5c255c8a-e604-49b4-9d64-90988571cecb} - c:\program files\windows live\messenger\wlchtc.dll
    BHO: Google plugin: {684ee1db-cd52-4ca9-9ccf-93d5f6b419ba} - kmsvc32.dll
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: {a6d6c060-bb36-4407-8f59-b06192fcffa8} - c:\windows\system32\mlJYRjJA.dll
    BHO: {f604a4f9-fbe8-4a5c-ac38-1065d50b29f9} - c:\windows\system32\pehirema.dll
    TB: {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - No File
    uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
    uRun: [igndlm.exe] c:\program files\ign\download manager\dlm.exe /windowsstart /startifwork
    uRun: [Eraser] c:\program files\eraser\eraser.exe -hide
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRunOnce: [SpybotDeletingB1526] command.com /c del "c:\windows\system32\afisicx.exe_old"
    uRunOnce: [SpybotDeletingD8202] cmd.exe /c del "c:\windows\system32\afisicx.exe_old"
    mRun: [avgnt] "c:\program files\avira\antivir personaledition classic\avgnt.exe" /min
    mRun: [RTHDCPL] RTHDCPL.EXE
    mRun: [Alcmtr] ALCMTR.EXE
    mRun: [KBD] c:\hp\kbd\KBD.EXE
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
    mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    mRun: [bujopidiju] Rundll32.exe "c:\windows\system32\mijejabe.dll",s
    mRun: [Explorer] c:\windows\system32\msrstart.exe
    mRunOnce: [SpybotDeletingA1243] command.com /c del "c:\windows\system32\afisicx.exe_old"
    mRunOnce: [SpybotDeletingC8057] cmd.exe /c del "c:\windows\system32\afisicx.exe_old"
    mRunServices: [Object Rec] sorhost.exe
    dRunOnce: [RunNarrator] Narrator.exe
    mExplorerRun: [xccinit] c:\windows\system32\inf\rundll33.exe c:\windows\xccdf16_090131a.dll xccd16
    StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\runnin~1.lnk - c:\program files\wificonnector\NintendoWFCReg.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\xccstart.lnk - c:\windows\system\xccef090131.exe
    uPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    dPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
    IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
    LSP: imdds.dll
    LSP: c:\docume~1\hp_adm~1\locals~1\temp\ntdll64.dll
    Trusted Zone: trymedia.com
    DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
    DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab
    DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
    DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
    DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
    DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
    DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} - hxxp://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165182224881
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - hxxp://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
    DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    Notify: ljJDVpPj - ljJDVpPj.dll
    Notify: pmnkJApn - pmnkJApn.dll
    Notify: urqOGVPH - urqOGVPH.dll
    AppInit_DLLs: eofsgt.dll c:\windows\system32\ c:\windows\system32\pimimoso.dll c:\windows\system32\ c:\windows\system32\hufufoga.dll cynlex.dll c:\windows\system32\kapigagi.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kapigagi.dll
    STS: STS: {ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} - c:\windows\system32\kapigagi.dll
    LSA: Authentication Packages = msv1_0 c:\windows\system32\mlJYRjJA
    LSA: Notification Packages = scecli scecli scecli scecli c:\windows\system32\sayiwido.dll c:\windows\system32\hufufoga.dll

    ============= SERVICES / DRIVERS ===============


    ============== File Associations ===============

    txtfile="c:\windows\system32\nxtepad.exe" "%1"

    =============== Created Last 30 ================

    2009-03-09 02:56 <DIR> --d----- c:\program files\Koei
    2009-03-08 07:48 0 a------- c:\windows\system32\nfr.assembly
    2009-03-08 07:46 12,800 a------- c:\windows\system32\dll32.dll
    2009-03-08 07:46 1 a------- c:\windows\9gdfgjf23
    2009-03-08 07:46 11,776 ----h--- c:\windows\pp2.exe
    2009-03-08 07:46 1 ----h--- c:\windows\t55ft3518f44.dat
    2009-03-08 07:46 30,720 a------- c:\windows\system32\frmwrk32.exe
    2009-03-08 07:46 12,288 ----h--- c:\windows\ld02.exe
    2009-03-08 05:47 <DIR> --d----- c:\program files\Sim
    2009-03-06 18:22 1 a------- c:\windows\system32\tb.dr
    2009-03-06 15:13 44,032 a------- c:\windows\system32\kmsvc32.dll
    2009-03-06 12:06 388,608 a------- c:\windows\system32\tmpxccacj1.exe
    2009-03-05 13:21 251,392 a------- c:\windows\xccdf32_090131a.dll
    2009-03-05 12:17 11,264 a------- c:\windows\system32\imdds.dll
    2009-03-05 12:13 100 a------- c:\windows\system32\wh
    2009-03-03 11:34 485 a------- c:\windows\system32\303357.exe
    2009-03-03 11:20 <DIR> --dsh--- c:\windows\$ntunistalls
    2009-03-02 12:05 2,713 ---sh--- c:\windows\system32\nelesoye.dll
    2009-03-01 12:51 32 a------- c:\windows\system32\work.ini
    2009-03-01 12:51 227 a------- c:\windows\system32\hgset.ini
    2009-03-01 12:50 <DIR> --d----- c:\windows\system32\3361
    2009-02-28 12:09 676,352 a------- c:\windows\system32\rtl60.bpl
    2009-02-28 12:09 199 a------- c:\windows\system32\xcchit32.ini
    2009-02-28 12:08 650 a------- c:\windows\xccwinsys.ini
    2009-02-28 12:08 <DIR> --d----- c:\windows\system32\inf
    2009-02-20 21:02 <DIR> --d----- c:\docume~1\hp_adm~1\applic~1\The Creative Assembly
    2009-02-18 23:48 <DIR> --d----- c:\program files\OptimiData
    2009-02-18 18:54 <DIR> --d----- c:\program files\Freelancer Mod Manager
    2009-02-08 20:26 <DIR> --d----- c:\program files\Battle for Wesnoth 1.5.9

    ==================== Find3M ====================

    2009-02-06 19:52 49,504 a------- c:\windows\system32\sirenacm.dll
    2009-01-21 12:01 133,632 a------- c:\windows\awepajon.dll
    2008-12-13 00:40 3,593,216 a------- c:\windows\system32\dllcache\mshtml.dll
    2008-12-11 05:57 333,184 a------- c:\windows\system32\dllcache\srv.sys
    2008-07-13 15:43 708 a------- c:\program files\INSTALL.LOG
    2007-11-15 20:07 22,328 a------- c:\docume~1\hp_adm~1\applic~1\PnkBstrK.sys
    2003-12-18 11:33 20,102 a------- c:\program files\Readme.txt
    2003-09-03 07:46 10,960 a------- c:\program files\EULA.txt
    2006-09-20 15:59 22 a--sh--- c:\windows\sminst\HPCD.sys

    ============= FINISH: 15:08:47.89 ===============


    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-02-01.01)


    ==== Disk Partitions =========================


    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    No restore point in system.

    ==== Installed Programs ======================

    7-Zip 4.57
    A Murder of Crows
    Adobe Flash Player 9 ActiveX
    Adobe Flash Player ActiveX
    Adobe Flash Player Plugin
    Adobe Reader 8.1.3
    AGEIA PhysX v8.01.18
    AiO_Scan
    AiO_Scan_CDA
    AiOSoftware
    AiOSoftwareNPI
    Ancient Sudoku
    Apple Software Update
    ArcSoft PhotoStudio 2000
    Audacity 1.2.6
    AutoUpdate
    Avira AntiVir Personal - Free Antivirus
    Bejeweled 2 Deluxe
    Big Kahuna Reef
    Blackhawk Striker 2
    Blasterball 2 Remix
    Blasterball 2 Revolution
    Bof4
    Bookworm Deluxe
    Bounce Symphony
    BufferChm
    CameraDrivers
    CameraUserGuides
    Canon ScanGear Toolbox CS 2.2
    CDisplay 1.8
    Choice Guard
    Chuzzle Deluxe
    CivPlayers OOS Patch 1.0
    Combined Community Codec Pack 2008-01-24
    Company of Heroes
    Company of Heroes - FAKEMSI
    CP_AtenaShokunin1Config
    CP_CalendarTemplates1
    cp_LightScribeConfig
    cp_OnlineProjectsConfig
    CP_Package_Basic1
    CP_Package_Variety1
    CP_Package_Variety2
    CP_Package_Variety3
    CP_Panorama1Config
    cp_PosterPrintConfig
    cp_UpdateProjectsConfig
    Creative WebCam Center
    Creative WebCam Live! Pro Driver (1.01.01.1011)
    Creative WebCam Live! Pro User's Guide (English)
    CueTour
    Customer Experience Enhancement
    Destinations
    DeviceManagementQFolder
    Diner Dash
    DISCover
    DivX
    DivX Player
    DivX Web Player
    DocProc
    DocumentViewer
    Easy Internet Sign-up
    Enhanced Multimedia Keyboard Solution
    Eraser
    ERUNT 1.1j
    Fairies
    Family Feud
    FATE
    Fax
    Fax_CDA
    ffdshow [rev 1381] [2007-07-29]
    FLAC 1.2.1b (remove only)
    Flip Words
    Freelancer
    GameSpy Arcade
    GemMaster Mystic
    Get Yahoo! Messenger
    Hamachi 1.0.1.5
    Hero Editor V0.96
    High Definition Audio Driver Package - KB888111
    HijackThis 2.0.2
    Homeworld
    Homeworld2
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 10 (KB903157)
    Hotfix for Windows Media Player 10 (KB910393)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB888795)
    Hotfix for Windows XP (KB891593)
    Hotfix for Windows XP (KB893357)
    Hotfix for Windows XP (KB895961)
    Hotfix for Windows XP (KB899337)
    Hotfix for Windows XP (KB899510)
    Hotfix for Windows XP (KB902841)
    Hotfix for Windows XP (KB906569)
    Hotfix for Windows XP (KB912024)
    Hotfix for Windows XP (KB914440)
    Hotfix for Windows XP (KB915865)
    Hotfix for Windows XP (KB926239)
    Hotfix for Windows XP (KB935448)
    Hotfix for Windows XP (KB952287)
    HP Boot Optimizer
    HP Deskjet Printer Preload
    HP DigitalMedia Archive
    HP Document Viewer 6.1
    HP DVD Play 2.1
    HP Game Console
    HP Imaging Device Functions 7.0
    HP Photosmart 330,380,420,470,7800,8000,8200 Series
    HP Photosmart Cameras 6.0
    HP Photosmart for Media Center PC
    HP Photosmart Premier Software 6.5
    HP PSC & OfficeJet 5.3.B
    HP PSC & OfficeJet 6.1.A
    HP Rhapsody
    HP Software Update
    HP Solution Center and Imaging Support Tools 6.1
    hpiCamDrvQFolder
    HPPhotoSmartExpress
    HPProductAssistant
    HpSdpAppCoreApp
    ID3 renamer 2.15.15
    IGN Download Manager 2.3.0
    Impulse
    Insaniquarium Deluxe
    InstantShareDevices
    J2SE Runtime Environment 5.0 Update 11
    Jasc Paint Shop Pro 8
    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) SE Runtime Environment 6 Update 1
    Jewel Quest
    LightScribe 1.4.84.1
    Magic Workstation 0.94f
    Mah Jong Quest
    Microsoft .NET Framework 1.0 Hotfix (KB887998)
    Microsoft .NET Framework 1.0 Hotfix (KB930494)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0 Service Pack 1
    Microsoft .NET Framework 3.0
    Microsoft Application Error Reporting
    Microsoft AppLocale
    Microsoft Away Mode
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Game Studios Common Redistributables Pack 1
    Microsoft Games for Windows - LIVE
    Microsoft Games for Windows - LIVE Redistributable
    Microsoft IntelliPoint 6.1
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Money 2006
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2003 Edition 60 Days Trial Welcome Tour
    Microsoft Office Standard Edition 2003
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Windows Application Compatibility Database
    Microsoft Works
    Microsoft XML Parser
    mIRC
    Move Networks Media Player for Internet Explorer
    MSVCRT
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 6 Service Pack 2 (KB954459)
    MSXML4 Parser
    MTG GamePack for Magic Workstation
    muvee autoProducer 5.0
    muvee autoProducer unPlugged 2.0
    Mystery Case Files
    NewCopy
    NewCopy_CDA
    Nintendo Wi-Fi USB Connector Registration Tool
    NVIDIA Drivers
    Opera 9.63
    OptimiData JPEG2000 Shell Extension
    OptionalContentQFolder
    PanoStandAlone
    PC-Doctor 5 for Windows
    PhotoGallery
    Poker Superstars
    Polar Bowler
    Polar Golfer
    PSPrinters08
    PSTAPlugin
    Python 2.2 pywin32 extensions (build 203)
    Python 2.2.3
    Qtrax 0.2beta (20080125)
    Quicken 2006
    QuickTime
    RandMap
    Readme
    Real Alternative 1.60
    Realtek High Definition Audio Driver
    Ricochet Lost Worlds
    RPTools MapTool
    RTKXI
    Scan
    ScannerCopy
    SCRABBLE
    Security Task Manager 1.7
    Security Update for CAPICOM (KB931906)
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB928090)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB933566)
    Security Update for Windows Internet Explorer 7 (KB937143)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows XP (KB890046)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896422)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896424)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899589)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB901190)
    Security Update for Windows XP (KB901214)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB905915)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911567)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB912919)
    Security Update for Windows XP (KB913580)
    Security Update for Windows XP (KB914388)
    Security Update for Windows XP (KB914389)
    Security Update for Windows XP (KB917159)
    Security Update for Windows XP (KB917344)
    Security Update for Windows XP (KB917422)
    Security Update for Windows XP (KB917953)
    Security Update for Windows XP (KB918118)
    Security Update for Windows XP (KB918439)
    Security Update for Windows XP (KB918899)
    Security Update for Windows XP (KB919007)
    Security Update for Windows XP (KB920213)
    Security Update for Windows XP (KB920214)
    Security Update for Windows XP (KB920670)
    Security Update for Windows XP (KB920683)
    Security Update for Windows XP (KB920685)
    Security Update for Windows XP (KB921398)
    Security Update for Windows XP (KB921503)
    Security Update for Windows XP (KB921883)
    Security Update for Windows XP (KB922616)
    Security Update for Windows XP (KB922760)
    Security Update for Windows XP (KB922819)
    Security Update for Windows XP (KB923191)
    Security Update for Windows XP (KB923414)
    Security Update for Windows XP (KB923694)
    Security Update for Windows XP (KB923980)
    Security Update for Windows XP (KB924191)
    Security Update for Windows XP (KB924270)
    Security Update for Windows XP (KB924496)
    Security Update for Windows XP (KB924667)
    Security Update for Windows XP (KB925486)
    Security Update for Windows XP (KB925902)
    Security Update for Windows XP (KB926255)
    Security Update for Windows XP (KB926436)
    Security Update for Windows XP (KB927779)
    Security Update for Windows XP (KB927802)
    Security Update for Windows XP (KB928255)
    Security Update for Windows XP (KB928843)
    Security Update for Windows XP (KB929123)
    Security Update for Windows XP (KB930178)
    Security Update for Windows XP (KB931261)
    Security Update for Windows XP (KB931784)
    Security Update for Windows XP (KB932168)
    Security Update for Windows XP (KB933729)
    Security Update for Windows XP (KB935839)
    Security Update for Windows XP (KB935840)
    Security Update for Windows XP (KB936021)
    Security Update for Windows XP (KB937894)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB938829)
    Security Update for Windows XP (KB941202)
    Security Update for Windows XP (KB941568)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB941644)
    Security Update for Windows XP (KB941693)
    Security Update for Windows XP (KB943055)
    Security Update for Windows XP (KB943460)
    Security Update for Windows XP (KB943485)
    Security Update for Windows XP (KB944653)
    Security Update for Windows XP (KB945553)
    Security Update for Windows XP (KB946026)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB948590)
    Security Update for Windows XP (KB948881)
    Security Update for Windows XP (KB950749)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Segoe UI
    Sid Meier's Civilization 4
    Sid Meier's Civilization 4 - Beyond the Sword
    SkinsHP1
    SlideShow
    SlideShowMusic
    Slingo Deluxe
    Snowy The Bears Adventure
    SolutionCenter
    Sonic Express Labeler
    Sonic MyDVD Plus
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    Sonic_PrimoSDK
    Source SDK Base
    SpeechRedist
    Spybot - Search & Destroy
    Spybot - Search & Destroy 1.5.2.20
    Star Trek Armada II: Fleet Operations
    Starcraft
    Stardock Central
    STARWARS: The Battle of Endor version 2.1
    STARWARS: The Battle of Yavin version 1.1
    Status
    Steam(TM)
    Super Granny
    Symantec KB-DocID:2003093015493306
    System Requirements Lab
    Team Fortress 2
    TeamSpeak 2 RC2
    Tennis Titans
    Toolbox
    Tornado Jockey
    Tradewinds
    TrayApp
    Unload
    Update for Windows Media Player 10 (KB913800)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB900485)
    Update for Windows XP (KB904942)
    Update for Windows XP (KB908531)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB911280)
    Update for Windows XP (KB912945)
    Update for Windows XP (KB916595)
    Update for Windows XP (KB920872)
    Update for Windows XP (KB922582)
    Update for Windows XP (KB925720)
    Update for Windows XP (KB927891)
    Update for Windows XP (KB929338)
    Update for Windows XP (KB930916)
    Update for Windows XP (KB931836)
    Update for Windows XP (KB932823-v3)
    Update for Windows XP (KB933360)
    Update for Windows XP (KB938828)
    Update for Windows XP (KB942763)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB953356)
    Update for Windows XP (KB955839)
    Update Rollup 2 for Windows XP Media Center Edition 2005
    Updates from HP (remove only)
    Vampire - The Masquerade Bloodlines
    VASSAL
    Vodei Multimedia Processor 2.10
    Warcraft III: All Products
    WebFldrs XP
    WebReg
    Winamp (remove only)
    Windows Communication Foundation
    Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Imaging Component
    Windows Installer 3.1 (KB893803)
    Windows Internet Explorer 7
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Live Upload Tool
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player Firefox Plugin
    Windows Presentation Foundation
    Windows Workflow Foundation
    Windows XP Hotfix - KB873339
    Windows XP Hotfix - KB883667
    Windows XP Hotfix - KB885250
    Windows XP Hotfix - KB885835
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB887472
    Windows XP Hotfix - KB887742
    Windows XP Hotfix - KB888113
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890175
    Windows XP Hotfix - KB890859
    Windows XP Hotfix - KB891781
    Windows XP Hotfix - KB892050
    Windows XP Hotfix - KB893066
    Windows XP Media Center Edition 2005 KB908246
    Windows XP Media Center Edition 2005 KB925766
    WinRAR archiver
    WinZip 12.0
    XML Paper Specification Shared Components Pack 1.0

    ==== End Of File ===========================

  4. #4
    Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,300

    Default

    Hi again,


    Please visit this webpage for download links, and instructions for running ComboFix tool:

    http://www.bleepingcomputer.com/comb...o-use-combofix

    Please ensure you read this guide carefully and install the Recovery Console first.

    The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

    Once installed, you should see a blue screen prompt that says:

    The Recovery Console was successfully installed.

    Please continue as follows:

    1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
      Remember to re-enable them afterwards.

    2. Click Yes to allow ComboFix to continue scanning for malware.


    When the tool is finished, it will produce a report for you.

    Please include the following reports for further review, and so we may continue cleansing the system:

    C:\ComboFix.txt
    New dds.txt log.


    A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.
    Microsoft Windows Insider MVP 2016-2018
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

  5. #5
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    Finished the scan. While I did shut down the system-monitoring programs that might interfere with Combofix, Avira's resident guard came back on when Combofix rebooted the computer. I told it to ignore all the detections that popped up, however, and there didn't appear to be any real conflict between it and Combofix.

    Unfortunately, I have the sneaking suspicion that turning Spybot's TeaTimer back on (after the scan had completed) may have brought back Win32.delf.rtk. I just got a couple of warnings about it.

    I'm also still getting a note about a missing DLL when the computer starts, although the names seem either random or associated with the virus.

    Logs:


    DDS (Ver_09-02-01.01) - NTFSx86
    Run by HP_Administrator at 17:04:43.40 on 10/03/2009
    Internet Explorer: 7.0.5730.11
    Microsoft Windows XP Professional 5.1.2600.2.1252.2.1033.18.3582.2783 [GMT -6:00]

    AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\WINDOWS\arservice.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\HP\KBD\KBD.EXE
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Eraser\eraser.exe
    C:\Program Files\WiFiConnector\NintendoWFCReg.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\notepad.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\Opera 9\opera.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\nxtepad.exe
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\sopidkc.exe
    C:\WINDOWS\system32\umtcdtw.sys
    C:\WINDOWS\system32\wscntfy.exe
    C:\Documents and Settings\HP_Administrator\Desktop\dds.com

    ============== Pseudo HJT Report ===============

    uStart Page = about:blank
    uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uInternet Settings,ProxyServer = http=localhost:7171
    uInternet Settings,ProxyOverride = *.local;<local>
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
    BHO: Click-to-Call BHO: {5c255c8a-e604-49b4-9d64-90988571cecb} - c:\program files\windows live\messenger\wlchtc.dll
    BHO: {684EE1DB-CD52-4ca9-9CCF-93D5F6B419BA} - No File
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: {A6D6C060-BB36-4407-8F59-B06192FCFFA8} - No File
    BHO: {f604a4f9-fbe8-4a5c-ac38-1065d50b29f9} - No File
    TB: {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - No File
    uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
    uRun: [igndlm.exe] c:\program files\ign\download manager\dlm.exe /windowsstart /startifwork
    uRun: [Eraser] c:\program files\eraser\eraser.exe -hide
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [avgnt] "c:\program files\avira\antivir personaledition classic\avgnt.exe" /min
    mRun: [RTHDCPL] RTHDCPL.EXE
    mRun: [KBD] c:\hp\kbd\KBD.EXE
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
    mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    dRunOnce: [RunNarrator] Narrator.exe
    StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\runnin~1.lnk - c:\program files\wificonnector\NintendoWFCReg.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\xccstart.lnk - c:\windows\system\xccef090131.exe
    dPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
    IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
    LSP: imdds.dll
    Trusted Zone: trymedia.com
    DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
    DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab
    DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
    DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
    DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
    DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
    DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} - hxxp://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165182224881
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - hxxp://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
    DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    ============= SERVICES / DRIVERS ===============

    R1 avgio;avgio;c:\program files\avira\antivir personaledition classic\avgio.sys [2007-11-10 11840]
    R2 AntiVirScheduler;AntiVir PersonalEdition Classic Scheduler;c:\program files\avira\antivir personaledition classic\sched.exe [2007-11-10 68865]
    R2 AntiVirService;AntiVir PersonalEdition Classic Guard;c:\program files\avira\antivir personaledition classic\avguard.exe [2007-11-10 151297]
    R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
    R2 sopidkc;sopidkc Service;c:\windows\system32\sopidkc.exe [2004-8-9 175616]
    R2 Symantec Core LC;Symantec Core LC;c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2006-9-20 1174152]
    R3 avgntflt;avgntflt;c:\program files\avira\antivir personaledition classic\avgntflt.sys [2007-11-10 52032]
    S2 afisicx;afisicx Service;c:\windows\system32\afisicx.exe --> c:\windows\system32\afisicx.exe [?]
    S2 mabidwe;mabidwe Service;c:\windows\system32\mabidwe.exe --> c:\windows\system32\mabidwe.exe [?]
    S2 Tcpipsrv;Tcp ipx Service;c:\windows\$ntunistalls\svchost.exe --> c:\windows\$ntunistalls\svchost.exe [?]
    S3 efipsk;efipsk;\??\c:\docume~1\hp_adm~1\locals~1\temp\efipsk.sys --> c:\docume~1\hp_adm~1\locals~1\temp\efipsk.sys [?]
    S3 pcistub;pcistub;c:\windows\system32\pcistub.sys [2004-8-9 2304]

    ============== File Associations ===============

    txtfile="c:\windows\system32\nxtepad.exe" "%1"

    =============== Created Last 30 ================

    2009-03-10 16:12 161,792 a------- c:\windows\SWREG.exe
    2009-03-10 16:12 98,816 a------- c:\windows\sed.exe
    2009-03-09 02:56 <DIR> --d----- c:\program files\Koei
    2009-03-08 07:48 0 a------- c:\windows\system32\nfr.assembly
    2009-03-08 07:46 12,800 a------- c:\windows\system32\dll32.dll
    2009-03-08 07:46 1 a------- c:\windows\9gdfgjf23
    2009-03-08 07:46 11,776 ----h--- c:\windows\pp2.exe
    2009-03-08 07:46 1 ----h--- c:\windows\t55ft3518f44.dat
    2009-03-08 07:46 12,288 ----h--- c:\windows\ld02.exe
    2009-03-08 05:47 <DIR> --d----- c:\program files\Sim Brothel
    2009-03-06 15:13 44,032 a------- c:\windows\system32\kmsvc32.dll
    2009-03-05 12:17 11,264 a------- c:\windows\system32\imdds.dll
    2009-03-05 12:13 100 a------- c:\windows\system32\wh
    2009-03-03 11:20 <DIR> --dsh--- c:\windows\$ntunistalls
    2009-03-02 12:05 2,713 ---sh--- c:\windows\system32\nelesoye.dll
    2009-03-01 12:51 32 a------- c:\windows\system32\work.ini
    2009-03-01 12:51 227 a------- c:\windows\system32\hgset.ini
    2009-03-01 12:50 <DIR> --d----- c:\windows\system32\3361
    2009-02-28 12:09 676,352 a------- c:\windows\system32\rtl60.bpl
    2009-02-28 12:08 <DIR> --d----- c:\windows\system32\inf
    2009-02-20 21:02 <DIR> --d----- c:\docume~1\hp_adm~1\applic~1\The Creative Assembly
    2009-02-18 23:48 <DIR> --d----- c:\program files\OptimiData
    2009-02-18 18:54 <DIR> --d----- c:\program files\Freelancer Mod Manager
    2009-02-08 20:26 <DIR> --d----- c:\program files\Battle for Wesnoth 1.5.9

    ==================== Find3M ====================

    2009-02-06 19:52 49,504 a------- c:\windows\system32\sirenacm.dll
    2009-01-21 12:01 133,632 a------- c:\windows\awepajon.dll
    2008-12-13 00:40 3,593,216 a------- c:\windows\system32\dllcache\mshtml.dll
    2008-12-11 05:57 333,184 a------- c:\windows\system32\dllcache\srv.sys
    2007-11-15 20:07 22,328 a------- c:\docume~1\hp_adm~1\applic~1\PnkBstrK.sys
    2003-12-18 11:33 20,102 a------- c:\program files\Readme.txt
    2003-09-03 07:46 10,960 a------- c:\program files\EULA.txt
    2006-09-20 15:59 22 a--sh--- c:\windows\sminst\HPCD.sys

    ============= FINISH: 17:04:59.67 ===============

    On the bright side, the internet connection is back up.

  6. #6
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    Man, this thing is huge.

    ComboFix 09-03-10.01 - HP_Administrator 2009-03-10 16:20:44.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3582.3129 [GMT -6:00]
    Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
    c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
    c:\program files\INSTALL.LOG
    c:\windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb
    c:\windows\IE4 Error Log.txt
    c:\windows\Install.txt
    c:\windows\jestertb.dll
    c:\windows\system32\_005181_.tmp.dll
    c:\windows\system32\_005182_.tmp.dll
    c:\windows\system32\_005183_.tmp.dll
    c:\windows\system32\_005184_.tmp.dll
    c:\windows\system32\_005191_.tmp.dll
    c:\windows\system32\_005192_.tmp.dll
    c:\windows\system32\_005193_.tmp.dll
    c:\windows\system32\_005194_.tmp.dll
    c:\windows\system32\_005195_.tmp.dll
    c:\windows\system32\_005196_.tmp.dll
    c:\windows\system32\_005197_.tmp.dll
    c:\windows\system32\_005198_.tmp.dll
    c:\windows\system32\_005199_.tmp.dll
    c:\windows\system32\_005200_.tmp.dll
    c:\windows\system32\_005201_.tmp.dll
    c:\windows\system32\_005202_.tmp.dll
    c:\windows\system32\_005203_.tmp.dll
    c:\windows\system32\_005204_.tmp.dll
    c:\windows\system32\_005205_.tmp.dll
    c:\windows\system32\_005206_.tmp.dll
    c:\windows\system32\_005207_.tmp.dll
    c:\windows\system32\_005208_.tmp.dll
    c:\windows\system32\_005209_.tmp.dll
    c:\windows\system32\_005210_.tmp.dll
    c:\windows\system32\_005211_.tmp.dll
    c:\windows\system32\_005212_.tmp.dll
    c:\windows\system32\_005213_.tmp.dll
    c:\windows\system32\_005214_.tmp.dll
    c:\windows\system32\_005215_.tmp.dll
    c:\windows\system32\_005216_.tmp.dll
    c:\windows\system32\_005217_.tmp.dll
    c:\windows\system32\_005218_.tmp.dll
    c:\windows\system32\_005219_.tmp.dll
    c:\windows\system32\_005220_.tmp.dll
    c:\windows\system32\_005221_.tmp.dll
    c:\windows\system32\_005222_.tmp.dll
    c:\windows\system32\_005223_.tmp.dll
    c:\windows\system32\_005224_.tmp.dll
    c:\windows\system32\_005225_.tmp.dll
    c:\windows\system32\_005226_.tmp.dll
    c:\windows\system32\_005227_.tmp.dll
    c:\windows\system32\_005228_.tmp.dll
    c:\windows\system32\_005229_.tmp.dll
    c:\windows\system32\_005230_.tmp.dll
    c:\windows\system32\_005231_.tmp.dll
    c:\windows\system32\_005232_.tmp.dll
    c:\windows\system32\_005233_.tmp.dll
    c:\windows\system32\_005234_.tmp.dll
    c:\windows\system32\_005235_.tmp.dll
    c:\windows\system32\_005236_.tmp.dll
    c:\windows\system32\_005238_.tmp.dll
    c:\windows\system32\_005239_.tmp.dll
    c:\windows\system32\_005240_.tmp.dll
    c:\windows\system32\_005241_.tmp.dll
    c:\windows\system32\_005243_.tmp.dll
    c:\windows\system32\_005244_.tmp.dll
    c:\windows\system32\_005245_.tmp.dll
    c:\windows\system32\_005246_.tmp.dll
    c:\windows\system32\_005247_.tmp.dll
    c:\windows\system32\_005248_.tmp.dll
    c:\windows\system32\_005249_.tmp.dll
    c:\windows\system32\_005250_.tmp.dll
    c:\windows\system32\_005251_.tmp.dll
    c:\windows\system32\_005253_.tmp.dll
    c:\windows\system32\_005254_.tmp.dll
    c:\windows\system32\_005255_.tmp.dll
    c:\windows\system32\_005256_.tmp.dll
    c:\windows\system32\_005258_.tmp.dll
    c:\windows\system32\_005260_.tmp.dll
    c:\windows\system32\_005261_.tmp.dll
    c:\windows\system32\_005262_.tmp.dll
    c:\windows\system32\_005263_.tmp.dll
    c:\windows\system32\_005264_.tmp.dll
    c:\windows\system32\_005265_.tmp.dll
    c:\windows\system32\_005266_.tmp.dll
    c:\windows\system32\_005267_.tmp.dll
    c:\windows\system32\_005269_.tmp.dll
    c:\windows\system32\_005270_.tmp.dll
    c:\windows\system32\_005271_.tmp.dll
    c:\windows\system32\_005272_.tmp.dll
    c:\windows\system32\_005273_.tmp.dll
    c:\windows\system32\_005274_.tmp.dll
    c:\windows\system32\_005275_.tmp.dll
    c:\windows\system32\_005276_.tmp.dll
    c:\windows\system32\_005277_.tmp.dll
    c:\windows\system32\_005278_.tmp.dll
    c:\windows\system32\_005279_.tmp.dll
    c:\windows\system32\_005280_.tmp.dll
    c:\windows\system32\_005281_.tmp.dll
    c:\windows\system32\_005282_.tmp.dll
    c:\windows\system32\_005283_.tmp.dll
    c:\windows\system32\_005284_.tmp.dll
    c:\windows\system32\_005286_.tmp.dll
    c:\windows\system32\_005287_.tmp.dll
    c:\windows\system32\_005288_.tmp.dll
    c:\windows\system32\_005289_.tmp.dll
    c:\windows\system32\_005291_.tmp.dll
    c:\windows\system32\_005293_.tmp.dll
    c:\windows\system32\_005294_.tmp.dll
    c:\windows\system32\_005295_.tmp.dll
    c:\windows\system32\_005296_.tmp.dll
    c:\windows\system32\_005297_.tmp.dll
    c:\windows\system32\_005298_.tmp.dll
    c:\windows\system32\_005299_.tmp.dll
    c:\windows\system32\_005300_.tmp.dll
    c:\windows\system32\_005302_.tmp.dll
    c:\windows\system32\_005303_.tmp.dll
    c:\windows\system32\_005304_.tmp.dll
    c:\windows\system32\_005305_.tmp.dll
    c:\windows\system32\_005306_.tmp.dll
    c:\windows\system32\_005307_.tmp.dll
    c:\windows\system32\_005308_.tmp.dll
    c:\windows\system32\_005309_.tmp.dll
    c:\windows\system32\_005311_.tmp.dll
    c:\windows\system32\_005312_.tmp.dll
    c:\windows\system32\_005313_.tmp.dll
    c:\windows\system32\_005316_.tmp.dll
    c:\windows\system32\_005317_.tmp.dll
    c:\windows\system32\_005321_.tmp.dll
    c:\windows\system32\_005322_.tmp.dll
    c:\windows\system32\_005324_.tmp.dll
    c:\windows\system32\_005326_.tmp.dll
    c:\windows\system32\_005327_.tmp.dll
    c:\windows\system32\_005329_.tmp.dll
    c:\windows\system32\_005330_.tmp.dll
    c:\windows\system32\_005331_.tmp.dll
    c:\windows\system32\_005332_.tmp.dll
    c:\windows\system32\_005335_.tmp.dll
    c:\windows\system32\_005336_.tmp.dll
    c:\windows\system32\_005337_.tmp.dll
    c:\windows\system32\_005338_.tmp.dll
    c:\windows\system32\_005339_.tmp.dll
    c:\windows\system32\_005344_.tmp.dll
    c:\windows\system32\_005346_.tmp.dll
    c:\windows\system32\303357.exe
    c:\windows\system32\ahtn.htm
    c:\windows\system32\bb1.dat
    c:\windows\system32\comsa32.sys
    c:\windows\system32\cookie1.dat
    c:\windows\system32\cs.dat
    c:\windows\system32\drivers\npf.sys
    c:\windows\system32\drivers\seneka.sys
    c:\windows\system32\drivers\senekavlwgrmov.sys
    c:\windows\system32\eyhmsigd.ini
    c:\windows\system32\frmwrk32.exe
    c:\windows\system32\inf\rundll33.exe
    c:\windows\system32\init32.exe
    c:\windows\system32\packet.dll
    c:\windows\system32\ps1.dat
    c:\windows\system32\rc.dat
    c:\windows\system32\senekaaflfeyrk.dll
    c:\windows\system32\senekacijsoela.dll
    c:\windows\system32\senekafsjwrwsu.dat
    c:\windows\system32\senekavmduvqvk.dat
    c:\windows\system32\sopidkc.exe
    c:\windows\system32\tb.dr
    c:\windows\system32\test.ttt
    c:\windows\system32\tmpxccacj1.exe
    c:\windows\system32\tpszxyd.sys
    c:\windows\system32\warning.gif
    c:\windows\system32\win32hlp.cnf
    c:\windows\system32\wpcap.dll
    c:\windows\system32\xcchit32.ini
    c:\windows\xccdf32_090131a.dll
    c:\windows\xccwinsys.ini

    ----- BITS: Possible infected sites -----

    hxxp://82.98.235.205
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_SENEKA
    -------\Legacy_AFISICX
    -------\Legacy_DEFAULTLIB
    -------\Legacy_IAS
    -------\Legacy_MABIDWE
    -------\Legacy_SOFTYINFORWOW1
    -------\Legacy_SOPIDKC
    -------\Service_defaultlib
    -------\Service_Ias
    -------\Service_NPF
    -------\Service_softyinforwow1
    -------\Service_sopidkc


    ((((((((((((((((((((((((( Files Created from 2009-02-10 to 2009-03-10 )))))))))))))))))))))))))))))))
    .

    2009-03-09 02:56 . 2009-03-10 02:24 <DIR> d-------- c:\program files\Koei
    2009-03-08 07:48 . 2009-03-08 07:48 0 --a------ c:\windows\system32\nfr.assembly
    2009-03-08 07:46 . 2009-03-08 07:46 12,800 --a------ c:\windows\system32\dll32.dll
    2009-03-08 07:46 . 2009-03-08 07:46 12,288 ---h----- c:\windows\ld02.exe
    2009-03-08 07:46 . 2009-03-08 07:46 11,776 ---h----- c:\windows\pp2.exe
    2009-03-08 07:46 . 2009-03-08 07:46 1 ---h----- c:\windows\t55ft3518f44.dat
    2009-03-08 07:46 . 2009-03-08 07:46 1 --a------ c:\windows\9gdfgjf23
    2009-03-08 05:47 . 2009-03-08 07:28 <DIR> d-------- c:\program files\Sim Brothel
    2009-03-08 00:16 . 2009-03-08 00:17 <DIR> d-------- c:\program files\ERUNT
    2009-03-06 15:13 . 2009-03-06 15:13 44,032 --a------ c:\windows\system32\kmsvc32.dll
    2009-03-05 12:17 . 2009-03-05 12:17 11,264 --a------ c:\windows\system32\imdds.dll
    2009-03-05 12:13 . 2009-03-06 15:13 100 --a------ c:\windows\system32\wh
    2009-03-03 11:20 . 2009-03-08 23:28 <DIR> d--hs---- c:\windows\$ntunistalls
    2009-03-02 12:05 . 2009-03-02 12:05 2,713 ---hs---- c:\windows\system32\nelesoye.dll
    2009-03-01 12:51 . 2009-03-01 14:51 227 --a------ c:\windows\system32\hgset.ini
    2009-03-01 12:51 . 2009-03-01 12:51 32 --a------ c:\windows\system32\work.ini
    2009-03-01 12:50 . 2009-03-01 13:27 <DIR> d-------- c:\windows\system32\3361
    2009-02-28 12:09 . 2002-02-15 15:02 676,352 --a------ c:\windows\system32\rtl60.bpl
    2009-02-28 12:08 . 2009-03-10 16:28 <DIR> d-------- c:\windows\system32\inf
    2009-02-20 21:02 . 2009-02-20 21:02 <DIR> d-------- c:\documents and settings\HP_Administrator\Application Data\The Creative Assembly
    2009-02-18 23:48 . 2009-02-18 23:48 <DIR> d-------- c:\program files\OptimiData
    2009-02-18 18:54 . 2009-02-18 18:54 <DIR> d-------- c:\program files\Freelancer Mod Manager

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-03-10 22:17 --------- d-----w c:\program files\Eraser
    2009-03-10 22:09 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\Hamachi
    2009-03-10 22:08 --------- d-----w c:\program files\Warcraft III
    2009-03-10 10:41 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\uTorrent
    2009-03-09 21:07 --------- d-----w c:\program files\DAEMON Tools Pro
    2009-03-08 18:20 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\HTSKApp
    2009-03-07 06:45 --------- d-----w c:\program files\THQ
    2009-03-07 06:43 --------- d-----w c:\program files\Microsoft Games
    2009-03-07 06:42 --------- d-----w c:\program files\Activision
    2009-03-07 06:00 --------- d--h--w c:\program files\InstallShield Installation Information
    2009-03-05 18:47 --------- d-----w c:\program files\Spybot - Search & Destroy
    2009-02-28 19:37 --------- d-----w c:\program files\Opera 9
    2009-02-28 18:58 --------- d-----w c:\program files\Google
    2009-02-24 11:12 --------- d-----w c:\program files\Ubisoft
    2009-02-14 21:48 --------- d-----w c:\program files\Battle for Wesnoth 1.5.9
    2009-02-11 17:21 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-02-04 17:57 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\Activision
    2009-02-01 03:42 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\Canon
    2009-01-28 07:15 --------- d-----w c:\program files\Microsoft Games for Windows - LIVE
    2009-01-21 20:46 --------- d-----w c:\program files\Magic Workstation
    2009-01-21 18:01 133,632 ----a-w c:\windows\awepajon.dll
    2009-01-20 03:50 --------- d-----w c:\program files\Trend Micro
    2009-01-12 07:51 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\Tilted Mill
    2007-11-16 02:07 22,328 ----a-w c:\documents and settings\HP_Administrator\Application Data\PnkBstrK.sys
    2003-12-18 17:33 20,102 ----a-w c:\program files\Readme.txt
    2003-09-03 13:46 10,960 ----a-w c:\program files\EULA.txt
    2006-09-20 21:59 22 --sha-w c:\windows\SMINST\HPCD.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2007-11-12_20.05.04.85 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2006-10-04 10:40:05 72,704 ----a-w c:\windows\$hf_mig$\KB925720\SP2QFE\magnify.exe
    + 2006-10-04 10:40:06 53,760 ----a-w c:\windows\$hf_mig$\KB925720\SP2QFE\narrator.exe
    + 2006-10-04 10:40:06 215,552 ----a-w c:\windows\$hf_mig$\KB925720\SP2QFE\osk.exe
    + 2006-10-04 14:05:57 35,840 ----a-w c:\windows\$hf_mig$\KB925720\SP2QFE\umandlg.dll
    + 2006-10-04 10:40:06 50,176 ----a-w c:\windows\$hf_mig$\KB925720\SP2QFE\utilman.exe
    + 2005-10-12 23:16:49 14,048 ----a-w c:\windows\$hf_mig$\KB925720\spmsg.dll
    + 2005-10-12 23:16:49 213,216 ----a-w c:\windows\$hf_mig$\KB925720\spuninst.exe
    + 2005-10-12 23:16:49 22,752 ----a-w c:\windows\$hf_mig$\KB925720\update\spcustom.dll
    + 2005-10-12 23:16:51 716,000 ----a-w c:\windows\$hf_mig$\KB925720\update\update.exe
    + 2005-10-12 23:16:56 371,424 ----a-w c:\windows\$hf_mig$\KB925720\update\updspapi.dll
    + 2008-02-26 11:48:44 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll
    + 2007-07-06 09:52:38 72,960 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqac.sys
    + 2007-07-06 13:08:11 138,240 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqad.dll
    + 2007-07-06 13:08:11 47,104 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqdscli.dll
    + 2007-07-06 13:08:11 16,896 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqise.dll
    + 2007-07-06 13:08:11 660,992 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqqm.dll
    + 2007-07-06 13:08:11 177,152 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqrt.dll
    + 2007-07-06 13:08:11 95,744 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqsec.dll
    + 2007-07-06 13:08:11 48,640 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll
    + 2007-07-06 13:08:11 471,552 ----a-w c:\windows\$hf_mig$\KB937894\SP2QFE\mqutil.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB937894\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB937894\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB937894\update\spcustom.dll
    + 2005-10-12 23:12:29 716,000 ----a-w c:\windows\$hf_mig$\KB937894\update\update.exe
    + 2005-10-12 23:12:34 371,424 ----a-w c:\windows\$hf_mig$\KB937894\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2007-10-30 16:53:32 360,832 ----a-w c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941644\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941644\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941644\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941644\update\updspapi.dll
    + 2008-03-19 09:40:27 1,845,888 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll
    + 2007-10-10 23:47:27 124,928 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll
    + 2007-10-10 23:47:27 214,528 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll
    + 2007-10-10 23:47:27 132,608 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll
    + 2007-10-10 23:47:27 63,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll
    + 2007-10-10 08:16:47 70,656 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe
    + 2007-10-10 23:47:27 153,088 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll
    + 2007-10-10 23:47:27 230,400 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll
    + 2007-10-10 05:47:20 161,792 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:28:12 2,455,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat
    + 2007-10-10 23:47:27 383,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll
    + 2007-10-10 23:47:27 388,096 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll
    + 2007-10-10 23:47:27 6,067,200 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll
    + 2007-10-10 23:47:27 44,544 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll
    + 2007-10-10 23:47:27 267,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll
    + 2007-10-10 08:16:47 13,824 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe
    + 2007-10-10 08:16:56 625,664 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
    + 2007-10-10 23:47:28 27,648 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll
    + 2007-10-10 23:47:28 459,264 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll
    + 2007-10-10 23:47:28 52,224 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll
    + 2007-10-30 23:48:49 3,593,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
    + 2007-10-10 23:47:28 478,208 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll
    + 2007-10-10 23:47:28 193,024 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll
    + 2007-10-10 23:47:28 671,232 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll
    + 2007-10-10 23:47:28 102,912 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll
    + 2007-10-10 23:47:28 105,984 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\url.dll
    + 2007-10-10 23:47:29 1,162,240 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll
    + 2007-10-10 23:47:29 233,472 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll
    + 2007-10-10 23:47:29 825,344 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\updspapi.dll
    + 2007-11-13 11:02:46 60,416 ----a-w c:\windows\$hf_mig$\KB942763\SP2QFE\tzchange.exe
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB942763\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB942763\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB942763\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB942763\update\updspapi.dll
    + 2007-12-04 18:29:10 551,936 ----a-w c:\windows\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB943055\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB943055\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB943055\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB943055\update\updspapi.dll
    + 2007-11-07 09:50:47 727,040 ----a-w c:\windows\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB943485\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB943485\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB943485\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB943485\update\updspapi.dll
    + 2007-12-07 02:01:07 124,928 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
    + 2007-12-19 22:57:52 347,136 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
    + 2007-12-07 02:01:07 214,528 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
    + 2007-12-07 02:01:07 133,120 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
    + 2007-12-07 02:01:07 63,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
    + 2007-12-06 08:34:28 70,656 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
    + 2007-12-07 02:01:08 153,088 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
    + 2007-12-07 02:01:08 230,400 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
    + 2007-12-06 05:00:02 161,792 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:28:12 2,455,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
    + 2007-12-07 02:01:08 383,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
    + 2007-12-07 02:01:08 388,096 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
    + 2007-12-07 02:01:10 6,067,200 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
    + 2007-12-07 02:01:10 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
    + 2007-12-07 02:01:11 267,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
    + 2007-12-06 08:34:29 13,824 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
    + 2007-12-06 08:34:45 625,664 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
    + 2007-12-07 02:01:11 27,648 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
    + 2007-12-07 02:01:11 459,264 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
    + 2007-12-07 02:01:11 52,224 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
    + 2007-12-07 02:01:12 3,593,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
    + 2007-12-07 02:01:12 478,208 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
    + 2007-12-07 02:01:13 193,024 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
    + 2007-12-07 02:01:13 671,232 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
    + 2007-12-07 02:01:13 102,912 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
    + 2008-01-11 05:57:26 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
    + 2007-12-07 02:01:13 105,984 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
    + 2007-12-07 02:01:13 1,162,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
    + 2007-12-07 02:01:13 233,472 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
    + 2007-12-07 02:01:13 825,344 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\updspapi.dll
    + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\$hf_mig$\KB944653\SP2QFE\secdrv.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB944653\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB944653\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB944653\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944653\update\updspapi.dll
    + 2008-02-20 05:19:35 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
    + 2008-02-20 18:49:36 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll
    + 2007-12-18 09:38:59 179,712 ----a-w c:\windows\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB946026\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB946026\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB946026\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB946026\update\updspapi.dll
    + 2008-05-02 13:30:08 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:49 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:42:10 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-03-01 13:03:00 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
    + 2008-03-01 13:03:00 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
    + 2008-03-01 13:03:00 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
    + 2008-03-01 13:03:00 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
    + 2008-03-01 13:03:00 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
    + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
    + 2008-03-01 13:03:00 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
    + 2008-03-01 13:03:00 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
    + 2008-03-01 13:03:00 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
    + 2008-03-01 13:03:00 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
    + 2008-03-01 13:03:01 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
    + 2008-03-01 13:03:01 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
    + 2008-03-01 13:03:01 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
    + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
    + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
    + 2008-03-01 13:03:01 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
    + 2008-03-01 13:03:01 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
    + 2008-03-01 13:03:01 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
    + 2008-03-01 13:03:01 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    + 2008-03-01 13:03:01 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
    + 2008-03-01 13:03:01 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
    + 2008-03-01 13:03:01 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
    + 2008-03-01 13:03:01 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
    + 2008-03-01 13:03:01 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
    + 2008-03-01 13:03:02 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
    + 2008-03-01 13:03:02 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
    + 2008-03-01 13:03:02 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
    + 2008-03-01 13:03:02 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll
    + 2008-02-20 06:52:43 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll
    + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-27 07:39:13 151,583 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-12-10 12:41:14 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-23 03:35:35 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
    + 2008-04-23 03:35:35 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
    + 2008-04-23 03:35:35 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
    + 2008-04-23 03:35:35 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
    + 2008-04-23 03:35:35 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
    + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
    + 2008-04-23 03:35:35 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
    + 2008-04-23 03:35:35 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
    + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
    + 2008-04-23 03:35:35 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
    + 2008-04-23 03:35:35 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
    + 2008-04-23 03:35:36 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
    + 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
    + 2008-04-23 03:35:36 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
    + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
    + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
    + 2008-04-23 03:35:36 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
    + 2008-04-23 03:35:36 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
    + 2008-04-23 03:35:36 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
    + 2008-04-23 03:35:36 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    + 2008-04-23 03:35:36 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
    + 2008-04-23 03:35:36 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
    + 2008-04-23 03:35:36 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
    + 2008-04-23 03:35:36 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
    + 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
    + 2008-04-23 03:35:36 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
    + 2008-04-23 03:35:36 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
    + 2008-04-23 03:35:36 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
    + 2008-04-23 03:35:36 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-07-07 20:06:43 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    + 2008-07-07 20:26:58 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:23:18 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:39:39 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:04:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-12 06:22:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:31 755,576 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-06-13 09:52:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-13 11:05:51 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-13 11:27:43 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-04-14 11:00:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys
    + 2008-04-14 12:30:49 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys
    + 2008-04-14 12:36:35 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll
    + 2008-05-07 05:12:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:15 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:08:32 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:36:11 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:36:11 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys

  7. #7
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    + 2008-06-20 17:46:57 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:46:57 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:43:05 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:43:05 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
    + 2008-05-01 15:04:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:33:02 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:38:05 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:28:00 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:43:16 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:10 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953356\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953356\spuninst.exe
    + 2008-05-28 12:01:41 26,624 ----a-w c:\windows\$hf_mig$\KB953356\update\ippmcust.dll
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953356\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB953356\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB953356\update\updspapi.dll
    + 2008-06-23 16:01:38 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 16:01:38 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 16:01:39 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 16:01:39 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 16:01:39 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 16:01:39 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 16:01:39 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 16:01:40 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 16:01:40 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 16:01:43 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 16:01:43 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 16:01:44 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 16:01:46 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 16:01:46 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 16:01:46 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 16:01:49 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 16:01:49 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 16:01:49 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 16:01:50 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 16:01:50 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 16:01:50 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 16:01:50 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 16:01:51 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 16:01:51 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 16:01:51 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 12:17:07 1,846,912 ----a-w c:\windows\$hf_mig$\KB954211\SP2QFE\win32k.sys
    + 2008-09-15 12:12:56 1,846,400 ----a-w c:\windows\$hf_mig$\KB954211\SP3GDR\win32k.sys
    + 2008-09-15 12:25:27 1,846,912 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-10-03 09:57:49 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP2QFE\strmdll.dll
    + 2008-10-03 10:02:42 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3GDR\strmdll.dll
    + 2008-10-03 09:49:31 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
    + 2008-09-04 16:32:52 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP2QFE\msxml3.dll
    + 2008-09-04 17:15:04 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3GDR\msxml3.dll
    + 2008-09-04 17:12:27 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
    + 2008-07-09 20:08:38 382,840 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
    + 2008-10-22 09:47:25 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP2QFE\tzchange.exe
    + 2008-10-23 10:06:59 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3GDR\tzchange.exe
    + 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
    + 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:08:36 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:08:36 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:08:36 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:08:36 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:08:36 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:08:36 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:28:12 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:08:36 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:08:37 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 17:26:50 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:08:39 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:08:39 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:08:40 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:08:40 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:08:40 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:08:43 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:08:43 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:08:44 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:08:44 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:08:44 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:08:44 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:08:44 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:08:45 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:08:45 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:08:45 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-10-23 12:51:04 284,160 ----a-w c:\windows\$hf_mig$\KB956802\SP2QFE\gdi32.dll
    + 2008-10-23 12:36:14 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3GDR\gdi32.dll
    + 2008-10-23 12:43:42 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
    + 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
    + 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
    + 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
    + 2008-08-14 09:48:52 138,368 ----a-w c:\windows\$hf_mig$\KB956803\SP2QFE\afd.sys
    + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3GDR\afd.sys
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 09:55:01 2,142,720 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlmp.exe
    + 2008-08-14 09:18:44 2,062,976 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
    + 2008-08-14 09:18:46 2,020,864 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrpamp.exe
    + 2008-08-14 09:57:20 2,185,984 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
    + 2008-08-14 10:09:26 2,145,280 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlmp.exe
    + 2008-08-14 09:33:16 2,066,048 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,023,936 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrpamp.exe
    + 2008-08-14 10:11:02 2,189,184 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
    + 2008-08-14 10:39:28 2,145,280 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 21:39:46 2,066,048 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 10:09:44 2,023,936 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 22:11:10 2,189,184 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-08-28 10:35:33 333,056 ----a-w c:\windows\$hf_mig$\KB957095\SP2QFE\srv.sys
    + 2008-09-08 10:41:42 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3GDR\srv.sys
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2008-10-24 11:25:29 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP2QFE\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ----a-w c:\windows\$hf_mig$\KB957097\SP3GDR\mrxsmb.sys
    + 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
    + 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
    + 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
    + 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
    + 2008-07-08 13:02:04 755,576 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
    + 2008-07-08 13:02:12 382,840 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
    + 2008-10-16 20:24:09 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
    + 2008-10-16 20:24:09 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
    + 2008-10-16 20:24:09 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
    + 2008-10-16 20:24:09 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
    + 2008-10-16 20:24:09 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
    + 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
    + 2008-10-16 20:24:09 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
    + 2008-10-16 20:24:09 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
    + 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
    + 2008-10-16 20:24:09 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
    + 2008-10-16 20:24:09 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-16 20:24:09 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
    + 2008-10-16 20:24:09 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
    + 2008-10-16 20:24:09 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
    + 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
    + 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
    + 2008-10-16 20:24:10 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
    + 2008-10-16 20:24:10 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
    + 2008-10-16 20:24:10 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
    + 2008-10-16 20:24:10 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
    + 2008-10-16 20:24:10 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
    + 2008-10-16 20:24:10 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
    + 2008-10-16 20:24:10 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
    + 2008-10-16 20:24:10 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
    + 2008-10-16 20:24:10 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
    + 2008-10-16 20:24:10 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
    + 2008-10-16 20:24:11 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
    + 2008-10-16 20:24:11 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
    + 2008-10-16 20:24:11 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
    + 2008-10-15 16:53:28 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP2QFE\netapi32.dll
    + 2008-10-15 16:34:24 337,408 ----a-w c:\windows\$hf_mig$\KB958644\SP3GDR\netapi32.dll
    + 2008-10-15 16:25:53 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
    + 2008-12-11 10:24:44 333,184 ----a-w c:\windows\$hf_mig$\KB958687\SP2QFE\srv.sys
    + 2008-12-11 10:57:09 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3GDR\srv.sys
    + 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
    + 2008-12-13 06:26:56 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
    + 2004-08-10 04:00:00 72,704 -c----w c:\windows\$NtUninstallKB925720$\magnify.exe
    + 2004-08-10 04:00:00 53,760 -c----w c:\windows\$NtUninstallKB925720$\narrator.exe
    + 2004-08-10 04:00:00 215,552 -c----w c:\windows\$NtUninstallKB925720$\osk.exe
    + 2005-10-12 23:16:49 213,216 -c----w c:\windows\$NtUninstallKB925720$\spuninst\spuninst.exe
    + 2005-10-12 23:16:56 371,424 -c----w c:\windows\$NtUninstallKB925720$\spuninst\updspapi.dll
    + 2004-08-10 04:00:00 35,840 -c----w c:\windows\$NtUninstallKB925720$\umandlg.dll
    + 2004-08-10 04:00:00 50,176 -c----w c:\windows\$NtUninstallKB925720$\utilman.exe
    + 2004-08-10 04:00:00 294,400 -c----w c:\windows\$NtUninstallKB932823-v3$\msctf.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
    + 2004-08-10 04:00:00 72,960 -c----w c:\windows\$NtUninstallKB937894$\mqac.sys
    + 2004-08-10 04:00:00 138,240 -c----w c:\windows\$NtUninstallKB937894$\mqad.dll
    + 2004-08-10 04:00:00 47,104 -c----w c:\windows\$NtUninstallKB937894$\mqdscli.dll
    + 2004-08-10 04:00:00 16,896 -c----w c:\windows\$NtUninstallKB937894$\mqise.dll
    + 2004-08-10 04:00:00 660,992 -c----w c:\windows\$NtUninstallKB937894$\mqqm.dll
    + 2004-08-10 04:00:00 177,152 -c----w c:\windows\$NtUninstallKB937894$\mqrt.dll
    + 2004-08-10 04:00:00 95,744 -c----w c:\windows\$NtUninstallKB937894$\mqsec.dll
    + 2004-08-10 04:00:00 48,640 -c----w c:\windows\$NtUninstallKB937894$\mqupgrd.dll
    + 2004-08-10 04:00:00 471,552 -c----w c:\windows\$NtUninstallKB937894$\mqutil.dll
    + 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB937894$\spuninst\spuninst.exe
    + 2005-10-12 23:12:34 371,424 -c----w c:\windows\$NtUninstallKB937894$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
    + 2005-08-30 11:13:42 1,287,680 -c----w c:\windows\$NtUninstallKB941568$\quartz.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB941568$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB941568$\spuninst\updspapi.dll
    + 2007-10-27 23:39:36 213,216 -c----w c:\windows\$NtUninstallKB941569$\spuninst\spuninst.exe
    + 2007-10-27 23:39:46 371,424 -c----w c:\windows\$NtUninstallKB941569$\spuninst\updspapi.dll
    + 2006-10-19 04:47:18 222,208 -c----w c:\windows\$NtUninstallKB941569$\wmasf.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB941644$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB941644$\spuninst\updspapi.dll
    + 2006-04-20 11:51:50 359,808 -c----w c:\windows\$NtUninstallKB941644$\tcpip.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB941693$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB941693$\spuninst\updspapi.dll
    + 2007-03-08 13:47:48 1,843,584 -c----w c:\windows\$NtUninstallKB941693$\win32k.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB942763$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB942763$\spuninst\updspapi.dll
    + 2007-07-18 12:42:22 60,416 -c----w c:\windows\$NtUninstallKB942763$\tzchange.exe
    + 2007-05-17 11:28:05 549,376 -c----w c:\windows\$NtUninstallKB943055$\oleaut32.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB943055$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB943055$\spuninst\updspapi.dll
    + 2006-12-19 21:52:18 8,453,632 -c----w c:\windows\$NtUninstallKB943460$\shell32.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\$NtUninstallKB943460$\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\windows\$NtUninstallKB943460$\spuninst\updspapi.dll
    + 2007-06-19 07:24:36 350,720 -c----w c:\windows\$NtUninstallKB943460$\xpsp3res.dll
    + 2006-08-17 12:28:27 721,920 -c----w c:\windows\$NtUninstallKB943485$\lsasrv.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB943485$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB943485$\spuninst\updspapi.dll
    + 2006-11-10 00:20:06 163,644 -c----w c:\windows\$NtUninstallKB944653$\secdrv.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB944653$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB944653$\spuninst\updspapi.dll
    + 2006-06-26 17:37:10 148,480 -c----w c:\windows\$NtUninstallKB945553$\dnsapi.dll
    + 2004-08-10 04:00:00 45,568 -c----w c:\windows\$NtUninstallKB945553$\dnsrslvr.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB945553$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB945553$\spuninst\updspapi.dll
    + 2004-08-10 04:00:00 181,248 -c----w c:\windows\$NtUninstallKB946026$\mrxdav.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB946026$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB946026$\spuninst\updspapi.dll
    + 2004-08-04 07:06:34 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648$\spuninst\updspapi.dll
    + 2007-06-19 13:31:19 282,112 -c----w c:\windows\$NtUninstallKB948590$\gdi32.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB948590$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB948590$\spuninst\updspapi.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\$NtUninstallKB948881$\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\windows\$NtUninstallKB948881$\spuninst\updspapi.dll
    + 2004-08-10 04:00:00 561,179 -c----w c:\windows\$NtUninstallKB950749$\dao360.dll
    + 2004-08-10 04:00:00 512,029 -c----w c:\windows\$NtUninstallKB950749$\msexch40.dll
    + 2004-08-10 04:00:00 319,517 -c----w c:\windows\$NtUninstallKB950749$\msexcl40.dll
    + 2004-08-10 04:00:00 1,507,356 -c----w c:\windows\$NtUninstallKB950749$\msjet40.dll
    + 2004-08-10 04:00:00 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetol1.dll
    + 2004-08-10 11:00:00 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetoledb40.dll
    + 2004-08-10 04:00:00 151,583 -c----w c:\windows\$NtUninstallKB950749$\msjint40.dll
    + 2004-08-10 04:00:00 53,279 -c----w c:\windows\$NtUninstallKB950749$\msjter40.dll
    + 2004-08-10 04:00:00 241,693 -c----w c:\windows\$NtUninstallKB950749$\msjtes40.dll
    + 2004-08-10 04:00:00 213,023 -c----w c:\windows\$NtUninstallKB950749$\msltus40.dll
    + 2004-08-10 04:00:00 348,189 -c----w c:\windows\$NtUninstallKB950749$\mspbde40.dll
    + 2004-08-10 04:00:00 421,919 -c----w c:\windows\$NtUninstallKB950749$\msrd2x40.dll
    + 2004-08-10 04:00:00 315,423 -c----w c:\windows\$NtUninstallKB950749$\msrd3x40.dll
    + 2004-08-10 04:00:00 552,989 -c----w c:\windows\$NtUninstallKB950749$\msrepl40.dll
    + 2004-08-10 04:00:00 258,077 -c----w c:\windows\$NtUninstallKB950749$\mstext40.dll
    + 2004-08-10 04:00:00 831,519 -c----w c:\windows\$NtUninstallKB950749$\mswdat10.dll
    + 2004-08-10 04:00:00 614,429 -c----w c:\windows\$NtUninstallKB950749$\mswstr10.dll
    + 2004-08-10 04:00:00 348,189 -c----w c:\windows\$NtUninstallKB950749$\msxbde40.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB950749$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB950749$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950760$\spuninst\updspapi.dll
    + 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950762$\spuninst\updspapi.dll
    + 2005-07-26 11:39:45 243,200 -c----w c:\windows\$NtUninstallKB950974$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll
    + 2007-08-21 06:15:44 683,520 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
    + 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
    + 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376$\spuninst\updspapi.dll
    + 2007-10-29 22:35:13 1,287,680 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951698$\spuninst\updspapi.dll
    + 2004-08-10 04:00:00 138,496 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
    + 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
    + 2004-08-10 04:00:00 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748$\spuninst\updspapi.dll
    + 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
    + 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
    + 2006-10-19 03:03:58 100,864 -c----w c:\windows\$NtUninstallKB952069_WM9$\logagent.exe
    + 2007-07-27 16:41:48 231,288 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe
    + 2007-07-27 16:41:48 382,840 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\updspapi.dll
    + 2006-10-19 04:47:20 937,984 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmnetmgr.dll
    + 2006-10-19 04:47:22 2,450,944 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmvcore.dll
    + 2004-08-10 04:00:00 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi.dll
    + 2005-06-29 08:46:00 74,240 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB953356$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB953356$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll
    + 2007-07-27 16:41:48 231,288 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
    + 2007-07-27 16:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
    + 2006-10-19 04:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB954211$\spuninst\updspapi.dll
    + 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954600$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB954600$\spuninst\updspapi.dll
    + 2006-08-21 16:52:08 246,814 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
    + 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB955069$\spuninst\spuninst.exe
    + 2008-07-09 20:08:38 382,840 -c----w c:\windows\$NtUninstallKB955069$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB955839$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB955839$\spuninst\updspapi.dll
    + 2008-07-14 11:09:18 62,976 -c----w c:\windows\$NtUninstallKB955839$\tzchange.exe
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB956391$\spuninst\updspapi.dll
    + 2008-02-20 06:51:05 282,624 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
    + 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB956802$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956802$\spuninst\updspapi.dll
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB956803$\spuninst\updspapi.dll
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlmp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtUninstallKB956841$\ntkrpamp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956841$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB957095$\spuninst\updspapi.dll
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
    + 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB957097$\spuninst\spuninst.exe
    + 2008-07-08 13:02:12 382,840 -c----w c:\windows\$NtUninstallKB957097$\spuninst\updspapi.dll
    + 2006-08-17 12:28:27 332,288 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB958644$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958644$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB958687$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958687$\spuninst\updspapi.dll
    + 2008-08-28 10:04:17 333,056 -c----w c:\windows\$NtUninstallKB958687$\srv.sys
    + 2006-10-16 22:10:58 221,488 -c----w c:\windows\$NtUninstallWIC$\spuninst\spuninst.exe
    + 2006-10-16 22:10:58 379,184 -c----w c:\windows\$NtUninstallWIC$\spuninst\updspapi.dll
    - 2005-05-04 01:43:28 69,632 ----a-w c:\windows\ALCMTR.EXE
    + 2005-05-03 16:43:28 69,632 ----a-w c:\windows\ALCMTR.EXE
    - 2006-02-21 00:01:58 2,809,856 ----a-w c:\windows\ALCWZRD.EXE
    + 2006-05-04 14:26:36 2,808,832 ----a-w c:\windows\ALCWZRD.EXE
    + 2003-06-14 00:23:18 81,408 ----a-w c:\windows\AppPatch\allayer.dll
    + 2003-06-10 17:43:42 380,928 ----a-w c:\windows\AppPatch\alres401.dll
    + 2003-06-10 17:43:42 380,928 ----a-w c:\windows\AppPatch\alres404.dll
    + 2003-06-10 17:43:42 380,928 ----a-w c:\windows\AppPatch\alres407.dll
    + 2003-06-14 00:23:20 340,992 ----a-w c:\windows\AppPatch\alres409.dll
    + 2003-06-11 20:19:58 380,928 ----a-w c:\windows\AppPatch\alres40d.dll
    + 2003-06-10 17:43:42 380,928 ----a-w c:\windows\AppPatch\alres411.dll
    + 2003-06-10 17:43:42 380,928 ----a-w c:\windows\AppPatch\alres412.dll
    + 2003-06-10 17:43:42 380,928 ----a-w c:\windows\AppPatch\alres804.dll
    + 2003-06-14 00:23:06 50,176 ----a-w c:\windows\AppPatch\apploc.exe
    - 2005-08-31 03:58:42 8,704 ------w c:\windows\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-10-30 19:13:27 8,704 ----a-w c:\windows\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2006-05-31 14:13:41 117,248 ----a-w c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
    + 2008-10-31 15:25:55 117,248 ----a-w c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
    - 2005-08-31 03:58:42 12,288 ------w c:\windows\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-10-30 19:13:22 12,288 ----a-w c:\windows\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2005-08-31 03:58:42 34,816 ------w c:\windows\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-10-30 19:13:27 34,816 ----a-w c:\windows\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2006-05-31 14:13:41 102,400 ----a-w c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
    + 2008-10-31 15:25:54 102,400 ----a-w c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
    - 2006-12-07 03:10:08 1,863,680 ----a-w c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\ehcm.dll
    + 2008-10-31 15:25:55 1,863,680 ----a-w c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll
    - 2006-05-31 14:13:41 192,512 ----a-w c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
    + 2008-10-31 15:25:55 192,512 ----a-w c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
    - 2006-12-07 03:10:08 868,352 ----a-w c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
    + 2008-10-31 15:25:55 868,352 ----a-w c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
    - 2006-05-31 14:13:41 126,976 ----a-w c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
    + 2008-10-31 15:25:55 126,976 ----a-w c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
    - 2006-05-31 14:13:42 110,592 ----a-w c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
    + 2008-10-31 15:25:56 110,592 ----a-w c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
    - 2006-05-31 14:13:41 8,192 ----a-w c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
    + 2008-10-31 15:25:53 8,192 ----a-w c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
    - 2006-05-31 14:13:41 73,728 ----a-w c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
    + 2008-10-31 15:25:54 73,728 ----a-w c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
    - 2006-05-31 14:13:41 167,936 ----a-w c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
    + 2008-10-31 15:25:55 167,936 ----a-w c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
    - 2006-12-07 03:10:08 204,800 ----a-w c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiplay.dll
    + 2008-10-31 15:25:55 204,800 ----a-w c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiPlay.dll
    - 2006-05-31 14:13:41 389,120 ----a-w c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
    + 2008-10-31 15:25:55 389,120 ----a-w c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
    - 2006-05-31 14:13:41 18,944 ----a-w c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
    + 2008-10-31 15:25:55 18,944 ----a-w c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
    - 2006-05-31 14:13:41 278,528 ----a-w c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
    + 2008-10-31 15:25:55 278,528 ----a-w c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
    - 2006-05-31 14:13:41 122,880 ----a-w c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
    + 2008-10-31 15:25:53 122,880 ----a-w c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
    - 2006-05-31 14:13:41 53,248 ----a-w c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
    + 2008-10-31 15:25:55 53,248 ----a-w c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
    - 2006-05-31 14:13:41 389,120 ----a-w c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
    + 2008-10-31 15:25:54 389,120 ----a-w c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
    - 2005-08-31 03:58:42 7,168 ------w c:\windows\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-10-30 19:13:35 7,168 ----a-w c:\windows\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2005-08-31 03:58:42 32,768 ------w c:\windows\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-10-30 19:13:35 32,768 ----a-w c:\windows\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll
    - 2005-08-31 03:58:42 4,096 ------w c:\windows\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-10-30 19:13:36 4,096 ----a-w c:\windows\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2005-08-31 03:58:42 27,136 ------w c:\windows\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-10-30 19:13:36 27,136 ----a-w c:\windows\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2007-11-10 03:40:01 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    + 2009-02-21 03:01:12 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    - 2007-11-10 03:40:01 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    + 2009-02-21 03:01:12 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    - 2007-11-10 03:40:01 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    + 2009-02-21 03:01:12 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    - 2007-11-10 03:39:53 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:09 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:54 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:09 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:55 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:10 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:56 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:10 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:56 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:10 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:57 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:11 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:58 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:11 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:58 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:11 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:39:59 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:11 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:40:02 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2009-02-21 03:01:13 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-10 03:40:02 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    + 2009-02-21 03:01:13 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    - 2007-11-10 03:40:02 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    + 2009-02-21 03:01:13 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    - 2007-11-10 03:40:03 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    + 2009-02-21 03:01:13 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    - 2007-11-10 03:40:03 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    + 2009-02-21 03:01:13 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    - 2007-11-10 03:40:00 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    + 2009-02-21 03:01:12 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    - 2005-08-31 03:58:42 712,704 ------w c:\windows\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-10-30 19:13:23 712,704 ----a-w c:\windows\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2006-05-31 14:13:41 45,056 ----a-w c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
    + 2008-10-31 15:25:55 45,056 ----a-w c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
    - 2006-05-31 14:44:16 1,100,392 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
    + 2008-06-21 09:35:45 1,103,248 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
    - 2006-05-31 14:44:16 141,928 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
    + 2008-06-21 09:35:32 144,784 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
    - 2006-05-31 14:44:16 408,176 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
    + 2008-06-21 09:35:51 411,024 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
    - 2006-05-31 14:44:16 35,448 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
    + 2008-06-21 09:35:50 38,304 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
    - 2006-05-31 14:44:16 461,416 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
    + 2008-06-21 09:35:42 464,272 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
    - 2006-05-31 14:44:16 223,856 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    + 2008-06-21 09:35:57 226,712 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    - 2006-05-31 14:44:16 20,080 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    + 2008-06-21 09:35:40 22,928 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    - 2006-05-31 14:44:16 662,120 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
    + 2008-06-21 09:35:54 664,968 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
    - 2006-05-31 14:44:16 371,296 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
    + 2008-06-21 09:35:31 374,152 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
    - 2006-05-31 14:44:16 64,088 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    + 2008-06-21 09:35:29 66,936 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    - 2005-08-31 03:58:42 28,672 ------w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-10-30 19:13:22 28,672 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2005-08-31 03:58:42 286,720 ------w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-10-30 19:13:24 286,720 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2005-08-31 03:58:42 5,632 ------w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    + 2008-10-30 19:13:25 5,632 ----a-w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    - 2005-08-31 03:58:42 11,264 ------w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-10-30 19:13:21 11,264 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-08-31 03:58:42 18,944 ------w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-10-30 19:13:21 18,944 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2005-08-31 03:58:42 6,656 ------w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-10-30 19:13:21 6,656 ----a-w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2005-08-31 03:58:42 1,564,672 ------w c:\windows\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll
    + 2008-10-30 19:13:36 1,564,672 ----a-w c:\windows\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll
    - 2006-05-31 14:44:16 223,800 ----a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
    + 2008-06-21 09:35:26 226,656 ----a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
    - 2005-08-31 03:58:42 32,768 ------w c:\windows\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll
    + 2008-10-30 19:13:26 32,768 ----a-w c:\windows\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll
    - 2006-05-31 14:13:41 77,824 ----a-w c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
    + 2008-10-31 15:25:56 77,824 ----a-w c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
    - 2005-08-31 03:58:42 77,824 ------w c:\windows\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-10-30 19:13:28 77,824 ----a-w c:\windows\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2005-08-31 03:58:42 1,179,648 ------w c:\windows\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll
    + 2008-10-30 19:13:33 1,179,648 ----a-w c:\windows\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll
    - 2005-08-31 03:58:42 1,695,744 ------w c:\windows\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-10-30 19:13:33 1,695,744 ----a-w c:\windows\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll
    - 2005-08-31 03:58:42 86,016 ------w c:\windows\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-10-30 19:13:29 86,016 ----a-w c:\windows\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2005-08-31 03:58:42 65,536 ------w c:\windows\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-10-30 19:13:29 65,536 ----a-w c:\windows\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2005-08-31 03:58:42 462,848 ------w c:\windows\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-10-30 19:13:34 462,848 ----a-w c:\windows\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2005-08-31 03:58:42 212,992 ------w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-10-30 19:13:26 212,992 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2005-08-31 03:58:42 48,640 ------w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    + 2008-10-30 19:13:26 48,640 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    - 2005-08-31 03:58:42 352,256 ------w c:\windows\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-10-30 19:13:37 352,256 ----a-w c:\windows\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll
    - 2005-08-31 03:58:42 241,664 ------w c:\windows\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-10-30 19:13:35 241,664 ----a-w c:\windows\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2005-08-31 03:58:42 311,296 ------w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-10-30 19:13:37 311,296 ----a-w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2005-08-31 03:58:42 131,072 ------w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-10-30 19:13:38 131,072 ----a-w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2005-08-31 03:58:42 77,824 ------w c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-10-30 19:13:27 77,824 ----a-w c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
    - 2005-08-31 03:58:42 126,976 ------w c:\windows\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-10-30 19:13:30 126,976 ----a-w c:\windows\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2005-08-31 03:58:42 61,440 ------w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-10-30 19:13:31 61,440 ----a-w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2005-08-31 03:58:42 507,904 ------w c:\windows\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-10-30 19:13:31 507,904 ----a-w c:\windows\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2007-07-11 02:57:34 1,200,128 ----a-w c:\windows\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-10-30 19:13:30 1,200,128 ----a-w c:\windows\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll
    - 2005-08-31 03:58:42 2,002,944 ------w c:\windows\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-10-30 19:13:32 2,002,944 ----a-w c:\windows\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2005-08-31 03:58:42 1,302,528 ------w c:\windows\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll
    + 2008-10-30 19:13:32 1,302,528 ----a-w c:\windows\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll
    - 2005-08-31 03:58:42 1,179,648 ------w c:\windows\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll
    + 2008-10-30 19:13:34 1,179,648 ----a-w c:\windows\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll
    -

  8. #8
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    2007-07-11 02:49:29 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-04-12 02:40:38 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2007-07-11 02:49:37 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-04-12 02:40:44 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-06-21 10:12:54 151,552 ----a-w c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    - 2007-07-11 02:49:38 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2008-04-12 02:40:23 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2008-06-21 10:13:22 3,915,776 ----a-w c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2007-07-11 02:49:39 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2008-04-12 02:40:46 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2007-07-11 02:49:35 2,902,016 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2008-04-12 02:40:31 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2007-07-11 02:49:24 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-04-12 02:40:49 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2007-07-11 02:49:24 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2008-04-12 02:40:49 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2008-06-21 10:13:24 344,064 ----a-w c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2007-07-11 02:49:43 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2008-04-12 02:40:44 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2007-07-11 02:49:32 5,156,864 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-04-12 02:40:29 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2007-07-11 02:49:28 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-04-12 02:40:35 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2007-07-11 02:49:23 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2008-04-12 02:40:30 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2007-07-11 02:49:25 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-04-12 02:40:37 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2007-07-11 02:49:36 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-04-12 02:40:40 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2007-07-11 02:49:37 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-04-12 02:40:41 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2007-07-11 02:49:37 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-04-12 02:40:42 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2007-07-11 02:49:26 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2008-04-12 02:40:50 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2007-07-11 02:49:27 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2008-04-12 02:40:50 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2007-07-11 02:49:27 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2008-04-12 02:40:51 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2007-07-11 02:49:27 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2008-04-12 02:40:51 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2007-07-11 02:49:26 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-04-12 02:40:42 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-06-21 10:12:54 352,256 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2007-07-11 02:49:44 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-04-12 02:40:41 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2007-07-11 02:49:44 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2008-04-12 02:40:40 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2007-07-11 02:49:21 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-04-12 02:40:46 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2007-07-11 02:49:44 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-04-12 02:40:39 671,744 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2007-07-11 02:49:45 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2008-04-12 02:40:26 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2007-07-11 02:49:23 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-04-12 02:40:48 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2007-07-11 02:49:22 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-04-12 02:40:39 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2007-07-11 02:49:22 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-04-12 02:40:38 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-06-21 10:13:22 593,920 ----a-w c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2008-06-21 10:13:22 32,768 ----a-w c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    + 2008-06-21 10:13:24 184,320 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2008-06-21 10:13:23 126,976 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2008-06-21 10:13:23 376,832 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2008-06-21 10:13:23 151,552 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2008-06-21 10:13:22 4,972,544 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2008-06-21 10:13:22 897,024 ----a-w c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2008-06-21 10:13:24 528,384 ----a-w c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2008-06-21 10:12:55 94,208 ----a-w c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    - 2007-07-11 02:49:41 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2008-04-12 02:40:43 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2007-07-11 02:49:30 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-04-12 02:40:43 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2007-07-11 02:49:41 413,696 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2008-04-12 02:40:30 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2007-07-11 02:49:39 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2008-04-12 02:40:32 741,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2007-07-11 02:49:25 888,832 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2008-04-12 02:40:33 933,888 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2007-07-11 02:49:35 5,001,216 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-04-12 02:40:52 5,070,848 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2007-07-11 02:49:31 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2008-04-12 02:40:50 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2007-07-11 02:49:30 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-04-12 02:40:36 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2007-07-11 02:49:31 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-04-12 02:40:47 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2007-07-11 02:49:42 577,536 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-04-12 02:40:27 630,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-06-21 10:12:55 126,976 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2008-06-21 10:12:55 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2008-06-21 10:12:55 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2007-07-11 02:49:40 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-04-12 02:40:48 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2007-07-11 02:49:43 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-04-12 02:40:47 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2007-07-11 02:49:40 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-04-12 02:40:45 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2007-07-11 02:49:40 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-04-12 02:40:45 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-06-21 10:12:55 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    - 2007-07-11 02:49:29 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-04-12 02:40:27 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-06-21 10:12:58 159,744 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    + 2008-06-21 10:12:58 16,384 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2008-06-21 10:12:56 5,623,808 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    - 2007-07-11 02:49:32 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-04-12 02:40:28 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-06-21 10:13:24 688,128 ----a-w c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
    - 2007-07-11 02:49:43 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2008-04-12 02:40:34 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2007-07-11 02:49:33 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-04-12 02:40:35 90,112 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2007-07-11 02:49:33 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-04-12 02:40:34 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2007-07-11 02:49:33 5,152,768 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-04-12 02:40:37 5,013,504 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-06-21 10:14:53 1,108,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2008-06-21 10:14:53 1,641,272 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2008-06-21 10:14:53 588,592 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    - 2007-07-11 02:49:34 2,027,520 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2008-04-12 02:40:28 2,068,480 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2007-07-11 02:49:42 2,940,928 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-04-12 02:40:33 3,076,096 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-06-21 10:13:23 163,840 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2008-06-21 10:13:23 372,736 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2008-06-21 10:13:23 32,768 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2008-06-21 10:13:22 86,016 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2008-06-21 10:13:21 1,167,360 ----a-w c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2008-06-21 10:13:24 81,920 ----a-w c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2008-04-14 04:52:39 27,136 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
    + 2008-04-14 04:52:45 884,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
    + 2008-06-22 01:09:13 503,808 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\373d5acced35e392e1f413a69042340d\ComSvcConfig.ni.exe
    + 2008-04-14 04:52:47 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
    + 2008-04-14 04:52:45 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
    + 2008-08-01 18:14:21 700,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\ce7764ea378c9aa1a81520a2f55ceea6\ICSharpCode.SharpZipLib.ni.dll
    + 2008-08-01 18:14:36 3,891,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Impulse\40b34d76dc24e672df8d09d1fb7a5fe6\Impulse.ni.exe
    + 2008-08-01 18:14:43 2,285,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ImpulseDock\c80ce6a9284664106d6ac32054343964\ImpulseDock.ni.exe
    + 2008-08-01 18:14:30 118,784 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.IWshRuntime#\2312efa35fd4bdbd10ce20f0e6b36c1e\Interop.IWshRuntimeLibrary.ni.dll
    + 2008-04-14 04:52:49 876,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
    + 2008-04-14 04:52:49 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
    + 2008-04-14 04:52:53 1,695,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
    + 2008-04-14 04:52:54 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
    + 2008-08-01 18:14:18 2,441,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\Microsoft.JScript.ni.dll
    + 2008-06-22 01:09:15 1,114,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\019a85babfbe02cecdbb63a65d391aba\Microsoft.Transactions.Bridge.ni.dll
    + 2008-06-22 01:09:16 401,408 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\cb8d7b6cc6827e9f2d66c4d7ef9b5d54\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2008-04-14 04:52:57 1,740,800 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
    + 2008-06-21 10:13:48 17,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll
    + 2008-08-01 18:14:19 77,824 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\Microsoft.Vsa.ni.dll
    + 2008-04-12 17:26:34 11,722,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
    + 2008-08-01 18:14:22 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MyDock.Util\23a5375d6439a33d6fc82731d708aa0b\MyDock.Util.ni.dll
    + 2008-06-22 01:09:28 1,564,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\41bd82648d480ec304ea0c04034787bc\PresentationBuildTasks.ni.dll
    + 2008-06-21 10:14:10 40,448 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\9385f2c37b2e00e06ec3f57153f63a2d\PresentationCFFRasterizer.ni.dll
    + 2008-06-21 10:14:08 11,980,800 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\7e413273e9d6710be8a39dcce2e45c2c\PresentationCore.ni.dll
    + 2008-06-21 10:14:45 48,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\599806acdd6dc0aeed19ebf9d622dcad\PresentationFontCache.ni.exe
    + 2008-06-21 10:14:41 552,960 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0766df362854f0330a4a45179773657e\PresentationFramework.Luna.ni.dll
    + 2008-06-21 10:14:42 274,432 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8aaa2b56f733902cc1ba9d8300d2a0e3\PresentationFramework.Royale.ni.dll
    + 2008-06-21 10:14:40 241,664 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d87c2740add3b0f86833159ce57c71ec\PresentationFramework.Classic.ni.dll
    + 2008-06-21 10:14:32 14,659,584 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\de20226274a5739a4b42d8e26b546180\PresentationFramework.ni.dll
    + 2008-06-21 10:14:44 393,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e389aa7f3dd4eb1ee585724f130a79cb\PresentationFramework.Aero.ni.dll
    + 2008-06-21 10:14:34 1,986,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\f97ac4e9c402e98d2b5b7114e4fbbd2a\PresentationUI.ni.dll
    + 2008-06-21 10:14:38 2,416,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\1fe0f79dd0d47e4d1eb474f98a1949fb\ReachFramework.ni.dll
    + 2008-08-01 18:14:49 282,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Central.Archive.#\0be85f1f2db54579c84805697d8047d9\Sd.Central.Archive.XmlSerializers.ni.dll
    + 2008-08-01 18:14:28 122,880 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Central.Archive\99247e924be71ff94a2d619ff2debf4b\Sd.Central.Archive.ni.dll
    + 2008-08-01 18:14:23 159,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\sd.central.cmp.serv#\10d9d0527ca5c8cb4c63b1bc7d969820\sd.central.cmp.server.ni.dll
    + 2008-08-01 18:14:48 491,520 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Common.XmlSerial#\1fcc2b559027972401e35db35bb9cd15\Sd.Common.XmlSerializers.ni.dll
    + 2008-08-01 18:14:12 1,019,904 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Common\243f942eefa67cd7b473d7e80c4d2fea\Sd.Common.ni.dll
    + 2008-08-01 18:14:29 299,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.InstallManager\907ca4f8b7558aa33de1e07fc436d26a\Sd.InstallManager.ni.dll
    + 2008-08-01 18:14:25 770,048 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Irc\2efe59f2157eddf3a49ec11bab501a31\Sd.Irc.ni.dll
    + 2008-08-01 18:14:26 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.UI\288a6360dbd71120ba6af3b6e9cef41a\Sd.UI.ni.dll
    + 2008-08-01 18:14:31 98,304 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Uninstall\92f13264d397297145ec3d7ae5c38ba6\Sd.Uninstall.ni.dll
    + 2008-08-01 18:14:31 638,976 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Web\86cf4c824c5b104df3033e1cd0099064\Sd.Web.ni.dll
    + 2008-08-01 18:14:40 450,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd.Zip\750b105dcb921d1c86dcc43660525dc7\Sd.Zip.ni.dll
    + 2008-08-01 18:14:27 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Sd\e778f82b2bf6290f947453cb675f6110\Sd.ni.dll
    + 2008-06-22 01:09:16 139,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\0bcc4abbe0c5c3feeda7f711304ac4a0\ServiceModelReg.ni.exe
    + 2008-08-01 18:14:32 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SharpBITS.Base\645116102fe7dc65bd691bd0c7a965e9\SharpBITS.Base.ni.dll
    + 2008-06-22 01:09:17 286,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\5e3765ee346151c26a3793ddf3a8d6d7\SMDiagnostics.ni.dll
    + 2008-06-22 01:09:17 323,584 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\c6f33f28f5bb403981ac148da447e3c5\SMSvcHost.ni.exe
    + 2008-08-01 18:14:19 55,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Stardock.Central.Se#\a3f27e1020317e03e1de9408636ce538\Stardock.Central.Security.ni.dll
    + 2008-08-01 18:14:32 73,728 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\StardockCentralDSkin\9c81fcb1179fd6404f62908445d85b73\StardockCentralDSkin.ni.dll
    + 2008-06-22 01:09:37 262,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\6a075eb8e0f13de87d1278aa8562d51e\sysglobl.ni.dll
    + 2008-06-21 10:13:53 163,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
    + 2008-04-14 04:52:58 1,011,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
    + 2008-06-21 10:13:53 1,183,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll
    + 2008-06-21 10:13:47 2,756,608 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
    + 2008-04-12 17:27:23 7,049,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
    + 2008-04-14 04:53:00 1,798,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
    + 2008-04-12 17:27:57 10,969,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
    + 2008-04-14 04:53:01 1,224,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
    + 2008-04-14 04:53:02 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
    + 2008-04-12 17:28:01 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
    + 2008-04-12 17:28:00 1,667,072 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
    + 2008-04-14 04:53:04 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
    + 2008-04-14 04:53:04 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
    + 2008-06-22 01:08:45 241,664 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\dd8f551c39409fa95b0c22cf2ee48b65\System.IdentityModel.Selectors.ni.dll
    + 2008-06-22 01:08:44 978,944 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\581d8571e61ebe24154ae912624c3c9d\System.IdentityModel.ni.dll
    + 2008-06-22 01:08:46 417,792 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\86cd41998dc72b213d9464b56fe245b9\System.IO.Log.ni.dll
    + 2008-08-01 18:14:15 1,064,960 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6\System.Management.ni.dll
    + 2008-06-21 10:15:08 655,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\00e3750e478bac4913ee7a6c3b7cd392\System.Messaging.ni.dll
    + 2008-06-21 10:14:39 1,118,208 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\690a965457e274ad13f6b1f9ac2bad4e\System.Printing.ni.dll
    + 2008-06-21 10:13:50 815,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll
    + 2008-06-21 10:13:50 339,968 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2008-06-22 01:08:49 2,351,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c4838d300f677f34c9d44ead84b8603b\System.Runtime.Serialization.ni.dll
    + 2008-04-14 04:53:05 733,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
    + 2008-06-22 01:09:11 17,354,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\7a2bc3302a133e235ec99193c56a0571\System.ServiceModel.ni.dll
    + 2008-04-14 04:53:06 233,472 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
    + 2008-06-22 01:09:37 2,039,808 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\d38908d5c6a11dd7dceaf9bd34adb437\System.Speech.ni.dll
    + 2008-04-14 04:53:07 679,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
    + 2008-04-14 04:53:21 2,342,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
    + 2008-04-14 04:53:22 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
    + 2008-04-14 04:53:24 1,986,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
    + 2008-04-14 04:53:19 12,509,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
    + 2008-04-12 17:28:18 13,193,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
    + 2008-06-21 10:15:00 2,994,176 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\5e0df5685ce40f838eea52a5f1454b68\System.Workflow.Activities.ni.dll
    + 2008-06-21 10:15:05 4,587,520 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\2689e361e42d0bb9e3d19f1ecd30c26a\System.Workflow.ComponentModel.ni.dll
    + 2008-06-21 10:15:07 2,093,056 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\41b6c3a0c115c43c53697efa1607fe49\System.Workflow.Runtime.ni.dll
    + 2008-04-12 17:28:25 5,771,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
    + 2008-04-12 17:27:09 8,265,728 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
    + 2008-06-22 01:09:49 483,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\f61803ded1c123ed9ed5849e7dcebf25\UIAutomationClient.ni.dll
    + 2008-06-22 01:09:50 1,118,208 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\679889309b57024e8abbe80c6c7d48bc\UIAutomationClientsideProviders.ni.dll
    + 2008-06-21 10:14:09 50,688 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9865738a916ad3664dd374582b9ea873\UIAutomationProvider.ni.dll
    + 2008-06-21 10:14:10 196,608 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\71605ce631809dcbfba38842fdf59acf\UIAutomationTypes.ni.dll
    + 2008-08-01 18:14:39 618,496 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VDialog\3933ae77975060a3bd3edca799cd148b\VDialog.ni.dll
    + 2008-08-01 18:14:38 364,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VistaBridgeLibrary\b6a838cf8a84af64a7b9e60bb2cb1a90\VistaBridgeLibrary.ni.dll
    + 2008-08-01 18:14:37 37,888 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WBOCXLib\7afe802ecabaafe2f0de93251e7ec9a4\WBOCXLib.ni.dll
    + 2008-06-21 10:13:44 3,260,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\50652bfd061ead84841e6c9bfffacfb1\WindowsBase.ni.dll
    + 2008-06-22 01:09:53 270,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\2c96738a6ba8ff9e88889f331590e181\WindowsFormsIntegration.ni.dll
    + 2008-06-22 01:09:18 380,928 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\02436080d129210828823210ce879fd8\WsatConfig.ni.exe
    + 2008-10-31 15:25:17 258,048 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\BDATunePIA\6.0.3000.0__31bf3856ad364e35_c90cc252\BDATunePIA.dll
    + 2008-10-31 15:24:30 159,744 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehCIR\6.0.3000.0__31bf3856ad364e35_fcd132bd\ehCIR.dll
    + 2008-10-31 15:25:18 2,326,528 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\EhCM\6.0.3000.0__31bf3856ad364e35_f21b5a45\EhCM.dll
    + 2008-10-31 15:25:16 299,008 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehcommon\6.0.3000.0__31bf3856ad364e35_ab0ad130\ehcommon.dll
    + 2008-10-31 15:24:52 1,306,624 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehepg\6.0.3000.0__31bf3856ad364e35_4b9dc2e7\ehepg.dll
    + 2008-10-31 15:24:33 167,936 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehepgdat\6.0.3000.0__31bf3856ad364e35_b73afd7f\ehepgdat.dll
    + 2008-10-31 15:25:31 167,936 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehExtCOM\6.0.3000.0__31bf3856ad364e35_cf8dcd86\ehExtCOM.dll
    + 2008-10-31 15:25:47 155,648 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehExtHost\6.0.3000.0__31bf3856ad364e35_c59ee95f\ehExtHost.exe
    + 2008-10-31 15:24:12 10,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiExtCOM\6.0.3000.0__31bf3856ad364e35_c9efa315\ehiExtCOM.dll
    + 2008-10-31 15:24:14 102,400 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiExtens\6.0.3000.0__31bf3856ad364e35_581bee4b\ehiExtens.dll
    + 2008-10-31 15:24:43 266,240 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiMsgr\6.0.3000.0__31bf3856ad364e35_f0fdc2ac\ehiMsgr.dll
    + 2008-10-31 15:24:35 380,928 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiPlay\6.0.3000.0__31bf3856ad364e35_c9c471c6\ehiPlay.dll
    + 2008-10-31 15:24:37 565,248 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiProxy\6.0.3000.0__31bf3856ad364e35_43655118\ehiProxy.dll
    + 2008-10-31 15:24:38 40,960 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiUserXp\6.0.3000.0__31bf3856ad364e35_f644695a\ehiUserXp.dll
    + 2008-10-31 15:24:41 458,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiVidCtl\6.0.3000.0__31bf3856ad364e35_12833c7f\ehiVidCtl.dll
    + 2008-10-31 15:24:07 180,224 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiwmp\6.0.3000.0__31bf3856ad364e35_78250d65\ehiwmp.dll
    + 2008-10-31 15:25:18 69,632 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiWUapi\6.0.3000.0__31bf3856ad364e35_f62f3a68\ehiWUapi.dll
    + 2008-10-31 15:24:28 684,032 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehRecObj\6.0.3000.0__31bf3856ad364e35_92b6c471\ehRecObj.dll
    + 2008-10-31 15:25:45 6,336,512 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehshell\6.0.3000.0__31bf3856ad364e35_8a7442bb\ehshell.exe
    + 2008-10-31 15:25:19 65,536 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35_2dcaed6e\Microsoft.MediaCenter.dll
    + 2008-09-08 08:41:37 20,480 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0_7ca446d1\SonicMCEBurnEngine.dll
    + 2008-10-06 08:56:31 4,096 ----a-w c:\windows\d3dx.dat
    + 2008-05-21 03:32:40 267,568 ----a-w c:\windows\Downloaded Program Files\sysreqlab3.dll
    + 2008-06-13 13:10:50 272,128 ----a-w c:\windows\Driver Cache\i386\bthport.sys
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 ----a-w c:\windows\Driver Cache\i386\mrxsmb.sys
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 09:58:27 2,136,064 ----a-w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    - 2007-02-28 08:38:55 2,057,600 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 09:22:13 2,057,728 ----a-w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 09:22:14 2,015,744 ----a-w c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2007-02-28 09:10:57 2,180,352 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 10:00:45 2,180,352 ----a-w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\07-03-2009\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\AutoBackup\08-03-2009\ERDNT.EXE
    + 2009-03-09 05:05:34 23,212,032 ----a-w c:\windows\erdnt\AutoBackup\08-03-2009\Users\00000001\NTUSER.DAT
    + 2009-03-09 05:05:35 352,256 ----a-w c:\windows\erdnt\AutoBackup\08-03-2009\Users\00000002\UsrClass.dat
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\AutoBackup\09-03-2009\ERDNT.EXE
    + 2009-03-09 19:13:10 23,212,032 ----a-w c:\windows\erdnt\AutoBackup\09-03-2009\Users\00000001\NTUSER.DAT
    + 2009-03-09 19:13:11 352,256 ----a-w c:\windows\erdnt\AutoBackup\09-03-2009\Users\00000002\UsrClass.dat
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\AutoBackup\10-03-2009\ERDNT.EXE
    + 2009-03-10 18:27:12 23,252,992 ----a-w c:\windows\erdnt\AutoBackup\10-03-2009\Users\00000001\NTUSER.DAT
    + 2009-03-10 18:27:13 352,256 ----a-w c:\windows\erdnt\AutoBackup\10-03-2009\Users\00000002\UsrClass.dat
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\AutoBackup\2009-03-10\ERDNT.EXE
    + 2009-03-10 22:38:27 23,252,992 ----a-w c:\windows\erdnt\AutoBackup\2009-03-10\Users\00000001\NTUSER.DAT
    + 2009-03-10 22:38:28 352,256 ----a-w c:\windows\erdnt\AutoBackup\2009-03-10\Users\00000002\UsrClass.dat
    + 2005-10-21 02:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    + 2005-10-21 02:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2000-08-31 14:00:00 89,504 ----a-w c:\windows\fdsv.exe
    + 2000-08-31 14:00:00 80,412 ----a-w c:\windows\grep.exe
    + 2004-08-09 21:00:00 2,589 ------w c:\windows\I386\RUNW32.BAT
    + 2007-08-20 10:04:34 124,928 -c----w c:\windows\ie7updates\KB942615-IE7\advpack.dll
    + 2007-08-20 10:04:34 214,528 -c----w c:\windows\ie7updates\KB942615-IE7\dxtrans.dll
    + 2007-08-20 10:04:34 132,608 -c----w c:\windows\ie7updates\KB942615-IE7\extmgr.dll
    + 2007-08-20 10:04:34 63,488 -c----w c:\windows\ie7updates\KB942615-IE7\icardie.dll
    + 2007-08-17 10:20:54 63,488 -c----w c:\windows\ie7updates\KB942615-IE7\ie4uinit.exe
    + 2007-08-20 10:04:34 153,088 -c----w c:\windows\ie7updates\KB942615-IE7\ieakeng.dll
    + 2007-08-20 10:04:35 230,400 -c----w c:\windows\ie7updates\KB942615-IE7\ieaksie.dll
    + 2007-08-17 07:34:25 161,792 -c----w c:\windows\ie7updates\KB942615-IE7\ieakui.dll
    + 2007-08-20 10:04:35 383,488 -c----w c:\windows\ie7updates\KB942615-IE7\ieapfltr.dll
    + 2007-08-20 10:04:35 384,512 -c----w c:\windows\ie7updates\KB942615-IE7\iedkcs32.dll
    + 2007-08-20 10:04:37 6,058,496 -c----w c:\windows\ie7updates\KB942615-IE7\ieframe.dll
    + 2007-08-20 10:04:38 44,544 -c----w c:\windows\ie7updates\KB942615-IE7\iernonce.dll
    + 2007-08-20 10:04:38 267,776 -c----w c:\windows\ie7updates\KB942615-IE7\iertutil.dll
    + 2007-08-17 10:20:54 13,824 -c----w c:\windows\ie7updates\KB942615-IE7\ieudinit.exe
    + 2007-08-17 10:21:21 625,152 -c----w c:\windows\ie7updates\KB942615-IE7\iexplore.exe
    + 2007-08-20 10:04:39 27,648 -c----w c:\windows\ie7updates\KB942615-IE7\jsproxy.dll
    + 2007-08-20 10:04:39 459,264 -c----w c:\windows\ie7updates\KB942615-IE7\msfeeds.dll
    + 2007-08-20 10:04:39 52,224 -c----w c:\windows\ie7updates\KB942615-IE7\msfeedsbs.dll
    + 2007-08-20 10:04:41 3,584,512 -c----w c:\windows\ie7updates\KB942615-IE7\mshtml.dll
    + 2007-08-20 10:04:41 477,696 -c----w c:\windows\ie7updates\KB942615-IE7\mshtmled.dll
    + 2007-08-20 10:04:41 193,024 -c----w c:\windows\ie7updates\KB942615-IE7\msrating.dll
    + 2007-08-20 10:04:42 671,232 -c----w c:\windows\ie7updates\KB942615-IE7\mstime.dll
    + 2007-08-20 10:04:42 102,400 -c----w c:\windows\ie7updates\KB942615-IE7\occache.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB942615-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB942615-IE7\spuninst\updspapi.dll
    + 2007-08-20 10:04:42 105,984 -c----w c:\windows\ie7updates\KB942615-IE7\url.dll
    + 2007-08-20 10:04:42 1,152,000 -c----w c:\windows\ie7updates\KB942615-IE7\urlmon.dll
    + 2007-08-20 10:04:42 232,960 -c----w c:\windows\ie7updates\KB942615-IE7\webcheck.dll
    + 2007-08-20 10:04:43 824,832 -c----w c:\windows\ie7updates\KB942615-IE7\wininet.dll
    + 2007-10-10 23:55:51 124,928 -c----w c:\windows\ie7updates\KB944533-IE7\advpack.dll
    + 2006-10-17 18:58:06 346,624 -c----w c:\windows\ie7updates\KB944533-IE7\dxtmsft.dll
    + 2007-10-10 23:55:51 214,528 -c----w c:\windows\ie7updates\KB944533-IE7\dxtrans.dll
    + 2007-10-10 23:55:51 132,608 -c----w c:\windows\ie7updates\KB944533-IE7\extmgr.dll
    + 2007-10-10 23:55:51 63,488 -c----w c:\windows\ie7updates\KB944533-IE7\icardie.dll
    + 2007-10-10 10:59:40 70,656 -c----w c:\windows\ie7updates\KB944533-IE7\ie4uinit.exe
    + 2007-10-10 23:55:51 153,088 -c----w c:\windows\ie7updates\KB944533-IE7\ieakeng.dll
    + 2007-10-10 23:55:51 230,400 -c----w c:\windows\ie7updates\KB944533-IE7\ieaksie.dll
    + 2007-10-10 05:46:55 161,792 -c----w c:\windows\ie7updates\KB944533-IE7\ieakui.dll
    + 2007-10-10 23:55:52 383,488 -c----w c:\windows\ie7updates\KB944533-IE7\ieapfltr.dll
    + 2007-10-10 23:55:52 384,512 -c----w c:\windows\ie7updates\KB944533-IE7\iedkcs32.dll
    + 2007-10-10 23:55:54 6,065,664 -c----w c:\windows\ie7updates\KB944533-IE7\ieframe.dll
    + 2007-10-10 23:55:55 44,544 -c----w c:\windows\ie7updates\KB944533-IE7\iernonce.dll
    + 2007-10-10 23:55:55 267,776 -c----w c:\windows\ie7updates\KB944533-IE7\iertutil.dll
    + 2007-10-10 10:59:40 13,824 -c----w c:\windows\ie7updates\KB944533-IE7\ieudinit.exe
    + 2007-10-10 10:59:52 625,152 -c----w c:\windows\ie7updates\KB944533-IE7\iexplore.exe
    + 2007-10-10 23:55:56 27,648 -c----w c:\windows\ie7updates\KB944533-IE7\jsproxy.dll
    + 2007-10-10 23:55:56 459,264 -c----w c:\windows\ie7updates\KB944533-IE7\msfeeds.dll
    + 2007-10-10 23:55:56 52,224 -c----w c:\windows\ie7updates\KB944533-IE7\msfeedsbs.dll
    + 2007-10-30 23:42:28 3,590,656 -c----w c:\windows\ie7updates\KB944533-IE7\mshtml.dll
    + 2007-10-10 23:55:58 478,208 -c----w c:\windows\ie7updates\KB944533-IE7\mshtmled.dll
    + 2007-10-10 23:55:58 193,024 -c----w c:\windows\ie7updates\KB944533-IE7\msrating.dll
    + 2007-10-10 23:55:59 671,232 -c----w c:\windows\ie7updates\KB944533-IE7\mstime.dll
    + 2007-10-10 23:55:59 102,400 -c----w c:\windows\ie7updates\KB944533-IE7\occache.dll
    + 2006-10-17 18:58:08 44,544 -c----w c:\windows\ie7updates\KB944533-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB944533-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB944533-IE7\spuninst\updspapi.dll
    + 2007-10-10 23:55:59 105,984 -c----w c:\windows\ie7updates\KB944533-IE7\url.dll
    + 2007-10-10 23:56:00 1,159,680 -c----w c:\windows\ie7updates\KB944533-IE7\urlmon.dll
    + 2007-10-10 23:56:00 232,960 -c----w c:\windows\ie7updates\KB944533-IE7\webcheck.dll
    + 2007-10-10 23:56:00 824,832 -c----w c:\windows\ie7updates\KB944533-IE7\wininet.dll
    + 2007-12-07 02:21:45 124,928 -c----w c:\windows\ie7updates\KB947864-IE7\advpack.dll
    + 2007-12-19 23:01:06 347,136 -c----w c:\windows\ie7updates\KB947864-IE7\dxtmsft.dll
    + 2007-12-07 02:21:45 214,528 -c----w c:\windows\ie7updates\KB947864-IE7\dxtrans.dll
    + 2007-12-07 02:21:45 133,120 -c----w c:\windows\ie7updates\KB947864-IE7\extmgr.dll
    + 2007-12-07 02:21:45 63,488 -c----w c:\windows\ie7updates\KB947864-IE7\icardie.dll
    + 2007-12-06 11:00:57 70,656 -c----w c:\windows\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-12-07 02:21:45 153,088 -c----w c:\windows\ie7updates\KB947864-IE7\ieakeng.dll
    + 2007-12-07 02:21:45 230,400 -c----w c:\windows\ie7updates\KB947864-IE7\ieaksie.dll
    + 2007-12-06 04:59:51 161,792 -c----w c:\windows\ie7updates\KB947864-IE7\ieakui.dll
    + 2007-12-07 02:21:45 383,488 -c----w c:\windows\ie7updates\KB947864-IE7\ieapfltr.dll
    + 2007-12-07 02:21:45 384,512 -c----w c:\windows\ie7updates\KB947864-IE7\iedkcs32.dll
    + 2007-12-07 02:21:46 6,066,176 -c----w c:\windows\ie7updates\KB947864-IE7\ieframe.dll
    + 2007-12-07 02:21:46 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\iernonce.dll
    + 2007-12-07 02:21:46 267,776 -c----w c:\windows\ie7updates\KB947864-IE7\iertutil.dll
    + 2007-12-06 11:00:58 13,824 -c----w c:\windows\ie7updates\KB947864-IE7\ieudinit.exe
    + 2007-12-06 11:01:25 625,664 -c----w c:\windows\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-12-07 02:21:47 27,648 -c----w c:\windows\ie7updates\KB947864-IE7\jsproxy.dll
    + 2007-12-07 02:21:47 459,264 -c----w c:\windows\ie7updates\KB947864-IE7\msfeeds.dll
    + 2007-12-07 02:21:47 52,224 -c----w c:\windows\ie7updates\KB947864-IE7\msfeedsbs.dll
    + 2007-12-08 05:21:48 3,592,192 -c----w c:\windows\ie7updates\KB947864-IE7\mshtml.dll
    + 2007-12-07 02:21:47 478,208 -c----w c:\windows\ie7updates\KB947864-IE7\mshtmled.dll
    + 2007-12-07 02:21:48 193,024 -c----w c:\windows\ie7updates\KB947864-IE7\msrating.dll
    + 2007-12-07 02:21:48 671,232 -c----w c:\windows\ie7updates\KB947864-IE7\mstime.dll
    + 2007-12-07 02:21:48 102,912 -c----w c:\windows\ie7updates\KB947864-IE7\occache.dll
    + 2008-01-11 05:53:32 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB947864-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB947864-IE7\spuninst\updspapi.dll
    + 2007-12-07 02:21:48 105,984 -c----w c:\windows\ie7updates\KB947864-IE7\url.dll
    + 2007-12-07 02:21:48 1,159,680 -c----w c:\windows\ie7updates\KB947864-IE7\urlmon.dll
    + 2007-12-07 02:21:48 233,472 -c----w c:\windows\ie7updates\KB947864-IE7\webcheck.dll
    + 2007-12-07 02:21:48 824,832 -c----w c:\windows\ie7updates\KB947864-IE7\wininet.dll
    + 2008-03-01 13:06:20 124,928 -c----w c:\windows\ie7updates\KB950759-IE7\advpack.dll
    + 2008-03-01 13:06:21 347,136 -c----w c:\windows\ie7updates\KB950759-IE7\dxtmsft.dll
    + 2008-03-01 13:06:21 214,528 -c----w c:\windows\ie7updates\KB950759-IE7\dxtrans.dll
    + 2008-03-01 13:06:21 133,120 -c----w c:\windows\ie7updates\KB950759-IE7\extmgr.dll
    + 2008-03-01 13:06:21 63,488 -c----w c:\windows\ie7updates\KB950759-IE7\icardie.dll
    + 2008-02-29 08:55:23 70,656 -c----w c:\windows\ie7updates\KB950759-IE7\ie4uinit.exe
    + 2008-03-01 13:06:21 153,088 -c----w c:\windows\ie7updates\KB950759-IE7\ieakeng.dll
    + 2008-03-01 13:06:21 230,400 -c----w c:\windows\ie7updates\KB950759-IE7\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 -c----w c:\windows\ie7updates\KB950759-IE7\ieakui.dll
    + 2008-03-01 13:06:22 383,488 -c----w c:\windows\ie7updates\KB950759-IE7\ieapfltr.dll
    + 2008-03-01 13:06:22 384,512 -c----w c:\windows\ie7updates\KB950759-IE7\iedkcs32.dll
    + 2008-03-01 13:06:24 6,066,176 -c----w c:\windows\ie7updates\KB950759-IE7\ieframe.dll
    + 2008-03-01 13:06:24 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\iernonce.dll
    + 2008-03-01 13:06:25 267,776 -c----w c:\windows\ie7updates\KB950759-IE7\iertutil.dll
    + 2008-02-22 10:00:51 13,824 -c----w c:\windows\ie7updates\KB950759-IE7\ieudinit.exe
    + 2008-02-29 08:55:46 625,664 -c----w c:\windows\ie7updates\KB950759-IE7\iexplore.exe
    + 2008-03-01 13:06:25 27,648 -c----w c:\windows\ie7updates\KB950759-IE7\jsproxy.dll
    + 2008-03-01 13:06:26 459,264 -c----w c:\windows\ie7updates\KB950759-IE7\msfeeds.dll
    + 2008-03-01 13:06:26 52,224 -c----w c:\windows\ie7updates\KB950759-IE7\msfeedsbs.dll
    + 2008-03-02 00:36:30 3,591,680 -c----w c:\windows\ie7updates\KB950759-IE7\mshtml.dll
    + 2008-03-01 13:06:28 478,208 -c----w c:\windows\ie7updates\KB950759-IE7\mshtmled.dll
    + 2008-03-01 13:06:28 193,024 -c----w c:\windows\ie7updates\KB950759-IE7\msrating.dll
    + 2008-03-01 13:06:29 671,232 -c----w c:\windows\ie7updates\KB950759-IE7\mstime.dll
    + 2008-03-01 13:06:29 102,912 -c----w c:\windows\ie7updates\KB950759-IE7\occache.dll
    + 2008-03-01 13:06:29 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\updspapi.dll
    + 2008-03-01 13:06:29 105,984 -c----w c:\windows\ie7updates\KB950759-IE7\url.dll
    + 2008-03-01 13:06:30 1,159,680 -c----w c:\windows\ie7updates\KB950759-IE7\urlmon.dll
    + 2008-03-01 13:06:30 233,472 -c----w c:\windows\ie7updates\KB950759-IE7\webcheck.dll
    + 2008-03-01 13:06:31 826,368 -c----w c:\windows\ie7updates\KB950759-IE7\wininet.dll
    + 2008-04-23 04:16:28 124,928 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll
    + 2008-04-23 04:16:28 347,136 -c----w c:\windows\ie7updates\KB953838-IE7\dxtmsft.dll
    + 2008-04-23 04:16:28 214,528 -c----w c:\windows\ie7updates\KB953838-IE7\dxtrans.dll
    + 2008-04-23 04:16:28 133,120 -c----w c:\windows\ie7updates\KB953838-IE7\extmgr.dll
    + 2008-04-23 04:16:28 63,488 -c----w c:\windows\ie7updates\KB953838-IE7\icardie.dll
    + 2008-04-22 07:39:58 70,656 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-23 04:16:28 153,088 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll
    + 2008-04-23 04:16:28 230,400 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll
    + 2008-04-20 05:07:51 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll
    + 2008-04-23 04:16:28 383,488 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dll
    + 2008-04-23 04:16:28 384,512 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll
    + 2008-04-23 04:16:28 6,066,176 -c----w c:\windows\ie7updates\KB953838-IE7\ieframe.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll
    + 2008-04-23 04:16:28 267,776 -c----w c:\windows\ie7updates\KB953838-IE7\iertutil.dll
    + 2008-04-22 07:39:58 13,824 -c----w c:\windows\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:40:18 625,664 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-23 04:16:28 27,648 -c----w c:\windows\ie7updates\KB953838-IE7\jsproxy.dll
    + 2008-04-23 04:16:28 459,264 -c----w c:\windows\ie7updates\KB953838-IE7\msfeeds.dll
    + 2008-04-23 04:16:28 52,224 -c----w c:\windows\ie7updates\KB953838-IE7\msfeedsbs.dll
    + 2008-04-24 04:16:30 3,591,680 -c----w c:\windows\ie7updates\KB953838-IE7\mshtml.dll
    + 2008-04-23 04:16:28 478,208 -c----w c:\windows\ie7updates\KB953838-IE7\mshtmled.dll
    + 2008-04-23 04:16:28 193,024 -c----w c:\windows\ie7updates\KB953838-IE7\msrating.dll
    + 2008-04-23 04:16:28 671,232 -c----w c:\windows\ie7updates\KB953838-IE7\mstime.dll
    + 2008-04-23 04:16:28 102,912 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\updspapi.dll
    + 2008-04-23 04:16:28 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll
    + 2008-04-23 04:16:29 1,159,680 -c----w c:\windows\ie7updates\KB953838-IE7\urlmon.dll
    + 2008-04-23 04:16:29 233,472 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll
    + 2008-04-23 04:16:29 826,368 -c----w c:\windows\ie7updates\KB953838-IE7\wininet.dll
    + 2008-06-23 16:57:27 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
    + 2008-06-23 16:57:27 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
    + 2008-06-23 16:57:27 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
    + 2008-06-23 16:57:27 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
    + 2008-06-23 16:57:28 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
    + 2008-06-23 09:20:25 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
    + 2008-06-23 16:57:29 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
    + 2008-06-23 16:57:29 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
    + 2008-06-21 05:23:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
    + 2008-06-23 16:57:29 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
    + 2008-06-23 16:57:29 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
    + 2008-06-23 16:57:33 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
    + 2008-06-23 16:57:33 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
    + 2008-06-23 16:57:34 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
    + 2008-06-23 09:20:26 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
    + 2008-06-23 09:20:52 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
    + 2008-06-23 16:57:35 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
    + 2008-06-23 16:57:36 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
    + 2008-06-23 16:57:36 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
    + 2008-06-24 16:57:40 3,592,192 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
    + 2008-06-23 16:57:39 477,696 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
    + 2008-06-23 16:57:39 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
    + 2008-06-23 16:57:40 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
    + 2008-06-23 16:57:40 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
    + 2008-06-23 16:57:40 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
    + 2008-06-23 16:57:40 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
    + 2008-06-23 16:57:40 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
    + 2008-06-23 16:57:41 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
    + 2008-06-23 16:57:41 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
    + 2008-08-26 07:24:28 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
    + 2008-08-26 07:24:28 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
    + 2008-08-26 07:24:28 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
    + 2008-08-26 07:24:28 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
    + 2008-08-26 07:24:28 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
    + 2008-08-25 08:37:59 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
    + 2008-08-26 07:24:28 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
    + 2008-08-26 07:24:28 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
    + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
    + 2008-08-26 07:24:28 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
    + 2008-08-26 07:24:29 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
    + 2008-10-03 17:41:15 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
    + 2008-08-26 07:24:29 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
    + 2008-08-26 07:24:29 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
    + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
    + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
    + 2008-08-26 07:24:30 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
    + 2008-08-26 07:24:30 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
    + 2008-08-26 07:24:30 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
    + 2008-08-27 08:24:32 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
    + 2008-08-26 07:24:30 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
    + 2008-08-26 07:24:30 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
    + 2008-08-26 07:24:30 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
    + 2008-08-26 07:24:30 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
    + 2008-08-26 07:24:30 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
    + 2008-08-26 07:24:30 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
    + 2008-08-26 07:24:31 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
    + 2008-08-26 07:24:31 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
    + 2008-08-26 07:24:31 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
    + 2008-10-17 09:08:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll

  9. #9
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    + 2003-07-15 12:57:34 38,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
    + 2003-07-15 12:53:06 94,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\AW.DLL
    + 2003-07-15 12:53:22 46,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\BLNMGRPS.DLL
    + 2003-07-15 12:56:54 14,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
    + 2003-07-15 12:57:14 98,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
    + 2006-05-31 14:44:16 1,100,392 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\EXCELPIA.DLL
    + 2003-07-15 12:41:44 13,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\FINDER.EXE
    + 2002-10-07 23:49:36 192,573 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\FORM.DLL
    + 2006-05-31 14:44:16 371,296 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\FORMSPIA.DLL
    + 2003-07-15 12:40:12 179,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
    + 2003-07-15 12:40:12 165,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\FPLACE.DLL
    + 2006-05-31 14:44:16 141,928 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\GRAPHPIA.DLL
    + 2003-06-19 07:31:10 252,928 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
    + 2003-07-15 12:57:14 124,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSB1CORE.DLL
    + 2003-07-15 13:12:22 47,872 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSB1XTOR.DLL
    + 2003-07-15 12:56:14 40,504 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSE7.EXE
    + 2003-07-15 12:51:44 87,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
    + 2003-07-15 12:52:52 17,464 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
    + 2003-07-15 12:57:16 120,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
    + 2003-07-15 12:52:52 27,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
    + 2003-07-15 12:52:56 55,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
    + 2003-07-15 12:56:16 54,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOMSE.DLL
    + 2003-07-11 16:15:48 1,292,872 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
    + 2003-07-15 17:18:52 376,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
    + 2003-07-15 12:52:54 28,224 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
    + 2003-07-15 12:52:52 35,896 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
    + 2003-07-15 12:53:00 55,872 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOSVABW.DLL
    + 2003-07-15 12:53:20 39,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOSVFBR.DLL
    + 2003-07-15 12:46:16 42,040 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
    + 2003-07-15 12:45:12 55,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
    + 2003-07-15 12:45:12 39,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
    + 2003-06-19 07:31:54 788,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSPFILT.DLL
    + 2003-06-19 07:31:50 16,384 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
    + 2003-06-20 06:05:52 128,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSPSCAN.EXE
    + 2003-06-20 06:05:50 364,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
    + 2003-07-15 13:02:42 637,496 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSQRY32.EXE
    + 2003-07-15 12:52:58 41,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
    + 2006-05-31 14:44:16 20,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSTAGPIA.DLL
    + 2003-07-15 13:00:54 145,984 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
    + 2003-07-15 12:57:10 56,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\NAME.DLL
    + 2003-07-15 12:56:52 13,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
    + 2003-06-19 07:31:58 6,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OCRPS.DLL
    + 2006-05-31 14:44:16 223,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OFFICE.DLL
    + 2003-07-15 17:14:26 242,240 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
    + 2006-05-31 14:44:16 35,448 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OLCTLPIA.DLL
    + 2003-07-15 13:05:24 1,054,264 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
    + 2003-07-15 12:44:34 102,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OUTLCTL.DLL
    + 2006-05-31 14:44:16 408,176 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OUTLPIA.DLL
    + 2003-07-15 12:43:16 49,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OUTLWAB.DLL
    + 2006-05-31 14:44:16 461,416 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\OWC11PIA.DLL
    + 2003-07-15 17:18:44 93,752 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
    + 2006-05-31 14:44:16 223,856 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\PPTPIA.DLL
    + 2002-10-08 00:11:00 167,997 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\PSOM.DLL
    + 2003-05-09 11:54:00 77,824 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
    + 2003-07-15 12:57:08 40,512 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
    + 2002-10-07 23:49:42 81,984 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\REVERSE.DLL
    + 2003-07-22 01:46:38 390,712 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\RTFHTML.DLL
    + 2003-07-15 12:57:18 349,248 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\SELFCERT.EXE
    + 2003-07-15 12:44:16 66,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\SENDTO.DLL
    + 2003-07-15 12:57:08 58,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
    + 2003-07-15 12:53:14 11,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
    + 2002-10-07 23:53:04 106,561 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\THOCRAPI.DLL
    + 2002-10-07 23:50:44 241,729 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWCUTCHR.DLL
    + 2002-10-07 23:51:04 180,289 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWCUTLIN.DLL
    + 2002-10-07 23:51:14 147,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWLAY32.DLL
    + 2002-10-07 23:51:20 102,467 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWORIENT.DLL
    + 2002-10-07 23:50:04 118,847 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWRECE.DLL
    + 2002-10-07 23:49:56 81,983 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWRECS.DLL
    + 2002-10-07 23:51:44 221,252 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\TWSTRUCT.DLL
    + 2003-07-15 12:57:40 59,960 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\UNBIND.EXE
    + 2006-05-31 14:44:16 64,088 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\VBIDEPIA.DLL
    + 2006-05-31 14:44:16 662,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\WORDPIA.DLL
    + 2002-10-08 00:03:34 1,794,113 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\XIMAGE3B.DLL
    + 2003-05-01 01:52:32 1,581,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\XPAGE3C.DLL
    + 2003-01-18 04:03:34 59,466 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.5614\XSCAN32.DAT
    + 2007-03-23 00:07:56 91,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\ADDRPARS.DLL
    + 2001-06-05 22:13:22 289,926 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\ENGDIC.DAT
    + 2001-06-05 22:13:22 34,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\ENGIDX.DAT
    + 2007-04-19 19:09:30 167,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\IETAG.DLL
    + 2007-04-19 18:53:52 127,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\IMPMAIL.DLL
    + 2001-06-05 22:13:24 18,844 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\JFONT.DAT
    + 2001-06-05 22:13:26 65,536 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\LOOKUP.DAT
    + 2005-05-04 07:06:28 465,640 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\MSDMENG.DLL
    + 2005-05-04 07:06:32 1,411,816 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\MSDMINE.DLL
    + 2005-05-04 07:06:26 199,408 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\MSMDUN80.DLL
    + 2001-10-23 14:13:42 53,260 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\OCRHC.DAT
    + 2001-06-05 22:13:26 40,972 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\OCRVC.DAT
    + 2007-04-19 18:53:44 106,336 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\OUTLMIME.DLL
    + 2007-05-31 19:35:22 6,420,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
    + 2007-03-23 00:07:10 41,824 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\RECALL.DLL
    + 2007-03-23 00:07:54 78,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\RM.DLL
    + 2007-03-23 00:22:02 103,264 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\TRANSMGR.DLL
    + 2008-12-20 02:55:08 62,288 ----a-r c:\windows\Installer\{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}\IconWlc.exe
    - 2006-05-31 14:35:17 135,168 ----a-r c:\windows\Installer\{075473F5-846A-448B-BCB3-104AA1760205}\MediaHub.exe
    + 2008-06-21 08:57:36 117,760 ----a-r c:\windows\Installer\{075473F5-846A-448B-BCB3-104AA1760205}\MediaHub.exe
    + 2009-02-20 02:20:54 80,395 ----a-r c:\windows\Installer\{0AAA9C97-74D4-47CE-B089-0B147EF3553C}\MsblIco.Exe
    + 2008-09-12 02:00:52 25,214 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\ARPPRODUCTICON.exe
    + 2008-09-12 02:00:52 25,214 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\CPL_DTSC.exe
    + 2008-09-12 02:00:52 25,214 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\CPL_SC.exe
    + 2008-09-12 02:00:52 25,214 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\HCG_SC.exe
    + 2008-09-12 02:00:52 4,846 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\MouseUG.exe
    + 2008-09-12 02:00:52 29,926 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\NewShortcut1_6463554370E7436D8D6D4A721595029E.exe
    + 2008-09-12 02:00:52 29,926 ----a-r c:\windows\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\NewShortcut2_6463554370E7436D8D6D4A721595029E.exe
    + 2007-11-30 14:42:31 29,926 ----a-r c:\windows\Installer\{508CE775-4BA4-4748-82DF-FE28DA9F03B0}\MsblIco.Exe
    + 2008-08-12 16:08:08 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
    + 2008-10-01 17:33:47 64,520 ----a-r c:\windows\Installer\{78AC782A-C708-4B21-A3A0-ECD4A3284588}\IconWlc.exe
    + 2008-11-12 22:08:46 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    - 2007-10-09 23:01:10 12,288 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2009-01-13 23:48:52 12,288 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2007-10-09 23:01:10 135,168 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2009-01-13 23:48:52 135,168 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2007-10-09 23:01:10 11,264 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2009-01-13 23:48:52 11,264 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2007-10-09 23:01:10 27,136 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2009-01-13 23:48:52 27,136 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2007-10-09 23:01:10 4,096 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2009-01-13 23:48:52 4,096 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2007-10-09 23:01:10 794,624 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2009-01-13 23:48:52 794,624 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2007-10-09 23:01:10 249,856 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2009-01-13 23:48:52 249,856 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2007-10-09 23:01:10 23,040 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2009-01-13 23:48:53 23,040 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2007-10-09 23:01:10 286,720 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2009-01-13 23:48:52 286,720 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2007-10-09 23:01:10 409,600 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2009-01-13 23:48:52 409,600 ----a-r c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2009-02-04 17:56:24 7,406 ----a-r c:\windows\Installer\{932FB3F3-594D-4600-ABFA-F2DE80A14214}\ARPPRODUCTICON.exe
    + 2008-11-16 19:51:51 295,606 ----a-r c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81300000003}\SC_Reader.exe
    - 2007-08-25 00:29:38 53,248 ----a-r c:\windows\Installer\{B406605B-45FE-4D8F-8250-1E77479583AE}\ARPPRODUCTICON.exe
    + 2008-05-25 17:37:12 53,248 ----a-r c:\windows\Installer\{B406605B-45FE-4D8F-8250-1E77479583AE}\ARPPRODUCTICON.exe
    + 2009-01-06 23:47:53 632,320 ----a-r c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B7}\IconCD95F66110.exe
    + 2009-01-06 23:47:53 29,184 ----a-r c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B7}\IconCD95F6617.exe
    - 2007-08-25 00:27:16 53,248 ----a-r c:\windows\Installer\{CE7062BD-BE6F-4153-9654-3D72D0C1CC17}\ARPPRODUCTICON.exe
    + 2008-05-25 17:35:08 53,248 ----a-r c:\windows\Installer\{CE7062BD-BE6F-4153-9654-3D72D0C1CC17}\ARPPRODUCTICON.exe
    + 2007-11-30 15:31:47 29,926 ----a-r c:\windows\Installer\{F1E17FB0-12BC-45D0-ABA3-287F2A1E3A1E}\MsblIco.Exe
    + 2009-02-20 02:20:18 62,304 ----a-r c:\windows\Installer\{F6BD194C-4190-4D73-B1B1-C48C99921BFE}\IconWlc.exe
    - 1998-10-29 22:45:06 306,688 ----a-w c:\windows\IsUninst.exe
    + 1998-10-29 23:45:06 306,688 ----a-w c:\windows\IsUninst.exe
    - 2006-01-09 21:32:34 2,158,592 ----a-w c:\windows\MicCal.exe
    + 2007-06-28 14:44:14 2,165,760 ----a-w c:\windows\MicCal.exe
    - 2005-09-23 13:28:52 72,704 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2007-10-24 07:47:38 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2005-09-23 13:28:52 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2007-10-24 07:47:38 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    - 2005-09-23 13:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2007-10-24 07:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    - 2005-09-23 13:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2007-10-24 07:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    - 2005-09-23 13:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2007-10-24 07:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    - 2005-09-23 13:28:52 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2007-10-24 07:47:38 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    - 2005-09-23 13:28:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2007-10-24 07:47:26 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    - 2005-09-23 13:28:42 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2007-10-24 07:47:30 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    - 2005-09-23 13:28:44 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2007-10-24 07:47:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    - 2005-09-23 13:29:04 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2007-10-24 07:47:48 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    - 2005-09-23 13:28:28 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2007-10-24 07:47:20 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    - 2005-09-23 13:28:56 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2007-10-24 07:47:40 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    - 2005-09-23 13:28:58 138,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2007-10-24 07:47:42 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    - 2005-09-23 13:28:36 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2007-10-24 07:47:26 99,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    - 2007-04-13 09:21:18 58,712 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2007-10-24 07:47:42 59,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    - 2005-09-23 13:28:32 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2007-10-24 07:47:22 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    - 2007-04-13 09:20:52 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2007-10-24 07:47:22 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    - 2007-04-13 09:20:52 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2007-10-24 07:47:22 17,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    - 2007-04-13 09:20:52 23,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2007-10-24 07:47:22 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    - 2007-04-13 09:20:50 75,264 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2007-10-24 07:47:22 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    - 2005-09-23 13:28:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2007-10-24 07:47:22 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    - 2007-04-13 09:20:52 32,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2007-10-24 07:47:22 32,776 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    - 2005-09-23 13:28:32 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2007-10-24 07:47:22 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    - 2007-04-13 09:20:52 33,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2007-10-24 07:47:22 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    - 2007-04-13 09:20:52 32,600 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2007-10-24 07:47:22 33,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    - 2007-04-13 09:20:52 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2007-10-24 07:47:22 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    - 2005-09-23 13:28:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2007-10-24 07:47:40 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    - 2007-04-13 09:21:16 88,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2007-10-24 07:47:40 101,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    - 2005-09-23 13:28:42 76,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2007-10-24 07:47:30 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    - 2005-09-23 13:28:42 1,144,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2007-10-24 07:47:30 1,162,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    - 2005-09-23 13:28:42 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2007-10-24 07:47:30 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    - 2005-09-23 13:28:58 17,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2007-10-24 07:47:42 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    - 2005-09-23 13:28:56 68,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2007-10-24 07:47:40 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    - 2005-09-23 13:28:44 31,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2007-10-24 07:47:30 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    - 2005-09-23 13:28:38 52,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2007-10-24 07:47:28 66,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    - 2007-04-13 09:20:58 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2007-10-24 07:47:28 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2005-09-23 13:29:12 547,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    + 2007-10-24 07:47:54 572,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    - 2005-09-23 13:28:56 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2007-10-24 07:47:40 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    - 2005-09-23 13:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2007-10-24 07:47:36 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    - 2007-04-13 09:21:16 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2007-10-24 07:47:40 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2005-09-23 13:28:56 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2007-10-24 07:47:40 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    - 2005-09-23 13:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2007-10-24 07:47:40 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2005-09-23 13:28:56 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2007-10-24 07:47:40 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    - 2007-04-13 09:21:16 228,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2007-10-24 07:47:40 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2007-04-13 09:21:16 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2007-10-24 07:47:40 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2005-09-23 13:28:56 55,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2007-10-24 07:47:40 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    - 2005-09-23 13:28:56 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2007-10-24 07:47:40 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    - 2005-09-23 13:28:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2007-10-24 07:47:34 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2007-04-13 09:21:10 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2007-10-24 07:47:36 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    - 2005-09-23 13:28:48 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2007-10-24 07:47:36 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    - 2007-04-13 09:21:10 647,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2007-10-24 07:47:36 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    - 2005-09-23 13:28:48 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2007-10-24 07:47:36 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2007-04-13 09:21:08 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2007-10-24 07:47:34 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    - 2005-09-23 13:29:10 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2007-10-24 07:47:52 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2005-09-23 13:29:10 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2007-10-24 07:47:52 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    - 2005-09-23 13:29:08 667,648 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2007-10-24 07:47:50 671,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    - 2005-09-23 13:28:30 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2007-10-24 07:47:20 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2005-09-23 13:29:10 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2007-10-24 07:47:52 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    - 2005-09-23 13:28:30 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2007-10-24 07:47:20 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    - 2005-09-23 13:28:30 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2007-10-24 07:47:20 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-09-23 13:28:30 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2007-10-24 07:47:20 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    - 2007-04-13 09:20:52 87,040 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2007-10-24 07:47:22 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    - 2005-09-23 13:28:48 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2007-10-24 07:47:36 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2007-04-13 09:21:18 802,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2007-10-24 07:47:40 822,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2005-09-23 13:28:56 73,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2007-10-24 07:47:40 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    - 2005-09-23 13:28:56 288,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2007-10-24 07:47:40 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    - 2007-04-13 09:21:16 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2007-10-24 07:47:40 47,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    - 2007-04-13 09:21:16 326,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2007-10-24 07:47:40 348,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2005-09-23 13:28:56 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2007-10-24 07:47:40 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    - 2007-04-13 09:21:16 4,308,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2007-10-24 07:47:40 4,444,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2007-04-13 09:21:16 102,912 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2007-10-24 07:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    - 2005-09-23 13:29:00 330,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2007-10-24 07:47:44 340,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    - 2005-09-23 13:28:56 67,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2007-10-24 07:47:40 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    - 2005-09-23 13:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2007-10-24 07:47:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    - 2007-04-13 09:21:18 227,328 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2007-10-24 07:47:40 242,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    - 2007-04-13 09:21:18 68,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2007-10-24 07:47:40 70,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    - 2005-09-23 13:28:56 10,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2007-10-24 07:47:40 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    - 2007-04-13 09:21:12 5,634,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2007-10-24 07:47:36 5,814,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2005-09-23 13:29:00 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2007-10-24 07:47:44 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    - 2007-04-13 09:21:16 99,152 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2007-10-24 07:47:40 101,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    - 2007-04-13 09:21:18 15,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2007-10-24 07:47:40 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2005-09-23 13:28:56 78,336 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2007-10-24 07:47:40 89,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    - 2007-04-13 09:21:12 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2007-10-24 07:47:36 144,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    - 2005-09-23 13:28:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2007-10-24 07:47:40 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    - 2005-09-23 13:28:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2007-10-24 07:47:40 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2005-09-23 13:29:02 59,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2007-10-24 07:47:46 61,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    - 2005-09-23 13:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2007-10-24 07:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    - 2005-09-23 13:28:56 107,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2007-10-24 07:47:40 119,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    - 2005-09-23 13:29:00 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2007-10-24 07:47:44 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    - 2007-04-13 09:21:18 382,464 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2007-10-24 07:47:40 392,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2007-04-13 09:21:18 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2007-10-24 07:47:40 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    - 2007-04-13 09:21:18 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2007-10-24 07:47:42 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2005-09-23 13:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2007-10-24 07:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2007-04-13 09:21:16 2,902,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2007-10-24 07:47:40 3,036,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    - 2007-04-13 09:21:18 482,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2007-10-24 07:47:40 483,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    - 2007-04-13 09:21:18 716,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2007-10-24 07:47:40 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    - 2007-04-13 09:20:58 888,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2007-10-24 07:47:28 933,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    - 2007-04-13 09:21:16 5,001,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2007-10-24 07:47:40 5,070,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    - 2005-09-23 13:28:56 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2007-10-24 07:47:40 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    - 2007-04-13 09:21:18 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2007-10-24 07:47:40 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    - 2007-04-13 09:21:16 2,940,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2007-10-24 07:47:40 3,076,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2005-09-23 13:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2007-10-24 07:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    - 2007-04-13 09:21:16 577,536 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2007-10-24 07:47:40 630,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    - 2007-04-13 09:21:16 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2007-10-24 07:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    - 2007-04-13 09:21:18 47,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2007-10-24 07:47:40 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2007-04-13 09:21:18 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2007-10-24 07:47:40 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2007-04-13 09:21:16 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2007-10-24 07:47:40 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2005-09-23 13:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2007-10-24 07:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    - 2007-04-13 09:21:16 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2007-10-24 07:47:40 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    - 2005-09-23 13:28:56 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2007-10-24 07:47:40 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    - 2005-09-23 13:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2007-10-24 07:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2005-09-23 13:28:56 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2007-10-24 07:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    - 2007-04-13 09:21:18 260,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2007-10-24 07:47:40 261,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    - 2007-04-13 09:21:16 5,156,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2007-10-24 07:47:40 5,431,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    - 2005-09-23 13:28:56 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2007-10-24 07:47:40 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    - 2005-09-23 13:28:56 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2007-10-24 07:47:40 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    - 2005-09-23 13:28:56 823,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2007-10-24 07:47:40 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    - 2007-04-13 09:21:16 5,152,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2007-10-24 07:47:40 5,013,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2007-04-13 09:21:16 2,027,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2007-10-24 07:47:40 2,068,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    - 2005-09-23 13:28:56 71,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2007-10-24 07:47:40 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    - 2007-04-13 09:21:28 1,166,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2007-10-24 07:47:48 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    - 2007-04-13 09:20:50 1,330,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2007-10-24 07:47:20 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    - 2007-04-13 09:20:52 406,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2007-10-24 07:47:22 434,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2005-09-23 13:28:56 28,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2007-10-24 07:47:40 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2006-10-30 10:06:24 74,012 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\baseline.dat
    + 2006-10-30 09:25:56 99,600 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\DeleteTemp.exe
    + 2006-10-30 05:15:06 220,672 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\dlmgr.dll
    + 2006-10-30 05:17:56 1,054,720 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\gencomp.dll
    + 2006-10-30 05:14:26 163,328 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\HtmlLite.dll
    + 2006-10-30 09:25:54 194,320 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\RebootStub.exe
    + 2006-10-30 09:25:56 167,176 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\runmsi.exe
    + 2006-10-30 09:25:56 365,320 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
    + 2006-10-30 09:17:12 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1025.dll
    + 2006-10-30 09:17:30 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1028.dll
    + 2006-10-30 09:17:36 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1029.dll
    + 2006-10-30 09:17:44 87,040 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1030.dll
    + 2006-10-30 09:17:50 89,600 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1031.dll
    + 2006-10-30 09:17:56 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1032.dll
    + 2006-10-30 09:18:10 82,944 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1035.dll
    + 2006-10-30 09:18:16 91,648 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1036.dll
    + 2006-10-30 09:18:22 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1037.dll
    + 2006-10-30 09:18:30 89,600 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1038.dll
    + 2006-10-30 09:18:36 88,064 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1040.dll
    + 2006-10-30 09:18:42 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1041.dll
    + 2006-10-30 09:18:48 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1042.dll
    + 2006-10-30 09:18:56 87,040 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1043.dll
    + 2006-10-30 09:19:02 83,968 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1044.dll
    + 2006-10-30 09:19:08 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1045.dll
    + 2006-10-30 09:19:14 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1046.dll
    + 2006-10-30 09:19:28 82,944 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1049.dll
    + 2006-10-30 09:19:34 83,968 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1053.dll
    + 2006-10-30 09:19:42 82,432 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1055.dll
    + 2006-10-30 09:17:24 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.2052.dll
    + 2006-10-30 09:19:22 90,624 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.2070.dll
    + 2006-10-30 09:18:02 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.3082.dll
    + 2006-10-30 05:15:20 80,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.dll
    + 2006-10-30 05:15:22 1,621,504 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\SITSetup.dll
    + 2006-10-30 05:16:52 1,139,712 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vs_setup.dll
    + 2006-10-30 05:18:26 590,848 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vs70uimgr.dll
    + 2006-10-30 05:20:20 541,184 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vsbasereqs.dll
    + 2006-10-30 05:18:12 816,128 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vsscenario.dll
    + 2006-10-30 09:17:14 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1025.dll
    + 2006-10-30 09:17:30 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1028.dll
    + 2006-10-30 09:17:38 99,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1029.dll
    + 2006-10-30 09:17:44 99,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1030.dll
    + 2006-10-30 09:17:50 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1031.dll
    + 2006-10-30 09:17:58 104,448 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1032.dll
    + 2006-10-30 09:18:10 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1035.dll
    + 2006-10-30 09:18:16 103,424 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1036.dll
    + 2006-10-30 09:18:24 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1037.dll
    + 2006-10-30 09:18:30 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1038.dll
    + 2006-10-30 09:18:36 101,376 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1040.dll
    + 2006-10-30 09:18:42 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1041.dll
    + 2006-10-30 09:18:50 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1042.dll
    + 2006-10-30 09:18:56 99,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1043.dll
    + 2006-10-30 09:19:02 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1044.dll
    + 2006-10-30 09:19:08 99,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1045.dll
    + 2006-10-30 09:19:16 99,328 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1046.dll
    + 2006-10-30 09:19:28 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1049.dll
    + 2006-10-30 09:19:36 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1053.dll
    + 2006-10-30 09:19:42 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1055.dll
    + 2006-10-30 09:17:24 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.2052.dll
    + 2006-10-30 09:19:22 101,376 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.2070.dll
    + 2006-10-30 09:18:04 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.3082.dll
    + 2006-10-30 05:18:36 98,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.dll
    + 2006-10-30 05:19:30 1,103,872 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapUI.dll
    + 2006-10-30 09:34:02 159,744 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
    + 2006-10-30 09:33:58 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
    + 2008-06-21 10:12:49 626,440 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\install.exe
    + 2008-06-21 10:12:49 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\install.res.1033.dll
    + 2006-10-30 09:34:00 352,256 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    + 2006-10-30 09:34:00 151,552 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
    + 2006-10-30 09:34:02 2,560 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
    + 2006-10-30 09:34:02 61,440 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
    + 2006-10-30 09:34:02 11,264 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
    + 2006-10-30 09:34:00 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMDiagnostics.dll
    + 2006-10-30 09:34:02 122,880 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    + 2006-10-30 09:34:02 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2006-10-30 09:34:02 5,623,808 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    + 2006-10-30 09:34:00 159,744 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2006-10-30 09:34:00 16,384 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2006-10-30 09:34:02 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
    + 2006-07-26 03:32:00 14,648 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
    + 2006-10-20 22:08:52 797,696 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
    + 2006-10-20 22:09:02 4,874,240 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
    + 2006-10-20 20:03:40 2,628,608 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
    + 2006-10-21 03:29:46 72,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2006-10-21 03:21:24 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    + 2006-10-21 03:21:24 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
    + 2006-10-21 03:29:52 106,272 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2006-10-21 03:21:26 897,024 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
    + 2006-10-21 03:21:26 14,848 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
    - 2007-06-17 07:11:58 51,200 ----a-w c:\windows\NirCmd.exe
    + 2000-08-31 14:00:00 29,696 ----a-w c:\windows\NIRCMD.exe
    + 2001-04-13 01:00:00 182,272 ----a-w c:\windows\patchw32.dll
    - 2006-03-08 11:54:04 16,010,240 ----a-w c:\windows\RTHDCPL.EXE
    + 2007-10-25 09:57:56 16,855,552 ----a-w c:\windows\RTHDCPL.EXE
    - 2006-02-21 00:05:50 9,712,640 ----a-w c:\windows\RTLCPL.EXE
    + 2007-03-23 17:19:10 9,715,200 ----a-w c:\windows\RTLCPL.EXE
    - 2006-03-03 03:13:10 360,448 ----a-w c:\windows\RtlUpd.exe
    + 2007-07-26 16:06:22 1,191,936 ----a-w c:\windows\RtlUpd.exe
    + 2000-08-31 14:00:00 98,816 ----a-w c:\windows\sed.exe
    + 2008-07-18 22:48:25 249,856 ------w c:\windows\Setup1.exe
    - 2006-02-21 00:00:18 86,016 ----a-w c:\windows\SOUNDMAN.EXE
    + 2006-07-21 14:14:36 86,016 ----a-w c:\windows\SOUNDMAN.EXE
    + 2008-07-18 22:48:24 73,216 ----a-w c:\windows\ST6UNST.EXE
    + 2000-08-31 14:00:00 161,792 ----a-w c:\windows\SWREG.exe
    + 2000-08-31 14:00:00 136,704 ----a-w c:\windows\SWSC.exe
    + 2000-08-31 14:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe
    + 2004-08-10 04:00:00 2,000 ------w c:\windows\system\KEYBOARD.DRV
    + 2004-08-10 04:00:00 73,376 ------w c:\windows\system\MCIAVI.DRV
    + 2004-08-10 04:00:00 25,264 ------w c:\windows\system\MCISEQ.DRV
    + 2004-08-10 04:00:00 28,160 ------w c:\windows\system\MCIWAVE.DRV
    + 2004-08-10 04:00:00 2,032 ------w c:\windows\system\MOUSE.DRV
    + 2004-08-10 04:00:00 1,744 ------w c:\windows\system\SOUND.DRV
    + 2004-08-10 04:00:00 3,360 ------w c:\windows\system\SYSTEM.DRV
    + 2004-08-10 04:00:00 4,048 ------w c:\windows\system\TIMER.DRV
    + 2004-08-10 04:00:00 2,176 ------w c:\windows\system\VGA.DRV
    + 2004-08-10 04:00:00 13,600 ------w c:\windows\system\WFWNET.DRV
    + 2004-08-10 04:00:00 146,432 ----a-w c:\windows\system\winspool.drv
    + 2004-08-10 04:00:00 20,992 ----a-w c:\windows\system32\6to4v32.dll
    - 2007-08-20 10:04:34 124,928 ----a-w c:\windows\system32\advpack.dll
    + 2008-10-16 20:38:34 124,928 ----a-w c:\windows\system32\advpack.dll
    - 2007-05-16 14:42:44 105,981 ----a-w c:\windows\system32\AGEIA\AG1021\diag.bin
    + 2007-10-25 14:29:50 114,505 ----a-w c:\windows\system32\AGEIA\AG1021\diag.bin
    + 1996-08-07 19:34:16 114,240 ----a-w c:\windows\system32\amsetup.dll
    + 2007-09-14 22:51:56 655,360 ----a-w c:\windows\system32\CDDBControl.dll
    + 2007-09-14 22:51:56 98,304 ----a-w c:\windows\system32\CddbLangDE.dll
    + 2007-09-14 22:51:56 98,304 ----a-w c:\windows\system32\CddbLangES.dll
    + 2007-09-14 22:51:56 98,304 ----a-w c:\windows\system32\CddbLangFR.dll
    + 2007-09-14 22:51:56 102,400 ----a-w c:\windows\system32\CddbLangIT.dll
    + 2007-09-14 22:51:56 77,824 ----a-w c:\windows\system32\CddbLangJA.dll
    + 2007-09-14 22:51:56 98,304 ----a-w c:\windows\system32\CddbLangNL.dll
    + 2007-09-14 22:51:56 765,952 ----a-w c:\windows\system32\CDDBUI.dll
    - 2007-07-31 01:19:20 92,504 ----a-w c:\windows\system32\cdm.dll
    + 2008-10-16 21:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
    + 2004-08-10 04:00:00 39,159 ----a-w c:\windows\system32\certstore.dat
    - 2007-08-14 20:21:11 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
    + 2008-12-02 22:34:04 98,304 ----a-w c:\windows\system32\CmdLineExt.dll
    - 2007-08-12 21:59:31 43,520 ----a-w c:\windows\system32\CmdLineExt03.dll
    + 2008-12-08 22:33:41 43,520 ----a-w c:\windows\system32\CmdLineExt03.dll
    + 2004-08-10 04:00:00 10,544 ----a-w c:\windows\system32\comm.drv
    - 2006-09-20 20:01:30 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-03-10 18:26:55 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2006-09-20 20:01:30 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-03-10 18:26:55 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-02-28 18:10:06 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009022820090301\index.dat
    + 2009-03-06 18:06:38 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009030620090307\index.dat
    + 2009-02-28 18:09:24 78,924 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat
    - 2006-09-20 20:01:30 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-03-10 18:26:55 196,608 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2007-10-12 22:14:00 1,374,232 ----a-w c:\windows\system32\D3DCompiler_36.dll
    + 2008-03-05 22:56:58 1,420,824 ----a-w c:\windows\system32\D3DCompiler_37.dll
    + 2008-05-30 21:11:46 1,491,992 ----a-w c:\windows\system32\D3DCompiler_38.dll
    + 2008-07-12 15:18:52 1,493,528 ----a-w c:\windows\system32\D3DCompiler_39.dll
    + 2008-10-10 11:52:38 2,036,576 ----a-w c:\windows\system32\D3DCompiler_40.dll
    + 2007-10-02 16:56:34 444,776 ----a-w c:\windows\system32\d3dx10_36.dll
    + 2008-02-06 06:07:36 462,864 ----a-w c:\windows\system32\d3dx10_37.dll
    + 2008-05-30 21:11:46 467,984 ----a-w c:\windows\system32\d3dx10_38.dll
    + 2008-07-12 15:18:52 467,984 ----a-w c:\windows\system32\d3dx10_39.dll
    + 2008-10-10 11:52:38 452,440 ----a-w c:\windows\system32\d3dx10_40.dll
    + 2007-10-12 22:14:00 3,734,536 ----a-w c:\windows\system32\d3dx9_36.dll
    + 2008-03-05 22:56:58 3,786,760 ----a-w c:\windows\system32\D3DX9_37.dll
    + 2008-05-30 21:11:46 3,850,760 ----a-w c:\windows\system32\D3DX9_38.dll
    + 2008-07-12 15:18:52 3,851,784 ----a-w c:\windows\system32\D3DX9_39.dll
    + 2008-10-10 11:52:38 4,379,984 ----a-w c:\windows\system32\D3DX9_40.dll
    + 2004-08-10 04:00:00 1,788 ----a-w c:\windows\system32\dcache.bin
    - 2005-09-23 13:28:38 83,456 ----a-w c:\windows\system32\dfshim.dll
    + 2007-10-24 07:47:28 96,760 ----a-w c:\windows\system32\dfshim.dll
    - 2007-08-20 10:04:34 124,928 ----a-w c:\windows\system32\dllcache\advpack.dll
    + 2008-10-16 20:38:34 124,928 ----a-w c:\windows\system32\dllcache\advpack.dll
    - 2004-08-10 04:00:00 138,496 ------w c:\windows\system32\dllcache\afd.sys
    + 2008-08-14 09:51:43 138,368 ----a-w c:\windows\system32\dllcache\afd.sys
    + 2004-08-04 05:10:40 17,024 ----a-w c:\windows\system32\dllcache\bthenum.sys
    + 2004-08-04 05:10:40 38,016 ----a-w c:\windows\system32\dllcache\bthmodem.sys
    + 2008-06-13 13:10:50 272,128 ----a-w c:\windows\system32\dllcache\bthport.sys
    - 2007-07-31 01:19:20 92,504 ----a-w c:\windows\system32\dllcache\cdm.dll
    + 2008-10-16 21:09:44 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
    - 2004-08-10 04:00:00 561,179 ------w c:\windows\system32\dllcache\dao360.dll
    + 2008-03-25 04:50:25 554,008 ----a-w c:\windows\system32\dllcache\dao360.dll
    - 2006-06-26 17:37:10 148,480 ------w c:\windows\system32\dllcache\dnsapi.dll
    + 2008-06-20 17:41:10 148,992 ----a-w c:\windows\system32\dllcache\dnsapi.dll
    - 2004-08-10 04:00:00 45,568 ------w c:\windows\system32\dllcache\dnsrslvr.dll
    + 2008-02-20 05:32:43 45,568 ----a-w c:\windows\system32\dllcache\dnsrslvr.dll

    - 2004-08-04 13:08:00 60,288 ----a-w c:\windows\system32\dllcache\drmk.sys
    + 2004-08-04 05:08:00 60,288 ----a-w c:\windows\system32\dllcache\drmk.sys
    + 2004-08-04 13:07:58 2,944 ----a-w c:\windows\system32\dllcache\drmkaud.sys
    - 2006-10-17 18:58:06 346,624 ----a-w c:\windows\system32\dllcache\dxtmsft.dll
    + 2008-10-16 20:38:34 347,136 ----a-w c:\windows\system32\dllcache\dxtmsft.dll
    - 2007-08-20 10:04:34 214,528 ----a-w c:\windows\system32\dllcache\dxtrans.dll
    + 2008-10-16 20:38:34 214,528 ----a-w c:\windows\system32\dllcache\dxtrans.dll
    - 2005-07-26 11:39:45 243,200 ------w c:\windows\system32\dllcache\es.dll
    + 2008-07-07 20:32:22 253,952 ----a-w c:\windows\system32\dllcache\es.dll
    - 2007-08-20 10:04:34 132,608 ----a-w c:\windows\system32\dllcache\extmgr.dll
    + 2008-10-16 20:38:35 133,120 ----a-w c:\windows\system32\dllcache\extmgr.dll
    + 2006-10-14 22:43:18 27,648 ----a-w c:\windows\system32\dllcache\FilterPipelinePrintProc.dll
    - 2007-06-19 13:31:19 282,112 ------w c:\windows\system32\dllcache\gdi32.dll
    + 2008-10-23 13:01:36 283,648 ----a-w c:\windows\system32\dllcache\gdi32.dll
    - 2004-08-04 13:14:38 52,736 ----a-w c:\windows\system32\dllcache\i8042prt.sys
    + 2004-08-04 05:14:38 52,736 ----a-w c:\windows\system32\dllcache\i8042prt.sys
    - 2007-08-20 10:04:34 63,488 ------w c:\windows\system32\dllcache\icardie.dll
    + 2008-10-16 20:38:35 63,488 ----a-w c:\windows\system32\dllcache\icardie.dll
    - 2007-08-17 10:20:54 63,488 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
    + 2008-10-16 13:11:09 70,656 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
    - 2007-08-20 10:04:34 153,088 ----a-w c:\windows\system32\dllcache\ieakeng.dll
    + 2008-10-16 20:38:35 153,088 ----a-w c:\windows\system32\dllcache\ieakeng.dll
    - 2007-08-20 10:04:35 230,400 ----a-w c:\windows\system32\dllcache\ieaksie.dll
    + 2008-10-16 20:38:35 230,400 ----a-w c:\windows\system32\dllcache\ieaksie.dll
    - 2007-08-17 07:34:25 161,792 ----a-w c:\windows\system32\dllcache\ieakui.dll
    + 2008-10-15 07:04:53 161,792 ----a-w c:\windows\system32\dllcache\ieakui.dll
    - 2007-08-20 10:04:35 383,488 ------w c:\windows\system32\dllcache\ieapfltr.dll
    + 2008-10-16 20:38:35 383,488 ----a-w c:\windows\system32\dllcache\ieapfltr.dll
    - 2007-08-20 10:04:35 384,512 ----a-w c:\windows\system32\dllcache\iedkcs32.dll
    + 2008-10-16 20:38:35 384,512 ----a-w c:\windows\system32\dllcache\iedkcs32.dll
    - 2007-08-20 10:04:37 6,058,496 ------w c:\windows\system32\dllcache\ieframe.dll
    + 2008-10-16 20:38:37 6,066,176 ----a-w c:\windows\system32\dllcache\ieframe.dll

  10. #10
    Junior Member
    Join Date
    Mar 2009
    Posts
    12

    Default

    - 2007-08-20 10:04:38 44,544 ----a-w c:\windows\system32\dllcache\iernonce.dll
    + 2008-10-16 20:38:37 44,544 ----a-w c:\windows\system32\dllcache\iernonce.dll
    - 2007-08-20 10:04:38 267,776 ------w c:\windows\system32\dllcache\iertutil.dll
    + 2008-10-16 20:38:37 267,776 ----a-w c:\windows\system32\dllcache\iertutil.dll
    - 2007-08-17 10:20:54 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
    + 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\dllcache\ieudinit.exe
    - 2007-08-17 10:21:21 625,152 ----a-w c:\windows\system32\dllcache\iexplore.exe
    + 2008-10-15 07:06:26 633,632 ----a-w c:\windows\system32\dllcache\iexplore.exe
    - 2007-08-21 06:15:44 683,520 ------w c:\windows\system32\dllcache\inetcomm.dll
    + 2008-04-11 18:50:43 683,520 ----a-w c:\windows\system32\dllcache\inetcomm.dll
    + 2004-08-04 06:56:52 152,576 ----a-w c:\windows\system32\dllcache\irftp.exe
    + 2004-08-04 06:56:44 27,136 ----a-w c:\windows\system32\dllcache\irmon.dll
    - 2007-08-20 10:04:39 27,648 ----a-w c:\windows\system32\dllcache\jsproxy.dll
    + 2008-10-16 20:38:37 27,648 ----a-w c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-04 12:58:34 24,576 ----a-w c:\windows\system32\dllcache\kbdclass.sys
    + 2004-08-04 04:58:34 24,576 ----a-w c:\windows\system32\dllcache\kbdclass.sys
    + 2004-08-10 04:00:00 2,000 ----a-w c:\windows\system32\dllcache\keyboard.drv
    - 2006-10-19 03:03:58 100,864 ----a-w c:\windows\system32\dllcache\logagent.exe
    + 2008-06-18 08:09:22 100,864 ----a-w c:\windows\system32\dllcache\logagent.exe
    - 2006-08-17 12:28:27 721,920 ------w c:\windows\system32\dllcache\lsasrv.dll
    + 2007-11-07 09:26:56 721,920 ----a-w c:\windows\system32\dllcache\lsasrv.dll
    + 2004-08-10 04:00:00 2,560 ----a-w c:\windows\system32\dllcache\lz32.dll
    - 2004-08-10 04:00:00 72,704 ------w c:\windows\system32\dllcache\magnify.exe
    + 2006-10-04 08:48:36 72,704 ----a-w c:\windows\system32\dllcache\magnify.exe
    + 2004-08-10 04:00:00 73,376 ----a-w c:\windows\system32\dllcache\mciavi.drv
    + 2004-08-10 04:00:00 25,264 ----a-w c:\windows\system32\dllcache\mciseq.drv
    + 2004-08-10 04:00:00 28,160 ----a-w c:\windows\system32\dllcache\mciwave.drv
    - 2004-08-04 05:58:34 23,040 ----a-w c:\windows\system32\dllcache\mouclass.sys
    + 2004-08-04 04:58:34 23,040 ----a-w c:\windows\system32\dllcache\mouclass.sys
    - 2001-08-17 20:48:00 12,160 ----a-w c:\windows\system32\dllcache\mouhid.sys
    + 2001-08-17 19:48:00 12,160 ----a-w c:\windows\system32\dllcache\mouhid.sys
    + 2004-08-10 04:00:00 2,032 ----a-w c:\windows\system32\dllcache\mouse.drv
    - 2004-08-10 04:00:00 72,960 ------w c:\windows\system32\dllcache\mqac.sys
    + 2007-07-06 10:05:47 72,960 ----a-w c:\windows\system32\dllcache\mqac.sys
    - 2004-08-10 04:00:00 138,240 ------w c:\windows\system32\dllcache\mqad.dll
    + 2007-07-06 12:46:59 138,240 ----a-w c:\windows\system32\dllcache\mqad.dll
    - 2004-08-10 04:00:00 47,104 ------w c:\windows\system32\dllcache\mqdscli.dll
    + 2007-07-06 12:46:59 47,104 ----a-w c:\windows\system32\dllcache\mqdscli.dll
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\dllcache\mqise.dll
    + 2007-07-06 12:46:59 16,896 ----a-w c:\windows\system32\dllcache\mqise.dll
    - 2004-08-10 04:00:00 660,992 ------w c:\windows\system32\dllcache\mqqm.dll
    + 2007-07-06 12:46:59 660,992 ----a-w c:\windows\system32\dllcache\mqqm.dll
    - 2004-08-10 04:00:00 177,152 ------w c:\windows\system32\dllcache\mqrt.dll
    + 2007-07-06 12:46:59 177,152 ----a-w c:\windows\system32\dllcache\mqrt.dll
    - 2004-08-10 04:00:00 95,744 ------w c:\windows\system32\dllcache\mqsec.dll
    + 2007-07-06 12:46:59 95,744 ----a-w c:\windows\system32\dllcache\mqsec.dll
    - 2004-08-10 04:00:00 48,640 ------w c:\windows\system32\dllcache\mqupgrd.dll
    + 2007-07-06 12:46:59 48,640 ----a-w c:\windows\system32\dllcache\mqupgrd.dll
    - 2004-08-10 04:00:00 471,552 ------w c:\windows\system32\dllcache\mqutil.dll
    + 2007-07-06 12:46:59 471,552 ----a-w c:\windows\system32\dllcache\mqutil.dll
    - 2004-08-10 04:00:00 181,248 ------w c:\windows\system32\dllcache\mrxdav.sys
    + 2007-12-18 09:51:35 179,584 ----a-w c:\windows\system32\dllcache\mrxdav.sys
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\system32\dllcache\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 ----a-w c:\windows\system32\dllcache\mrxsmb.sys
    - 2004-08-10 04:00:00 331,776 ------w c:\windows\system32\dllcache\msadce.dll
    + 2008-05-01 14:30:33 331,776 ----a-w c:\windows\system32\dllcache\msadce.dll
    - 2005-06-29 08:46:00 74,240 ------w c:\windows\system32\dllcache\mscms.dll
    + 2008-06-24 16:23:05 74,240 ----a-w c:\windows\system32\dllcache\mscms.dll
    - 2004-08-10 04:00:00 294,400 ------w c:\windows\system32\dllcache\msctf.dll
    + 2008-02-26 11:59:50 294,912 ----a-w c:\windows\system32\dllcache\msctf.dll
    - 2004-08-10 04:00:00 512,029 ------w c:\windows\system32\dllcache\msexch40.dll
    + 2008-03-25 04:50:28 518,944 ----a-w c:\windows\system32\dllcache\msexch40.dll
    - 2004-08-10 04:00:00 319,517 ------w c:\windows\system32\dllcache\msexcl40.dll
    + 2008-03-25 04:50:30 326,432 ----a-w c:\windows\system32\dllcache\msexcl40.dll
    - 2007-08-20 10:04:39 459,264 ------w c:\windows\system32\dllcache\msfeeds.dll
    + 2008-10-16 20:38:37 459,264 ----a-w c:\windows\system32\dllcache\msfeeds.dll
    - 2007-08-20 10:04:39 52,224 ------w c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-10-16 20:38:37 52,224 ----a-w c:\windows\system32\dllcache\msfeedsbs.dll
    - 2007-08-20 10:04:41 3,584,512 ----a-w c:\windows\system32\dllcache\mshtml.dll
    + 2008-12-13 06:40:02 3,593,216 ----a-w c:\windows\system32\dllcache\mshtml.dll
    - 2007-08-20 10:04:41 477,696 ----a-w c:\windows\system32\dllcache\mshtmled.dll
    + 2008-10-16 20:38:38 477,696 ----a-w c:\windows\system32\dllcache\mshtmled.dll
    - 2004-08-10 04:00:00 1,507,356 ------w c:\windows\system32\dllcache\msjet40.dll
    + 2008-03-25 04:50:34 1,516,568 ----a-w c:\windows\system32\dllcache\msjet40.dll
    - 2004-08-10 04:00:00 358,976 ------w c:\windows\system32\dllcache\msjetol1.dll
    + 2008-03-25 04:50:40 355,112 ----a-w c:\windows\system32\dllcache\msjetol1.dll
    - 2004-08-10 04:00:00 151,583 ------w c:\windows\system32\dllcache\msjint40.dll
    + 2008-03-27 08:12:54 151,583 ----a-w c:\windows\system32\dllcache\msjint40.dll
    - 2004-08-10 04:00:00 53,279 ------w c:\windows\system32\dllcache\msjter40.dll
    + 2008-03-25 04:50:42 60,192 ----a-w c:\windows\system32\dllcache\msjter40.dll
    - 2004-08-10 04:00:00 241,693 ------w c:\windows\system32\dllcache\msjtes40.dll
    + 2008-03-25 04:50:42 248,608 ----a-w c:\windows\system32\dllcache\msjtes40.dll
    - 2004-08-10 04:00:00 213,023 ------w c:\windows\system32\dllcache\msltus40.dll
    + 2008-03-25 04:50:44 219,936 ----a-w c:\windows\system32\dllcache\msltus40.dll
    - 2004-08-10 04:00:00 348,189 ------w c:\windows\system32\dllcache\mspbde40.dll
    + 2008-03-25 04:50:45 355,104 ----a-w c:\windows\system32\dllcache\mspbde40.dll
    - 2007-08-20 10:04:41 193,024 ----a-w c:\windows\system32\dllcache\msrating.dll
    + 2008-10-16 20:38:38 193,024 ----a-w c:\windows\system32\dllcache\msrating.dll
    - 2004-08-10 04:00:00 421,919 ------w c:\windows\system32\dllcache\msrd2x40.dll
    + 2008-03-25 04:50:47 432,928 ----a-w c:\windows\system32\dllcache\msrd2x40.dll
    - 2004-08-10 04:00:00 315,423 ------w c:\windows\system32\dllcache\msrd3x40.dll
    + 2008-03-25 04:50:49 322,336 ----a-w c:\windows\system32\dllcache\msrd3x40.dll
    - 2004-08-10 04:00:00 552,989 ------w c:\windows\system32\dllcache\msrepl40.dll
    + 2008-03-25 04:50:52 559,904 ----a-w c:\windows\system32\dllcache\msrepl40.dll
    - 2004-08-10 04:00:00 258,077 ------w c:\windows\system32\dllcache\mstext40.dll
    + 2008-03-25 04:50:55 264,992 ----a-w c:\windows\system32\dllcache\mstext40.dll
    - 2007-08-20 10:04:42 671,232 ----a-w c:\windows\system32\dllcache\mstime.dll
    + 2008-10-16 20:38:39 671,232 ----a-w c:\windows\system32\dllcache\mstime.dll
    - 2004-08-10 04:00:00 831,519 ------w c:\windows\system32\dllcache\mswdat10.dll
    + 2008-03-25 04:50:57 838,432 ----a-w c:\windows\system32\dllcache\mswdat10.dll
    - 2004-08-10 04:00:00 245,248 ------w c:\windows\system32\dllcache\mswsock.dll
    + 2008-06-20 17:41:10 245,248 ----a-w c:\windows\system32\dllcache\mswsock.dll
    - 2004-08-10 04:00:00 614,429 ------w c:\windows\system32\dllcache\mswstr10.dll
    + 2008-03-25 04:50:58 621,344 ----a-w c:\windows\system32\dllcache\mswstr10.dll
    - 2004-08-10 04:00:00 348,189 ------w c:\windows\system32\dllcache\msxbde40.dll
    + 2008-03-25 04:50:58 355,104 ----a-w c:\windows\system32\dllcache\msxbde40.dll
    - 2007-06-26 06:08:16 1,104,896 ------w c:\windows\system32\dllcache\msxml3.dll
    + 2008-09-04 16:42:02 1,106,944 ----a-w c:\windows\system32\dllcache\msxml3.dll
    - 2004-08-10 04:00:00 53,760 ------w c:\windows\system32\dllcache\narrator.exe
    + 2006-10-04 08:48:36 53,760 ----a-w c:\windows\system32\dllcache\narrator.exe
    - 2006-08-17 12:28:27 332,288 ------w c:\windows\system32\dllcache\netapi32.dll
    + 2008-10-15 16:57:55 332,800 ----a-w c:\windows\system32\dllcache\netapi32.dll
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2008-08-14 09:58:27 2,136,064 ----a-w c:\windows\system32\dllcache\ntkrnlmp.exe
    - 2007-02-28 08:38:55 2,057,600 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-08-14 09:22:13 2,057,728 ----a-w c:\windows\system32\dllcache\ntkrnlpa.exe
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-08-14 09:22:14 2,015,744 ----a-w c:\windows\system32\dllcache\ntkrpamp.exe
    - 2007-02-28 09:10:57 2,180,352 ------w c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-08-14 10:00:45 2,180,352 ----a-w c:\windows\system32\dllcache\ntoskrnl.exe
    + 2004-08-10 04:00:00 2,944 ----a-w c:\windows\system32\dllcache\null.sys
    - 2007-09-17 07:07:00 6,853,088 ----a-w c:\windows\system32\dllcache\nv4_mini.sys
    + 2008-10-07 20:33:00 6,133,856 ----a-w c:\windows\system32\dllcache\nv4_mini.sys
    - 2007-08-20 10:04:42 102,400 ----a-w c:\windows\system32\dllcache\occache.dll
    + 2008-10-16 20:38:39 102,912 ----a-w c:\windows\system32\dllcache\occache.dll
    - 2007-05-17 11:28:05 549,376 ------w c:\windows\system32\dllcache\oleaut32.dll
    + 2007-12-04 18:38:13 550,912 ----a-w c:\windows\system32\dllcache\oleaut32.dll
    - 2004-08-10 04:00:00 215,552 ------w c:\windows\system32\dllcache\osk.exe
    + 2006-10-04 08:48:37 215,552 ----a-w c:\windows\system32\dllcache\osk.exe
    - 2006-10-17 18:58:08 44,544 ----a-w c:\windows\system32\dllcache\pngfilt.dll
    + 2008-10-16 20:38:39 44,544 ----a-w c:\windows\system32\dllcache\pngfilt.dll
    + 2006-10-14 22:44:44 671,744 ----a-w c:\windows\system32\dllcache\PrintFilterPipelineSvc.exe
    - 2005-08-30 11:13:42 1,287,680 ------w c:\windows\system32\dllcache\quartz.dll
    + 2008-05-07 04:55:40 1,288,192 ----a-w c:\windows\system32\dllcache\quartz.dll
    + 2004-08-04 05:10:40 59,648 ----a-w c:\windows\system32\dllcache\rfcomm.sys
    - 2006-07-13 08:48:58 202,240 ------w c:\windows\system32\dllcache\rmcast.sys
    + 2008-05-08 12:28:49 202,752 ----a-w c:\windows\system32\dllcache\rmcast.sys
    - 2006-12-19 21:52:18 8,453,632 ------w c:\windows\system32\dllcache\shell32.dll
    + 2007-10-26 03:34:01 8,460,288 ----a-w c:\windows\system32\dllcache\shell32.dll
    + 2004-08-10 04:00:00 1,744 ----a-w c:\windows\system32\dllcache\sound.drv
    - 2006-08-14 10:34:41 332,928 ------w c:\windows\system32\dllcache\srv.sys
    + 2008-12-11 11:57:21 333,184 ----a-w c:\windows\system32\dllcache\srv.sys
    - 2004-08-04 13:08:04 48,640 ----a-w c:\windows\system32\dllcache\stream.sys
    + 2004-08-04 05:08:04 48,640 ----a-w c:\windows\system32\dllcache\stream.sys
    - 2006-08-21 16:52:08 246,814 ------w c:\windows\system32\dllcache\strmdll.dll
    + 2008-10-03 10:15:47 247,326 ----a-w c:\windows\system32\dllcache\strmdll.dll
    + 2004-08-10 04:00:00 3,360 ----a-w c:\windows\system32\dllcache\system.drv
    - 2006-04-20 11:51:50 359,808 ------w c:\windows\system32\dllcache\tcpip.sys
    + 2008-06-20 10:45:13 360,320 ----a-w c:\windows\system32\dllcache\tcpip.sys
    - 2006-08-16 09:37:30 225,664 ----a-w c:\windows\system32\dllcache\tcpip6.sys
    + 2008-06-20 09:52:06 225,920 ----a-w c:\windows\system32\dllcache\tcpip6.sys
    + 2004-08-10 04:00:00 4,048 ----a-w c:\windows\system32\dllcache\timer.drv
    - 2004-08-10 04:00:00 35,840 ------w c:\windows\system32\dllcache\umandlg.dll
    + 2006-10-04 13:33:38 35,840 ----a-w c:\windows\system32\dllcache\umandlg.dll
    - 2007-08-20 10:04:42 105,984 ----a-w c:\windows\system32\dllcache\url.dll
    + 2008-10-16 20:38:39 105,984 ----a-w c:\windows\system32\dllcache\url.dll
    - 2007-08-20 10:04:42 1,152,000 ----a-w c:\windows\system32\dllcache\urlmon.dll
    + 2008-10-16 20:38:39 1,160,192 ----a-w c:\windows\system32\dllcache\urlmon.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\dllcache\userinit.exe
    + 2004-08-09 21:00:00 24,576 ----a-w c:\windows\system32\dllcache\userinit.exe
    - 2004-08-10 04:00:00 50,176 ------w c:\windows\system32\dllcache\utilman.exe
    + 2006-10-04 08:48:37 50,176 ----a-w c:\windows\system32\dllcache\utilman.exe
    + 2004-08-10 04:00:00 2,176 ----a-w c:\windows\system32\dllcache\vga.drv
    + 2004-08-04 14:56:58 23,552 ----a-w c:\windows\system32\dllcache\wdmaud.drv
    - 2007-08-20 10:04:42 232,960 ----a-w c:\windows\system32\dllcache\webcheck.dll
    + 2008-10-16 20:38:39 233,472 ----a-w c:\windows\system32\dllcache\webcheck.dll
    + 2004-08-10 04:00:00 13,600 ----a-w c:\windows\system32\dllcache\wfwnet.drv
    - 2007-03-08 13:47:48 1,843,584 ------w c:\windows\system32\dllcache\win32k.sys
    + 2008-09-15 11:57:41 1,846,016 ----a-w c:\windows\system32\dllcache\win32k.sys
    - 2007-08-20 10:04:43 824,832 ----a-w c:\windows\system32\dllcache\wininet.dll
    + 2008-10-16 20:38:40 826,368 ----a-w c:\windows\system32\dllcache\wininet.dll
    + 2004-08-10 04:00:00 2,864 ----a-w c:\windows\system32\dllcache\winsock.dll
    + 2004-08-10 04:00:00 146,432 ----a-w c:\windows\system32\dllcache\winspool.drv
    + 2004-08-10 04:00:00 2,112 ----a-w c:\windows\system32\dllcache\winspool.exe
    - 2006-10-19 04:47:18 222,208 ----a-w c:\windows\system32\dllcache\WMASF.dll
    + 2007-10-28 00:40:30 222,720 ----a-w c:\windows\system32\dllcache\wmasf.dll
    - 2006-10-19 04:47:20 937,984 ----a-w c:\windows\system32\dllcache\WMNetMgr.dll
    + 2008-06-18 12:03:08 938,496 ----a-w c:\windows\system32\dllcache\WMNetmgr.dll
    - 2006-10-19 04:47:22 2,450,944 ----a-w c:\windows\system32\dllcache\wmvcore.dll
    + 2008-06-18 12:03:14 2,458,112 ----a-w c:\windows\system32\dllcache\WMVCore.dll
    + 2004-08-10 04:00:00 2,736 ----a-w c:\windows\system32\dllcache\wowdeb.exe
    + 2004-08-04 06:56:48 8,192 ----a-w c:\windows\system32\dllcache\wshirda.dll
    - 2007-07-31 01:19:36 549,720 ----a-w c:\windows\system32\dllcache\wuapi.dll
    + 2008-10-16 21:12:20 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
    - 2007-07-31 01:19:16 53,080 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    + 2008-10-16 21:09:44 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    - 2007-07-31 01:19:42 1,712,984 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    + 2008-10-16 21:13:40 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    - 2007-07-31 01:19:32 325,976 ----a-w c:\windows\system32\dllcache\wucltui.dll
    + 2008-10-16 21:12:22 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
    - 2007-07-31 01:18:40 33,624 ----a-w c:\windows\system32\dllcache\wups.dll
    + 2008-10-16 21:08:58 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
    - 2007-07-31 01:19:28 203,096 ----a-w c:\windows\system32\dllcache\wuweb.dll
    + 2008-10-16 21:13:40 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
    + 2006-10-15 02:21:58 580,352 ----a-w c:\windows\system32\dllcache\XPSSHHDR.dll
    + 2006-10-15 02:22:00 1,698,048 ----a-w c:\windows\system32\dllcache\XpsSvcs.dll
    - 2006-06-26 17:37:10 148,480 ----a-w c:\windows\system32\dnsapi.dll
    + 2008-06-20 17:41:10 148,992 ----a-w c:\windows\system32\dnsapi.dll
    - 2004-08-10 04:00:00 45,568 ------w c:\windows\system32\dnsrslvr.dll
    + 2008-02-20 05:32:43 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
    + 2004-08-10 04:00:00 71,040 ----a-w c:\windows\system32\drivers\_005157_.tmp.dll
    + 2004-08-10 04:00:00 71,040 ----a-w c:\windows\system32\drivers\_005167_.tmp.dll
    + 2004-08-10 04:00:00 71,040 ----a-w c:\windows\system32\drivers\_005177_.tmp.dll
    + 2004-08-10 04:00:00 71,040 ----a-w c:\windows\system32\drivers\_005187_.tmp.dll
    - 2004-08-10 04:00:00 138,496 ------w c:\windows\system32\drivers\afd.sys
    + 2008-08-14 09:51:43 138,368 ----a-w c:\windows\system32\drivers\afd.sys
    - 2007-11-08 06:45:43 278,984 ----a-w c:\windows\system32\drivers\atksgt.sys
    + 2008-12-02 23:58:00 279,712 ----a-w c:\windows\system32\drivers\atksgt.sys
    - 2007-11-11 03:38:34 61,632 ----a-w c:\windows\system32\drivers\avipbb.sys
    + 2008-11-25 18:45:59 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
    + 2004-08-04 05:10:40 17,024 ----a-w c:\windows\system32\drivers\bthenum.sys
    + 2004-08-04 05:10:40 38,016 ----a-w c:\windows\system32\drivers\bthmodem.sys
    + 2008-06-13 13:10:50 272,128 ----a-w c:\windows\system32\drivers\bthport.sys
    + 2005-08-19 17:00:00 2,432 ----a-w c:\windows\system32\drivers\cdr4_xp.sys
    + 2005-08-19 17:00:00 2,560 ----a-w c:\windows\system32\drivers\cdralw2k.sys
    - 2004-08-04 13:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
    + 2004-08-04 05:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
    + 2004-08-04 13:07:58 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
    - 2007-09-10 19:09:45 17,480 ----a-w c:\windows\system32\drivers\hamachi.sys
    + 2008-09-02 01:35:11 17,480 ----a-w c:\windows\system32\drivers\hamachi.sys
    + 2002-04-11 18:47:52 11,136 ----a-w c:\windows\system32\drivers\ipfilter.sys
    - 2007-07-27 02:51:35 18,048 ----a-w c:\windows\system32\drivers\lirsgt.sys
    + 2008-12-02 23:58:00 25,888 ----a-w c:\windows\system32\drivers\lirsgt.sys
    - 2004-08-04 05:58:34 23,040 ----a-w c:\windows\system32\drivers\mouclass.sys
    + 2004-08-04 04:58:34 23,040 ----a-w c:\windows\system32\drivers\mouclass.sys
    - 2001-08-17 20:48:00 12,160 ----a-w c:\windows\system32\drivers\mouhid.sys
    + 2001-08-17 19:48:00 12,160 ----a-w c:\windows\system32\drivers\mouhid.sys
    - 2004-08-10 04:00:00 72,960 ------w c:\windows\system32\drivers\mqac.sys
    + 2007-07-06 10:05:47 72,960 ----a-w c:\windows\system32\drivers\mqac.sys
    - 2004-08-10 04:00:00 181,248 ------w c:\windows\system32\drivers\mrxdav.sys
    + 2007-12-18 09:51:35 179,584 ----a-w c:\windows\system32\drivers\mrxdav.sys
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\system32\drivers\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    + 2004-08-10 04:00:00 2,944 ----a-w c:\windows\system32\drivers\null.sys
    - 2007-09-17 07:07:00 6,853,088 ----a-w c:\windows\system32\drivers\nv4_mini.sys
    + 2008-10-07 20:33:00 6,133,856 ----a-w c:\windows\system32\drivers\nv4_mini.sys
    + 2004-08-04 05:10:40 59,648 ----a-w c:\windows\system32\drivers\rfcomm.sys
    - 2006-07-13 08:48:58 202,240 ------w c:\windows\system32\drivers\rmcast.sys
    + 2008-05-08 12:28:49 202,752 ----a-w c:\windows\system32\drivers\rmcast.sys
    + 2005-10-24 23:17:40 162,816 ----a-w c:\windows\system32\drivers\RT25USBAP.SYS
    - 2006-03-08 20:27:12 4,246,016 ----a-w c:\windows\system32\drivers\RtkHDAud.sys
    + 2007-10-25 12:29:00 4,623,872 ----a-w c:\windows\system32\drivers\RtkHDAud.sys
    + 2008-07-07 07:40:49 56,108 ----a-w c:\windows\system32\drivers\scdemu.sys
    - 2006-11-10 00:20:06 163,644 ----a-w c:\windows\system32\drivers\secdrv.sys
    + 2007-11-13 10:25:53 20,480 ----a-w c:\windows\system32\drivers\secdrv.sys
    - 2007-09-30 17:52:47 685,816 ----a-w c:\windows\system32\drivers\sptd.sys
    + 2008-04-24 01:29:02 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
    - 2006-08-14 10:34:41 332,928 ------w c:\windows\system32\drivers\srv.sys
    + 2008-12-11 11:57:21 333,184 ----a-w c:\windows\system32\drivers\srv.sys
    - 2004-08-04 13:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys
    + 2004-08-04 05:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys
    - 2006-04-20 11:51:50 359,808 ------w c:\windows\system32\drivers\tcpip.sys
    + 2008-06-20 10:45:13 360,320 ----a-w c:\windows\system32\drivers\tcpip.sys
    - 2006-08-16 09:37:30 225,664 ------w c:\windows\system32\drivers\tcpip6.sys
    + 2008-06-20 09:52:06 225,920 ----a-w c:\windows\system32\drivers\tcpip6.sys
    - 2006-10-17 18:58:06 346,624 ----a-w c:\windows\system32\dxtmsft.dll
    + 2008-10-16 20:38:34 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    - 2007-08-20 10:04:34 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-10-16 20:38:34 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2006-10-21 03:29:46 69,408 ----a-w c:\windows\system32\dxva2.dll
    + 2003-07-25 17:14:34 458,752 ----a-w c:\windows\system32\eraser.dll
    - 2005-07-26 11:39:45 243,200 ----a-w c:\windows\system32\es.dll
    + 2008-07-07 20:32:22 253,952 ----a-w c:\windows\system32\es.dll
    + 2006-10-21 03:30:00 478,496 ----a-w c:\windows\system32\evr.dll
    - 2007-08-20 10:04:34 132,608 ----a-w c:\windows\system32\extmgr.dll
    + 2008-10-16 20:38:35 133,120 ----a-w c:\windows\system32\extmgr.dll
    + 2007-07-29 23:51:44 7,680 ----a-w c:\windows\system32\ff_vfw.dll
    - 2005-03-17 21:39:58 1,146,320 ----a-w c:\windows\system32\FM20.DLL
    + 2007-06-06 16:53:34 1,195,888 ----a-w c:\windows\system32\FM20.DLL
    - 2003-07-15 12:57:04 32,584 ----a-w c:\windows\system32\FM20ENU.DLL
    + 2007-03-23 01:17:04 35,440 ----a-w c:\windows\system32\FM20ENU.DLL
    - 2007-07-03 06:09:12 201,736 ----a-w c:\windows\system32\FNTCACHE.DAT
    + 2009-02-19 17:55:06 216,064 ----a-w c:\windows\system32\FNTCACHE.DAT
    - 2007-06-19 13:31:19 282,112 ----a-w c:\windows\system32\gdi32.dll
    + 2008-10-23 13:01:36 283,648 ----a-w c:\windows\system32\gdi32.dll
    + 2004-08-10 04:00:00 20,992 ----a-w c:\windows\system32\Iasv32.dll
    + 2006-10-30 09:33:58 556,296 ----a-w c:\windows\system32\icardagt.exe
    - 2007-08-20 10:04:34 63,488 ----a-w c:\windows\system32\icardie.dll
    + 2008-10-16 20:38:35 63,488 ----a-w c:\windows\system32\icardie.dll
    + 2006-10-30 09:33:58 9,480 ----a-w c:\windows\system32\icardres.dll
    - 2007-08-17 10:20:54 63,488 ----a-w c:\windows\system32\ie4uinit.exe
    + 2008-10-16 13:11:09 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    - 2007-08-20 10:04:34 153,088 ----a-w c:\windows\system32\ieakeng.dll
    + 2008-10-16 20:38:35 153,088 ----a-w c:\windows\system32\ieakeng.dll
    - 2007-08-20 10:04:35 230,400 ----a-w c:\windows\system32\ieaksie.dll
    + 2008-10-16 20:38:35 230,400 ----a-w c:\windows\system32\ieaksie.dll
    - 2007-08-17 07:34:25 161,792 ----a-w c:\windows\system32\ieakui.dll
    + 2008-10-15 07:04:53 161,792 ----a-w c:\windows\system32\ieakui.dll
    - 2007-08-20 10:04:35 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    + 2008-10-16 20:38:35 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    - 2007-08-20 10:04:35 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    + 2008-10-16 20:38:35 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    - 2007-08-20 10:04:37 6,058,496 ----a-w c:\windows\system32\ieframe.dll
    + 2008-10-16 20:38:37 6,066,176 ----a-w c:\windows\system32\ieframe.dll
    - 2007-08-20 10:04:38 44,544 ----a-w c:\windows\system32\iernonce.dll
    + 2008-10-16 20:38:37 44,544 ----a-w c:\windows\system32\iernonce.dll
    - 2007-08-20 10:04:38 267,776 ----a-w c:\windows\system32\iertutil.dll
    + 2008-10-16 20:38:37 267,776 ----a-w c:\windows\system32\iertutil.dll
    - 2007-08-17 10:20:54 13,824 ----a-w c:\windows\system32\ieudinit.exe
    + 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\ieudinit.exe
    - 2007-08-21 06:15:44 683,520 ----a-w c:\windows\system32\inetcomm.dll
    + 2008-04-11 18:50:43 683,520 ----a-w c:\windows\system32\inetcomm.dll
    + 2006-10-30 09:33:58 83,968 ----a-w c:\windows\system32\infocardapi.dll
    + 2004-08-04 06:56:52 152,576 ----a-w c:\windows\system32\irftp.exe
    + 2004-08-04 06:56:44 27,136 ----a-w c:\windows\system32\irmon.dll
    - 2007-07-12 07:22:00 135,168 ----a-w c:\windows\system32\java.exe
    + 2007-09-25 05:30:28 135,168 ----a-w c:\windows\system32\java.exe
    - 2007-07-12 07:22:04 135,168 ----a-w c:\windows\system32\javaw.exe
    + 2007-09-25 05:30:30 135,168 ----a-w c:\windows\system32\javaw.exe
    - 2007-07-12 08:22:38 139,264 ----a-w c:\windows\system32\javaws.exe
    + 2007-09-25 06:31:42 139,264 ----a-w c:\windows\system32\javaws.exe
    - 2007-08-20 10:04:39 27,648 ----a-w c:\windows\system32\jsproxy.dll
    + 2008-10-16 20:38:37 27,648 ----a-w c:\windows\system32\jsproxy.dll
    + 2004-08-10 04:00:00 2,000 ----a-w c:\windows\system32\keyboard.drv
    - 2007-09-17 07:07:00 425,984 ----a-w c:\windows\system32\keystone.exe
    + 2008-10-07 20:33:00 425,984 ----a-w c:\windows\system32\keystone.exe
    + 2004-08-10 04:00:00 221,600 ----a-w c:\windows\system32\lanman.drv
    - 2007-03-16 00:19:28 1,476,992 ----a-w c:\windows\system32\LegitCheckControl.dll
    + 2008-03-21 00:06:36 1,480,232 ----a-w c:\windows\system32\LegitCheckControl.dll
    - 2007-07-26 23:06:12 1,044,480 ----a-w c:\windows\system32\libdivx.dll
    + 2008-11-21 21:46:10 1,044,480 ----a-w c:\windows\system32\libdivx.dll
    - 2006-10-19 03:03:58 100,864 ----a-w c:\windows\system32\logagent.exe
    + 2008-06-18 08:09:22 100,864 ----a-w c:\windows\system32\logagent.exe
    - 2006-08-17 12:28:27 721,920 ------w c:\windows\system32\lsasrv.dll
    + 2007-11-07 09:26:56 721,920 ----a-w c:\windows\system32\lsasrv.dll
    + 2004-08-10 04:00:00 2,560 ----a-w c:\windows\system32\lz32.dll
    + 2007-11-21 00:04:14 218,496 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil9e.exe
    - 2007-06-11 20:34:34 2,115,816 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2008-03-25 03:21:18 2,889,088 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
    - 2007-06-11 20:34:40 190,696 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2008-03-25 03:21:20 218,496 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2008-03-11 21:39:08 74,137 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    - 2007-09-07 23:23:34 45,218 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
    + 2008-05-25 05:02:30 70,264 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
    - 2004-08-10 04:00:00 72,704 ------w c:\windows\system32\magnify.exe
    + 2006-10-04 08:48:36 72,704 ----a-w c:\windows\system32\magnify.exe
    + 2004-08-10 04:00:00 73,376 ----a-w c:\windows\system32\mciavi.drv
    + 1998-08-17 09:21:54 11,776 ----a-w c:\windows\system32\mciqtz.drv
    + 2004-08-10 04:00:00 25,264 ----a-w c:\windows\system32\mciseq.drv
    + 2004-08-10 04:00:00 28,160 ----a-w c:\windows\system32\mciwave.drv
    - 2004-03-22 22:17:06 24,816 ----a-w c:\windows\system32\mdimon.dll
    + 2007-04-09 19:23:54 28,040 ----a-w c:\windows\system32\mdimon.dll
    + 2006-10-21 03:30:06 1,980,704 ----a-w c:\windows\system32\milcore.dll
    + 2004-08-10 04:00:00 2,032 ----a-w c:\windows\system32\mouse.drv
    - 2004-08-10 04:00:00 138,240 ------w c:\windows\system32\mqad.dll
    + 2007-07-06 12:46:59 138,240 ----a-w c:\windows\system32\mqad.dll
    - 2004-08-10 04:00:00 47,104 ------w c:\windows\system32\mqdscli.dll
    + 2007-07-06 12:46:59 47,104 ----a-w c:\windows\system32\mqdscli.dll
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\mqise.dll
    + 2007-07-06 12:46:59 16,896 ----a-w c:\windows\system32\mqise.dll
    - 2004-08-10 04:00:00 660,992 ------w c:\windows\system32\mqqm.dll
    + 2007-07-06 12:46:59 660,992 ----a-w c:\windows\system32\mqqm.dll
    - 2004-08-10 04:00:00 177,152 ------w c:\windows\system32\mqrt.dll
    + 2007-07-06 12:46:59 177,152 ----a-w c:\windows\system32\mqrt.dll
    - 2004-08-10 04:00:00 95,744 ------w c:\windows\system32\mqsec.dll
    + 2007-07-06 12:46:59 95,744 ----a-w c:\windows\system32\mqsec.dll
    - 2004-08-10 04:00:00 48,640 ------w c:\windows\system32\mqupgrd.dll
    + 2007-07-06 12:46:59 48,640 ----a-w c:\windows\system32\mqupgrd.dll
    - 2004-08-10 04:00:00 471,552 ------w c:\windows\system32\mqutil.dll
    + 2007-07-06 12:46:59 471,552 ----a-w c:\windows\system32\mqutil.dll
    + 2004-08-10 04:00:00 20,480 ----a-w c:\windows\system32\msacm32.drv
    - 2005-06-29 08:46:00 74,240 ------w c:\windows\system32\mscms.dll
    + 2008-06-24 16:23:05 74,240 ----a-w c:\windows\system32\mscms.dll
    - 2007-04-13 09:21:14 271,360 ----a-w c:\windows\system32\mscoree.dll
    + 2007-10-24 07:47:38 282,112 ----a-w c:\windows\system32\mscoree.dll
    - 2005-09-23 13:28:52 150,016 ----a-w c:\windows\system32\mscorier.dll
    + 2007-10-24 07:47:38 158,720 ----a-w c:\windows\system32\mscorier.dll
    - 2005-09-23 13:28:52 74,240 ----a-w c:\windows\system32\mscories.dll
    + 2007-10-24 07:47:38 84,480 ----a-w c:\windows\system32\mscories.dll
    - 2004-08-10 04:00:00 294,400 ------w c:\windows\system32\MSCTF.dll
    + 2008-02-26 11:59:50 294,912 ----a-w c:\windows\system32\msctf.dll
    - 2004-08-10 04:00:00 512,029 ------w c:\windows\system32\msexch40.dll
    + 2008-03-25 04:50:28 518,944 ----a-w c:\windows\system32\msexch40.dll
    + 1998-06-01 07:00:00 262,144 ----a-w c:\windows\system32\MSEXCL35.DLL
    - 2004-08-10 04:00:00 319,517 ------w c:\windows\system32\msexcl40.dll
    + 2008-03-25 04:50:30 326,432 ----a-w c:\windows\system32\msexcl40.dll
    - 2007-08-20 10:04:39 459,264 ----a-w c:\windows\system32\msfeeds.dll
    + 2008-10-16 20:38:37 459,264 ----a-w c:\windows\system32\msfeeds.dll
    - 2007-08-20 10:04:39 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    + 2008-10-16 20:38:37 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    + 2004-08-10 04:00:00 188,416 ----a-w c:\windows\system32\msh261.drv
    + 2004-08-04 06:56:58 294,912 ----a-w c:\windows\system32\msh263.drv
    - 2007-08-20 10:04:41 3,584,512 ----a-w c:\windows\system32\mshtml.dll
    + 2008-12-13 06:40:02 3,593,216 ----a-w c:\windows\system32\mshtml.dll
    - 2007-08-20 10:04:41 477,696 ----a-w c:\windows\system32\mshtmled.dll
    + 2008-10-16 20:38:38 477,696 ----a-w c:\windows\system32\mshtmled.dll
    - 2007-04-30 22:50:50 903,072 ----a-w c:\windows\system32\msidcrl40.dll
    + 2007-08-27 22:41:22 1,089,440 ----a-w c:\windows\system32\msidcrl40.dll
    + 1998-06-01 08:00:00 1,056,768 ----a-w c:\windows\system32\Msjet35.dll
    - 2004-08-10 04:00:00 1,507,356 ------w c:\windows\system32\msjet40.dll
    + 2008-03-25 04:50:34 1,516,568 ----a-w c:\windows\system32\msjet40.dll
    - 2004-08-10 11:00:00 358,976 ------w c:\windows\system32\msjetoledb40.dll
    + 2008-03-25 04:50:40 355,112 ----a-w c:\windows\system32\msjetoledb40.dll
    + 1998-06-01 07:00:00 139,264 ----a-w c:\windows\system32\MSJINT35.DLL
    - 2004-08-10 04:00:00 151,583 ------w c:\windows\system32\msjint40.dll
    + 2008-03-27 08:12:54 151,583 ----a-w c:\windows\system32\msjint40.dll
    + 1998-06-01 07:00:00 36,864 ----a-w c:\windows\system32\MSJTER35.DLL
    - 2004-08-10 04:00:00 53,279 ------w c:\windows\system32\msjter40.dll
    + 2008-03-25 04:50:42 60,192 ----a-w c:\windows\system32\msjter40.dll
    - 2004-08-10 04:00:00 241,693 ------w c:\windows\system32\msjtes40.dll
    + 2008-03-25 04:50:42 248,608 ----a-w c:\windows\system32\msjtes40.dll
    - 2004-08-10 04:00:00 213,023 ------w c:\windows\system32\msltus40.dll
    + 2008-03-25 04:50:44 219,936 ----a-w c:\windows\system32\msltus40.dll
    + 2002-04-11 18:47:52 49,152 ----a-w c:\windows\system32\msmscoin.dll
    - 2004-08-10 04:00:00 348,189 ------w c:\windows\system32\mspbde40.dll
    + 2008-03-25 04:50:45 355,104 ----a-w c:\windows\system32\mspbde40.dll
    - 2007-08-20 10:04:41 193,024 ----a-w c:\windows\system32\msrating.dll
    + 2008-10-16 20:38:38 193,024 ----a-w c:\windows\system32\msrating.dll
    + 1998-06-01 07:00:00 262,144 ----a-w c:\windows\system32\MSRD2X35.DLL
    - 2004-08-10 04:00:00 421,919 ------w c:\windows\system32\msrd2x40.dll
    + 2008-03-25 04:50:47 432,928 ----a-w c:\windows\system32\msrd2x40.dll
    - 2004-08-10 04:00:00 315,423 ------w c:\windows\system32\msrd3x40.dll
    + 2008-03-25 04:50:49 322,336 ----a-w c:\windows\system32\msrd3x40.dll
    + 1998-06-01 07:00:00 417,792 ----a-w c:\windows\system32\MSREPL35.DLL
    - 2004-08-10 04:00:00 552,989 ------w c:\windows\system32\msrepl40.dll
    + 2008-03-25 04:50:52 559,904 ----a-w c:\windows\system32\msrepl40.dll
    + 2004-08-10 04:00:00 225,792 ----a-w c:\windows\system32\msrstart.exe
    - 2000-05-24 12:45:58 118,784 ----a-w c:\windows\system32\MSSTDFMT.DLL
    + 2004-02-23 06:00:00 119,808 ----a-w c:\windows\system32\MSSTDFMT.DLL
    + 1998-06-01 07:00:00 176,128 ----a-w c:\windows\system32\MSTEXT35.DLL
    - 2004-08-10 04:00:00 258,077 ------w c:\windows\system32\mstext40.dll
    + 2008-03-25 04:50:55 264,992 ----a-w c:\windows\system32\mstext40.dll
    - 2007-08-20 10:04:42 671,232 ----a-w c:\windows\system32\mstime.dll
    + 2008-10-16 20:38:39 671,232 ----a-w c:\windows\system32\mstime.dll
    - 2004-08-10 04:00:00 1,392,671 ------w c:\windows\system32\msvbvm60.dll
    + 2004-02-23 06:00:00 1,386,496 ----a-w c:\windows\system32\msvbvm60.dll
    - 2004-08-10 04:00:00 831,519 ------w c:\windows\system32\mswdat10.dll
    + 2008-03-25 04:50:57 838,432 ----a-w c:\windows\system32\mswdat10.dll
    - 2004-08-10 04:00:00 245,248 ------w c:\windows\system32\mswsock.dll
    + 2008-06-20 17:41:10 245,248 ----a-w c:\windows\system32\mswsock.dll
    - 2004-08-10 04:00:00 614,429 ------w c:\windows\system32\mswstr10.dll
    + 2008-03-25 04:50:58 621,344 ----a-w c:\windows\system32\mswstr10.dll
    - 2004-08-10 04:00:00 348,189 ------w c:\windows\system32\msxbde40.dll
    + 2008-03-25 04:50:58 355,104 ----a-w c:\windows\system32\msxbde40.dll
    + 1998-06-01 07:00:00 294,912 ----a-w c:\windows\system32\MSXBSE35.DLL
    - 2007-06-26 06:08:16 1,104,896 ----a-w c:\windows\system32\msxml3.dll
    + 2008-09-04 16:42:02 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    - 2007-05-08 21:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll
    + 2008-09-30 23:43:34 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    + 2008-08-30 03:06:44 1,350,664 ----a-w c:\windows\system32\msxml6.dll

    + 2006-10-19 19:33:20 86,728 ----a-w c:\windows\system32\msxml6r.dll
    - 2007-07-31 01:19:10 271,224 ----a-w c:\windows\system32\mucltui.dll
    + 2008-10-16 21:06:48 268,648 ----a-w c:\windows\system32\mucltui.dll
    - 2006-12-22 19:02:36 6,144 ----a-w c:\windows\system32\mui\0409\mscorees.dll
    + 2007-10-24 07:47:44 15,360 ----a-w c:\windows\system32\mui\0409\mscorees.dll
    - 2007-07-31 01:19:04 207,736 ----a-w c:\windows\system32\muweb.dll
    + 2008-10-16 21:06:48 208,744 ----a-w c:\windows\system32\muweb.dll
    - 2004-08-10 04:00:00 53,760 ------w c:\windows\system32\narrator.exe
    + 2006-10-04 08:48:36 53,760 ----a-w c:\windows\system32\narrator.exe
    - 2006-08-17 12:28:27 332,288 ----a-w c:\windows\system32\netapi32.dll
    + 2008-10-15 16:57:55 332,800 ----a-w c:\windows\system32\netapi32.dll
    + 2004-08-10 04:00:00 2,656 ----a-w c:\windows\system32\netware.drv
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\system32\ntkrnlpa.exe
    + 2008-08-14 09:22:14 2,015,744 ----a-w c:\windows\system32\ntkrnlpa.exe
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\system32\ntoskrnl.exe
    + 2008-08-14 09:58:27 2,136,064 ----a-w c:\windows\system32\ntoskrnl.exe
    - 2007-09-17 07:07:00 5,783,040 ----a-w c:\windows\system32\nv4_disp.dll
    + 2008-10-07 19:33:00 6,058,112 ----a-w c:\windows\system32\nv4_disp.dll
    - 2007-09-17 07:07:00 364,544 ----a-w c:\windows\system32\nvapi.dll
    + 2008-10-07 19:33:00 475,136 ----a-w c:\windows\system32\nvapi.dll
    - 2007-09-17 07:07:00 442,368 ----a-w c:\windows\system32\nvappbar.exe
    + 2008-10-07 20:33:00 442,368 ----a-w c:\windows\system32\nvappbar.exe
    - 2007-09-17 07:07:00 36,864 ----a-w c:\windows\system32\nvcod.dll
    + 2008-10-07 19:33:00 122,880 ----a-w c:\windows\system32\nvcod.dll
    - 2007-09-17 07:07:00 36,864 ----a-w c:\windows\system32\nvcodins.dll
    + 2008-10-07 20:33:00 122,880 ----a-w c:\windows\system32\nvcodins.dll
    - 2007-09-17 07:07:00 147,456 ----a-w c:\windows\system32\nvcolor.exe
    + 2008-10-07 20:33:00 143,360 ----a-w c:\windows\system32\nvcolor.exe
    - 2007-09-17 07:07:00 8,491,008 ----a-w c:\windows\system32\nvcpl.dll
    + 2008-10-07 20:33:00 13,574,144 ----a-w c:\windows\system32\nvcpl.dll
    - 2007-09-17 07:07:00 753,664 ----a-w c:\windows\system32\nvcplui.exe
    + 2008-10-07 20:33:00 797,216 ----a-w c:\windows\system32\nvcplui.exe
    + 2008-10-07 20:33:00 1,368,064 ----a-w c:\windows\system32\nvcuda.dll
    - 2007-09-17 07:07:00 6,344,704 ----a-w c:\windows\system32\nvdisps.dll
    + 2008-10-07 20:33:00 3,989,504 ----a-w c:\windows\system32\nvdisps.dll
    - 2007-09-17 07:07:00 1,339,392 ----a-w c:\windows\system32\nvdspsch.exe
    + 2008-10-07 20:33:00 1,339,392 ----a-w c:\windows\system32\nvdspsch.exe
    - 2007-09-17 07:07:00 3,334,144 ----a-w c:\windows\system32\nvgames.dll
    + 2008-10-07 20:33:00 3,444,736 ----a-w c:\windows\system32\nvgames.dll
    - 2007-09-17 07:07:00 1,478,656 ----a-w c:\windows\system32\nview.dll
    + 2008-10-07 20:33:00 1,486,848 ----a-w c:\windows\system32\nview.dll
    - 2007-09-17 07:07:00 229,376 ----a-w c:\windows\system32\nvmccs.dll
    + 2008-10-07 20:33:00 229,376 ----a-w c:\windows\system32\nvmccs.dll
    - 2007-09-17 07:07:00 45,056 ----a-w c:\windows\system32\nvmccsrs.dll
    + 2008-10-07 20:33:00 45,056 ----a-w c:\windows\system32\nvmccsrs.dll
    - 2007-09-17 07:07:00 188,416 ----a-w c:\windows\system32\nvmccss.dll
    + 2008-10-07 20:33:00 188,416 ----a-w c:\windows\system32\nvmccss.dll
    - 2007-09-17 07:07:00 81,920 ----a-w c:\windows\system32\nvmctray.dll
    + 2008-10-07 19:33:00 86,016 ----a-w c:\windows\system32\nvmctray.dll
    - 2007-09-17 07:07:00 1,150,976 ----a-w c:\windows\system32\nvmobls.dll
    + 2008-10-07 20:33:00 1,257,472 ----a-w c:\windows\system32\nvmobls.dll
    - 2007-09-17 07:07:00 286,720 ----a-w c:\windows\system32\nvnt4cpl.dll
    + 2008-10-07 20:33:00 286,720 ----a-w c:\windows\system32\nvnt4cpl.dll
    - 2007-09-17 07:07:00 6,746,112 ----a-w c:\windows\system32\nvoglnt.dll
    + 2008-10-07 20:33:00 8,826,880 ----a-w c:\windows\system32\nvoglnt.dll
    - 2007-09-17 07:07:00 466,944 ----a-w c:\windows\system32\nvshell.dll
    + 2008-10-07 20:33:00 466,944 ----a-w c:\windows\system32\nvshell.dll
    - 2007-09-17 07:07:00 155,716 ----a-w c:\windows\system32\nvsvc32.exe
    + 2008-10-07 20:33:00 163,908 ----a-w c:\windows\system32\nvsvc32.exe
    - 2007-08-17 23:25:38 356,352 ----a-w c:\windows\system32\nvudisp.exe
    + 2008-10-07 19:33:00 453,152 ----a-w c:\windows\system32\nvudisp.exe
    - 2007-08-17 23:25:38 356,352 ----a-w c:\windows\system32\NVUNINST.EXE
    + 2008-10-02 16:07:58 453,152 ----a-w c:\windows\system32\NVUNINST.EXE
    - 2007-09-17 07:07:00 3,551,232 ----a-w c:\windows\system32\nvvitvs.dll
    + 2008-10-07 20:33:00 3,764,224 ----a-w c:\windows\system32\nvvitvs.dll
    - 2007-09-17 07:07:00 81,920 ----a-w c:\windows\system32\nvwddi.dll
    + 2008-10-07 20:33:00 81,920 ----a-w c:\windows\system32\nvwddi.dll
    - 2007-09-17 07:07:00 1,703,936 ----a-w c:\windows\system32\nvwdmcpl.dll
    + 2008-10-07 20:33:00 1,703,936 ----a-w c:\windows\system32\nvwdmcpl.dll
    - 2007-09-17 07:07:00 1,019,904 ----a-w c:\windows\system32\nvwimg.dll
    + 2008-10-07 20:33:00 1,019,904 ----a-w c:\windows\system32\nvwimg.dll
    - 2007-09-17 07:07:00 2,371,584 ----a-w c:\windows\system32\nvwss.dll
    + 2008-10-07 20:33:00 2,686,976 ----a-w c:\windows\system32\nvwss.dll
    - 2007-09-17 07:07:00 1,626,112 ----a-w c:\windows\system32\nwiz.exe
    + 2008-10-07 20:33:00 1,630,208 ----a-w c:\windows\system32\nwiz.exe
    + 2004-08-10 04:00:00 225,792 ----a-w c:\windows\system32\nxtepad.exe
    - 2007-08-20 10:04:42 102,400 ----a-w c:\windows\system32\occache.dll
    + 2008-10-16 20:38:39 102,912 ----a-w c:\windows\system32\occache.dll
    - 2007-05-17 11:28:05 549,376 ------w c:\windows\system32\oleaut32.dll
    + 2007-12-04 18:38:13 550,912 ----a-w c:\windows\system32\oleaut32.dll
    + 2004-11-14 22:29:30 221,184 ----a-w c:\windows\system32\opd_jp2_ShellExtension.dll
    - 2004-08-10 04:00:00 215,552 ------w c:\windows\system32\osk.exe
    + 2006-10-04 08:48:37 215,552 ----a-w c:\windows\system32\osk.exe
    + 2005-10-17 23:06:18 1,972 ----a-w c:\windows\system32\pcintro\security.cmd
    + 2004-08-10 04:00:00 2,304 ----a-w c:\windows\system32\pcistub.sys
    - 2007-11-04 14:12:33 63,220 ----a-w c:\windows\system32\perfc009.dat
    + 2009-03-10 22:17:10 72,436 ----a-w c:\windows\system32\perfc009.dat
    - 2007-11-04 14:12:33 402,736 ----a-w c:\windows\system32\perfh009.dat
    + 2009-03-10 22:17:10 443,740 ----a-w c:\windows\system32\perfh009.dat
    + 2006-10-24 18:30:20 412,160 ----a-w c:\windows\system32\photometadatahandler.dll
    - 2007-09-13 15:45:50 70,944 ----a-w c:\windows\system32\PhysXLoader.dll
    + 2008-01-18 17:05:56 70,944 ----a-w c:\windows\system32\PhysXLoader.dll
    - 2006-10-17 18:58:08 44,544 ----a-w c:\windows\system32\pngfilt.dll
    + 2008-10-16 20:38:39 44,544 ----a-w c:\windows\system32\pngfilt.dll
    + 2006-10-21 03:29:52 104,224 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
    + 2006-10-21 03:29:58 344,352 ----a-w c:\windows\system32\PresentationHost.exe
    + 2006-10-21 03:29:46 20,768 ----a-w c:\windows\system32\PresentationHostProxy.dll
    + 2006-10-21 03:30:02 769,312 ----a-w c:\windows\system32\PresentationNative_v0300.dll
    + 2006-10-14 22:43:38 124,416 ----a-w c:\windows\system32\prntvpt.dll
    - 2006-02-24 03:26:04 430,080 ----a-w c:\windows\system32\Px.dll
    + 2006-04-13 22:26:28 452,264 ----a-w c:\windows\system32\Px.dll
    - 2006-01-26 15:01:00 450,560 ----a-w c:\windows\system32\pxdrv.dll
    + 2006-04-19 07:01:00 468,648 ----a-w c:\windows\system32\pxdrv.dll
    - 2006-02-24 03:23:58 176,128 ----a-w c:\windows\system32\PxMas.dll
    + 2006-04-13 22:26:32 181,928 ----a-w c:\windows\system32\PxMas.dll
    - 2006-02-07 00:40:44 1,257,472 ----a-w c:\windows\system32\PxSFS.DLL
    + 2006-04-13 22:26:34 1,279,656 ----a-w c:\windows\system32\PxSFS.DLL
    - 2006-02-24 03:23:08 339,968 ----a-w c:\windows\system32\PxWave.dll
    + 2006-04-13 22:26:36 345,768 ----a-w c:\windows\system32\PxWave.dll
    - 2006-02-24 03:27:52 151,552 ----a-w c:\windows\system32\pxwma.dll
    + 2006-04-13 22:26:40 157,352 ----a-w c:\windows\system32\pxwma.dll
    - 2005-08-30 11:13:42 1,287,680 ----a-w c:\windows\system32\quartz.dll
    + 2008-05-07 04:55:40 1,288,192 ----a-w c:\windows\system32\quartz.dll
    + 2004-08-04 05:58:34 23,040 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\i386\mouclass.sys
    + 2001-08-17 20:48:00 12,160 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\i386\mouhid.sys
    + 2006-11-08 06:28:12 22,784 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\point32.sys
    + 2004-08-04 05:10:40 38,016 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\i386\bthmodem.sys
    + 2005-05-04 01:43:28 69,632 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\ALCMTR.EXE
    + 2006-02-21 00:01:58 2,809,856 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\ALCWZRD.EXE
    + 2004-08-04 13:08:00 60,288 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\drmk.sys
    + 2004-08-04 05:15:22 140,928 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\ks.sys
    + 2004-08-04 14:56:44 4,096 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\ksuser.dll
    + 2004-03-17 00:58:20 136,960 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\portcls.sys
    + 2004-08-04 13:08:04 48,640 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\stream.sys
    + 2004-08-04 14:56:58 23,552 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\wdmaud.drv
    + 2006-01-09 21:32:34 2,158,592 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\MicCal.exe
    + 2006-02-24 23:32:58 266,240 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\RTCOMDLL.dll
    + 2006-03-08 11:54:04 16,010,240 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\RTHDCPL.EXE
    + 2006-03-08 20:27:12 4,246,016 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\RtkHDAud.sys
    + 2005-11-01 01:17:38 135,168 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\RTLCPAPI.dll
    + 2006-02-21 00:05:50 9,712,640 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\RTLCPL.EXE
    + 2006-03-03 03:13:10 360,448 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\RtlUpd.exe
    + 2006-02-21 00:00:18 86,016 ----a-w c:\windows\system32\ReinstallBackups\0017\DriverFiles\SOUNDMAN.EXE
    + 2005-01-08 07:07:18 138,752 ----a-w c:\windows\system32\ReinstallBackups\0018\DriverFiles\hdaudbus.sys
    + 2008-10-07 19:33:00 6,058,112 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nv4_disp.dll
    + 2008-10-07 19:33:00 6,133,856 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nv4_mini.sys
    + 2008-10-07 19:33:00 475,136 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvapi.dll
    + 2008-10-07 19:33:00 122,880 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvcod.dll
    + 2008-10-07 19:33:00 13,574,144 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvcpl.dll
    + 2008-10-07 19:33:00 1,368,064 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvcuda.dll
    + 2008-10-07 19:33:00 3,989,504 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvdisps.dll
    + 2008-10-07 19:33:00 3,444,736 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvgames.dll
    + 2008-10-07 19:33:00 229,376 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvmccs.dll
    + 2008-10-07 19:33:00 188,416 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvmccss.dll
    + 2008-10-07 19:33:00 86,016 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvmctray.dll
    + 2008-10-07 19:33:00 1,257,472 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvmobls.dll
    + 2008-10-07 19:33:00 286,720 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvnt4cpl.dll
    + 2008-10-07 19:33:00 8,826,880 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvoglnt.dll
    + 2008-10-07 19:33:00 163,908 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvsvc32.exe
    + 2008-10-07 19:33:00 3,764,224 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvvitvs.dll
    + 2008-10-07 19:33:00 81,920 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvwddi.dll
    + 2008-10-07 19:33:00 2,686,976 ----a-w c:\windows\system32\ReinstallBackups\0019\DriverFiles\nvwss.dll
    + 2006-08-24 22:15:06 150,808 ----a-w c:\windows\system32\rgb9rast_2.dll
    - 2006-02-24 23:32:58 266,240 ----a-w c:\windows\system32\RTCOM\RTCOMDLL.dll
    + 2007-10-03 15:20:42 262,144 ----a-w c:\windows\system32\RTCOM\RTCOMDLL.dll
    - 2005-11-01 01:17:38 135,168 ----a-w c:\windows\system32\RTCOM\RTLCPAPI.dll
    + 2007-03-07 12:59:30 131,072 ----a-w c:\windows\system32\RTCOM\RTLCPAPI.dll
    - 2006-12-19 21:52:18 8,453,632 ----a-w c:\windows\system32\shell32.dll
    + 2007-10-26 03:34:01 8,460,288 ----a-w c:\windows\system32\shell32.dll
    - 2007-05-18 19:57:23 12,067 ----atw c:\windows\system32\SIntf16.dll
    + 2008-11-16 16:46:32 12,067 ----atw c:\windows\system32\SIntf16.dll
    - 2007-05-18 19:57:23 17,212 ----atw c:\windows\system32\SIntf32.dll
    + 2008-11-16 16:46:32 17,212 ----atw c:\windows\system32\SIntf32.dll
    - 2007-05-18 19:57:23 21,840 ----atw c:\windows\system32\SIntfNT.dll
    + 2008-11-16 16:46:32 21,840 ----atw c:\windows\system32\SIntfNT.dll
    - 2007-01-19 19:53:04 51,056 ----a-w c:\windows\system32\sirenacm.dll
    + 2009-02-07 01:52:40 49,504 ----a-w c:\windows\system32\sirenacm.dll
    + 2008-07-19 04:10:20 36,552 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
    + 2008-10-16 21:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
    + 2008-07-19 04:10:40 45,768 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
    + 2008-10-16 21:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll
    + 2004-08-10 04:00:00 1,744 ----a-w c:\windows\system32\sound.drv
    + 2008-04-14 00:12:36 7,680 ----a-w c:\windows\system32\spdwnwxp.exe
    - 2006-12-10 20:10:02 14,640 ------w c:\windows\system32\spmsg.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\system32\spmsg.dll
    + 2006-06-29 19:07:36 14,048 ----a-w c:\windows\system32\spmsg2.dll
    - 2004-03-22 22:17:04 765,680 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
    + 2007-04-09 19:24:04 758,664 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
    - 2004-03-22 22:17:10 42,224 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
    + 2007-04-09 19:23:58 46,472 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
    + 2006-10-14 22:43:18 751,104 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
    + 2006-10-14 22:42:40 131,584 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
    + 2006-10-14 22:42:18 376,320 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
    + 2006-10-14 22:42:28 510,464 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
    + 2006-10-14 22:40:36 619,008 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2006-10-15 02:22:00 1,698,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
    - 2004-03-22 22:17:04 765,680 ----a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
    + 2007-04-09 19:24:04 758,664 ----a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
    - 2004-03-22 22:17:10 42,224 ----a-w c:\windows\system32\spool\drivers\w32x86\mdiui.dll
    + 2007-04-09 19:23:58 46,472 ----a-w c:\windows\system32\spool\drivers\w32x86\mdiui.dll
    + 2006-10-14 22:43:18 27,648 ----a-w c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
    - 2004-03-22 22:17:08 25,840 ----a-w c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    + 2007-04-09 19:23:54 28,552 ----a-w c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    + 2006-10-14 22:44:44 671,744 ----a-w c:\windows\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe
    + 2006-10-14 23:13:02 34,304 ----a-w c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
    + 2006-10-14 23:12:14 737,792 ----a-w c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
    + 2006-10-15 02:09:04 2,946,304 ----a-w c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
    + 2006-10-14 23:12:14 737,792 ----a-w c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
    + 2006-10-15 02:09:04 2,946,304 ----a-w c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
    + 2006-10-14 22:43:18 751,104 ----a-w c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
    + 2006-10-15 02:22:00 1,698,048 ----a-w c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
    + 2006-10-14 22:43:18 751,104 ----a-w c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
    + 2006-10-15 02:22:00 1,698,048 ----a-w c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
    - 2006-09-26 00:58:48 23,856 ----a-w c:\windows\system32\spupdsvc.exe
    + 2007-08-11 02:46:18 26,488 ----a-w c:\windows\system32\spupdsvc.exe
    - 2007-07-26 23:06:12 200,704 ----a-w c:\windows\system32\ssldivx.dll
    + 2008-11-21 21:46:10 200,704 ----a-w c:\windows\system32\ssldivx.dll
    - 2006-08-21 16:52:08 246,814 ------w c:\windows\system32\strmdll.dll
    + 2008-10-03 10:15:47 247,326 ----a-w c:\windows\system32\strmdll.dll
    + 2004-08-10 04:00:00 3,360 ----a-w c:\windows\system32\system.drv
    + 2004-08-10 04:00:00 4,048 ----a-w c:\windows\system32\timer.drv
    + 2005-06-15 10:00:00 102,400 ----a-w c:\windows\system32\tsccvid.dll
    + 2004-02-03 03:33:52 1,036,288 ----a-w c:\windows\system32\tvutil62.dll
    - 2007-07-18 12:42:22 60,416 ------w c:\windows\system32\tzchange.exe
    + 2008-10-22 09:47:07 62,976 ----a-w c:\windows\system32\tzchange.exe
    + 2006-10-21 03:29:54 159,008 ----a-w c:\windows\system32\UIAutomationCore.dll
    - 2004-08-10 04:00:00 35,840 ------w c:\windows\system32\umandlg.dll
    + 2006-10-04 13:33:38 35,840 ----a-w c:\windows\system32\umandlg.dll
    + 2004-08-10 04:00:00 32,768 ----a-w c:\windows\system32\umtcdtw.sys
    - 2007-08-20 10:04:42 105,984 ----a-w c:\windows\system32\url.dll
    + 2008-10-16 20:38:39 105,984 ----a-w c:\windows\system32\url.dll
    - 2007-08-20 10:04:42 1,152,000 ----a-w c:\windows\system32\urlmon.dll
    + 2008-10-16 20:38:39 1,160,192 ----a-w c:\windows\system32\urlmon.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\userinit.exe
    + 2004-08-09 21:00:00 24,576 ----a-w c:\windows\system32\userinit.exe
    - 2004-08-10 04:00:00 50,176 ------w c:\windows\system32\utilman.exe
    + 2006-10-04 08:48:37 50,176 ----a-w c:\windows\system32\utilman.exe
    + 1998-06-18 08:00:00 89,360 ----a-w c:\windows\system32\Vb5db.dll
    + 2000-10-02 06:00:00 119,568 ----a-w c:\windows\system32\VB6ES.dll
    + 2000-07-15 06:00:00 101,888 ----a-w c:\windows\system32\VB6STKIT.DLL
    + 1997-07-11 08:00:00 385,024 ----a-w c:\windows\system32\Vbar332.dll
    + 2004-08-10 04:00:00 2,176 ----a-w c:\windows\system32\vga.drv
    - 2005-12-22 15:00:00 28,672 ----a-w c:\windows\system32\VXBLOCK.dll
    + 2005-12-22 07:00:00 28,672 ----a-w c:\windows\system32\VXBLOCK.dll
    + 2007-10-13 21:01:41 2,272 ----a-w c:\windows\system32\w95inf16.dll
    + 2004-08-04 14:56:58 23,552 ----a-w c:\windows\system32\wdmaud.drv
    - 2007-08-20 10:04:42 232,960 ----a-w c:\windows\system32\webcheck.dll
    + 2008-10-16 20:38:39 233,472 ----a-w c:\windows\system32\webcheck.dll
    + 2004-08-10 04:00:00 13,600 ----a-w c:\windows\system32\wfwnet.drv
    - 2007-03-08 13:47:48 1,843,584 ----a-w c:\windows\system32\win32k.sys
    + 2008-09-15 11:57:41 1,846,016 ----a-w c:\windows\system32\win32k.sys
    + 2006-10-24 18:30:06 716,288 ----a-w c:\windows\system32\windowscodecs.dll
    + 2006-10-24 18:29:50 352,256 ----a-w c:\windows\system32\windowscodecsext.dll
    + 1995-06-23 16:55:16 6,736 ----a-w c:\windows\system32\WINGDIB.DRV
    - 2007-08-20 10:04:43 824,832 ----a-w c:\windows\system32\wininet.dll
    + 2008-10-16 20:38:40 826,368 ----a-w c:\windows\system32\wininet.dll
    + 2004-08-10 04:00:00 2,864 ----a-w c:\windows\system32\winsock.dll
    + 2004-08-10 04:00:00 146,432 ----a-w c:\windows\system32\winspool.drv
    + 2004-08-10 04:00:00 2,112 ----a-w c:\windows\system32\winspool.exe
    - 2006-10-19 04:47:18 222,208 ----a-w c:\windows\system32\wmasf.dll
    + 2007-10-28 00:40:30 222,720 ----a-w c:\windows\system32\wmasf.dll
    - 2006-10-19 04:47:20 937,984 ----a-w c:\windows\system32\WMNetMgr.dll
    + 2008-06-18 12:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll
    - 2006-10-19 04:47:20 295,936 ------w c:\windows\system32\wmpeffects.dll
    + 2008-06-25 00:12:58 295,936 ----a-w c:\windows\system32\wmpeffects.dll
    + 2006-10-24 18:30:00 276,992 ----a-w c:\windows\system32\wmphoto.dll
    - 2006-10-19 04:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll
    + 2008-06-18 12:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
    + 2004-08-10 04:00:00 2,736 ----a-w c:\windows\system32\wowdeb.exe
    + 2004-08-04 06:56:48 8,192 ----a-w c:\windows\system32\wshirda.dll
    - 2007-07-31 01:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll
    + 2008-10-16 21:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
    - 2007-07-31 01:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe
    + 2008-10-16 21:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
    - 2007-07-31 01:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll
    + 2008-10-16 21:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    - 2007-07-31 01:19:32 325,976 ----a-w c:\windows\system32\wucltui.dll
    + 2008-10-16 21:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
    - 2007-07-31 01:18:40 33,624 ----a-w c:\windows\system32\wups.dll
    + 2008-10-16 21:08:58 34,328 ----a-w c:\windows\system32\wups.dll
    - 2007-07-31 01:19:12 43,352 ----a-w c:\windows\system32\wups2.dll
    + 2008-10-16 21:09:44 43,544 ----a-w c:\windows\system32\wups2.dll
    - 2007-07-31 01:19:28 203,096 ----a-w c:\windows\system32\wuweb.dll
    + 2008-10-16 21:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll
    - 2007-07-20 07:54:28 18,280 ----a-w c:\windows\system32\x3daudio1_2.dll
    + 2007-10-22 10:37:16 17,928 ----a-w c:\windows\system32\X3DAudio1_2.dll
    + 2008-03-05 23:00:06 25,608 ----a-w c:\windows\system32\X3DAudio1_3.dll
    + 2008-05-30 21:17:00 25,608 ----a-w c:\windows\system32\X3DAudio1_4.dll
    + 2008-10-27 17:04:16 23,376 ----a-w c:\windows\system32\X3DAudio1_5.dll
    + 2007-10-22 10:39:54 267,272 ----a-w c:\windows\system32\xactengine2_10.dll
    + 2008-03-05 23:03:20 238,088 ----a-w c:\windows\system32\xactengine3_0.dll
    + 2008-05-30 21:18:52 238,088 ----a-w c:\windows\system32\xactengine3_1.dll
    + 2008-07-31 17:41:54 238,088 ----a-w c:\windows\system32\xactengine3_2.dll
    + 2008-10-27 17:04:16 235,856 ----a-w c:\windows\system32\xactengine3_3.dll
    + 2008-05-30 21:17:30 65,032 ----a-w c:\windows\system32\XAPOFX1_0.dll
    + 2008-07-31 17:41:52 68,616 ----a-w c:\windows\system32\XAPOFX1_1.dll
    + 2008-10-27 17:04:14 70,992 ----a-w c:\windows\system32\XAPOFX1_2.dll
    + 2008-03-05 23:03:54 479,752 ----a-w c:\windows\system32\XAudio2_0.dll
    + 2008-05-30 21:19:18 507,400 ----a-w c:\windows\system32\XAudio2_1.dll
    + 2008-07-31 17:40:32 509,448 ----a-w c:\windows\system32\XAudio2_2.dll
    + 2008-10-27 17:04:18 514,384 ----a-w c:\windows\system32\XAudio2_3.dll
    - 2007-08-08 01:22:14 8,607,552 ----a-w c:\windows\system32\xlive.dll
    + 2008-10-29 00:41:22 14,303,392 ----a-w c:\windows\system32\xlive.dll
    + 2008-10-29 00:19:04 134,144 ----a-w c:\windows\system32\xlive\sqmapi.dll
    - 2007-08-08 01:22:16 13,653,824 ----a-w c:\windows\system32\xlivefnt.dll
    + 2008-10-29 00:41:20 13,643,936 ----a-w c:\windows\system32\xlivefnt.dll
    - 2007-06-19 07:24:36 350,720 ----a-w c:\windows\system32\xpsp3res.dll
    + 2007-10-29 10:04:03 350,720 ----a-w c:\windows\system32\xpsp3res.dll
    + 2006-10-15 02:21:58 580,352 ----a-w c:\windows\system32\XPSSHHDR.dll
    + 2006-10-15 02:22:00 1,698,048 ----a-w c:\windows\system32\XpsSvcs.dll
    + 2006-10-21 03:29:54 304,928 ----a-w c:\windows\system32\XPSViewer\XPSViewer.exe
    + 2008-03-17 03:25:19 473,600 ----a-w c:\windows\Titans Of Steel Warring Suns\uninstall.exe
    + 2008-04-24 20:15:02 6,016 ----a-w c:\windows\TRISTAR\sisterr.dat
    + 2008-04-24 20:10:38 6,042 ----a-w c:\windows\TRISTAR\sisterrsav01.dat
    + 2008-02-29 02:55:25 4,674 ----a-w c:\windows\unins000.dat
    + 2008-02-29 02:53:52 691,545 ----a-w c:\windows\unins000.exe
    - 1996-01-09 10:38:54 283,648 ----a-w c:\windows\uninst.exe
    + 1997-05-13 00:53:00 314,368 ----a-w c:\windows\uninst.exe
    + 2000-08-31 14:00:00 49,152 ----a-w c:\windows\VFIND.exe
    - 2006-09-25 18:57:32 65,050 ----a-w c:\windows\War3Unin.dat
    + 2008-08-02 23:09:02 68,165 ----a-w c:\windows\War3Unin.dat
    + 2006-09-24 00:47:09 2,829 ----a-w c:\windows\War3Unin.pif
    + 2008-04-12 02:40:40 8,192 ----a-w c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2008-09-30 23:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
    + 2008-09-30 23:45:12 91,656 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    - 2007-01-19 20:15:24 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2008-04-14 00:12:50 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    - 2007-01-19 20:15:24 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
    + 2008-04-14 00:12:50 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
    - 2007-01-19 20:15:24 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
    + 2008-04-14 00:12:50 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
    - 2007-01-19 20:15:24 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
    + 2008-04-14 00:12:50 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
    + 2007-10-24 07:47:56 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
    + 2007-10-24 07:47:56 558,080 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
    + 2007-10-24 07:47:56 635,904 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
    - 2006-06-05 20:14:28 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcm80.dll
    + 2006-06-05 21:14:28 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcm80.dll
    - 2006-06-05 20:14:28 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll
    + 2006-06-05 21:14:28 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll
    - 2006-06-05 20:14:28 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll
    + 2006-06-05 21:14:28 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll
    + 2007-11-07 02:23:58 224,768 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
    + 2007-11-07 07:19:34 568,832 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
    + 2007-11-07 07:19:34 655,872 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
    + 2008-04-14 00:12:51 1,054,208 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
    + 2008-04-15 17:54:19 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll
    - 2004-08-10 11:00:00 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
    + 2008-04-14 00:12:49 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
    - 2004-08-10 11:00:00 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
    + 2008-04-14 00:12:50 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
    - 2004-08-10 11:00:00 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
    + 2008-04-13 18:26:33 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
    - 2007-07-11 02:49:24 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2008-04-12 02:40:49 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2007-07-11 02:49:24 114,176 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2008-04-12 02:40:49 113,664 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2000-08-31 14:00:00 68,096 ----a-w c:\windows\zip.exe
    .
    -- Snapshot reset to current date --
    .

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •